$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft File: cb00fdf5-e28b-4e9d-9620-9504972438e2.mft (raw, json) Hash identifier: QnOZVsIUeKTvloD+Ps6Rg4ZfqjceVmbkcbqlEo9DVAU= Subject key identifier: 0C:0C:2B:C8:EE:BC:5A:80:08:4A:C0:04:13:54:7F:5A:8F:EC:3E:F6 Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584AF3D964BBC245F57DFCF03900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft Manifest number: 010D0C9F4328584A89D04070D903DD88600D0AA6 Signing time: Sat 23 Aug 2025 14:00:08 +0000 Manifest this update: Sat 23 Aug 2025 14:00:08 +0000 Manifest next update: Tue 26 Aug 2025 14:00:00 +0000 Files and hashes: 1: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (hash: eX1WPWgfHloNjJjowVbmW/t6DojoW6wyuEw2b8ACjxI=) 2: cb00fdf5-e28b-4e9d-9620-9504972438e2.crl (hash: hOzeRTXg3bmKzoLNXZNXSgfW6cm1JkOOBmoxbOW1sBE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:d9:64:bb:c2:45:f5:7d:fc:f0:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Aug 23 14:00:08 2025 GMT Not After : Aug 26 14:00:00 2025 GMT Subject: CN=39b34f66-8b03-4111-bc28-b512881d59b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:38:5b:a1:c4:7c:58:76:a9:09:4f:78:7b: 67:de:d4:7c:35:11:81:c1:df:bd:44:98:56:48:11: 70:87:d8:53:9c:e9:4d:23:a4:e9:5a:b4:de:f9:44: f2:e1:b0:99:8d:4d:8d:0e:62:69:d7:fa:44:71:f0: 57:2b:b0:5c:68:29:98:12:91:95:b2:65:01:5f:9e: 18:de:b4:1c:04:32:d0:a9:34:fd:19:c0:05:b8:d1: 7f:4f:62:75:07:06:a4:8f:8b:ba:f3:08:c7:6f:40: 4b:1c:2a:19:63:3a:51:5a:5d:58:6b:04:be:99:c2: 7a:2f:c6:45:85:78:a6:b5:a5:c4:37:40:d7:1e:c7: 7f:93:9e:a4:ba:77:52:77:cf:fb:6a:16:14:4e:78: 30:26:89:40:55:4f:b2:c7:f1:86:c4:17:af:51:1d: 6e:70:b5:11:4a:e0:c8:05:e0:fc:b1:3a:77:f2:44: 7d:0a:5c:89:37:7f:e7:08:2e:0c:78:5e:62:5d:0f: 7d:85:5a:78:28:5a:fd:28:14:07:cd:f8:f4:26:10: ca:00:cc:67:62:cb:12:e9:03:8d:04:52:01:57:0a: f5:96:71:f1:c4:af:24:8e:d2:e3:dd:e7:28:64:da: f2:e9:8f:85:c0:4e:4d:1e:38:b2:cd:7c:77:c2:2e: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0C:2B:C8:EE:BC:5A:80:08:4A:C0:04:13:54:7F:5A:8F:EC:3E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c8:d4:ad:10:b1:7b:3d:2a:bd:6f:f0:d2:89:94:90:cd:3d: b2:75:3b:8d:fc:43:67:ab:0a:65:ab:23:ba:b3:94:47:a3:09: de:86:24:7e:1a:9b:4a:15:f2:16:4c:eb:25:de:fe:68:22:49: d8:c3:c7:32:62:16:d4:42:e5:49:17:a9:af:96:1b:29:f0:59: e9:e1:71:59:d7:68:13:da:7c:a4:e1:04:26:e7:69:93:b0:8f: 36:78:10:8a:f0:c5:87:98:cc:7e:b8:b2:83:4b:cd:4e:53:89: 69:b0:0e:c2:57:92:38:6b:2d:e6:ae:e1:ad:94:2b:18:5a:ec: f3:f7:3a:4f:14:1c:86:e1:cb:aa:10:96:fe:7b:87:25:8b:e5: 5a:14:f7:71:84:c4:2b:1d:3c:01:81:92:27:e8:0e:c2:e9:ed: 96:b2:d4:cb:3d:da:70:be:c7:a7:b0:2a:f2:b2:b4:5c:41:8a: 90:fe:5e:e9:e0:91:83:ba:c5:67:21:0f:54:1c:f6:ec:07:3b: 68:65:61:bf:3b:09:cb:bd:2e:e8:d6:05:94:d6:98:6d:89:3e: 15:48:d9:3c:30:e4:22:6a:aa:20:30:a5:8e:40:b9:e9:38:b6: 4b:af:26:1a:1c:f0:03:f2:96:23:09:a1:3c:6d:f7:70:88:3e: 2b:c7:e1:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz2WS7wkX1ffzwOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI1MDgyMzE0MDAwOFoXDTI1MDgyNjE0MDAwMFowLzEtMCsGA1UEAxMk MzliMzRmNjYtOGIwMy00MTExLWJjMjgtYjUxMjg4MWQ1OWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaM4W6HEfFh2qQlPeHtn3tR8NRGBwd+9RJhW SBFwh9hTnOlNI6TpWrTe+UTy4bCZjU2NDmJp1/pEcfBXK7BcaCmYEpGVsmUBX54Y 3rQcBDLQqTT9GcAFuNF/T2J1Bwakj4u68wjHb0BLHCoZYzpRWl1YawS+mcJ6L8ZF hXimtaXEN0DXHsd/k56kundSd8/7ahYUTngwJolAVU+yx/GGxBevUR1ucLURSuDI BeD8sTp38kR9ClyJN3/nCC4MeF5iXQ99hVp4KFr9KBQHzfj0JhDKAMxnYssS6QON BFIBVwr1lnHxxK8kjtLj3ecoZNry6Y+FwE5NHjiyzXx3wi6zVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAwMK8juvFqACErABBNUf1qP7D72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvY2IwMGZkZjUtZTI4Yi00 ZTlkLTk2MjAtOTUwNDk3MjQzOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASyNStELF7PSq9b/DSiZSQ zT2ydTuN/ENnqwplqyO6s5RHownehiR+GptKFfIWTOsl3v5oIknYw8cyYhbUQuVJ F6mvlhsp8Fnp4XFZ12gT2nyk4QQm52mTsI82eBCK8MWHmMx+uLKDS81OU4lpsA7C V5I4ay3mruGtlCsYWuzz9zpPFByG4cuqEJb+e4cli+VaFPdxhMQrHTwBgZIn6A7C 6e2WstTLPdpwvsensCrysrRcQYqQ/l7p4JGDusVnIQ9UHPbsBztoZWG/OwnLvS7o 1gWU1phtiT4VSNk8MOQiaqogMKWOQLnpOLZLryYaHPAD8pYjCaE8bfdwiD4rx+FY -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:20 2025 by rpki-client