$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft File: 283c33f6-719a-4205-86d9-7cf90d013622.mft (raw, json) Hash identifier: TNGByTTdwutMhxpLUBKvNKV73a35vGkEYZVfsBlwBXY= Subject key identifier: 73:1D:C1:9B:A7:E5:6B:51:6E:76:32:E4:69:72:1D:32:69:C9:11:7B Authority key identifier: 43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D Certificate issuer: /CN=283c33f6-719a-4205-86d9-7cf90d013622 Certificate serial: 010D0C9F4328584AC551F8C3888662C9C752D280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft Manifest number: 010D0C9F4328584073A82AF66E5A617E85B1764E Signing time: Wed 06 Aug 2025 22:00:08 +0000 Manifest this update: Wed 06 Aug 2025 22:00:08 +0000 Manifest next update: Sat 09 Aug 2025 22:00:00 +0000 Files and hashes: 1: 283c33f6-719a-4205-86d9-7cf90d013622.crl (hash: 4ucyMjl+qQzJ/qmgH8XGSu9KXWG8DzlkHVy0CkMGnXc=) 2: 2c2861f6-166b-3fa7-a8a2-2e2eecf7c88d.roa (hash: Rx4f8xi3pPbrrV2oYeSxgLtxWWJPNWwvPS8w35iWjcI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:51:f8:c3:88:86:62:c9:c7:52:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283c33f6-719a-4205-86d9-7cf90d013622 Validity Not Before: Aug 6 22:00:08 2025 GMT Not After : Aug 9 22:00:00 2025 GMT Subject: CN=09e5ae8a-1bb8-4837-80e8-97378413140a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:8d:41:c3:68:66:bb:52:73:b5:60:22:ef: 93:cd:fb:81:f0:18:0b:f7:5d:fc:b9:28:41:1b:bb: 82:8a:34:95:9f:29:1f:9e:44:ae:f0:6e:fb:c8:c2: ec:c0:1e:3e:b1:30:31:52:fe:81:63:69:f8:8d:be: 2d:65:ee:0c:85:b1:e1:6c:4c:8d:a4:0f:69:17:5a: 2c:c8:e5:56:b1:3d:4a:b2:6e:e8:82:ea:cf:aa:4a: 01:82:c5:2d:6c:93:63:de:41:30:a8:a0:50:40:7d: 4d:c2:8c:0c:29:50:c2:66:c5:33:9c:e7:c7:75:a5: 43:b0:98:2d:f7:b0:4e:34:5d:c7:7a:3f:2a:e6:28: e1:a8:48:45:bd:dd:ff:7f:35:c8:c6:88:aa:a5:6a: aa:f0:77:0b:62:d2:e7:2c:42:02:98:ea:25:8d:55: 2e:43:33:65:89:eb:ab:87:56:76:12:c1:8a:0f:9d: e5:97:6b:de:09:9b:37:7a:43:a3:6f:3d:9e:59:28: af:4d:70:ea:81:c2:80:48:5e:d7:2b:a5:c4:5e:c1: 18:54:36:0d:1f:cf:41:75:07:52:74:24:fa:e4:d4: 20:2a:0d:7b:16:d3:6c:a8:32:df:fa:5f:0a:12:99: 49:db:a8:80:ad:cc:45:6e:79:e3:ce:a9:da:88:32: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1D:C1:9B:A7:E5:6B:51:6E:76:32:E4:69:72:1D:32:69:C9:11:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622/283c33f6-719a-4205-86d9-7cf90d013622.crl X509v3 Authority Key Identifier: keyid:43:22:70:6A:EE:04:F8:BD:8C:71:3C:F5:43:3D:D6:70:54:A9:D1:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/283c33f6-719a-4205-86d9-7cf90d013622.