$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft File: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft (raw, json) Hash identifier: kCneTbHuj6ZzVfkHvkz11CdI4hy1dtELMTO3ISYrfyI= Subject key identifier: 81:C1:7B:91:E8:1F:48:B4:25:65:2D:6C:60:AF:45:39:26:7B:6D:23 Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584ABF27AE756205DABCBBEC7980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft Manifest number: 010D0C9F432858440A57C730C85A71D2060E3A6E Signing time: Mon 04 Aug 2025 17:00:03 +0000 Manifest this update: Mon 04 Aug 2025 17:00:03 +0000 Manifest next update: Wed 06 Aug 2025 17:00:00 +0000 Files and hashes: 1: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl (hash: dfzYCNSCE4CkyP2pKqEhd5f5Ik4HhJmDU2kRhtuh21M=) 2: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (hash: HyVfgYrgz7/bITL78KlEEVb3ljP9mulrRzEM6wIBjr0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:27:ae:75:62:05:da:bc:bb:ec:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: Aug 4 17:00:03 2025 GMT Not After : Aug 6 17:00:00 2025 GMT Subject: CN=143dbc18-37d7-4a68-b95a-f90bbe745ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:70:f2:66:5c:77:fc:0c:45:5c:61:20:7b: b7:a3:40:f0:d2:07:4b:fb:33:0c:50:cb:73:30:06: 84:f4:a6:ec:06:d5:ac:1c:15:64:28:ce:be:51:e1: 2f:df:f8:ce:01:67:c7:3c:71:54:cc:b2:94:79:1a: 33:dd:fc:93:da:5c:0f:fa:ad:5f:c4:88:4f:fb:a8: 91:c8:00:bd:e7:44:3f:16:04:53:fe:1c:09:9a:c2: e3:0b:05:10:d3:78:9f:04:2c:55:93:b5:21:d6:2d: e7:eb:ae:99:f3:6e:df:97:e5:9d:dd:68:60:2c:6d: 6c:69:50:cb:f5:1e:ff:0a:57:01:c3:1e:2f:47:b5: 00:92:4b:37:ec:3f:6f:79:1c:84:79:92:16:fb:09: d4:f2:18:03:f0:eb:5f:37:8b:af:38:b0:f0:f6:f5: 9e:e3:f5:e0:25:11:a3:3d:89:ed:dc:fe:a0:0a:b5: 00:87:1f:ea:12:bc:46:cf:71:41:e3:ca:f1:f4:73: 14:51:6f:56:6d:c3:30:49:d3:79:53:be:ad:be:af: dd:48:1f:23:c2:e5:22:64:d0:8a:02:d8:f7:a3:11: e9:d9:d1:28:1c:dc:b2:11:c3:33:51:d9:fa:27:ef: bc:af:4c:44:be:cf:75:02:df:0f:2b:ff:89:d5:13: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C1:7B:91:E8:1F:48:B4:25:65:2D:6C:60:AF:45:39:26:7B:6D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fa:05:94:6f:fd:58:ce:20:87:a1:9c:1d:ca:a8:47:67:e7: 55:b6:4b:a8:80:f4:0d:e7:9d:5e:d2:dc:8a:57:b7:c3:d6:40: d4:5e:70:f3:fc:a8:3e:6f:08:5a:a5:26:6c:70:78:2b:a6:c9: 47:2e:35:ac:7b:b7:8e:5b:c1:7a:a3:93:17:36:2a:91:6e:1d: 35:48:14:f3:a1:37:78:a4:d5:31:47:ac:50:46:d5:27:a9:d3: 9b:19:28:38:83:75:55:86:69:9e:4f:87:76:30:35:3e:2c:ca: 19:70:7f:3c:a6:e4:18:c0:9b:ac:0f:2c:b2:31:06:ff:c9:09: 49:a4:a6:4a:5e:a4:cb:5e:62:8f:15:5b:33:e7:17:b7:1f:35: 7d:c6:3c:14:56:49:e8:24:24:5f:7a:43:39:01:d0:38:01:e9: 7c:6c:74:31:04:d6:b1:58:51:38:98:d8:9f:9e:fe:d8:46:3e: ac:32:88:6d:5c:c5:7a:1d:ed:b2:6f:bc:58:73:ea:c3:30:1c: 7a:c7:a3:e0:79:93:e6:e1:63:e8:11:50:5a:e4:e7:88:fb:a4: 6b:b4:15:53:ae:1a:ae:12:02:f5:70:04:c4:e4:d3:3b:cf:b8: 28:2f:0f:2f:74:0b:42:62:f3:0a:91:88:f2:7b:1f:c9:0e:f8: 18:58:d6:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq/J651YgXavLvseYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI1MDgwNDE3MDAwM1oXDTI1MDgwNjE3MDAwMFowLzEtMCsGA1UEAxMk MTQzZGJjMTgtMzdkNy00YTY4LWI5NWEtZjkwYmJlNzQ1Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuJw8mZcd/wMRVxhIHu3o0Dw0gdL+zMMUMtz MAaE9KbsBtWsHBVkKM6+UeEv3/jOAWfHPHFUzLKUeRoz3fyT2lwP+q1fxIhP+6iR yAC950Q/FgRT/hwJmsLjCwUQ03ifBCxVk7Uh1i3n666Z827fl+Wd3WhgLG1saVDL 9R7/ClcBwx4vR7UAkks37D9veRyEeZIW+wnU8hgD8OtfN4uvOLDw9vWe4/XgJRGj PYnt3P6gCrUAhx/qErxGz3FB48rx9HMUUW9WbcMwSdN5U76tvq/dSB8jwuUiZNCK Atj3oxHp2dEoHNyyEcMzUdn6J++8r0xEvs91At8PK/+J1RM8rwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIHBe5HoH0i0JWUtbGCvRTkme20jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYTJiMmU1MzktYzgxYS00 OGNkLTk1YTUtN2UzZWFlOGFkMmQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL+gWUb/1YziCHoZwdyqhH Z+dVtkuogPQN551e0tyKV7fD1kDUXnDz/Kg+bwhapSZscHgrpslHLjWse7eOW8F6 o5MXNiqRbh01SBTzoTd4pNUxR6xQRtUnqdObGSg4g3VVhmmeT4d2MDU+LMoZcH88 puQYwJusDyyyMQb/yQlJpKZKXqTLXmKPFVsz5xe3HzV9xjwUVknoJCRfekM5AdA4 Ael8bHQxBNaxWFE4mNifnv7YRj6sMohtXMV6He2yb7xYc+rDMBx6x6PgeZPm4WPo EVBa5OeI+6RrtBVTrhquEgL1cATE5NM7z7goLw8vdAtCYvMKkYjyex/JDvgYWNZW -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:53 2025 by rpki-client