$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft File: 57da1f4a-da7b-44cf-8427-a74615d9a53e.mft (raw, json) Hash identifier: IO5JUrpZkLQUdzTtxVT6dBf02WRMZgVejasztd1PN2w= Subject key identifier: 4E:B7:E7:E3:3A:0C:89:66:76:2C:DA:D3:2D:A6:5A:27:07:E7:1A:4F Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Certificate serial: 010D0C9F4328584AC445F0285CD0067345243BF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft Manifest number: 010D0C9F4328584394910AAE776369E15CAEBA24 Signing time: Wed 06 Aug 2025 13:00:03 +0000 Manifest this update: Wed 06 Aug 2025 13:00:03 +0000 Manifest next update: Fri 08 Aug 2025 13:00:00 +0000 Files and hashes: 1: 57da1f4a-da7b-44cf-8427-a74615d9a53e.crl (hash: aCOb+wvaxKMOPcbAG2r9HKPQS1o6XlW2/wHLLhU75YQ=) 2: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (hash: QAqlEYKSZB8xc/nmHIBeuWaZ9fpnf/tFtBRpagQ6i1M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:45:f0:28:5c:d0:06:73:45:24:3b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Validity Not Before: Aug 6 13:00:03 2025 GMT Not After : Aug 8 13:00:00 2025 GMT Subject: CN=21d2c8b8-64bc-4cf4-9ffc-961e82703ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:c0:a6:d1:9b:48:4d:4a:11:af:8d:4f:2c: 86:24:27:a8:8c:bd:f6:89:b1:9c:57:27:e6:38:9a: 5f:55:63:9b:5a:2f:a7:ed:f0:62:82:cc:a5:4c:2a: 1c:49:36:42:dc:f8:95:f2:19:90:f8:a6:33:e0:74: 9b:13:ae:06:5c:e6:c5:c4:2c:82:68:c0:3e:76:d1: 41:fc:20:f2:e4:a5:bd:68:7b:92:d0:0e:c1:40:f2: ff:f1:22:14:7b:bc:b7:67:6c:c3:09:da:a0:c6:b1: 18:ee:16:f6:e6:83:f2:01:a0:40:d1:43:2c:18:b8: fe:89:5d:23:47:78:04:0a:30:8b:5b:28:cc:da:28: 5f:a7:29:2c:2d:a8:e9:9b:27:ea:aa:53:58:a8:33: 0d:19:db:1b:91:34:8c:bb:5d:35:37:63:b8:81:2c: 5d:67:a5:16:96:de:37:54:3f:ff:ca:3b:5b:43:2b: 5b:d6:28:22:5a:0e:54:64:6c:58:2a:f3:9f:bc:12: fb:42:c7:e0:46:0b:d0:3a:85:a3:9d:16:b9:43:c5: c4:c1:0d:34:53:4d:30:65:a4:a9:27:27:08:70:2a: 7f:0b:79:d9:34:41:51:6f:55:55:6c:45:77:f0:b9: bc:01:01:94:7a:27:94:a7:38:6b:34:f1:a7:e3:c4: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B7:E7:E3:3A:0C:89:66:76:2C:DA:D3:2D:A6:5A:27:07:E7:1A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl X509v3 Authority Key Identifier: keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b8:9c:24:f9:69:86:43:11:1f:89:be:e5:ac:59:52:ff:63: 45:19:24:09:7a:5b:db:db:59:a8:f6:7f:b5:cd:f8:7d:52:a1: 1e:08:56:77:e3:a4:3b:b6:72:7a:91:98:a6:23:8d:4d:16:38: 