$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft File: f0ba84c0-5d44-4547-a368-e574b20611e4.mft (raw, json) Hash identifier: TFvCJBfw5RpWfaIqQc6DgMorANWiXryo7XZWbo//0rE= Subject key identifier: B2:37:66:75:FE:4B:9C:08:37:E8:87:63:34:7A:89:03:C8:02:6A:E8 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584AC10421E9CE018505C940A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft Manifest number: 010D0C9F4328584073A84A8F170EC439FD54A235 Signing time: Tue 05 Aug 2025 09:00:03 +0000 Manifest this update: Tue 05 Aug 2025 09:00:03 +0000 Manifest next update: Fri 08 Aug 2025 09:00:00 +0000 Files and hashes: 1: f0ba84c0-5d44-4547-a368-e574b20611e4.crl (hash: PWt/OtUgTw09XWRC8/hC9me1sUMLkYvIv1Davy7JaiA=) 2: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (hash: XIdkrNH4FFGvRS2pPh1PjWVuWL+QkdGbI7JuRcZkuGs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:04:21:e9:ce:01:85:05:c9:40:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Aug 5 09:00:03 2025 GMT Not After : Aug 8 09:00:00 2025 GMT Subject: CN=79f714f1-694f-424f-9e86-f82f1b126a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:42:9f:81:ec:5c:d2:6d:bf:49:1f:83:25:68: 96:e3:18:ac:d2:57:33:1f:8e:de:e0:98:cd:4a:7a: 03:a1:78:20:06:07:bd:5e:72:1c:cc:5c:31:9f:ca: f4:36:07:fc:44:8c:48:57:38:52:72:2b:a5:53:19: a0:b2:69:c2:17:de:a9:b9:43:9f:39:fc:fa:1e:6e: 59:42:0f:8f:85:29:48:18:76:a4:1f:0b:dd:93:71: f0:d2:7d:b5:fe:ed:8a:5b:90:af:8b:54:45:83:32: 92:a8:1f:42:59:ff:fd:e3:a8:59:62:db:5a:f7:ec: 31:31:1f:2e:c8:57:14:81:76:ca:ee:61:9b:c0:51: 6b:c5:f8:ed:be:ef:02:22:e0:78:e9:80:53:3d:04: 76:7f:9c:49:bd:9f:a2:42:80:0d:8e:7f:5c:02:18: 9c:5e:80:76:fc:65:6a:fd:7c:39:b8:a4:b8:14:e0: 25:dd:aa:39:a1:25:ff:0c:fe:59:8e:58:87:a1:32: fe:58:f3:09:25:05:7d:2b:55:2c:00:f4:9c:41:4c: 66:b9:02:d5:7d:18:d2:d7:ac:ca:59:02:5e:b8:34: ad:d2:f7:67:7d:10:76:d1:87:75:db:49:1a:bf:25: 82:14:92:4e:23:c4:2e:08:c4:55:63:54:49:dc:e4: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:37:66:75:FE:4B:9C:08:37:E8:87:63:34:7A:89:03:C8:02:6A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:02:f5:c4:b3:94:19:da:09:a1:85:bc:cf:1b:c3:e4:cc:5b: db:8e:a3:88:da:76:97:b2:ff:92:ea:0e:5e:02:f9:04:2a:a2: b0:12:d9:e5:19:17:9a:7f:fb:a7:c4:ac:7b:e7:dd:e5:4b:2b: 18:f4:55:d1:be:e9:86:64:73:f1:48:8d:92:bf:86:07:3c:e2: 44:11:53:1f:0e:04:83:81:d7:c6:97:2b:5d:ba:b6:8f:62:f3: b8:c3:0f:0a:06:82:31:cb:c9:5c:cd:b9:ee:25:08:42:b3:e8: 37:d3:76:5b:11:12:83:55:49:b9:b7:68:39:93:a7:c6:bf:9e: df:fc:2d:6f:35:00:32:41:66:53:01:0f:8b:05:17:23:97:9f: ee:86:56:0f:89:41:14:e1:ef:b1:90:4b:7c:44:18:8d:fe:c4: 72:38:93:37:e6:71:40:fd:49:8f:d6:fc:fa:d6:7c:23:21:15: f4:94:55:1c:e7:67:2a:48:24:51:94:eb:c7:aa:83:10:86:e6: df:a6:cd:38:54:90:40:25:4f:ae:9e:75:58:3b:c6:a0:fa:fc: ea:ce:f9:e1:2e:31:6f:d3:c1:df:88:a9:3d:0d:ce:30:d3:38: 03:b9:fe:5e:27:8d:ef:5d:77:a0:c3:c3:0f:6b:23:f1:93:3e: 00:75:79:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBBCHpzgGFBclApoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MDgwNTA5MDAwM1oXDTI1MDgwODA5MDAwMFowLzEtMCsGA1UEAxMk NzlmNzE0ZjEtNjk0Zi00MjRmLTllODYtZjgyZjFiMTI2YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kKfgexc0m2/SR+DJWiW4xis0lczH47e4JjN SnoDoXggBge9XnIczFwxn8r0Ngf8RIxIVzhSciulUxmgsmnCF96puUOfOfz6Hm5Z Qg+PhSlIGHakHwvdk3Hw0n21/u2KW5Cvi1RFgzKSqB9CWf/946hZYtta9+wxMR8u yFcUgXbK7mGbwFFrxfjtvu8CIuB46YBTPQR2f5xJvZ+iQoANjn9cAhicXoB2/GVq /Xw5uKS4FOAl3ao5oSX/DP5ZjliHoTL+WPMJJQV9K1UsAPScQUxmuQLVfRjS16zK WQJeuDSt0vdnfRB20Yd120kavyWCFJJOI8QuCMRVY1RJ3OQ7PwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLI3ZnX+S5wIN+iHYzR6iQPIAmroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjBiYTg0YzAtNWQ0NC00 NTQ3LWEzNjgtZTU3NGIyMDYxMWU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhAvXEs5QZ2gmhhbzPG8Pk zFvbjqOI2naXsv+S6g5eAvkEKqKwEtnlGReaf/unxKx7593lSysY9FXRvumGZHPx SI2Sv4YHPOJEEVMfDgSDgdfGlytduraPYvO4ww8KBoIxy8lczbnuJQhCs+g303Zb ERKDVUm5t2g5k6fGv57f/C1vNQAyQWZTAQ+LBRcjl5/uhlYPiUEU4e+xkEt8RBiN /sRyOJM35nFA/UmP1vz61nwjIRX0lFUc52cqSCRRlOvHqoMQhubfps04VJBAJU+u nnVYO8ag+vzqzvnhLjFv08HfiKk9Dc4w0zgDuf5eJ43vXXegw8MPayPxkz4AdXmb -----END CERTIFICATE-----Generated at Wed Aug 6 11:00:30 2025 by rpki-client