$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft File: 8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft (raw, json) Hash identifier: S27Q7PCkWukR4iQfTfjsrddU/UxC8M9oVmyusenCQRM= Subject key identifier: D9:D5:04:D5:C9:DD:6D:D7:9D:70:3B:DC:C6:5E:0D:7A:03:31:1A:BC Authority key identifier: A9:40:AB:32:BE:D4:D9:60:5B:CA:90:AF:2E:29:80:14:27:05:DB:1D Certificate issuer: /CN=8b7b8f22-587d-41e9-a798-93c4775f7fa1 Certificate serial: 010D0C9F4328584ABDA48F4E1141373511B72AA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft Manifest number: 010D0C9F43285844759D835BB8760F7A951877E2 Signing time: Mon 04 Aug 2025 04:00:03 +0000 Manifest this update: Mon 04 Aug 2025 04:00:03 +0000 Manifest next update: Thu 07 Aug 2025 04:00:00 +0000 Files and hashes: 1: 8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl (hash: 30C21t17xoj+OCBwu+dYeuFdXUg376dSWDi4EZAo5XA=) 2: e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer (hash: 3gszu/rm61csDaNsYJY3UHSmFOJkUh4oVr6x3HLpwtA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:a4:8f:4e:11:41:37:35:11:b7:2a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7b8f22-587d-41e9-a798-93c4775f7fa1 Validity Not Before: Aug 4 04:00:03 2025 GMT Not After : Aug 7 04:00:00 2025 GMT Subject: CN=abc2df80-cd8b-47b5-b4d6-07c9e93b2ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:af:eb:65:42:53:a7:7a:3c:a6:7c:26:ef: c5:d4:c9:91:07:52:21:ce:99:56:a4:35:1b:eb:d3: 55:91:20:c4:28:a9:79:1f:e0:df:ca:63:51:f0:82: 8c:c9:41:27:48:1d:97:32:2d:27:e3:56:55:f8:33: 92:68:8a:73:19:8a:01:3d:6c:89:c7:27:ac:3e:5d: fd:aa:c8:0c:4c:1a:31:fe:b9:b0:de:a8:ed:3c:ed: a7:20:f9:c4:45:d2:21:cb:d9:b9:92:96:2b:3a:29: d2:a6:0b:c4:b5:1e:af:f1:24:91:78:37:e0:9c:92: c8:d8:02:da:96:ef:d1:3e:d2:ca:d0:53:e2:e0:eb: 48:f5:f8:f7:63:fd:0f:4f:34:63:1b:81:1e:c2:08: 20:dc:4e:55:91:a3:24:8f:be:1b:5d:f0:f8:6e:c8: 2d:c4:eb:a0:cd:8c:a2:a8:f1:86:ff:f6:40:c4:01: ba:69:2b:bb:c0:d5:70:e9:b2:cf:94:c1:f8:fc:4b: 3e:9d:eb:42:a7:2b:cb:1f:39:1a:dd:53:d8:cc:6d: 6f:13:6a:c0:c8:af:00:6c:ae:7e:f4:c5:de:b7:82: 6b:ff:1a:22:fa:39:8d:74:ea:41:10:40:c9:58:6e: e2:e3:a2:1b:40:19:98:d6:c0:21:a3:5e:3a:0c:c1: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D5:04:D5:C9:DD:6D:D7:9D:70:3B:DC:C6:5E:0D:7A:03:31:1A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl X509v3 Authority Key Identifier: keyid:A9:40:AB:32:BE:D4:D9:60:5B:CA:90:AF:2E:29:80:14:27:05:DB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5b:b4:aa:a5:a9:e9:74:7c:43:22:64:c7:37:83:12:76:15: 