$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft File: 843d051d-a734-4f3d-9544-a5ed8b60c976.mft (raw, json) Hash identifier: CfPQgttEqWRMB7NDwQBQJArm8l0NWEryuGxpGm2liK8= Subject key identifier: E2:D5:DD:98:99:77:AA:D4:5F:F6:48:63:58:31:7F:4A:0E:73:04:91 Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 Certificate issuer: /CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Certificate serial: 010D0C9F4328584AC1F25FDC1CE4A0133A6866D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft Manifest number: 010D0C9F432858476BB9F86998BD9CF0CC87AD79 Signing time: Tue 05 Aug 2025 17:00:03 +0000 Manifest this update: Tue 05 Aug 2025 17:00:03 +0000 Manifest next update: Fri 08 Aug 2025 17:00:00 +0000 Files and hashes: 1: 843d051d-a734-4f3d-9544-a5ed8b60c976.crl (hash: ydU4dDPhGmvlduw8RjNvEJAKVr/ZtoKj+ezv6tcbcfw=) 2: b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa (hash: JbD9iaMjc7LWyyGBBvTE+IpDY1sXlN7Ln+yDImWS8ik=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:f2:5f:dc:1c:e4:a0:13:3a:68:66:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976 Validity Not Before: Aug 5 17:00:03 2025 GMT Not After : Aug 8 17:00:00 2025 GMT Subject: CN=1bac0552-05fa-4c6f-b84b-d2880dcbe283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:85:0e:8d:73:81:ce:87:ff:b1:df:d3:3d: 3e:95:14:25:87:50:57:8a:86:d7:02:d5:d8:22:ce: 05:b6:8c:91:11:11:9d:e4:ea:38:8e:5c:c6:64:3e: 64:0e:cd:c2:20:84:ed:6d:d2:f2:80:e0:fc:03:0d: 8c:89:8b:ce:8c:68:b7:db:76:5a:36:c7:50:6b:9b: 6a:28:80:4d:4d:a0:a1:a8:66:c2:6e:19:3a:cf:f6: 75:ec:90:15:83:22:d2:2a:c4:c9:59:bb:ce:1b:8a: c1:61:4f:ce:7a:44:06:37:72:9e:78:a8:6d:a0:38: 2f:ca:e0:98:2d:4a:e7:fe:8a:41:2e:6c:d3:8d:ee: 7c:56:2e:c0:f8:8f:dd:73:8b:b6:b5:4c:7f:c1:71: 02:7c:16:e5:cc:11:9b:ce:d1:a8:89:dd:c7:2c:76: d7:46:12:52:38:77:f9:a8:c1:66:d4:00:f7:d0:d5: cc:5b:16:e3:00:70:d9:34:bc:58:7b:47:bc:b0:01: ec:25:01:0f:8b:85:ec:50:a4:8f:d8:9b:33:01:c2: 27:83:48:5a:8c:d9:26:89:5f:67:9f:f0:24:0e:a0: ee:ef:07:4e:e7:3e:cf:b0:56:2f:fa:a7:92:16:51: 36:28:0f:91:f3:be:20:a5:29:61:2f:9b:a6:d8:aa: d5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D5:DD:98:99:77:AA:D4:5F:F6:48:63:58:31:7F:4A:0E:73:04:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl X509v3 Authority Key Identifier: keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3d:f8:86:1f:03:15:3a:52:3c:6d:48:cd:cb:ee:b7:58:48: 74:42:5f:71:0c:d7:6e:37:59:f0:e3:d8:e3:49:40:18:e2:53: