$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft File: 4680d191-3a38-4cef-89dd-c84240e3a1cf.mft (raw, json) Hash identifier: DJPpRZBySh3kl1pJM17qGxx/cD+1+AHEBLbW9GYe2tU= Subject key identifier: 60:07:BA:8F:8D:C6:46:B1:CA:C4:4B:32:C8:EF:18:C2:0D:4C:C9:CC Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F4328584ABEEC29BE73E53B18ACF02C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft Manifest number: 010D0C9F43285849276F14CDE0AA3B404E68EF96 Signing time: Mon 04 Aug 2025 15:00:08 +0000 Manifest this update: Mon 04 Aug 2025 15:00:08 +0000 Manifest next update: Thu 07 Aug 2025 15:00:00 +0000 Files and hashes: 1: 4680d191-3a38-4cef-89dd-c84240e3a1cf.crl (hash: oRvj3u5rSGC3YOom/eKGRkVX9q8J7jPGKE+JFPjq8NU=) 2: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (hash: ixqOKIFNzfVAMAHkELaKzU1LhSyh0fawd/VvDJJIYQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:ec:29:be:73:e5:3b:18:ac:f0:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Aug 4 15:00:08 2025 GMT Not After : Aug 7 15:00:00 2025 GMT Subject: CN=d1eca300-7546-4121-8d11-2c610b307336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b5:2a:cf:b4:1c:ae:e0:64:f4:80:eb:ea:5d: 4b:9c:46:53:cb:56:33:c4:40:e7:1b:07:aa:7c:66: 8b:2e:8f:bd:b7:24:23:8a:f6:4b:02:d0:40:d6:bc: 76:ba:3a:29:57:f4:3f:a6:6b:5d:10:4e:52:95:5c: 4a:13:b9:fa:c9:0b:be:06:e0:80:ab:1a:48:23:76: 58:82:89:e6:07:6a:f7:a0:f0:d5:fc:27:0c:4d:61: cb:31:ef:0f:fd:34:0f:26:97:58:16:e4:84:5b:fd: 94:50:35:0d:af:2f:10:2e:19:54:9e:3c:b6:79:7d: c2:2a:b2:6c:81:8e:d8:e0:00:58:ce:55:d3:6d:4c: 4b:1d:60:a6:b5:00:da:70:08:12:ec:9b:f0:18:c8: b0:ef:6f:06:90:9d:df:2d:89:b6:03:4a:52:51:70: f3:4f:b4:a1:c9:7d:97:4f:7e:75:47:85:5d:5f:79: 32:e0:aa:f1:21:51:b3:10:19:98:1b:c4:79:d7:4d: b1:ba:16:34:5c:de:bc:4a:a7:65:ed:56:b3:5a:8b: 60:07:fb:3d:3b:ab:e2:60:8c:08:14:da:3f:27:a8: ad:85:76:8b:0b:49:14:24:a8:f4:24:cb:46:61:5a: 75:43:90:0d:18:2a:84:7e:df:8b:e2:3c:a7:7c:3b: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:BA:8F:8D:C6:46:B1:CA:C4:4B:32:C8:EF:18:C2:0D:4C:C9:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:84:e8:28:79:4c:ac:61:bd:ea:5d:71:5c:2f:bf:d4:03:19: 34:76:38:2c:c8:e1:d2:18:9c:92:67:ff:3e:05:0a:f6:18:5e: e7:1c:69:7f:4b:4f:e5:d9:b7:97:39:bd:09:cf:d6:f5:49:e9: 58:ce:09:07:c9:c3:05:b4:42:5b:da:1e:2d:0f:c8:d6:4c:d6: 5b:05:46:dc:59:ee:7e:7c:f9:0f:b0:44:cf:6c:09:44:44:ca: 46:43:b9:9b:23:88:02:30:9b:93:90:aa:f9:71:34:db:68:f8: 80:6e:f2:6c:96:62:88:95:9c:9e:8f:77:5e:8c:e8:1e:a6:e9: 1f:18:f1:a8:d0:d7:75:3f:86:b2:07:81:df:42:c3:e7:a2:f2: c7:8a:46:83:9a:c2:fe:03:ba:6c:91:4b:05:99:83:3d:8f:b7: 4f:b5:41:6c:f4:cd:5e:2c:89:37:94:26:02:93:14:28:a9:50: b2:25:00:c3:d6:9b:5a:e5:ca:2e:27:fe:9b:b1:86:40:22:10: e7:3f:67:42:97:7f:67:70:12:62:30:6c:99:a4:44:1b:74:ee: b9:1c:d0:7c:45:b1:33:9b:8c:1e:7f:8a:8e:6c:55:d2:20:26: 5a:b9:97:fd:df:48:41:75:41:46:0a:46:c8:b0:9a:42:09:02: c7:83:e1:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+7Cm+c+U7GKzwLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI1MDgwNDE1MDAwOFoXDTI1MDgwNzE1MDAwMFowLzEtMCsGA1UEAxMk ZDFlY2EzMDAtNzU0Ni00MTIxLThkMTEtMmM2MTBiMzA3MzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Uqz7QcruBk9IDr6l1LnEZTy1YzxEDnGweq fGaLLo+9tyQjivZLAtBA1rx2ujopV/Q/pmtdEE5SlVxKE7n6yQu+BuCAqxpII3ZY gonmB2r3oPDV/CcMTWHLMe8P/TQPJpdYFuSEW/2UUDUNry8QLhlUnjy2eX3CKrJs gY7Y4ABYzlXTbUxLHWCmtQDacAgS7JvwGMiw728GkJ3fLYm2A0pSUXDzT7ShyX2X T351R4VdX3ky4KrxIVGzEBmYG8R5102xuhY0XN68Sqdl7VazWotgB/s9O6viYIwI FNo/J6ithXaLC0kUJKj0JMtGYVp1Q5ANGCqEft+L4jynfDv8IQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGAHuo+NxkaxysRLMsjvGMINTMnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvNDY4MGQxOTEtM2EzOC00 Y2VmLTg5ZGQtYzg0MjQwZTNhMWNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbhOgoeUysYb3qXXFcL7/U Axk0djgsyOHSGJySZ/8+BQr2GF7nHGl/S0/l2beXOb0Jz9b1SelYzgkHycMFtEJb 2h4tD8jWTNZbBUbcWe5+fPkPsETPbAlERMpGQ7mbI4gCMJuTkKr5cTTbaPiAbvJs lmKIlZyej3dejOgepukfGPGo0Nd1P4ayB4HfQsPnovLHikaDmsL+A7pskUsFmYM9 j7dPtUFs9M1eLIk3lCYCkxQoqVCyJQDD1pta5couJ/6bsYZAIhDnP2dCl39ncBJi MGyZpEQbdO65HNB8RbEzm4wef4qObFXSICZauZf930hBdUFGCkbIsJpCCQLHg+ED -----END CERTIFICATE-----Generated at Mon Aug 4 18:35:00 2025 by rpki-client