$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft File: 1dc788a1-457a-433f-af51-0da74008d8af.mft (raw, json) Hash identifier: pdWv+hfVafY0QKaCil3bz6+CW/SPTsANdpMX2SpcUco= Subject key identifier: 7C:32:86:EE:8A:A6:C8:16:6D:6F:19:72:AD:1C:14:64:62:A8:A6:FD Authority key identifier: 9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41 Certificate issuer: /CN=1dc788a1-457a-433f-af51-0da74008d8af Certificate serial: 010D0C9F4328584ABBC8179CE9F9C54C46FAFF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft Manifest number: 010D0C9F43285843C3DEF7501ACC71FF14CEC14E Signing time: Sun 03 Aug 2025 12:00:03 +0000 Manifest this update: Sun 03 Aug 2025 12:00:03 +0000 Manifest next update: Tue 05 Aug 2025 12:00:00 +0000 Files and hashes: 1: 1dc788a1-457a-433f-af51-0da74008d8af.crl (hash: XE28ZqoC2G3/uum0cOIj0QWJmqUDWPqYhaRhs/eYONc=) 2: f808789f-4b24-336c-b785-a0d572ba3992.roa (hash: ng4aqg0oxOBBo1r7Gkr69uRwM2RWmqrt7B6pdOIiXq0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:c8:17:9c:e9:f9:c5:4c:46:fa:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc788a1-457a-433f-af51-0da74008d8af Validity Not Before: Aug 3 12:00:03 2025 GMT Not After : Aug 5 12:00:00 2025 GMT Subject: CN=81a2500f-76e7-4bf1-96ad-fb1591f71633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d2:e4:32:66:75:25:8d:a3:fe:9e:f2:83:11: ed:ef:67:00:e2:02:a3:76:41:a9:10:ba:d6:ee:a6: cd:03:9f:b9:bc:46:5b:3d:92:0d:e7:a7:9a:c3:59: 09:14:9d:76:8d:55:69:a8:9d:eb:e9:87:92:29:6d: e1:be:a4:60:4c:88:50:54:2e:8f:24:9d:b9:b6:23: 9e:11:63:6d:df:2a:0a:a0:a8:dc:4f:ca:96:28:28: fc:58:a7:e3:1a:77:76:24:e5:18:33:87:db:55:73: ba:fc:56:82:64:68:f1:4e:af:7e:2c:43:00:16:2e: 1e:60:3e:e0:fa:4c:d0:75:ca:c1:7a:04:d7:1e:29: 7b:3a:18:9f:96:8e:9c:2c:be:be:9c:a3:60:e4:b6: 3d:fb:cf:76:6d:d1:91:92:52:1f:c3:a8:14:f5:6e: 66:1d:93:b9:ee:08:28:3b:e1:22:9e:a0:97:fd:6a: 5d:af:72:9a:57:60:e9:b4:1b:3c:b1:7b:aa:e7:a9: 62:95:15:a0:34:06:b9:f2:79:1e:2e:d3:2b:5d:f6: 60:6f:5b:e1:7a:ae:5f:eb:90:74:99:74:d3:33:35: ba:38:77:a7:ff:6b:ae:63:b2:f0:8c:d4:03:77:7f: 91:02:a1:20:db:49:12:94:bc:33:e2:7c:3b:dd:89: 56:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:32:86:EE:8A:A6:C8:16:6D:6F:19:72:AD:1C:14:64:62:A8:A6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.crl X509v3 Authority Key Identifier: keyid:9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:01:40:d6:a0:56:c2:66:6d:a9:34:ce:b5:f1:1b:5b:e4:bb: