$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft File: ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft (raw, json) Hash identifier: t1SwXF1I5ZcBxMTb9Y2l8A2apBwTN5Sbuc+gMJ253wU= Subject key identifier: 83:CE:08:5B:EB:AF:13:37:6A:23:B8:33:C2:A2:69:5B:09:2A:9E:E7 Authority key identifier: 3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3 Certificate issuer: /CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c Certificate serial: 010D0C9F4328584ABC3F407BDE21CDB9CA2A3800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft Manifest number: 010D0C9F4328584757CBEB5CB3A5E2F5E98796DE Signing time: Sun 03 Aug 2025 16:00:08 +0000 Manifest this update: Sun 03 Aug 2025 16:00:08 +0000 Manifest next update: Tue 05 Aug 2025 16:00:00 +0000 Files and hashes: 1: bcea0c8b-0abb-3fc7-8aaa-854a4b8197e6.roa (hash: hw0iu87TxK4JcN76Iim1uoOSb5P2qg3hvt4RJD1SV9E=) 2: ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl (hash: 9GKn95tlNgsv76ftjb7JG19FDKZUIhHMLvr6V5YSVfo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:3f:40:7b:de:21:cd:b9:ca:2a:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea97c20e-f3e2-485d-ac20-29a4ff8a409c Validity Not Before: Aug 3 16:00:08 2025 GMT Not After : Aug 5 16:00:00 2025 GMT Subject: CN=0e697351-5c40-4ece-9987-57b2537a2de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:cc:60:d3:d2:1b:b4:bb:19:a9:c3:59:57: 74:cd:95:36:ed:e3:c5:d4:26:df:c0:98:e9:12:24: 19:94:1f:5c:8c:2d:0f:af:a2:8e:08:08:2c:1f:95: a4:a9:f9:bd:12:d9:54:e5:13:c5:13:b1:9a:0b:73: 09:6e:7a:9f:38:a6:5f:7e:52:8a:b9:d5:da:96:ae: 14:1b:f1:0b:d0:25:7a:f0:8c:1f:a5:cb:1c:7c:4a: 17:57:e7:d6:62:f7:d3:8e:86:ce:f1:66:4a:cc:9a: df:b0:af:3f:62:06:71:50:79:ae:94:57:b5:d1:cd: eb:0e:f9:74:9f:fd:6a:56:c6:6a:79:df:39:df:95: cb:a2:b0:48:2b:dd:b5:18:75:44:95:63:34:08:40: 32:26:28:48:17:9d:22:c1:b0:c8:53:d2:31:65:b3: 47:7d:16:30:6f:ac:cb:1e:bd:ab:dc:45:04:9f:ff: ea:d9:51:11:1c:6f:c9:11:d5:d0:62:81:b3:29:31: 2f:76:25:48:a3:1b:0a:46:08:f1:c5:75:ef:0d:f5: b4:29:a4:b5:0d:76:8b:48:50:35:bf:f7:fa:99:55: 4e:13:ce:c2:8c:ef:91:9b:6b:b4:0e:40:cb:e0:62: 6e:23:b1:1e:cc:de:ab:15:b2:25:99:93:aa:72:d9: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CE:08:5B:EB:AF:13:37:6A:23:B8:33:C2:A2:69:5B:09:2A:9E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.crl X509v3 Authority Key Identifier: keyid:3A:C1:10:67:DB:BB:DA:B2:0E:F5:E9:1A:69:D2:15:3D:72:E7:7F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ea97c20e-f3e2-485d-ac20-29a4ff8a409c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8c:db:fb:43:63:f0:88:b2:3f:e0:5d:f5:ec:e7:1d:72:05: 