6f:94:9d:b6:3d:32:1a:21:52:1e:4b:71:77:8d:04:78:4a:f5: 99:b3:4c:45:e6:bc:e4:3a:4c:17:a8:1c:60:b1:0c:1e:ac:ab: af:c6:e0:78:3c:e8:b1:6e:3b:0f:da:d6:64:99:7c:5a:48:b4: 47:f2:a7:0c:d1:7a:40:ce:b3:de:5e:5c:d7:1e:dc:f3:0b:17: 70:28:eb:cb:81:f4:e2:5b:43:e2:5a:b3:9c:e8:57:85:0f:dd: 17:99:e8:29:ce:52:19:45:f5:8e:a5:34:0b:55:2f:d1:29:3b: f6:39:b6:a1:c5:0c:b3:2d:cd:11:5c:47:81:29:27:41:0a:6f: 84:d0:1d:5c:da:6d:84:43:68:7c:43:81:9f:e7:70:95:10:82: 9a:78:ff:e5:71:e4:18:41:12:52:33:76:d1:93:e0:a0:10:9d: cb:e4:9b:a1:6c:5e:d4:af:f7:a1:a9:1c:dc:d9:d4:d4:a2:55: f7:9b:fd:5a:e3:d5:cc:c2:7a:61:06:21:83:52:a7:bb:a5:6a: e5:ec:bf:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErERfAoXNAGc0UkO/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdkYTFmNGEtZGE3Yi00NGNmLTg0MjctYTc0NjE1ZDlh NTNlMB4XDTI1MDgwNjEzMDAwM1oXDTI1MDgwODEzMDAwMFowLzEtMCsGA1UEAxMk MjFkMmM4YjgtNjRiYy00Y2Y0LTlmZmMtOTYxZTgyNzAzZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiXAptGbSE1KEa+NTyyGJCeojL32ibGcVyfm OJpfVWObWi+n7fBigsylTCocSTZC3PiV8hmQ+KYz4HSbE64GXObFxCyCaMA+dtFB /CDy5KW9aHuS0A7BQPL/8SIUe7y3Z2zDCdqgxrEY7hb25oPyAaBA0UMsGLj+iV0j R3gECjCLWyjM2ihfpyksLajpmyfqqlNYqDMNGdsbkTSMu101N2O4gSxdZ6UWlt43 VD//yjtbQytb1igiWg5UZGxYKvOfvBL7QsfgRgvQOoWjnRa5Q8XEwQ00U00wZaSp JycIcCp/C3nZNEFRb1VVbEV38Lm8AQGUeieUpzhrNPGn48RA2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE635+M6DIlmdiza0y2mWicH5xpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Rh MWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2MTVkOWE1M2UvNTdkYTFmNGEtZGE3Yi00 NGNmLTg0MjctYTc0NjE1ZDlhNTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdkYTFmNGEtZGE3Yi00NGNmLTg0 MjctYTc0NjE1ZDlhNTNlLzU3ZGExZjRhLWRhN2ItNDRjZi04NDI3LWE3NDYxNWQ5 YTUzZS5jcmwwHwYDVR0jBBgwFoAU3FkuqnL/ai5aXRbcKWR980gMKgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2RhMWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2 MTVkOWE1M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeuJwk+WmGQxEfib7lrFlS /2NFGSQJelvb21mo9n+1zfh9UqEeCFZ346Q7tnJ6kZimI41NFjhvlJ22PTIaIVIe S3F3jQR4SvWZs0xF5rzkOkwXqBxgsQwerKuvxuB4POixbjsP2tZkmXxaSLRH8qcM 0XpAzrPeXlzXHtzzCxdwKOvLgfTiW0PiWrOc6FeFD90XmegpzlIZRfWOpTQLVS/R KTv2ObahxQyzLc0RXEeBKSdBCm+E0B1c2m2EQ2h8Q4Gf53CVEIKaeP/lceQYQRJS M3bRk+CgEJ3L5JuhbF7Ur/ehqRzc2dTUolX3m/1a49XMwnphBiGDUqe7pWrl7L8n -----END CERTIFICATE-----Generated at Thu Aug 7 14:42:02 2025 by rpki-client