78:fd:35:45:1d:07:70:5c:57:ec:53:ec:23:3e:fa:2f:2d:b5: 17:a3:4e:bb:7a:cb:70:b2:96:3e:65:29:d7:fe:b7:83:96:b5: 16:4a:90:82:5c:71:75:73:43:85:24:e7:09:c5:00:c3:be:c1: b7:87:26:07:43:62:b2:eb:98:63:72:d4:20:5c:58:ff:f2:8a: bc:6e:e6:16:af:35:84:17:13:f0:b7:19:e7:5e:2f:92:04:4d: 2e:9a:38:df:97:b1:ee:8f:ac:80:34:cb:70:9f:ca:01:3a:a9: b8:0b:28:21:16:97:7d:53:b1:86:4a:a9:a9:b3:64:fe:c1:00: 5c:ed:c8:9e:de:5b:35:27:cd:e3:2f:ad:3d:d5:8e:4c:55:ba: bd:7a:a5:e7:38:c1:7a:0f:c6:7d:a1:2a:50:12:e9:fd:30:07: 89:2d:f1:0f:68:f8:f0:9a:30:70:cc:8e:bf:31:ef:3e:19:33: f3:b2:5b:45:77:49:5f:d6:ec:1f:5f:03:7c:33:56:f6:63:e0: da:6b:d9:49:c7:e6:54:a7:e9:bf:01:2d:a8:77:ad:e5:9c:1c: 4b:73:24:00:52:f0:14:3d:45:cc:98:7b:09:09:f7:d9:d4:bf: 11:6f:6d:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9pI9OEUE3NRG3KqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3YjhmMjItNTg3ZC00MWU5LWE3OTgtOTNjNDc3NWY3 ZmExMB4XDTI1MDgwNDA0MDAwM1oXDTI1MDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk YWJjMmRmODAtY2Q4Yi00N2I1LWI0ZDYtMDdjOWU5M2IyZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNCv62VCU6d6PKZ8Ju/F1MmRB1IhzplWpDUb 69NVkSDEKKl5H+DfymNR8IKMyUEnSB2XMi0n41ZV+DOSaIpzGYoBPWyJxyesPl39 qsgMTBox/rmw3qjtPO2nIPnERdIhy9m5kpYrOinSpgvEtR6v8SSReDfgnJLI2ALa lu/RPtLK0FPi4OtI9fj3Y/0PTzRjG4Eewggg3E5VkaMkj74bXfD4bsgtxOugzYyi qPGG//ZAxAG6aSu7wNVw6bLPlMH4/Es+netCpyvLHzka3VPYzG1vE2rAyK8AbK5+ 9MXet4Jr/xoi+jmNdOpBEEDJWG7i46IbQBmY1sAho146DMG8iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNnVBNXJ3W3XnXA73MZeDXoDMRq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84Yjdi OGYyMi01ODdkLTQxZTktYTc5OC05M2M0Nzc1ZjdmYTEvOGI3YjhmMjItNTg3ZC00 MWU5LWE3OTgtOTNjNDc3NWY3ZmExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGI3YjhmMjItNTg3ZC00MWU5LWE3 OTgtOTNjNDc3NWY3ZmExLzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVm N2ZhMS5jcmwwHwYDVR0jBBgwFoAUqUCrMr7U2WBbypCvLimAFCcF2x0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YjdiOGYyMi01ODdkLTQxZTktYTc5OC05M2M0 Nzc1ZjdmYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCW7SqpanpdHxDImTHN4MS dhV4/TVFHQdwXFfsU+wjPvovLbUXo067estwspY+ZSnX/reDlrUWSpCCXHF1c0OF JOcJxQDDvsG3hyYHQ2Ky65hjctQgXFj/8oq8buYWrzWEFxPwtxnnXi+SBE0umjjf l7Huj6yANMtwn8oBOqm4CyghFpd9U7GGSqmps2T+wQBc7cie3ls1J83jL6091Y5M Vbq9eqXnOMF6D8Z9oSpQEun9MAeJLfEPaPjwmjBwzI6/Me8+GTPzsltFd0lf1uwf XwN8M1b2Y+Daa9lJx+ZUp+m/AS2od63lnBxLcyQAUvAUPUXMmHsJCffZ1L8Rb23L -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:10 2025 by rpki-client