2c:40:85:05:62:85:6e:18:a7:4f:88:a5:28:4c:56:f9:13:df: c6:07:76:62:23:c9:d3:0c:27:53:f3:9d:44:0e:c9:e2:af:80: f8:3a:06:46:0c:28:89:ba:08:a4:ca:cc:4b:05:f9:4d:9d:e7: 52:27:0b:03:d4:a7:8e:30:88:22:60:66:ae:cf:ad:02:39:b3: c3:20:1e:b6:c8:19:6b:1f:0b:12:77:5a:8d:3a:4e:ab:95:d9: 6c:9c:ca:56:8d:5e:57:41:8c:ab:85:e7:65:ef:e6:17:d5:71: 36:c1:20:b5:54:33:7c:27:04:85:66:5a:ea:af:b1:81:38:6f: e1:58:6c:9f:6b:97:82:61:04:3b:0a:c2:eb:8c:bc:c4:e7:aa: b2:c6:76:4c:fa:f5:72:d1:94:9e:c6:b4:c1:40:ab:04:0e:b5: bc:c1:0f:12:22:c6:1e:1b:0a:77:ee:e3:33:8c:2f:d5:29:f9: 5c:e4:b5:d8:ae:68:95:90:2d:58:3f:35:12:b4:0b:87:4c:77: 97:97:74:cb:dc:2e:f0:80:79:70:63:ff:23:b1:3e:f7:ea:4f: 0e:d5:49:8c:19:76:c0:1b:4f:e2:d9:af:1c:b7:d7:fe:23:8f: f7:a5:bd:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8P0B73iHNucoqOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE5N2MyMGUtZjNlMi00ODVkLWFjMjAtMjlhNGZmOGE0 MDljMB4XDTI1MDgwMzE2MDAwOFoXDTI1MDgwNTE2MDAwMFowLzEtMCsGA1UEAxMk MGU2OTczNTEtNWM0MC00ZWNlLTk5ODctNTdiMjUzN2EyZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42HMYNPSG7S7GanDWVd0zZU27ePF1CbfwJjp EiQZlB9cjC0Pr6KOCAgsH5Wkqfm9EtlU5RPFE7GaC3MJbnqfOKZfflKKudXalq4U G/EL0CV68IwfpcscfEoXV+fWYvfTjobO8WZKzJrfsK8/YgZxUHmulFe10c3rDvl0 n/1qVsZqed8535XLorBIK921GHVElWM0CEAyJihIF50iwbDIU9IxZbNHfRYwb6zL Hr2r3EUEn//q2VERHG/JEdXQYoGzKTEvdiVIoxsKRgjxxXXvDfW0KaS1DXaLSFA1 v/f6mVVOE87CjO+Rm2u0DkDL4GJuI7EezN6rFbIlmZOqctm/NQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIPOCFvrrxM3aiO4M8KiaVsJKp7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk3 YzIwZS1mM2UyLTQ4NWQtYWMyMC0yOWE0ZmY4YTQwOWMvZWE5N2MyMGUtZjNlMi00 ODVkLWFjMjAtMjlhNGZmOGE0MDljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWE5N2MyMGUtZjNlMi00ODVkLWFj MjAtMjlhNGZmOGE0MDljL2VhOTdjMjBlLWYzZTItNDg1ZC1hYzIwLTI5YTRmZjhh NDA5Yy5jcmwwHwYDVR0jBBgwFoAUOsEQZ9u72rIO9ekaadIVPXLnf8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lYTk3YzIwZS1mM2UyLTQ4NWQtYWMyMC0yOWE0 ZmY4YTQwOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbjNv7Q2PwiLI/4F317Ocd cgUsQIUFYoVuGKdPiKUoTFb5E9/GB3ZiI8nTDCdT851EDsnir4D4OgZGDCiJugik ysxLBflNnedSJwsD1KeOMIgiYGauz60CObPDIB62yBlrHwsSd1qNOk6rldlsnMpW jV5XQYyrhedl7+YX1XE2wSC1VDN8JwSFZlrqr7GBOG/hWGyfa5eCYQQ7CsLrjLzE 56qyxnZM+vVy0ZSexrTBQKsEDrW8wQ8SIsYeGwp37uMzjC/VKflc5LXYrmiVkC1Y PzUStAuHTHeXl3TL3C7wgHlwY/8jsT736k8O1UmMGXbAG0/i2a8ct9f+I4/3pb1z -----END CERTIFICATE-----Generated at Mon Aug 4 10:59:54 2025 by rpki-client