$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: USsS+o9sf2ulp/4Xy3tHut3OdO11TNVYjXtQcSQymY8= Subject key identifier: D9:3C:70:36:66:E6:26:DF:75:89:54:E1:2B:24:5E:1E:52:A4:71:2B Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584ABD0FAD0BBBF92C19C22E0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CA5D Signing time: Sun 03 Aug 2025 23:00:03 +0000 Manifest this update: Sun 03 Aug 2025 23:00:03 +0000 Manifest next update: Tue 05 Aug 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: dskb2M7rxatsD0kWzne+W8JbMiSVI+lzdA6ZbRi4W9Y=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: h2PB9mWxh11+ORXgWJ0xkcHILsB5eDcLXBWHiYDJkMU=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: eC35Z+VfxbD/m6KhaV32kFmtgY7FrXW1+QpwHur543E=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: C0GBGMEaos6pjT75/V95Z0Nl2rHN3AXW2TV6FBAnxy0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:0f:ad:0b:bb:f9:2c:19:c2:2e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Aug 3 23:00:03 2025 GMT Not After : Aug 5 23:00:00 2025 GMT Subject: CN=e018c58d-15c7-4a9d-a120-3248497e0cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a1:ca:e3:23:7c:81:86:b9:4a:18:16:ad:f9: 1e:4a:38:29:b2:63:32:46:15:e4:b6:a7:aa:fc:fb: fd:19:51:0c:48:82:c3:ab:ba:65:55:60:38:00:bd: f9:8a:14:76:10:2a:92:80:10:27:00:2f:fe:c1:83: 44:ed:47:b4:7b:e4:aa:de:3b:8b:11:24:e4:cd:ed: 2f:b5:78:c9:be:41:c5:11:07:d5:b2:7f:c0:f9:60: 69:7d:4b:e3:07:16:bf:c1:f5:a9:f4:73:9a:56:69: 3f:ff:b0:26:ca:12:8b:84:4a:59:9f:ab:56:cd:0b: 7c:e1:ec:2f:4b:3d:b5:b5:09:ef:7a:bb:24:0e:f3: 3c:21:ae:c5:bb:03:77:9a:71:8e:c3:c7:d1:50:07: 51:10:17:4d:cf:48:ba:4e:c2:b4:f7:e9:de:ef:98: d1:6b:e8:81:33:eb:b6:99:6a:48:00:ac:92:58:64: b1:46:ab:7f:91:df:fc:3e:a3:b9:61:16:96:dc:6d: 8c:f8:aa:69:dc:7d:1b:49:7d:3e:21:17:8f:20:5d: ac:9e:8e:0a:64:ae:47:ea:18:2e:7a:e0:08:e1:38: 26:79:b1:04:61:6d:d5:01:6a:39:76:9e:b2:75:10: 31:8a:13:0b:25:58:79:8a:b1:06:a7:13:0f:88:ff: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:70:36:66:E6:26:DF:75:89:54:E1:2B:24:5E:1E:52:A4:71:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:32:f7:b0:56:21:b1:2b:46:b3:8e:6f:64:52:fe:fa:ef:ff: ad:79:69:65:10:96:79:c4:b4:44:c5:4b:dd:65:8a:1f:53:26: a8:e7:50:2e:52:63:4d:18:d1:5b:48:6e:02:86:c2:eb:66:b8: e2:04:fe:db:78:e1:6d:72:40:e9:f3:e5:3c:38:0d:0e:0a:bf: 97:36:9b:6a:27:44:0c:2d:3e:e3:8d:de:35:be:22:bf:79:ae: ae:fa:d0:c3:7f:fd:16:a4:35:32:48:f4:07:eb:9e:6d:e3:30: af:8f:b4:cd:5c:4d:b4:3c:2a:ae:80:1d:bd:1f:9e:16:34:d7: e6:d0:ac:54:d2:f1:cd:62:17:d7:5a:16:11:f8:cd:05:90:d5: ed:f3:32:71:fe:ec:07:f0:7e:30:fe:a3:30:7d:7d:e0:0e:1a: 6b:7d:9d:db:de:7d:72:07:29:ca:ad:87:2e:3a:76:2a:85:60: 8c:4d:b7:6f:b9:40:45:fd:ac:85:6a:50:40:06:5f:d3:24:31: 7e:51:8d:ec:1f:c1:b5:6d:86:66:65:0d:f0:c0:74:eb:bc:18: 6e:2b:5c:03:9b:c1:df:7e:dd:c3:48:97:8c:55:6b:6d:55:6b: 6f:2f:73:7f:a0:af:51:80:fb:f2:20:76:ce:e5:3a:b6:fa:83: df:c4:7c:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9D60Lu/ksGcIuB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDgwMzIzMDAwM1oXDTI1MDgwNTIzMDAwMFowLzEtMCsGA1UEAxMk ZTAxOGM1OGQtMTVjNy00YTlkLWExMjAtMzI0ODQ5N2UwY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6HK4yN8gYa5ShgWrfkeSjgpsmMyRhXktqeq /Pv9GVEMSILDq7plVWA4AL35ihR2ECqSgBAnAC/+wYNE7Ue0e+Sq3juLESTkze0v tXjJvkHFEQfVsn/A+WBpfUvjBxa/wfWp9HOaVmk//7AmyhKLhEpZn6tWzQt84ewv Sz21tQnverskDvM8Ia7FuwN3mnGOw8fRUAdREBdNz0i6TsK09+ne75jRa+iBM+u2 mWpIAKySWGSxRqt/kd/8PqO5YRaW3G2M+Kpp3H0bSX0+IRePIF2sno4KZK5H6hgu euAI4TgmebEEYW3VAWo5dp6ydRAxihMLJVh5irEGpxMPiP9OCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNk8cDZm5ibfdYlU4SskXh5SpHErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcMvewViGxK0azjm9kUv76 7/+teWllEJZ5xLRExUvdZYofUyao51AuUmNNGNFbSG4ChsLrZrjiBP7beOFtckDp 8+U8OA0OCr+XNptqJ0QMLT7jjd41viK/ea6u+tDDf/0WpDUySPQH655t4zCvj7TN XE20PCqugB29H54WNNfm0KxU0vHNYhfXWhYR+M0FkNXt8zJx/uwH8H4w/qMwfX3g DhprfZ3b3n1yBynKrYcuOnYqhWCMTbdvuUBF/ayFalBABl/TJDF+UY3sH8G1bYZm ZQ3wwHTrvBhuK1wDm8Hfft3DSJeMVWttVWtvL3N/oK9RgPvyIHbO5Tq2+oPfxHzj -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:07 2025 by rpki-client