$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft File: 7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft (raw, json) Hash identifier: HXAMHg3uBjgfJ65AShpPTSYd8or6nuD6yh7uD+OcEKk= Subject key identifier: 26:1C:82:65:2F:18:CB:50:EA:4F:4C:CD:63:6C:1C:DE:81:FE:8C:35 Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Certificate issuer: /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Certificate serial: 010D0C9F4328584AC1F25B2D05CD904D91747E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft Manifest number: 010D0C9F4328584073A81F14B636ABD17050EBC7 Signing time: Tue 05 Aug 2025 17:00:03 +0000 Manifest this update: Tue 05 Aug 2025 17:00:03 +0000 Manifest next update: Thu 07 Aug 2025 17:00:00 +0000 Files and hashes: 1: 539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (hash: u6lwJdW7z5lUPnwq8OlTWQxv8/vE/PvscmxJTfFbAww=) 2: 7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl (hash: Nburonxb96T6XpAvXQAikuUDFU/ea/5F4rJVl3yckPc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:f2:5b:2d:05:cd:90:4d:91:74:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Validity Not Before: Aug 5 17:00:03 2025 GMT Not After : Aug 7 17:00:00 2025 GMT Subject: CN=2ca11269-725b-41ec-8267-b595dee1b0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:c9:69:92:be:7d:73:93:77:e6:9f:cd:f6: 32:c3:44:be:dd:89:0b:24:3e:d6:d6:ef:3c:ed:1f: 78:44:23:65:3a:2d:4d:a6:f3:7c:49:bf:40:1a:38: 24:43:4c:a7:4b:bb:ea:38:ac:8d:0b:f3:bf:85:e0: 98:05:ac:f1:18:9a:af:0c:92:76:a6:8a:a8:33:c0: 66:83:14:58:9f:5f:4f:b2:e0:fa:3e:00:ea:32:65: ab:ef:d0:0d:f0:8d:7d:9c:93:ba:c8:6e:bd:b4:7f: 12:42:b9:24:95:c8:eb:57:c4:d3:98:17:88:fd:2a: 67:21:07:b7:8f:b6:c0:ca:b0:e6:8c:a7:f9:84:5b: c0:44:a7:f8:87:5a:d5:6d:c6:b5:59:ba:cc:65:64: ca:0d:67:cd:95:1a:e0:e4:67:1b:c2:b4:84:5b:98: f3:7e:f5:92:e0:12:a1:04:ff:f2:d0:3b:84:2e:08: 02:5a:e1:f0:c3:08:c7:b0:5c:2b:2f:11:dc:58:36: 1a:36:5f:6a:76:65:ae:7f:e1:ca:84:22:5f:bc:fd: 99:1a:2f:8a:3a:4e:e5:46:d0:0d:3b:29:79:cd:8e: 45:8d:a4:bc:98:a4:8f:dd:99:80:a3:34:3d:c4:0f: ad:de:2a:e4:af:c6:a0:a0:3b:fc:1b:73:97:bc:1b: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1C:82:65:2F:18:CB:50:EA:4F:4C:CD:63:6C:1C:DE:81:FE:8C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl X509v3 Authority Key Identifier: keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:ed:48:09:14:c4:0e:39:78:7d:89:42:16:81:98:bf:f4: 46:90:1d:da:05:23:96:98:3d:fe:81:be:67:55:36:d5:ee:8c: 13:8b:45:cd:1d:3c:b4:59:c0:53:8e:ee:0b:c2:87:85:58:5e: d7:ec:32:7e:89:65:fd:04:14:04:d2:e0:b5:f1:a2:20:c0:96: 09:dc:6b:b8:95:db:83:60:1b:77:4e:9d:78:0c:36:bd:f4:a9: 02:04:df:c3:bc:7d:65:3b:b3:b5:7e:ee:25:73:5e:9e:26:72: b0:a6:82:58:45:d0:fe:ae:4c:f5:6c:cc:a5:87:3d:3d:4b:98: 16:81:7d:c8:89:5b:05:6b:b8:96:fa:14:a9:fc:b8:6e:86:7b: 1b:9d:92:71:65:06:d0:7c:90:d7:e5:63:56:80:5d:d5:c9:bd: 73:25:17:c3:71:36:15:67:3b:87:ae:4a:44:f3:cb:50:b3:07: bf:3d:88:ba:a8:b4:12:da:40:37:70:e5:ea:0f:0c:41:42:e7: 4f:bd:d2:d2:b8:81:c9:cf:e6:84:b4:a1:5f:97:c6:91:7e:cd: f8:16:57:13:32:d3:73:61:bf:a5:a2:e4:31:5d:e2:b9:db:2b: 96:21:b0:b1:11:5d:a2:5c:ff:d1:18:85:2c:bc:b9:b3:41:20: 1b:a5:dc:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErB8lstBc2QTZF0foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUx ZGJmMB4XDTI1MDgwNTE3MDAwM1oXDTI1MDgwNzE3MDAwMFowLzEtMCsGA1UEAxMk MmNhMTEyNjktNzI1Yi00MWVjLTgyNjctYjU5NWRlZTFiMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGHJaZK+fXOTd+afzfYyw0S+3YkLJD7W1u88 7R94RCNlOi1NpvN8Sb9AGjgkQ0ynS7vqOKyNC/O/heCYBazxGJqvDJJ2poqoM8Bm gxRYn19PsuD6PgDqMmWr79AN8I19nJO6yG69tH8SQrkklcjrV8TTmBeI/SpnIQe3 j7bAyrDmjKf5hFvARKf4h1rVbca1WbrMZWTKDWfNlRrg5GcbwrSEW5jzfvWS4BKh BP/y0DuELggCWuHwwwjHsFwrLxHcWDYaNl9qdmWuf+HKhCJfvP2ZGi+KOk7lRtAN Oyl5zY5FjaS8mKSP3ZmAozQ9xA+t3irkr8agoDv8G3OXvBsC3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCYcgmUvGMtQ6k9MzWNsHN6B/ow1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAx NGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvN2UwMTRjZGQtNGE3Ni00 ZWVmLTg2ZjctNmI2YTgzNmUxZGJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2UwMTRjZGQtNGE3Ni00ZWVmLTg2 ZjctNmI2YTgzNmUxZGJmLzdlMDE0Y2RkLTRhNzYtNGVlZi04NmY3LTZiNmE4MzZl MWRiZi5jcmwwHwYDVR0jBBgwFoAU+BgfycggLXhZ1LDvTEuljcfck+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZh ODM2ZTFkYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6Ye1ICRTEDjl4fYlCFoGY v/RGkB3aBSOWmD3+gb5nVTbV7owTi0XNHTy0WcBTju4LwoeFWF7X7DJ+iWX9BBQE 0uC18aIgwJYJ3Gu4lduDYBt3Tp14DDa99KkCBN/DvH1lO7O1fu4lc16eJnKwpoJY RdD+rkz1bMylhz09S5gWgX3IiVsFa7iW+hSp/LhuhnsbnZJxZQbQfJDX5WNWgF3V yb1zJRfDcTYVZzuHrkpE88tQswe/PYi6qLQS2kA3cOXqDwxBQudPvdLSuIHJz+aE tKFfl8aRfs34FlcTMtNzYb+louQxXeK52yuWIbCxEV2iXP/RGIUsvLmzQSAbpdz7 -----END CERTIFICATE-----Generated at Wed Aug 6 18:24:11 2025 by rpki-client