$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft File: cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft (raw, json) Hash identifier: KuQ/ivp45gBzcSwg7hk46PpWfHD2iqhmloHeukMA0xo= Subject key identifier: D4:D2:78:52:BB:FF:99:EC:35:77:02:B0:C8:3F:74:0E:67:A9:4E:1E Authority key identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Certificate issuer: /CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Certificate serial: 010D0C9F4328584AC339ED2C8F6963E740496F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft Manifest number: 010D0C9F4328584073A83C976385A31DD6B26228 Signing time: Wed 06 Aug 2025 04:00:03 +0000 Manifest this update: Wed 06 Aug 2025 04:00:03 +0000 Manifest next update: Fri 08 Aug 2025 04:00:00 +0000 Files and hashes: 1: 353cd56e-846c-3567-b16b-b7323fe728cd.roa (hash: aoNjQyEnDrOiu93yWkkQ+B7FEjIpd+AtZl/CDewMK/k=) 2: cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl (hash: sYY2pzfmkyRTMjf08ai7mWjnM3F9faJhHCYU1OZuWfg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:39:ed:2c:8f:69:63:e7:40:49:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Validity Not Before: Aug 6 04:00:03 2025 GMT Not After : Aug 8 04:00:00 2025 GMT Subject: CN=4798e466-af2d-4cb2-b04c-d3a9526024f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:26:a6:3a:bc:83:c2:29:a6:97:88:aa:36: 13:88:1f:20:db:be:0a:d7:e7:39:cf:c8:7b:47:bb: 12:41:b5:00:3c:3c:35:b1:bb:92:ac:8b:29:18:58: c5:77:b6:de:5a:ac:5b:63:2f:55:3d:93:4b:b1:cb: b9:a0:00:b0:75:d5:b5:e3:28:bc:54:91:f5:e5:c5: f9:81:d6:79:c7:bc:72:0b:93:a0:d9:4d:a5:e7:ea: f9:c5:89:db:d5:e8:20:42:e7:13:5a:0e:9c:6a:18: fc:d6:7e:50:15:d7:87:c7:bf:0a:0f:e8:33:b7:41: c2:d3:30:4c:b3:bb:1a:13:1a:fb:fe:6b:bb:88:92: cf:a0:a1:ad:ee:7c:e0:6a:c2:f4:e2:18:95:6e:6e: 42:ee:80:73:83:e5:9e:3a:b9:fa:95:7d:77:cd:37: 4e:29:16:83:e4:ff:b4:19:a6:7a:00:44:0e:37:ce: 10:7f:3c:c8:2d:db:53:a4:a3:c4:29:db:4b:a0:63: 6b:bb:68:07:e3:86:fa:bb:0d:cc:65:9d:c4:37:ed: ae:e8:5b:ca:73:84:50:6a:60:fa:3e:dc:2b:a7:e5: fd:ab:b5:e1:44:b0:fb:13:e2:0c:f9:c2:92:dc:b5: 5c:76:dc:0d:54:82:12:06:9b:bc:5c:e6:a8:fb:06: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:78:52:BB:FF:99:EC:35:77:02:B0:C8:3F:74:0E:67:A9:4E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.crl X509v3 Authority Key Identifier: keyid:6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e7:7f:32:2c:d5:6b:f7:b7:ee:10:de:cc:56:c1:06:bc:8c: f5:83:0c:a6:6e:81:c1:03:dc:47:96:b4:4d:6c:28:5c:d6:db: cc:0c:5b:55:57:42:bf:56:94:2f:5e:2b:ba:b5:da:f6:50:53: 9e:e6:dd:c1:7e:0e:ab:ec:f1:b9:b8:b3:3f:59:68:cb:1e:a8: 62:70:84:5f:9c:79:ff:2d:ce:32:b4:4b:76:74:d3:bd:8d:25: 74:18:dc:66:42:66:e5:68:53:80:cb:04:16:33:d8:e8:94:31: 4f:a7:1e:89:95:b8:70:e1:55:42:d2:f5:21:d9:5a:6f:a7:fe: 50:54:14:ef:f1:3b:b3:64:7f:af:e4:fe:86:98:b5:40:38:93: 3d:9e:9a:d9:d9:9b:51:46:2b:b4:3a:9f:0f:e1:a7:4e:f3:e4: e5:9d:d7:20:38:c9:7d:be:17:91:ba:fb:ba:ba:17:7e:78:14: de:c0:5e:3f:6e:04:40:ba:a8:41:f7:d5:40:f6:d9:9a:1e:60: a7:cd:0c:73:60:e8:10:71:bb:d7:10:c7:a0:3c:c1:94:bd:5b: 8b:69:0f:44:9d:03:eb:04:03:37:29:1c:df:ee:aa:d6:96:16: 7f:a0:1c:ea:52:24:c1:70:25:fe:6b:d0:48:95:b6:d6:63:09: 78:d5:43:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErDOe0sj2lj50BJb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZkZDQwZWItNGMxYS00YmE1LTg0NDYtNjc2ZjgzMjU4 YTY3MB4XDTI1MDgwNjA0MDAwM1oXDTI1MDgwODA0MDAwMFowLzEtMCsGA1UEAxMk NDc5OGU0NjYtYWYyZC00Y2IyLWIwNGMtZDNhOTUyNjAyNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY4mpjq8g8IpppeIqjYTiB8g274K1+c5z8h7 R7sSQbUAPDw1sbuSrIspGFjFd7beWqxbYy9VPZNLscu5oACwddW14yi8VJH15cX5 gdZ5x7xyC5Og2U2l5+r5xYnb1eggQucTWg6cahj81n5QFdeHx78KD+gzt0HC0zBM s7saExr7/mu7iJLPoKGt7nzgasL04hiVbm5C7oBzg+WeOrn6lX13zTdOKRaD5P+0 GaZ6AEQON84QfzzILdtTpKPEKdtLoGNru2gH44b6uw3MZZ3EN+2u6FvKc4RQamD6 Ptwrp+X9q7XhRLD7E+IM+cKS3LVcdtwNVIISBpu8XOao+wblRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNTSeFK7/5nsNXcCsMg/dA5nqU4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmRk NDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMyNThhNjcvY2ZkZDQwZWItNGMxYS00 YmE1LTg0NDYtNjc2ZjgzMjU4YTY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2ZkZDQwZWItNGMxYS00YmE1LTg0 NDYtNjc2ZjgzMjU4YTY3L2NmZGQ0MGViLTRjMWEtNGJhNS04NDQ2LTY3NmY4MzI1 OGE2Ny5jcmwwHwYDVR0jBBgwFoAUbVUCXygOc8i9Ujq76fYO5mgiXn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZm ODMyNThhNjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk538yLNVr97fuEN7MVsEG vIz1gwymboHBA9xHlrRNbChc1tvMDFtVV0K/VpQvXiu6tdr2UFOe5t3Bfg6r7PG5 uLM/WWjLHqhicIRfnHn/Lc4ytEt2dNO9jSV0GNxmQmblaFOAywQWM9jolDFPpx6J lbhw4VVC0vUh2Vpvp/5QVBTv8TuzZH+v5P6GmLVAOJM9nprZ2ZtRRiu0Op8P4adO 8+TlndcgOMl9vheRuvu6uhd+eBTewF4/bgRAuqhB99VA9tmaHmCnzQxzYOgQcbvX EMegPMGUvVuLaQ9EnQPrBAM3KRzf7qrWlhZ/oBzqUiTBcCX+a9BIlbbWYwl41UOZ -----END CERTIFICATE-----Generated at Wed Aug 6 14:10:28 2025 by rpki-client