$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft File: d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft (raw, json) Hash identifier: l7c/IMYvMogeBVnePXcl1EjJyLBrNfS/WUmuZxfI8SI= Subject key identifier: 26:8C:34:17:16:02:30:A0:16:C0:69:2E:C7:3C:72:5F:2A:D5:C2:1E Authority key identifier: C8:5B:37:E1:79:5F:04:79:81:8A:73:37:EE:44:7F:6C:1B:37:91:17 Certificate issuer: /CN=d02f9f9e-7a3e-43b4-992e-2ccf0b69f601 Certificate serial: 010D0C9F4328584AF344736A8A5A0EC7B53D2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft Manifest number: 010D0C9F4328584A75A8AA5CB6D1A6E048AA056E Signing time: Sat 23 Aug 2025 09:00:03 +0000 Manifest this update: Sat 23 Aug 2025 09:00:03 +0000 Manifest next update: Mon 25 Aug 2025 09:00:00 +0000 Files and hashes: 1: 265a8988-b948-36f7-b6a6-af2bf112ce1a.roa (hash: 3uoa/ektI0kZyMZiryqndbi3hmuZ8SO3khr1BuD+5fM=) 2: d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl (hash: iXM+3hWzqxxqC0abjA4Zd0EnjyzPOpGaxcL53faLqAk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:44:73:6a:8a:5a:0e:c7:b5:3d:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02f9f9e-7a3e-43b4-992e-2ccf0b69f601 Validity Not Before: Aug 23 09:00:03 2025 GMT Not After : Aug 25 09:00:00 2025 GMT Subject: CN=26d5ed9e-267c-4416-851f-9530fbeb8d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:83:00:f2:97:18:09:75:5b:74:76:07:53: a4:ab:47:85:47:7c:ed:10:62:3a:07:99:e9:2b:80: 3a:7c:c8:01:2c:41:fc:8e:c7:44:74:5e:76:f2:25: 6c:9f:cf:63:8d:51:7e:c7:dd:80:12:9c:bb:3b:12: be:66:a4:14:cb:47:00:14:02:19:3f:e0:d7:db:e4: a7:49:af:c8:ed:20:56:95:f5:95:67:d1:f5:8b:15: ec:6e:3f:18:6a:67:c2:55:c2:2c:c1:d7:0e:0b:49: c5:0f:5e:2d:36:77:79:5e:5c:ef:c0:f6:f5:47:99: d9:87:d7:e6:a3:cb:ee:ac:c6:5d:99:57:b6:e5:0f: 14:e6:33:7a:ac:8a:ab:96:5b:c4:72:80:0a:5c:30: ee:d9:a4:c6:4a:4d:2c:de:09:43:47:a2:68:9a:ec: 36:b5:ba:e8:4c:6e:63:98:39:38:c0:17:6d:7f:11: 61:a2:89:89:c3:1f:84:5f:e2:a8:49:8a:ab:f6:06: fd:d9:8e:12:ec:5b:bb:4e:88:19:3c:c0:cb:f3:71: 80:8a:78:82:df:fc:33:95:88:bd:24:02:30:aa:55: 16:5f:7f:4c:81:b8:4b:ae:98:d2:df:48:46:d9:12: 94:8f:99:e4:e0:e1:32:3d:ef:fd:52:73:16:44:8b: 14:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8C:34:17:16:02:30:A0:16:C0:69:2E:C7:3C:72:5F:2A:D5:C2:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.crl X509v3 Authority Key Identifier: keyid:C8:5B:37:E1:79:5F:04:79:81:8A:73:37:EE:44:7F:6C:1B:37:91:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d02f9f9e-7a3e-43b4-992e-2ccf0b69f601.