$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft File: da044fca-c418-4088-8a66-0c6896769f77.mft (raw, json) Hash identifier: BhX5yXKLDJ6+JxQl6vKZxUz5yzNRLMgle+Mt8TGWdNE= Subject key identifier: BC:22:CE:EC:5D:20:76:56:BB:AE:2D:F7:7E:8D:71:65:7E:96:58:11 Authority key identifier: 8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 Certificate issuer: /CN=da044fca-c418-4088-8a66-0c6896769f77 Certificate serial: 010D0C9F4328584ACD766E525CD30581F031B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft Manifest number: 010D0C9F4328584875513DB7F2A29634842952DA Signing time: Sat 09 Aug 2025 20:00:03 +0000 Manifest this update: Sat 09 Aug 2025 20:00:03 +0000 Manifest next update: Mon 11 Aug 2025 20:00:00 +0000 Files and hashes: 1: 772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer (hash: aNvRbIngd4MgrVJJyPtqL+yT8rTjYdfGr8ydQfBebRc=) 2: da044fca-c418-4088-8a66-0c6896769f77.crl (hash: /dvqwSAKbH+aIFpcGFtBhhNDms8oDSjc4ndQGfRBa74=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:76:6e:52:5c:d3:05:81:f0:31:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da044fca-c418-4088-8a66-0c6896769f77 Validity Not Before: Aug 9 20:00:03 2025 GMT Not After : Aug 11 20:00:00 2025 GMT Subject: CN=8a25b5f0-32a0-4360-879b-9179df9a8070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:a4:39:40:50:69:4d:56:45:d0:0d:c9:f7: 10:b0:10:eb:ee:95:eb:10:e4:c5:55:8c:7c:a4:eb: a3:a1:0c:c1:6e:62:9e:97:cc:8b:a5:0d:76:1e:84: 3c:4b:0d:7d:1d:94:a1:8a:92:7f:d3:8f:63:66:96: e4:02:a1:a2:de:fe:98:07:08:9c:b0:4e:5e:19:c9: eb:6f:2b:79:9b:94:98:80:9f:8e:1e:8f:43:b2:83: 2f:fa:61:ce:84:a2:70:4b:a6:fa:8f:a4:63:c7:d5: d1:b5:23:09:4d:4b:56:1b:61:ec:41:76:c6:3a:4b: e2:b8:6a:36:80:56:d5:5f:83:5e:1f:18:83:11:6c: 02:d6:db:02:68:c6:ca:f0:6c:f1:33:45:fe:ad:e9: 79:e8:e9:c3:3f:43:90:2f:a5:f8:2c:53:21:55:96: f3:0c:b8:c2:1b:bf:fe:50:9d:30:64:ec:24:30:14: 80:68:63:22:e9:6f:28:7b:f1:19:7b:9b:0f:43:43: ac:56:52:86:a2:df:94:82:31:4e:3f:f8:8e:9f:76: de:2a:72:1c:55:ac:38:41:12:82:8c:53:2d:39:95: 28:0a:4c:02:9e:ef:66:61:a2:d2:64:de:86:52:eb: 04:95:69:50:87:7a:bc:52:d3:5a:71:f5:42:af:90: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:22:CE:EC:5D:20:76:56:BB:AE:2D:F7:7E:8D:71:65:7E:96:58:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl X509v3 Authority Key Identifier: keyid:8D:CC:80:61:F8:BA:71:59:1D:2A:6C:45:3C:8B:25:9D:F5:9F:FD:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d0:c5:63:b0:fb:88:5a:dd:a2:93:e7:bb:de:14:9c:25:22: 