$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft File: f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft (raw, json) Hash identifier: F+FvQSTn1lakx7Q20TaAMfmGc8P89TnIsFZfJVkoaZM= Subject key identifier: 59:6A:6B:82:3E:2A:6D:F5:29:29:CA:34:02:99:9F:AD:FA:B3:B0:8A Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 Certificate issuer: /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Certificate serial: 010D0C9F4328584AC2A507A6DA24294DB4B03900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft Manifest number: 010D0C9F4328584073A82EDE07D377C7FA5BAB15 Signing time: Tue 05 Aug 2025 23:00:03 +0000 Manifest this update: Tue 05 Aug 2025 23:00:03 +0000 Manifest next update: Thu 07 Aug 2025 23:00:00 +0000 Files and hashes: 1: 6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer (hash: 9kNs2zHRyEejL39ruJIInZu9ar1mKhoHHNnnj+II2Yo=) 2: f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl (hash: IEkPAN1TqF6ShfteF9UbrufzE+Io6DKC8FyQwXHg2Vc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:a5:07:a6:da:24:29:4d:b4:b0:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Validity Not Before: Aug 5 23:00:03 2025 GMT Not After : Aug 7 23:00:00 2025 GMT Subject: CN=770b50d7-ec01-41e4-ba24-5f72305fed87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:f1:32:b9:8a:37:fb:18:60:93:48:57:71: d1:8e:a2:a3:21:46:d0:6e:24:f2:7c:ac:33:ba:92: 4f:47:a3:dd:58:55:9d:96:62:3e:68:94:7f:db:5a: 76:5d:f0:ec:47:3b:6c:2d:71:30:31:cd:72:4e:2b: 10:97:79:62:43:0d:d0:cf:cd:66:b0:2b:76:34:99: 55:3b:ea:87:cc:82:51:f3:c7:b6:0a:4e:3c:62:b7: 10:1d:1f:5c:33:e6:ea:81:db:97:94:85:ea:ec:d9: 1e:af:6a:ca:c5:cd:48:b1:e3:bc:4a:72:ad:b7:cc: 4d:f8:6d:51:51:dc:e0:79:e9:7a:9c:1a:4c:12:e5: e0:42:c2:6f:b5:7d:dd:0c:6f:a2:b0:09:8f:f7:62: 1e:68:67:91:18:87:d2:ee:c4:0d:77:fc:3a:4b:b9: 3c:11:d0:b9:6f:7e:3c:75:f0:d4:ec:2c:ee:46:7f: 5e:c6:2c:f1:60:1e:e6:b1:8d:39:04:6f:78:47:6c: 28:ac:76:d1:ed:e1:7a:22:90:77:1e:f4:2c:b0:4e: 53:cd:96:df:50:66:54:5f:30:b1:27:4f:80:bf:db: c6:0a:0f:fe:bc:28:e1:50:20:48:b6:3c:53:32:9c: ab:e8:fb:9b:44:42:d5:02:b3:d8:c6:a9:08:09:61: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6A:6B:82:3E:2A:6D:F5:29:29:CA:34:02:99:9F:AD:FA:B3:B0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl X509v3 Authority Key Identifier: keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:28:fc:05:b7:cd:bc:c5:5a:b9:e7:bf:7c:74:e4:b1:01:44: 92:82:37:30:d2:f8:0d:a5:f1:16:6e:3c:ec:2b:f0:c9:08:7b: af:6a:fe:7f:cc:ef:c9:7c:fd:6d:7c:a0:2d:ae:bd:d7:29:25: e2:51:ff:f0:45:82:c2:70:b2:5e:59:49:31:c9:ca:88:24:97: a7:93:b5:c3:a3:11:e2:cc:20:7d:a8:30:19:eb:b8:7c:71:ee: df:b9:a6:72:46:27:e5:2e:57:70:1f:db:d3:19:bb:bc:a3:13: f3:9b:04:c1:57:97:0c:4f:0f:01:04:0c:e6:6b:85:3c:fa:29: 7c:88:ab:c5:6c:9e:3f:74:b7:db:a1:00:eb:ad:52:8e:a0:06: 23:6d:01:6a:f5:be:27:4c:bf:d5:74:3d:42:0d:94:6b:f8:ac: b3:a9:6a:20:aa:e4:ed:a7:b7:3d:da:b5:b2:14:64:93:e3:0c: 4c:a7:79:3f:b4:03:bc:e6:87:dc:1e:dd:9c:7e:e4:38:0a:88: e1:37:22:71:5d:f1:e0:35:f8:17:38:2d:65:04:31:b0:4c:fa: 4f:25:da:48:36:78:c7:64:d8:b4:4a:56:23:77:0d:32:b9:b8: db:2a:d9:23:0b:2a:91:70:48:4b:ae:09:d6:de:39:6f:02:09: 1e:f3:b5:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErCpQem2iQpTbSwOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYz ZjM3MB4XDTI1MDgwNTIzMDAwM1oXDTI1MDgwNzIzMDAwMFowLzEtMCsGA1UEAxMk NzcwYjUwZDctZWMwMS00MWU0LWJhMjQtNWY3MjMwNWZlZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1nxMrmKN/sYYJNIV3HRjqKjIUbQbiTyfKwz upJPR6PdWFWdlmI+aJR/21p2XfDsRztsLXEwMc1yTisQl3liQw3Qz81msCt2NJlV O+qHzIJR88e2Ck48YrcQHR9cM+bqgduXlIXq7Nker2rKxc1IseO8SnKtt8xN+G1R Udzgeel6nBpMEuXgQsJvtX3dDG+isAmP92IeaGeRGIfS7sQNd/w6S7k8EdC5b348 dfDU7CzuRn9exizxYB7msY05BG94R2worHbR7eF6IpB3HvQssE5TzZbfUGZUXzCx J0+Av9vGCg/+vCjhUCBItjxTMpyr6PubRELVArPYxqkICWEzKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFlqa4I+Km31KSnKNAKZn636s7CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFi OGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRmZGQ2NjNmMzcvZjFhYjhkNDUtYTFhZS00 MDhhLTllNDUtYjA0ZmRkNjYzZjM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTll NDUtYjA0ZmRkNjYzZjM3L2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2 M2YzNy5jcmwwHwYDVR0jBBgwFoAUAuhbq0e+2mhq1EBVlIQmWd5vq1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFiOGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRm ZGQ2NjNmMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnKPwFt828xVq55798dOSx AUSSgjcw0vgNpfEWbjzsK/DJCHuvav5/zO/JfP1tfKAtrr3XKSXiUf/wRYLCcLJe WUkxycqIJJenk7XDoxHizCB9qDAZ67h8ce7fuaZyRiflLldwH9vTGbu8oxPzmwTB V5cMTw8BBAzma4U8+il8iKvFbJ4/dLfboQDrrVKOoAYjbQFq9b4nTL/VdD1CDZRr +KyzqWogquTtp7c92rWyFGST4wxMp3k/tAO85ofcHt2cfuQ4CojhNyJxXfHgNfgX OC1lBDGwTPpPJdpINnjHZNi0SlYjdw0yubjbKtkjCyqRcEhLrgnW3jlvAgke87Xe -----END CERTIFICATE-----Generated at Wed Aug 6 07:57:42 2025 by rpki-client