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:34:4a:1e:09:ef:18:5d:d1:1e:19:da:93:7f:35:a5:83:c7: 5a:20:75:eb:56:78:c4:ca:5d:64:49:4e:78:8b:ee:af:4d:49: 39:c0:03:8e:ff:65:79:3a:24:65:7f:25:f8:75:aa:74:ee:59: f9:71:1e:1c:26:6c:89:4e:1a:bb:7b:09:a3:08:33:88:f4:77: 36:d9:92:b4:fc:db:63:e9:55:dc:36:93:8a:3a:08:10:24:4f: 42:86:62:17:5a:24:1e:fa:f4:b1:97:71:78:23:06:0a:9c:4e: 8d:05:72:77:9d:5e:68:ad:58:2b:ef:d9:a6:c8:82:e7:8a:3e: 23:1f:ab:6d:e9:52:d2:84:05:ec:9d:2a:20:aa:da:8b:00:86: 38:b9:01:e5:28:8b:e9:e2:7e:bb:fc:7f:9b:a0:4f:4a:ce:ad: 02:ee:74:5b:29:03:c4:eb:86:e7:69:ca:90:59:04:26:6e:ea: a6:1e:96:45:48:9f:83:da:a4:7d:00:7a:50:47:63:98:02:89: 2a:e6:14:bc:1d:04:05:3c:a0:37:6e:bc:10:c4:1a:ed:a4:c4: e4:2a:6d:02:78:8e:15:53:db:8a:de:f4:9c:7a:7c:f3:53:bb: 82:32:c5:a9:82:7b:57:27:1e:82:c5:ac:f2:7d:ca:43:91:05: 9c:c5:d8:4f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzRHNqiloOx7U9KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyZjlmOWUtN2EzZS00M2I0LTk5MmUtMmNjZjBiNjlm NjAxMB4XDTI1MDgyMzA5MDAwM1oXDTI1MDgyNTA5MDAwMFowLzEtMCsGA1UEAxMk MjZkNWVkOWUtMjY3Yy00NDE2LTg1MWYtOTUzMGZiZWI4ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukaDAPKXGAl1W3R2B1Okq0eFR3ztEGI6B5np K4A6fMgBLEH8jsdEdF528iVsn89jjVF+x92AEpy7OxK+ZqQUy0cAFAIZP+DX2+Sn Sa/I7SBWlfWVZ9H1ixXsbj8YamfCVcIswdcOC0nFD14tNnd5XlzvwPb1R5nZh9fm o8vurMZdmVe25Q8U5jN6rIqrllvEcoAKXDDu2aTGSk0s3glDR6Jomuw2tbroTG5j mDk4wBdtfxFhoomJwx+EX+KoSYqr9gb92Y4S7Fu7TogZPMDL83GAiniC3/wzlYi9 JAIwqlUWX39MgbhLrpjS30hG2RKUj5nk4OEyPe/9UnMWRIsUCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCaMNBcWAjCgFsBpLsc8cl8q1cIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDJm OWY5ZS03YTNlLTQzYjQtOTkyZS0yY2NmMGI2OWY2MDEvZDAyZjlmOWUtN2EzZS00 M2I0LTk5MmUtMmNjZjBiNjlmNjAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDAyZjlmOWUtN2EzZS00M2I0LTk5 MmUtMmNjZjBiNjlmNjAxL2QwMmY5ZjllLTdhM2UtNDNiNC05OTJlLTJjY2YwYjY5 ZjYwMS5jcmwwHwYDVR0jBBgwFoAUyFs34XlfBHmBinM37kR/bBs3kRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDJmOWY5ZS03YTNlLTQzYjQtOTkyZS0yY2Nm MGI2OWY2MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbNEoeCe8YXdEeGdqTfzWl g8daIHXrVnjEyl1kSU54i+6vTUk5wAOO/2V5OiRlfyX4dap07ln5cR4cJmyJThq7 ewmjCDOI9Hc22ZK0/Ntj6VXcNpOKOggQJE9ChmIXWiQe+vSxl3F4IwYKnE6NBXJ3 nV5orVgr79mmyILnij4jH6tt6VLShAXsnSogqtqLAIY4uQHlKIvp4n67/H+boE9K zq0C7nRbKQPE64bnacqQWQQmbuqmHpZFSJ+D2qR9AHpQR2OYAokq5hS8HQQFPKA3 brwQxBrtpMTkKm0CeI4VU9uK3vScenzzU7uCMsWpgntXJx6CxazyfcpDkQWcxdhP -----END CERTIFICATE-----Generated at Sat Aug 23 20:00:25 2025 by rpki-client