$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft File: a1d568c5-f4e7-4018-a050-a2f04280e225.mft (raw, json) Hash identifier: eKzqOVQUVAQ/y7RU/8b4t2rfAsu8sM8mVOaVYMFtwLE= Subject key identifier: 5F:9B:61:DD:FD:FC:73:FB:A8:2C:05:38:2F:27:06:4F:D9:06:4B:6F Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Certificate issuer: /CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Certificate serial: 010D0C9F4328584AC551FBD3659D6FFD2E96B000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft Manifest number: 010D0C9F43285847DBF247FABDDD04106F411E11 Signing time: Wed 06 Aug 2025 22:00:08 +0000 Manifest this update: Wed 06 Aug 2025 22:00:08 +0000 Manifest next update: Fri 08 Aug 2025 22:00:00 +0000 Files and hashes: 1: a1d568c5-f4e7-4018-a050-a2f04280e225.crl (hash: izU4i4ozGZMA8IZavfNVHE29P2gg4kEZRGGVj7Nfy2U=) 2: e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (hash: QKbd2G7gEd2SZuMSpuFodJ74zHaN2DmcTGFo2AUj2vg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:51:fb:d3:65:9d:6f:fd:2e:96:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Validity Not Before: Aug 6 22:00:08 2025 GMT Not After : Aug 8 22:00:00 2025 GMT Subject: CN=58aadc4c-7dde-48c9-a498-dd5a2b5fbef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:95:01:0a:44:b1:33:40:0e:d6:c6:5e:e4: 58:43:86:61:c2:f8:e0:da:b1:b3:54:18:5e:7e:7d: 54:f5:a3:9c:b2:3d:81:71:f6:2e:32:15:db:42:90: 77:b3:e2:e9:6c:a0:87:f3:20:72:b1:81:86:06:7c: 18:d3:ad:16:00:db:cc:a1:d7:d4:b7:36:11:e9:c6: de:f2:a6:b8:44:f1:77:ba:89:d2:5f:7a:e7:39:4d: b3:dc:e0:f0:0e:33:76:d0:fe:ba:80:ee:cf:52:d1: 3a:21:f9:93:d2:96:80:89:cf:58:e8:bd:40:75:52: ac:bb:58:b7:db:58:ae:ce:f9:52:4e:79:cb:52:6e: 3c:ba:66:31:0b:c6:d2:f9:dc:2c:1e:ac:cb:25:85: d9:1a:c3:45:af:59:4b:d9:d7:53:82:07:63:07:d5: d7:cc:28:1b:f0:61:5e:19:7b:9e:08:c5:4a:26:3a: e8:f7:d9:d4:ad:1c:8e:01:0e:ca:d2:f0:de:56:e6: 3f:80:dd:63:a2:8f:2f:ee:1c:56:e3:49:79:42:0c: 1a:f7:db:e3:05:4c:6d:ef:d0:03:3b:dc:35:27:49: 8a:75:b4:31:2a:5d:c2:4e:84:19:c9:f0:d4:c4:ff: ae:93:eb:f8:4c:11:b6:9d:09:e2:3a:41:99:20:0e: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9B:61:DD:FD:FC:73:FB:A8:2C:05:38:2F:27:06:4F:D9:06:4B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl X509v3 Authority Key Identifier: keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:17:29:c7:97:4a:5e:4b:a8:80:78:27:b3:30:da:dd:f7:a6: fc:88:87:fd:5b:27:1f:14:ab:06:c1:99:ac:dc:e0:32:e2:ed: b3:b2:ce:b0:98:ca:5c:c4:e3:71:4d:82:08:8d:2a:5d:e4:82: 10:ff:16:70:1e:a4:ae:c8:93:14:19:12:de:a6:92:28:c5:9c: e6:ba:66:c8:9c:54:3f:f5:52:59:04:2e:73:00:42:d0:0e:6c: 1b:1a:04:62:40:06:70:0e:a3:f2:f7:3a:3f:31:09:d2:9c:c1: bb:2d:7d:a0:8b:55:50:3e:c0:d0:00:71:53:69:c0:a6:98:29: ce:a1:7a:d7:ca:e9:c4:66:ba:f7:eb:30:fd:66:8a:a2:83:3c: ca:b7:68:40:19:11:5e:a9:73:ce:0c:a8:79:2b:77:69:b6:e8: df:22:eb:e2:5b:76:70:5b:18:d9:b5:cc:ed:d5:8a:19:56:b0: 1c:6c:23:d3:6d:ff:54:29:91:64:09:6e:ff:ad:f1:3b:b2:17: 7c:09:f5:67:3e:14:ab:4d:be:07:35:25:c0:02:2d:46:6d:fb: 24:28:fd:bb:e8:39:c1:db:89:1f:29:72:74:21:77:20:f3:7e: eb:13:00:e8:6c:48:a9:a7:07:c7:33:d6:71:cf:c0:08:d2:48: 01:ad:cc:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErFUfvTZZ1v/S6WsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkNTY4YzUtZjRlNy00MDE4LWEwNTAtYTJmMDQyODBl MjI1MB4XDTI1MDgwNjIyMDAwOFoXDTI1MDgwODIyMDAwMFowLzEtMCsGA1UEAxMk NThhYWRjNGMtN2RkZS00OGM5LWE0OTgtZGQ1YTJiNWZiZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6yVAQpEsTNADtbGXuRYQ4Zhwvjg2rGzVBhe fn1U9aOcsj2BcfYuMhXbQpB3s+LpbKCH8yBysYGGBnwY060WANvModfUtzYR6cbe 8qa4RPF3uonSX3rnOU2z3ODwDjN20P66gO7PUtE6IfmT0paAic9Y6L1AdVKsu1i3 21iuzvlSTnnLUm48umYxC8bS+dwsHqzLJYXZGsNFr1lL2ddTggdjB9XXzCgb8GFe GXueCMVKJjro99nUrRyOAQ7K0vDeVuY/gN1joo8v7hxW40l5Qgwa99vjBUxt79AD O9w1J0mKdbQxKl3CToQZyfDUxP+uk+v4TBG2nQniOkGZIA6aWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF+bYd39/HP7qCwFOC8nBk/ZBktvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1 NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4MGUyMjUvYTFkNTY4YzUtZjRlNy00 MDE4LWEwNTAtYTJmMDQyODBlMjI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTFkNTY4YzUtZjRlNy00MDE4LWEw NTAtYTJmMDQyODBlMjI1L2ExZDU2OGM1LWY0ZTctNDAxOC1hMDUwLWEyZjA0Mjgw ZTIyNS5jcmwwHwYDVR0jBBgwFoAUYK1fte4vsi2kNA7XGbVSe3y626AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYw NDI4MGUyMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEFynHl0peS6iAeCezMNrd 96b8iIf9WycfFKsGwZms3OAy4u2zss6wmMpcxONxTYIIjSpd5IIQ/xZwHqSuyJMU GRLeppIoxZzmumbInFQ/9VJZBC5zAELQDmwbGgRiQAZwDqPy9zo/MQnSnMG7LX2g i1VQPsDQAHFTacCmmCnOoXrXyunEZrr36zD9ZoqigzzKt2hAGRFeqXPODKh5K3dp tujfIuviW3ZwWxjZtczt1YoZVrAcbCPTbf9UKZFkCW7/rfE7shd8CfVnPhSrTb4H NSXAAi1GbfskKP276DnB24kfKXJ0IXcg837rEwDobEippwfHM9Zxz8AI0kgBrczL -----END CERTIFICATE-----Generated at Thu Aug 7 07:23:16 2025 by rpki-client