$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft File: d886f3a2-7325-4b74-8802-19528a9f380c.mft (raw, json) Hash identifier: 3qaEEhtsDN6mpr8ZtiQdIDMwN4UCOeZYqYx1CGi/GQE= Subject key identifier: FD:23:BE:0C:67:FA:33:75:4D:39:5E:7C:CD:F9:95:64:44:0C:64:98 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584AC463B6AC467836038D53D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft Manifest number: 010D0C9F432858421E942BC6BDF40AE91C1CC037 Signing time: Wed 06 Aug 2025 14:00:03 +0000 Manifest this update: Wed 06 Aug 2025 14:00:03 +0000 Manifest next update: Fri 08 Aug 2025 14:00:00 +0000 Files and hashes: 1: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (hash: uX0Pq41AVtt0/cMzX5PCsgwz/MP1fA3a3g2Kh18S8e8=) 2: d886f3a2-7325-4b74-8802-19528a9f380c.crl (hash: 6MjbLkhbFgSoHWi4abYOuk8fppaW4WrRkKgCxzgh42A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:63:b6:ac:46:78:36:03:8d:53:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Aug 6 14:00:03 2025 GMT Not After : Aug 8 14:00:00 2025 GMT Subject: CN=3b36c8a6-eb4e-4c4b-8a01-e880ab42081c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:81:d5:cc:4a:60:70:2c:89:ac:70:ad:c9:1a: 8c:00:97:32:45:20:35:f3:05:74:8b:95:6a:9a:eb: 90:04:cd:37:ad:3f:23:d5:10:3b:7c:5f:7b:ad:81: cd:1d:d8:cb:a5:09:14:b3:f2:f3:19:16:75:05:0d: 4f:5e:ea:e4:18:a0:30:c0:c2:2b:fc:c2:5c:85:65: 7e:9d:9f:03:0d:df:b2:ab:af:46:53:02:a4:6f:a1: ba:6f:ba:c0:f9:7a:c3:c4:e5:4b:10:9c:cc:18:09: f6:e9:48:b1:eb:3c:02:52:8c:43:f2:50:8b:c6:98: 13:32:cf:01:29:d1:18:b6:ed:29:db:6c:f0:77:65: f9:70:39:9e:c5:ca:f4:62:84:43:49:64:3d:81:54: 85:5d:a9:91:f8:b0:df:a8:e7:f1:a3:ed:b1:c2:3d: c5:81:85:34:f5:a5:08:b1:4a:e8:41:0b:52:f5:f0: 1d:eb:5b:1e:83:b0:18:5c:b3:c7:aa:f7:fb:74:8f: 71:65:bd:7e:2f:2c:6b:e2:a8:3c:78:f2:61:ea:61: f4:15:0b:57:1c:48:70:81:08:ed:cd:cb:b5:5c:4c: 7e:1d:98:bd:90:40:a1:59:77:42:1c:6b:62:88:b7: ef:e8:48:97:32:06:60:d6:12:64:78:1b:82:fa:2b: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:23:BE:0C:67:FA:33:75:4D:39:5E:7C:CD:F9:95:64:44:0C:64:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:17:ec:2b:9d:27:e5:99:75:ba:e2:56:22:52:5f:c1:dc:e7: 84:fc:bb:79:43:5d:e1:1e:a0:9e:c6:29:65:fc:c8:66:4f:12: 0d:bd:75:1d:1f:c8:97:f5:ba:e6:c4:8b:db:b0:f3:53:e0:c7: c9:c7:ba:3f:51:81:06:42:4f:9a:96:04:3c:3a:e0:99:00:dc: ff:a3:36:25:99:3c:12:2d:78:3b:99:db:93:e7:60:5b:b5:20: 49:64:9e:82:84:b8:f3:40:69:52:c9:9d:47:be:8a:33:f1:2d: 3d:ed:c9:ad:ef:1b:f9:11:b6:95:2b:f2:49:03:66:cf:f9:48: 6e:16:bc:78:8e:b1:77:4a:fd:d5:59:c4:4e:5a:14:44:d9:ad: 8c:b2:90:62:f9:62:9a:c3:e7:00:9e:28:73:c6:b4:0d:d8:fc: 16:88:a1:3a:22:73:39:d6:c8:0a:e2:f4:7e:da:6b:76:74:cc: aa:d3:2e:67:b8:f6:94:0f:b4:fc:44:43:29:6d:73:22:29:f8: b7:d6:5d:e0:d9:a1:d9:82:eb:e8:9e:11:45:f0:44:79:4f:de: 80:6e:d5:32:ec:c7:f7:8b:b6:cf:4f:87:00:42:07:39:a7:4f: e0:1f:8c:40:de:a5:ba:7c:89:39:e4:d8:71:07:f0:b6:fd:e0: 72:b8:8c:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErEY7asRng2A41T2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI1MDgwNjE0MDAwM1oXDTI1MDgwODE0MDAwMFowLzEtMCsGA1UEAxMk M2IzNmM4YTYtZWI0ZS00YzRiLThhMDEtZTg4MGFiNDIwODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIHVzEpgcCyJrHCtyRqMAJcyRSA18wV0i5Vq muuQBM03rT8j1RA7fF97rYHNHdjLpQkUs/LzGRZ1BQ1PXurkGKAwwMIr/MJchWV+ nZ8DDd+yq69GUwKkb6G6b7rA+XrDxOVLEJzMGAn26Uix6zwCUoxD8lCLxpgTMs8B KdEYtu0p22zwd2X5cDmexcr0YoRDSWQ9gVSFXamR+LDfqOfxo+2xwj3FgYU09aUI sUroQQtS9fAd61seg7AYXLPHqvf7dI9xZb1+Lyxr4qg8ePJh6mH0FQtXHEhwgQjt zcu1XEx+HZi9kEChWXdCHGtiiLfv6EiXMgZg1hJkeBuC+ivxgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP0jvgxn+jN1TTlefM35lWREDGSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvZDg4NmYzYTItNzMyNS00 Yjc0LTg4MDItMTk1MjhhOWYzODBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHF+wrnSflmXW64lYiUl/B 3OeE/Lt5Q13hHqCexill/MhmTxINvXUdH8iX9brmxIvbsPNT4MfJx7o/UYEGQk+a lgQ8OuCZANz/ozYlmTwSLXg7mduT52BbtSBJZJ6ChLjzQGlSyZ1Hvooz8S097cmt 7xv5EbaVK/JJA2bP+UhuFrx4jrF3Sv3VWcROWhRE2a2MspBi+WKaw+cAnihzxrQN 2PwWiKE6InM51sgK4vR+2mt2dMyq0y5nuPaUD7T8REMpbXMiKfi31l3g2aHZguvo nhFF8ER5T96AbtUy7Mf3i7bPT4cAQgc5p0/gH4xA3qW6fIk55NhxB/C2/eByuIxO -----END CERTIFICATE-----Generated at Wed Aug 6 16:20:17 2025 by rpki-client