a9:50:98:f7:59:ee:3e:7c:9f:36:03:0b:39:6f:f2:b2:22:75: 05:c2:68:d4:4f:fd:c0:65:05:d5:b8:53:c7:3d:2c:fa:fe:b1: a1:64:6a:62:fb:d1:27:cc:bb:d6:68:de:42:1d:b8:b1:3b:24: 76:58:f4:53:6c:61:9b:cb:0e:c7:9b:6e:9d:4e:e1:eb:45:b0: cf:b3:05:ea:ff:b5:b2:9d:9f:0e:e0:96:aa:25:77:20:8d:8e: 64:f0:a5:cb:f4:7e:fa:d2:17:c7:2c:a2:31:3e:b2:fa:5a:53: f9:b6:b4:b1:74:f3:f3:10:1a:4b:35:ed:07:07:24:54:c4:22: 7a:2d:d9:9b:41:8e:95:7b:b4:04:da:79:3b:ae:1d:82:75:62: c3:03:71:38:c2:c2:44:88:27:12:6d:26:c4:65:d9:a2:42:8e: 06:f2:b3:34:9a:fa:cd:f5:ec:a9:94:da:78:db:72:ea:fd:d0: 62:27:a8:be:cd:9e:5f:93:db:e9:9f:1a:f5:8a:48:ea:cd:20: e1:72:5f:12:8a:db:e8:8b:82:8f:04:2d:05:38:ce:cf:f0:77: 2b:2d:96:7f:db:b7:e2:ba:fd:54:72:c5:2e:79:56:5f:05:2c: 00:04:ae:7f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq7yBec6fnFTEb6/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRjNzg4YTEtNDU3YS00MzNmLWFmNTEtMGRhNzQwMDhk OGFmMB4XDTI1MDgwMzEyMDAwM1oXDTI1MDgwNTEyMDAwMFowLzEtMCsGA1UEAxMk ODFhMjUwMGYtNzZlNy00YmYxLTk2YWQtZmIxNTkxZjcxNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NLkMmZ1JY2j/p7ygxHt72cA4gKjdkGpELrW 7qbNA5+5vEZbPZIN56eaw1kJFJ12jVVpqJ3r6YeSKW3hvqRgTIhQVC6PJJ25tiOe EWNt3yoKoKjcT8qWKCj8WKfjGnd2JOUYM4fbVXO6/FaCZGjxTq9+LEMAFi4eYD7g +kzQdcrBegTXHil7Ohiflo6cLL6+nKNg5LY9+892bdGRklIfw6gU9W5mHZO57ggo O+EinqCX/Wpdr3KaV2DptBs8sXuq56lilRWgNAa58nkeLtMrXfZgb1vheq5f65B0 mXTTMzW6OHen/2uuY7LwjNQDd3+RAqEg20kSlLwz4nw73YlWJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHwyhu6KpsgWbW8Zcq0cFGRiqKb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZGM3 ODhhMS00NTdhLTQzM2YtYWY1MS0wZGE3NDAwOGQ4YWYvMWRjNzg4YTEtNDU3YS00 MzNmLWFmNTEtMGRhNzQwMDhkOGFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWRjNzg4YTEtNDU3YS00MzNmLWFm NTEtMGRhNzQwMDhkOGFmLzFkYzc4OGExLTQ1N2EtNDMzZi1hZjUxLTBkYTc0MDA4 ZDhhZi5jcmwwHwYDVR0jBBgwFoAUmr9pYk7B77WSfYb0cfO2Ai1CpkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZGM3ODhhMS00NTdhLTQzM2YtYWY1MS0wZGE3 NDAwOGQ4YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6AUDWoFbCZm2pNM618Rtb 5LupUJj3We4+fJ82Aws5b/KyInUFwmjUT/3AZQXVuFPHPSz6/rGhZGpi+9EnzLvW aN5CHbixOyR2WPRTbGGbyw7Hm26dTuHrRbDPswXq/7WynZ8O4JaqJXcgjY5k8KXL 9H760hfHLKIxPrL6WlP5trSxdPPzEBpLNe0HByRUxCJ6LdmbQY6Ve7QE2nk7rh2C dWLDA3E4wsJEiCcSbSbEZdmiQo4G8rM0mvrN9eyplNp423Lq/dBiJ6i+zZ5fk9vp nxr1ikjqzSDhcl8Sitvoi4KPBC0FOM7P8HcrLZZ/27fiuv1UcsUueVZfBSwABK5/ -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:25 2025 by rpki-client