$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874/fa7a32e6-7657-4f48-b4de-67c9872ce874.mft File: fa7a32e6-7657-4f48-b4de-67c9872ce874.mft (raw, json) Hash identifier: ULbRhY4lWI5jESjqvX6YYxN2Ac52aqebNfsKQyMU22s= Subject key identifier: A2:6F:73:0C:46:64:6F:1C:60:59:F6:36:CD:91:B0:9F:AB:6D:B0:B3 Authority key identifier: AF:0E:75:D9:90:5F:0F:4F:C4:AB:88:D4:DA:71:80:B3:FF:8A:CC:23 Certificate issuer: /CN=fa7a32e6-7657-4f48-b4de-67c9872ce874 Certificate serial: 010D0C9F4328584AC4DAD53909EA280B5C3A9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874/fa7a32e6-7657-4f48-b4de-67c9872ce874.mft Manifest number: 010D0C9F4328584967F42F08BD9B9147785F7E80 Signing time: Wed 06 Aug 2025 18:00:03 +0000 Manifest this update: Wed 06 Aug 2025 18:00:03 +0000 Manifest next update: Fri 08 Aug 2025 18:00:00 +0000 Files and hashes: 1: fa7a32e6-7657-4f48-b4de-67c9872ce874.crl (hash: eWFxMCoa/LOjyuP/dUqQMnjCl4keRzRcezCEQWtJm0w=) 2: fc5cbe2e-c186-3d34-95bc-a9980403c8ad.roa (hash: Ush8y/Q7q/RrO5yf7z69EJIs5OmbfGVThkS6JO+uPJU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874/fa7a32e6-7657-4f48-b4de-67c9872ce874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874/fa7a32e6-7657-4f48-b4de-67c9872ce874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:da:d5:39:09:ea:28:0b:5c:3a:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7a32e6-7657-4f48-b4de-67c9872ce874 Validity Not Before: Aug 6 18:00:03 2025 GMT Not After : Aug 8 18:00:00 2025 GMT Subject: CN=44c0f0d0-b868-4639-82cc-c84047c95aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:56:6d:e0:90:5e:c9:25:a6:f5:3e:08:9d: fc:7c:3b:c0:54:f7:ef:db:f1:85:32:31:26:e4:16: ec:f9:b0:ee:96:cc:3a:ff:c7:1b:6f:87:58:67:e5: 12:ba:40:7b:e7:79:31:41:63:7b:23:7c:d7:30:2e: a7:a3:f3:27:45:4b:90:e8:ef:f3:59:e3:61:77:26: 86:47:80:41:73:5c:33:f1:94:6f:91:36:3a:d1:a7: ea:36:8b:7a:2a:cc:40:b6:5d:90:50:ff:05:67:4b: 5a:fb:cb:c9:6e:14:40:bf:48:98:58:f2:f4:d7:93: e2:0a:d8:31:53:eb:48:39:19:7c:a1:08:6e:27:80: 44:43:ea:fa:52:a4:37:ac:ba:17:c0:1f:cf:96:8a: a8:39:25:93:c4:7d:b5:ad:59:53:4f:96:41:77:fe: dc:9c:36:d8:c3:cd:9f:1f:71:1c:b1:84:fe:97:69: c4:43:2c:04:7d:a5:fe:7c:4a:14:52:2f:02:b6:c9: 14:ff:7b:b6:11:63:b0:18:8f:71:0c:37:7a:04:c0: bc:cc:34:87:c2:2f:01:25:44:de:b4:2b:d9:b3:9a: 84:d1:38:ba:7e:9d:82:72:7b:da:9c:e4:b1:05:4c: 1e:13:f0:ff:fd:16:7f:1b:d4:a7:9d:a1:82:17:fb: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6F:73:0C:46:64:6F:1C:60:59:F6:36:CD:91:B0:9F:AB:6D:B0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874/fa7a32e6-7657-4f48-b4de-67c9872ce874.