$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: M9muTg/uGOx//HVlHQa0R0Xh752Z3dU4Q1PyLb1hGC4= Subject key identifier: FE:00:EA:82:2E:09:7A:6B:45:36:FD:28:32:4D:DB:F6:EB:5F:7C:88 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584ACB5E6BC51296314A5CF384C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337968 Signing time: Sat 09 Aug 2025 02:00:03 +0000 Manifest this update: Sat 09 Aug 2025 02:00:03 +0000 Manifest next update: Tue 12 Aug 2025 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: nhCNjjPtJBJ9JUgDUTT+5zsysvYqFwZ8nl9n+7BKrn0=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: oMNuP0rftL/ojrk4mESxOeSy+t+ZIxOsRxu4TDXDcHg=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: atzEFr3qeR/sl2Ec1Hk/4Cu5HgrsyoQMTtJm4+J3IVM=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: zH8Y2dlKwI2zqyJ6ptAkj4mOsSb+9UemPIr8gw0QyLQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:5e:6b:c5:12:96:31:4a:5c:f3:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Aug 9 02:00:03 2025 GMT Not After : Aug 12 02:00:00 2025 GMT Subject: CN=5a88fc17-52dd-4b1b-b00e-6d19d4fd1ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:8d:5f:cd:04:b8:0b:db:16:da:75:2e:9b: 7c:97:7c:73:f9:be:14:e9:6f:e3:8a:00:30:f9:2f: 3d:5a:9f:ce:f8:5b:5b:76:13:c6:e1:0b:cb:8e:3d: 2e:8d:48:1e:01:4a:b8:b6:b3:1d:45:50:93:99:dc: 07:2b:9a:4c:f8:d7:e4:9d:ad:3e:79:6b:fc:c4:bc: fd:85:a4:46:24:85:27:8f:8a:fd:02:ef:01:82:f2: 33:cb:24:5d:be:a0:0b:cc:1b:3e:22:6e:8f:da:18: 6b:21:d6:e1:08:e9:16:1c:71:bf:59:0c:e2:e5:5b: 9c:06:b6:ec:19:aa:a0:9f:32:60:dc:f6:02:e8:63: 27:d5:64:96:ac:c5:f8:3e:e8:54:e1:9b:56:27:45: 18:71:5b:8c:86:76:0b:ba:41:f4:eb:63:15:68:e9: e6:81:4b:83:9a:bf:6f:bd:fb:1f:d8:51:83:90:08: a1:1c:d3:b5:b9:e3:c9:ac:76:9e:4a:02:71:d9:b9: 24:c1:df:f7:9e:d8:fc:5d:e2:54:d7:0e:0e:a6:68: 3e:96:ce:9c:4f:14:fc:ce:07:7e:38:d4:4a:44:f4: bd:a9:e7:de:0d:6c:38:0d:12:83:b4:0c:50:4a:9d: 8f:88:a9:c8:63:b7:23:d0:ae:5d:68:af:20:89:02: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:00:EA:82:2E:09:7A:6B:45:36:FD:28:32:4D:DB:F6:EB:5F:7C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b8:d9:c4:14:be:09:11:64:0b:5e:0c:4d:67:35:26:0b:59: ab:25:95:d1:9f:82:65:b8:c4:98:75:b7:fa:d6:3c:51:a4:19: 1a:78:ee:0f:26:38:cf:3a:16:96:d4:bc:47:76:26:07:c5:4a: 85:4e:1c:36:5e:b4:2f:fa:a6:70:70:89:39:79:3e:1a:b5:73: e5:55:4e:9b:69:e6:42:d8:e8:7c:79:9d:80:08:38:9c:09:e0: 85:c5:33:82:a0:2a:d1:a2:c0:fe:5e:c4:5f:68:44:a3:e0:20: 7a:cf:ae:18:d8:6e:c4:f5:20:ce:13:52:da:90:0b:78:83:1c: 57:50:a2:18:98:d1:18:d3:b0:38:c9:6c:47:07:88:d6:6e:7a: f3:3b:a1:3f:06:11:9f:a6:22:0e:72:70:f9:02:7c:c3:1c:a4: 82:fe:29:42:6e:f0:55:dc:18:91:a2:c3:42:d0:eb:a5:42:69: 81:86:08:d7:3d:9a:aa:de:c8:51:31:96:e4:62:16:af:0a:50: 98:ba:78:61:e5:49:b5:9c:71:ae:e5:28:d3:5b:12:a0:26:0f: dc:4a:b8:30:05:12:3b:a7:f9:d7:da:86:da:09:e9:b3:a9:fb: d5:d7:f5:3d:2c:ad:8f:89:29:fb:00:44:47:16:87:5f:29:44: 95:34:b7:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErLXmvFEpYxSlzzhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDgwOTAyMDAwM1oXDTI1MDgxMjAyMDAwMFowLzEtMCsGA1UEAxMk NWE4OGZjMTctNTJkZC00YjFiLWIwMGUtNmQxOWQ0ZmQxZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UaNX80EuAvbFtp1Lpt8l3xz+b4U6W/jigAw +S89Wp/O+FtbdhPG4QvLjj0ujUgeAUq4trMdRVCTmdwHK5pM+Nfkna0+eWv8xLz9 haRGJIUnj4r9Au8BgvIzyyRdvqALzBs+Im6P2hhrIdbhCOkWHHG/WQzi5VucBrbs GaqgnzJg3PYC6GMn1WSWrMX4PuhU4ZtWJ0UYcVuMhnYLukH062MVaOnmgUuDmr9v vfsf2FGDkAihHNO1uePJrHaeSgJx2bkkwd/3ntj8XeJU1w4Opmg+ls6cTxT8zgd+ ONRKRPS9qefeDWw4DRKDtAxQSp2PiKnIY7cj0K5daK8giQLR9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP4A6oIuCXprRTb9KDJN2/brX3yIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSuNnEFL4JEWQLXgxNZzUm C1mrJZXRn4JluMSYdbf61jxRpBkaeO4PJjjPOhaW1LxHdiYHxUqFThw2XrQv+qZw cIk5eT4atXPlVU6baeZC2Oh8eZ2ACDicCeCFxTOCoCrRosD+XsRfaESj4CB6z64Y 2G7E9SDOE1LakAt4gxxXUKIYmNEY07A4yWxHB4jWbnrzO6E/BhGfpiIOcnD5AnzD HKSC/ilCbvBV3BiRosNC0OulQmmBhgjXPZqq3shRMZbkYhavClCYunhh5Um1nHGu 5SjTWxKgJg/cSrgwBRI7p/nX2obaCemzqfvV1/U9LK2PiSn7AERHFodfKUSVNLdZ -----END CERTIFICATE-----Generated at Sat Aug 9 14:19:54 2025 by rpki-client