$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft File: 0b291a85-da3e-420d-8e7f-61b66b323402.mft (raw, json) Hash identifier: KmGmhfoo/XMF1dsDiDrSSAlzHkt8Sd/wlCilUdJPXPY= Subject key identifier: 93:13:0C:43:7D:71:E1:D3:96:D1:4D:33:E2:B5:9A:34:88:C5:0C:CF Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584AC90AD9380B854227BE302800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft Manifest number: 010D0C9F4328584703143B112F9C890ADBF4F6E3 Signing time: Fri 08 Aug 2025 06:00:03 +0000 Manifest this update: Fri 08 Aug 2025 06:00:03 +0000 Manifest next update: Mon 11 Aug 2025 06:00:00 +0000 Files and hashes: 1: 0b291a85-da3e-420d-8e7f-61b66b323402.crl (hash: dPbhU2gjaxI/IOHBO+yLZXiIGEfTqrUTb+jAj4uReSc=) 2: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (hash: gLt4osCJH11a3iX1ztxRrPjr5/wPuj56ZoNq2aKEmQE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:0a:d9:38:0b:85:42:27:be:30:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Aug 8 06:00:03 2025 GMT Not After : Aug 11 06:00:00 2025 GMT Subject: CN=ee3a4d09-3f28-4dbf-8740-53e9c698b202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:45:12:7c:d6:65:79:93:97:4c:02:b2:52: 19:6e:30:e5:b3:a3:1e:b8:14:ab:40:c3:3e:93:fd: d0:ed:ef:ba:40:82:08:36:39:93:e0:e7:e6:c7:6d: 8c:88:ec:f3:f1:b8:e1:cd:f6:7e:6b:89:6f:97:8c: 66:99:c3:05:42:61:6c:f7:ca:1e:1e:25:33:b7:51: 6d:9a:74:3f:31:af:4e:d7:0c:b5:4d:ea:df:d2:5c: f0:ae:18:eb:35:96:e6:11:ad:f1:ef:b8:cc:ff:7e: 1f:d4:a0:94:61:dc:f4:d0:8f:e1:14:8f:77:2f:e5: b1:5b:92:bf:22:1a:42:24:5a:29:3a:32:db:b1:83: 76:65:d0:a9:d3:a0:72:6f:4f:b4:d0:e3:59:26:c1: 96:83:82:96:db:a8:95:ba:1e:ff:be:9d:6a:97:d1: 45:80:ef:c2:61:b2:45:a8:09:7a:2e:aa:da:67:f0: 66:1b:9f:a6:2a:9e:ce:68:93:c5:73:24:10:0c:58: b0:fc:cd:4f:8a:f0:12:78:75:a7:96:c7:3a:70:95: 6d:06:05:9f:8c:d2:86:65:19:26:fd:e6:f6:3a:46: a6:b1:7f:0c:e3:51:70:a6:35:a2:95:1c:bc:f1:7e: 03:61:34:73:28:cb:ba:6d:76:07:ac:12:9e:bb:70: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:13:0C:43:7D:71:E1:D3:96:D1:4D:33:E2:B5:9A:34:88:C5:0C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f4:80:90:d5:c5:0a:c6:e6:69:a0:98:b2:83:7e:d7:c7:90: 65:ed:5e:63:59:e1:d3:3c:e2:4b:8f:9d:b8:f2:fc:b1:78:60: e4:10:42:36:7e:c8:5d:74:c3:64:84:98:c8:39:87:ed:5c:23: 77:9e:89:d0:05:ad:3b:3b:b2:20:4b:55:da:da:5d:60:8d:fc: 7f:08:f1:4c:bf:66:33:b1:3d:53:e0:c1:2d:26:02:d3:7d:b6: 7f:bb:45:ef:2f:7b:a6:f3:4e:eb:5b:12:da:8b:b8:1f:64:0e: a5:40:99:7e:74:e9:97:44:24:44:b6:b0:0b:b7:68:6d:54:61: cb:59:cb:16:6b:e3:cd:20:bb:f8:35:6e:5c:c3:ee:7d:76:c9: e1:e6:79:d9:13:08:5d:15:89:3d:65:6d:8c:a5:ca:6d:04:f5: 9c:30:2b:40:70:c3:df:4f:cd:e1:27:43:5d:f9:98:f9:1f:f5: d5:04:fe:17:33:fd:27:48:3c:78:81:f6:37:00:ab:ed:33:d6: ab:ab:79:03:0a:85:73:13:48:b7:b0:f2:b1:a6:48:9c:27:77: 65:92:5f:c3:6e:87:56:91:b4:3d:a5:c5:0f:f1:c9:dd:ab:41: 2b:2e:5d:4c:bd:aa:01:f5:56:26:b7:54:73:33:ae:fb:aa:fb: 5d:48:3a:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErJCtk4C4VCJ74wKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MDgwODA2MDAwM1oXDTI1MDgxMTA2MDAwMFowLzEtMCsGA1UEAxMk ZWUzYTRkMDktM2YyOC00ZGJmLTg3NDAtNTNlOWM2OThiMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRZFEnzWZXmTl0wCslIZbjDls6MeuBSrQMM+ k/3Q7e+6QIIINjmT4Ofmx22MiOzz8bjhzfZ+a4lvl4xmmcMFQmFs98oeHiUzt1Ft mnQ/Ma9O1wy1Terf0lzwrhjrNZbmEa3x77jM/34f1KCUYdz00I/hFI93L+WxW5K/ IhpCJFopOjLbsYN2ZdCp06Byb0+00ONZJsGWg4KW26iVuh7/vp1ql9FFgO/CYbJF qAl6LqraZ/BmG5+mKp7OaJPFcyQQDFiw/M1PivASeHWnlsc6cJVtBgWfjNKGZRkm /eb2OkamsX8M41FwpjWilRy88X4DYTRzKMu6bXYHrBKeu3AjPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJMTDEN9ceHTltFNM+K1mjSIxQzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvMGIyOTFhODUtZGEzZS00 MjBkLThlN2YtNjFiNjZiMzIzNDAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBY9ICQ1cUKxuZpoJiyg37X x5Bl7V5jWeHTPOJLj5248vyxeGDkEEI2fshddMNkhJjIOYftXCN3nonQBa07O7Ig S1Xa2l1gjfx/CPFMv2YzsT1T4MEtJgLTfbZ/u0XvL3um807rWxLai7gfZA6lQJl+ dOmXRCREtrALt2htVGHLWcsWa+PNILv4NW5cw+59dsnh5nnZEwhdFYk9ZW2Mpcpt BPWcMCtAcMPfT83hJ0Nd+Zj5H/XVBP4XM/0nSDx4gfY3AKvtM9arq3kDCoVzE0i3 sPKxpkicJ3dlkl/DbodWkbQ9pcUP8cndq0ErLl1MvaoB9VYmt1RzM677qvtdSDpo -----END CERTIFICATE-----Generated at Fri Aug 8 10:13:49 2025 by rpki-client