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874/fa7a32e6-7657-4f48-b4de-67c9872ce874.crl X509v3 Authority Key Identifier: keyid:AF:0E:75:D9:90:5F:0F:4F:C4:AB:88:D4:DA:71:80:B3:FF:8A:CC:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fa7a32e6-7657-4f48-b4de-67c9872ce874.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:29:dc:ed:fa:f9:9a:15:7d:fd:35:34:d7:b9:3e:a5:6d:29: 09:ed:34:41:9f:37:05:02:ae:4f:6b:76:7b:6e:02:d5:32:8d: 77:99:0b:ee:27:2b:68:d6:b0:ed:3d:ad:6c:02:bb:7a:07:8c: 65:28:ba:d8:f9:63:c4:05:0e:53:94:52:7a:87:51:c2:a6:43: d8:77:7d:8b:7a:12:13:a6:1c:45:ae:2d:6b:2b:68:02:45:f9: 91:c9:ec:47:fe:3b:06:44:22:bd:11:56:5d:09:f6:2b:b3:38: 1c:65:d0:af:74:60:32:dd:63:a7:46:71:9e:c8:af:93:56:a7: b7:31:61:36:6a:bf:d6:9a:af:47:7b:1d:14:23:17:b1:e1:32: e8:3d:7b:89:54:53:2b:b1:3f:2e:28:98:34:be:4b:86:83:11: 0d:78:24:03:4b:59:9c:2d:30:55:2a:4d:65:e5:d7:00:85:97: 02:25:f7:50:74:5a:e2:e5:74:df:31:a1:76:69:4b:71:98:9b: eb:d3:87:20:da:e5:fd:ef:a5:c5:4e:55:a1:9c:2d:a8:78:cc: 94:3c:b9:a3:dd:2f:e9:7e:f0:9b:80:23:e1:ea:69:4f:d4:b0: e5:e0:39:0d:cc:52:f9:fd:8e:8f:7e:7a:d3:20:9e:57:95:51: e1:1f:de:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErE2tU5CeooC1w6kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmE3YTMyZTYtNzY1Ny00ZjQ4LWI0ZGUtNjdjOTg3MmNl ODc0MB4XDTI1MDgwNjE4MDAwM1oXDTI1MDgwODE4MDAwMFowLzEtMCsGA1UEAxMk NDRjMGYwZDAtYjg2OC00NjM5LTgyY2MtYzg0MDQ3Yzk1YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArklWbeCQXsklpvU+CJ38fDvAVPfv2/GFMjEm 5Bbs+bDulsw6/8cbb4dYZ+USukB753kxQWN7I3zXMC6no/MnRUuQ6O/zWeNhdyaG R4BBc1wz8ZRvkTY60afqNot6KsxAtl2QUP8FZ0ta+8vJbhRAv0iYWPL015PiCtgx U+tIORl8oQhuJ4BEQ+r6UqQ3rLoXwB/PloqoOSWTxH21rVlTT5ZBd/7cnDbYw82f H3EcsYT+l2nEQywEfaX+fEoUUi8CtskU/3u2EWOwGI9xDDd6BMC8zDSHwi8BJUTe tCvZs5qE0Ti6fp2CcnvanOSxBUweE/D//RZ/G9SnnaGCF/twfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKJvcwxGZG8cYFn2Ns2RsJ+rbbCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYTdh MzJlNi03NjU3LTRmNDgtYjRkZS02N2M5ODcyY2U4NzQvZmE3YTMyZTYtNzY1Ny00 ZjQ4LWI0ZGUtNjdjOTg3MmNlODc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmE3YTMyZTYtNzY1Ny00ZjQ4LWI0 ZGUtNjdjOTg3MmNlODc0L2ZhN2EzMmU2LTc2NTctNGY0OC1iNGRlLTY3Yzk4NzJj ZTg3NC5jcmwwHwYDVR0jBBgwFoAUrw512ZBfD0/Eq4jU2nGAs/+KzCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYTdhMzJlNi03NjU3LTRmNDgtYjRkZS02N2M5 ODcyY2U4NzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoKdzt+vmaFX39NTTXuT6l bSkJ7TRBnzcFAq5Pa3Z7bgLVMo13mQvuJyto1rDtPa1sArt6B4xlKLrY+WPEBQ5T lFJ6h1HCpkPYd32LehITphxFri1rK2gCRfmRyexH/jsGRCK9EVZdCfYrszgcZdCv dGAy3WOnRnGeyK+TVqe3MWE2ar/Wmq9Hex0UIxex4TLoPXuJVFMrsT8uKJg0vkuG gxENeCQDS1mcLTBVKk1l5dcAhZcCJfdQdFri5XTfMaF2aUtxmJvr04cg2uX976XF TlWhnC2oeMyUPLmj3S/pfvCbgCPh6mlP1LDl4DkNzFL5/Y6PfnrTIJ5XlVHhH97W -----END CERTIFICATE-----Generated at Thu Aug 7 05:10:08 2025 by rpki-client