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0c:60:b4:c7:0b:64:fa:08:c9:bb:58:75:48:38:5d:34:c1: 1c:c5:b2:f6:48:58:99:e4:5c:20:a5:43:48:9b:51:fd:f2:5c: 7b:d0:45:08:a5:c5:5c:2c:ad:0b:8f:2b:9f:db:b4:50:fc:93: ba:2a:4d:08:92:6a:52:6a:24:a3:0f:02:1e:35:93:e7:55:3b: 44:df:e5:2f:be:84:36:a4:01:0a:a7:c2:a8:a9:d5:07:d2:98: 6d:04:81:f7:7a:bc:ba:1f:32:c7:2a:e6:39:c8:c2:aa:41:04: bb:d7:f1:25:fd:bc:b1:79:25:e9:40:45:3a:18:bc:01:31:e9: af:42:1c:9a:ea:d5:35:1b:9b:7c:10:0d:a3:ea:93:af:93:76: 95:4d:64:d5:97:7d:16:76:fa:b2:45:39:69:08:ea:49:48:6b: 77:18:8d:6c:29:52:f9:59:4c:bd:28:e0:23:d2:d2:e7:6f:7e: a7:30:46:30:2a:6a:05:72:06:b6:c7:cc:e1:54:bf:8f:ff:4f: e3:b5:ee:4a:e9:35:ed:01:16:66:91:c6:cc:89:97:bf:f5:e4: 4a:ab:de:9f:c5:45:4c:12:3c:18:9c:2d:5f:89:68:9b:03:72: 09:28:87:9e:ef:03:14:53:4e:84:2e:56:a4:e1:8c:76:69:66: 9a:ff:12:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErFUfjDiIZiycdS0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzYzMzZjYtNzE5YS00MjA1LTg2ZDktN2NmOTBkMDEz NjIyMB4XDTI1MDgwNjIyMDAwOFoXDTI1MDgwOTIyMDAwMFowLzEtMCsGA1UEAxMk MDllNWFlOGEtMWJiOC00ODM3LTgwZTgtOTczNzg0MTMxNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r6NQcNoZrtSc7VgIu+TzfuB8BgL9138uShB G7uCijSVnykfnkSu8G77yMLswB4+sTAxUv6BY2n4jb4tZe4MhbHhbEyNpA9pF1os yOVWsT1Ksm7ogurPqkoBgsUtbJNj3kEwqKBQQH1NwowMKVDCZsUznOfHdaVDsJgt 97BONF3Hej8q5ijhqEhFvd3/fzXIxoiqpWqq8HcLYtLnLEICmOoljVUuQzNlieur h1Z2EsGKD53ll2veCZs3ekOjbz2eWSivTXDqgcKASF7XK6XEXsEYVDYNH89BdQdS dCT65NQgKg17FtNsqDLf+l8KEplJ26iArcxFbnnjzqnaiDJ+awIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHMdwZun5WtRbnYy5GlyHTJpyRF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yODNj MzNmNi03MTlhLTQyMDUtODZkOS03Y2Y5MGQwMTM2MjIvMjgzYzMzZjYtNzE5YS00 MjA1LTg2ZDktN2NmOTBkMDEzNjIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjgzYzMzZjYtNzE5YS00MjA1LTg2 ZDktN2NmOTBkMDEzNjIyLzI4M2MzM2Y2LTcxOWEtNDIwNS04NmQ5LTdjZjkwZDAx MzYyMi5jcmwwHwYDVR0jBBgwFoAUQyJwau4E+L2McTz1Qz3WcFSp0Q0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yODNjMzNmNi03MTlhLTQyMDUtODZkOS03Y2Y5 MGQwMTM2MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvDGC0xwtk+gjJu1h1SDhd NMEcxbL2SFiZ5FwgpUNIm1H98lx70EUIpcVcLK0Ljyuf27RQ/JO6Kk0IkmpSaiSj DwIeNZPnVTtE3+UvvoQ2pAEKp8KoqdUH0phtBIH3ery6HzLHKuY5yMKqQQS71/El /byxeSXpQEU6GLwBMemvQhya6tU1G5t8EA2j6pOvk3aVTWTVl30WdvqyRTlpCOpJ SGt3GI1sKVL5WUy9KOAj0tLnb36nMEYwKmoFcga2x8zhVL+P/0/jte5K6TXtARZm kcbMiZe/9eRKq96fxUVMEjwYnC1fiWibA3IJKIee7wMUU06ELlak4Yx2aWaa/xIk -----END CERTIFICATE-----Generated at Thu Aug 7 04:28:40 2025 by rpki-client