a9:66:0b:5d:15:83:83:bb:9f:f9:c4:ed:81:a3:82:6d:7f:b7: 1b:18:e1:87:a4:a4:e6:39:d5:ef:af:f3:03:ed:67:28:0f:7b: 98:40:71:82:2c:bb:13:b2:14:a0:67:d9:a2:bb:39:8e:af:03: 80:ed:e0:76:a3:4e:63:49:be:64:35:dc:da:ce:53:28:06:ea: 49:be:30:cb:d4:11:1c:81:65:bc:c7:70:b4:60:12:6c:6f:de: 33:88:ed:2f:34:9f:72:93:1b:04:bb:14:71:e6:2c:91:71:01: e3:e1:a2:1b:88:55:de:f2:50:48:e8:6f:45:ea:e3:df:23:66: e9:7a:48:e9:e0:a8:f1:6d:f3:7f:20:20:c4:4c:d9:00:ac:f3: 37:9a:4f:07:41:bd:ce:35:52:09:55:f6:2e:74:76:07:74:5f: 8b:6f:51:7e:1d:47:8f:59:0b:2b:0f:93:e3:a1:c9:3b:2b:69: a8:ca:dd:08:20:cf:de:be:d7:a7:47:2f:d3:a7:d3:69:08:fc: e2:c9:54:bc:68:b9:f1:89:b0:48:07:74:65:69:67:9e:18:7a: b8:2b:4c:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErB8l/cHOSgEzpoZtcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQzZDA1MWQtYTczNC00ZjNkLTk1NDQtYTVlZDhiNjBj OTc2MB4XDTI1MDgwNTE3MDAwM1oXDTI1MDgwODE3MDAwMFowLzEtMCsGA1UEAxMk MWJhYzA1NTItMDVmYS00YzZmLWI4NGItZDI4ODBkY2JlMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KOFDo1zgc6H/7Hf0z0+lRQlh1BXiobXAtXY Is4FtoyRERGd5Oo4jlzGZD5kDs3CIITtbdLygOD8Aw2MiYvOjGi323ZaNsdQa5tq KIBNTaChqGbCbhk6z/Z17JAVgyLSKsTJWbvOG4rBYU/OekQGN3KeeKhtoDgvyuCY LUrn/opBLmzTje58Vi7A+I/dc4u2tUx/wXECfBblzBGbztGoid3HLHbXRhJSOHf5 qMFm1AD30NXMWxbjAHDZNLxYe0e8sAHsJQEPi4XsUKSP2JszAcIng0hajNkmiV9n n/AkDqDu7wdO5z7PsFYv+qeSFlE2KA+R874gpSlhL5um2KrV5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOLV3ZiZd6rUX/ZIY1gxf0oOcwSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NDNk MDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVkOGI2MGM5NzYvODQzZDA1MWQtYTczNC00 ZjNkLTk1NDQtYTVlZDhiNjBjOTc2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODQzZDA1MWQtYTczNC00ZjNkLTk1 NDQtYTVlZDhiNjBjOTc2Lzg0M2QwNTFkLWE3MzQtNGYzZC05NTQ0LWE1ZWQ4YjYw Yzk3Ni5jcmwwHwYDVR0jBBgwFoAU/P4/8CP0pCKPdZ+tIz+BmXBCtJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NDNkMDUxZC1hNzM0LTRmM2QtOTU0NC1hNWVk OGI2MGM5NzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZPfiGHwMVOlI8bUjNy+63 WEh0Ql9xDNduN1nw49jjSUAY4lOpZgtdFYODu5/5xO2Bo4Jtf7cbGOGHpKTmOdXv r/MD7WcoD3uYQHGCLLsTshSgZ9miuzmOrwOA7eB2o05jSb5kNdzazlMoBupJvjDL 1BEcgWW8x3C0YBJsb94ziO0vNJ9ykxsEuxRx5iyRcQHj4aIbiFXe8lBI6G9F6uPf I2bpekjp4KjxbfN/ICDETNkArPM3mk8HQb3ONVIJVfYudHYHdF+Lb1F+HUePWQsr D5Pjock7K2moyt0IIM/evtenRy/Tp9NpCPziyVS8aLnxibBIB3RlaWeeGHq4K0y5 -----END CERTIFICATE-----Generated at Wed Aug 6 13:15:56 2025 by rpki-client