$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: l5w6aNdNoOhPQEd0xKyIS+WTJJKBDnTUh9B4+PEalLI= Subject key identifier: 14:BD:00:7B:48:54:22:87:96:D1:CE:78:21:5B:27:4E:32:D7:0D:5C Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584AC946673AC96737292F2B2F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B5716368 Signing time: Fri 08 Aug 2025 08:00:03 +0000 Manifest this update: Fri 08 Aug 2025 08:00:03 +0000 Manifest next update: Sun 10 Aug 2025 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: hcQElou/FjvBpLvzsSgRsmX2IW4aaDMlJoJhMhaoAQk=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: D8kY1SK64fjXTsRawqIWcFUwsA44yx44rGVLt8Euij4=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: 8MOQFH0T2eXnT6L3cjcNdR41eRPWAg1s5sdqWBTevGM=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: l4Fx9P1V5vrBLBJv/QzTwJeSTKQt1mHx+A4YQ4P+kFk=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: Bx92XKL1Ee2oCJNVBMHYzEAT6cKDiw9Ib/eGVHkZkH4=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: gXjDDRpozX1zYOKaKcLycNJ990uKHjGBwE8j3+iUevw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:46:67:3a:c9:67:37:29:2f:2b:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Aug 8 08:00:03 2025 GMT Not After : Aug 10 08:00:00 2025 GMT Subject: CN=e1959e56-94cb-43f3-84b4-77bbe08a91d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:34:6e:e5:bf:35:d4:69:18:93:5c:b1:f8: dd:eb:1e:23:72:fe:58:63:fc:8f:e3:72:f5:e3:bc: c7:ad:dd:5d:db:30:9e:e9:86:77:85:74:6a:4e:31: 48:09:e7:eb:32:bc:23:6d:dc:cf:fe:30:9b:03:b4: 69:11:3f:df:bf:13:a3:b9:4b:a1:e9:76:e6:91:12: 03:b7:a7:20:77:bc:e0:7b:00:d5:b0:b8:82:0d:cf: fb:1d:75:8a:59:5e:32:26:07:df:11:b1:79:b7:75: 33:40:9d:9a:b1:88:fc:09:fe:c3:e0:33:06:12:67: 0b:d1:c2:ed:33:b2:f9:b8:ff:b1:5f:e1:66:a3:9c: e1:72:9b:21:b9:9c:5e:cd:14:e4:37:56:ae:69:ec: 81:44:a8:2d:7b:3f:ff:e8:7e:27:33:62:b3:7c:8f: b6:08:4e:ce:7a:72:41:03:fe:24:b4:fe:c0:f7:99: b2:06:64:ef:a0:f6:57:7d:8c:1e:27:e3:06:34:8b: 76:48:75:d3:57:f8:1a:02:4b:26:c5:ca:5f:e8:1c: 91:12:af:69:90:de:48:e4:a2:c6:63:48:a4:e1:4f: e9:7c:9a:23:3f:28:61:74:e7:3c:f1:25:ce:75:dc: 26:4c:c0:57:a8:3b:be:73:9a:63:39:a4:7f:e0:bc: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BD:00:7B:48:54:22:87:96:D1:CE:78:21:5B:27:4E:32:D7:0D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:91:ba:25:ec:84:31:7d:80:c3:b1:1b:5e:82:55:b8:17:94: 8f:ce:08:75:7e:34:e1:72:11:03:e5:be:90:8c:2a:63:ed:42: e5:d0:35:ff:54:65:b0:5b:24:d7:52:bc:ab:9b:c3:db:2e:43: fb:22:2e:e7:94:27:24:17:ae:26:5e:2c:22:44:15:ac:ad:07: 1c:3b:c9:09:93:37:19:37:2e:a8:e4:69:d5:b5:a0:ec:32:62: 44:b8:20:c0:26:6d:a2:ed:cd:4c:28:b3:5b:e8:0c:b3:4c:6a: ae:1a:32:f1:cf:4e:96:64:b5:f6:b7:93:c7:47:c5:78:e8:a4: bc:77:40:69:b1:96:44:29:2d:eb:83:22:b6:d6:5a:53:4f:c6: 8e:89:85:94:ee:96:ec:cc:9a:9e:55:33:3e:91:56:b8:59:d3: 23:c7:07:f8:4f:7e:00:c1:f9:fc:b6:c4:91:77:b0:d4:ae:20: 42:26:a5:e2:94:20:30:00:f2:53:99:ee:e9:55:5a:54:f9:3a: 62:37:a1:21:09:b0:af:43:80:13:e1:7b:8e:c5:05:f0:3f:b0: 13:2d:a3:f9:e1:df:11:fe:2c:26:38:9f:84:37:3f:46:b4:5e: 6d:26:37:10:10:a2:44:9d:c4:49:46:7b:24:3f:09:38:f2:5d: 59:ec:b0:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErJRmc6yWc3KS8rL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDgwODA4MDAwM1oXDTI1MDgxMDA4MDAwMFowLzEtMCsGA1UEAxMk ZTE5NTllNTYtOTRjYi00M2YzLTg0YjQtNzdiYmUwOGE5MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp80buW/NdRpGJNcsfjd6x4jcv5YY/yP43L1 47zHrd1d2zCe6YZ3hXRqTjFICefrMrwjbdzP/jCbA7RpET/fvxOjuUuh6XbmkRID t6cgd7zgewDVsLiCDc/7HXWKWV4yJgffEbF5t3UzQJ2asYj8Cf7D4DMGEmcL0cLt M7L5uP+xX+Fmo5zhcpshuZxezRTkN1auaeyBRKgtez//6H4nM2KzfI+2CE7OenJB A/4ktP7A95myBmTvoPZXfYweJ+MGNIt2SHXTV/gaAksmxcpf6ByREq9pkN5I5KLG Y0ik4U/pfJojPyhhdOc88SXOddwmTMBXqDu+c5pjOaR/4Lx+vQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBS9AHtIVCKHltHOeCFbJ04y1w1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfkbol7IQxfYDDsRteglW4 F5SPzgh1fjThchED5b6QjCpj7ULl0DX/VGWwWyTXUryrm8PbLkP7Ii7nlCckF64m XiwiRBWsrQccO8kJkzcZNy6o5GnVtaDsMmJEuCDAJm2i7c1MKLNb6AyzTGquGjLx z06WZLX2t5PHR8V46KS8d0BpsZZEKS3rgyK21lpTT8aOiYWU7pbszJqeVTM+kVa4 WdMjxwf4T34Awfn8tsSRd7DUriBCJqXilCAwAPJTme7pVVpU+TpiN6EhCbCvQ4AT 4XuOxQXwP7ATLaP54d8R/iwmOJ+ENz9GtF5tJjcQEKJEncRJRnskPwk48l1Z7LAD -----END CERTIFICATE-----Generated at Sat Aug 9 05:40:47 2025 by rpki-client