82:f1:54:ac:eb:12:6b:0d:85:81:38:1a:3d:8b:6b:c2:03:fc: 11:94:30:91:e3:f9:e8:79:8c:11:4b:0c:6e:91:91:1f:90:af: e9:06:cf:c3:92:64:e8:f7:87:3c:52:f9:5f:a3:05:1a:5d:45: 07:1d:45:7e:f9:0f:1b:63:fa:dd:eb:b2:21:41:8a:3e:5f:8b: 98:7b:93:3a:44:7c:d6:e8:a3:44:61:6f:c3:69:c7:78:92:2d: d3:65:a6:05:01:20:be:7a:cd:db:a9:96:76:8d:9e:8c:2a:3f: 14:f6:d8:3d:9f:16:f0:35:ad:61:41:7c:45:b1:81:07:78:ff: 65:f8:06:56:60:6f:f5:4b:5c:26:b4:34:f8:5e:00:ac:89:78: b0:c1:3e:59:ae:94:6c:55:03:c4:4e:1e:31:bd:19:53:7c:64: 47:36:df:f5:93:e2:11:9e:6d:ec:d3:d6:5d:d7:ac:55:8d:ea: 73:00:5d:0f:21:34:6c:ec:51:97:e7:43:53:4e:20:80:23:f3: ec:32:ad:bf:ce:77:37:37:0b:4f:17:5e:b8:a3:41:b6:8e:b6: 70:05:9d:ce:2b:c1:71:e1:bf:cc:c2:b1:c7:ba:c6:b3:50:f9: 15:11:03:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErNdm5SXNMFgfAxtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwNDRmY2EtYzQxOC00MDg4LThhNjYtMGM2ODk2NzY5 Zjc3MB4XDTI1MDgwOTIwMDAwM1oXDTI1MDgxMTIwMDAwMFowLzEtMCsGA1UEAxMk OGEyNWI1ZjAtMzJhMC00MzYwLTg3OWItOTE3OWRmOWE4MDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyKkOUBQaU1WRdANyfcQsBDr7pXrEOTFVYx8 pOujoQzBbmKel8yLpQ12HoQ8Sw19HZShipJ/049jZpbkAqGi3v6YBwicsE5eGcnr byt5m5SYgJ+OHo9DsoMv+mHOhKJwS6b6j6Rjx9XRtSMJTUtWG2HsQXbGOkviuGo2 gFbVX4NeHxiDEWwC1tsCaMbK8GzxM0X+rel56OnDP0OQL6X4LFMhVZbzDLjCG7/+ UJ0wZOwkMBSAaGMi6W8oe/EZe5sPQ0OsVlKGot+UgjFOP/iOn3beKnIcVaw4QRKC jFMtOZUoCkwCnu9mYaLSZN6GUusElWlQh3q8UtNacfVCr5CJOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLwizuxdIHZWu64t936NcWV+llgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0 NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4OTY3NjlmNzcvZGEwNDRmY2EtYzQxOC00 MDg4LThhNjYtMGM2ODk2NzY5Zjc3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwNDRmY2EtYzQxOC00MDg4LThh NjYtMGM2ODk2NzY5Zjc3L2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2 OWY3Ny5jcmwwHwYDVR0jBBgwFoAUjcyAYfi6cVkdKmxFPIslnfWf/TgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTA0NGZjYS1jNDE4LTQwODgtOGE2Ni0wYzY4 OTY3NjlmNzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo0MVjsPuIWt2ik+e73hSc JSKC8VSs6xJrDYWBOBo9i2vCA/wRlDCR4/noeYwRSwxukZEfkK/pBs/DkmTo94c8 UvlfowUaXUUHHUV++Q8bY/rd67IhQYo+X4uYe5M6RHzW6KNEYW/Dacd4ki3TZaYF ASC+es3bqZZ2jZ6MKj8U9tg9nxbwNa1hQXxFsYEHeP9l+AZWYG/1S1wmtDT4XgCs iXiwwT5ZrpRsVQPETh4xvRlTfGRHNt/1k+IRnm3s09Zd16xVjepzAF0PITRs7FGX 50NTTiCAI/PsMq2/znc3NwtPF164o0G2jrZwBZ3OK8Fx4b/MwrHHusazUPkVEQOC -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:19 2025 by rpki-client