$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft File: a5ffb160-7d08-4282-966a-137e7328c1b0.mft (raw, json) Hash identifier: v0IrLBBXjQf4DfSEvvuoYH11z1fdq+UeQC/H0vgNZjA= Subject key identifier: C2:70:C4:37:55:B0:3F:57:4E:B7:6E:20:9D:D0:DD:78:A2:C3:64:70 Authority key identifier: 3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C Certificate issuer: /CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Certificate serial: 010D0C9F4328584ABC216F2805590AB4E0DB4040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft Manifest number: 010D0C9F43285844713CD9C82C39AF977CBD3D10 Signing time: Sun 03 Aug 2025 15:00:03 +0000 Manifest this update: Sun 03 Aug 2025 15:00:03 +0000 Manifest next update: Tue 05 Aug 2025 15:00:00 +0000 Files and hashes: 1: a5ffb160-7d08-4282-966a-137e7328c1b0.crl (hash: xBK12oIQmk+N5988irFsTC8osrBPM0RUY+5ZsP0Pl4w=) 2: ecefeada-cbdb-3f8a-9abe-50ea35a728f3.roa (hash: sQ0L2YB2+ymWhxFNYb8J7NKLE671EmjRfgWbz1Csfaw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:21:6f:28:05:59:0a:b4:e0:db:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ffb160-7d08-4282-966a-137e7328c1b0 Validity Not Before: Aug 3 15:00:03 2025 GMT Not After : Aug 5 15:00:00 2025 GMT Subject: CN=77af5a49-b1b2-4c22-b2c0-412e7e7adc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:5a:44:9f:8c:d9:59:80:12:97:95:a8:f8: 69:03:22:03:1c:ca:28:34:a7:cb:53:f6:fb:d0:7b: 57:1a:e2:84:78:6e:80:74:bc:6e:93:35:cb:39:a1: 4b:77:5a:84:99:24:18:75:80:c7:7d:d6:a6:3f:7e: 6b:29:6b:6f:96:c0:71:cd:44:0d:fd:41:b5:71:3e: 6f:9c:9d:88:2f:1c:0c:4a:8e:b7:d2:bf:1a:5d:5d: 22:82:16:79:61:ec:5f:96:15:2a:83:8c:ce:a0:94: bd:be:4b:2a:5d:00:ed:6e:af:61:af:1a:8e:e4:c2: 38:b2:31:1d:82:81:d9:6c:a7:c7:b6:84:1a:7e:a9: 06:ce:b3:8c:be:35:2f:72:d2:bf:7b:d3:27:dd:7f: 0c:5a:e6:7d:d9:52:48:3e:88:03:e0:b6:a6:9b:47: 83:46:16:cc:0f:c4:f3:5d:a7:f1:46:3f:48:15:fe: 2a:1e:66:1a:d8:0f:dd:70:3e:1f:89:06:b0:3e:bc: 81:1e:d8:2d:a8:88:b1:1e:87:68:97:a9:fe:7c:41: 2c:04:f3:de:5d:3a:cc:0e:85:d3:c3:44:d5:34:dd: 4a:cd:48:3c:d1:ea:a8:da:55:af:6a:8d:08:36:4f: ce:59:f3:cc:75:fd:dd:c8:80:c0:fa:52:f9:cd:ce: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:70:C4:37:55:B0:3F:57:4E:B7:6E:20:9D:D0:DD:78:A2:C3:64:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0/a5ffb160-7d08-4282-966a-137e7328c1b0.crl X509v3 Authority Key Identifier: keyid:3C:2E:40:AC:19:47:1C:23:8C:42:39:6E:D3:35:EC:B6:BB:E5:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5ffb160-7d08-4282-966a-137e7328c1b0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c5:05:50:ee:41:1c:64:22:df:39:75:b1:58:93:9e:5f:f9: 62:54:46:6f:73:07:6d:96:f0:fd:52:9a:a8:57:6b:39:97:3e: de:0a:e0:bf:22:2c:73:03:e8:a8:ae:ae:97:69:88:50:99:64: be:35:39:e3:64:84:cf:e7:85:e9:f7:0a:c1:d5:c7:fa:f4:95: 72:24:91:13:3c:1f:8f:d6:fe:12:65:39:81:f2:0a:8a:cf:51: 7d:d0:cc:1c:8a:24:51:1b:8f:9b:1f:ab:fe:de:0b:da:e1:d5: ef:92:8b:fa:c4:5e:17:f5:22:37:ec:b2:d5:1e:47:29:dc:de: cd:17:77:21:18:98:00:2d:7d:95:96:39:a8:43:54:0f:88:39: 9e:35:ad:17:fd:1d:dd:20:66:de:68:7c:36:fc:6e:56:02:c9: 36:ff:41:ee:a7:10:aa:4f:6f:61:f2:3a:01:94:c9:70:ce:97: 2a:de:25:47:30:f7:ed:3b:46:ee:7b:4a:96:5c:8b:41:c3:30: 85:b4:77:a0:00:de:81:e6:87:0f:b1:26:05:e3:53:f3:8f:72: 41:4b:a1:81:fb:22:bf:dc:1d:2f:3a:b5:16:1a:fe:04:b4:53: 38:43:c0:ba:3e:9e:6f:79:cf:68:d9:4a:f8:32:dc:78:56:0f: 57:d0:ef:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8IW8oBVkKtODbQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVmZmIxNjAtN2QwOC00MjgyLTk2NmEtMTM3ZTczMjhj MWIwMB4XDTI1MDgwMzE1MDAwM1oXDTI1MDgwNTE1MDAwMFowLzEtMCsGA1UEAxMk NzdhZjVhNDktYjFiMi00YzIyLWIyYzAtNDEyZTdlN2FkYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfBaRJ+M2VmAEpeVqPhpAyIDHMooNKfLU/b7 0HtXGuKEeG6AdLxukzXLOaFLd1qEmSQYdYDHfdamP35rKWtvlsBxzUQN/UG1cT5v nJ2ILxwMSo630r8aXV0ighZ5YexflhUqg4zOoJS9vksqXQDtbq9hrxqO5MI4sjEd goHZbKfHtoQafqkGzrOMvjUvctK/e9Mn3X8MWuZ92VJIPogD4Lamm0eDRhbMD8Tz XafxRj9IFf4qHmYa2A/dcD4fiQawPryBHtgtqIixHodol6n+fEEsBPPeXTrMDoXT w0TVNN1KzUg80eqo2lWvao0INk/OWfPMdf3dyIDA+lL5zc7AkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJwxDdVsD9XTrduIJ3Q3Xiiw2RwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZm YjE2MC03ZDA4LTQyODItOTY2YS0xMzdlNzMyOGMxYjAvYTVmZmIxNjAtN2QwOC00 MjgyLTk2NmEtMTM3ZTczMjhjMWIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTVmZmIxNjAtN2QwOC00MjgyLTk2 NmEtMTM3ZTczMjhjMWIwL2E1ZmZiMTYwLTdkMDgtNDI4Mi05NjZhLTEzN2U3MzI4 YzFiMC5jcmwwHwYDVR0jBBgwFoAUPC5ArBlHHCOMQjlu0zXstrvl1jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNWZmYjE2MC03ZDA4LTQyODItOTY2YS0xMzdl NzMyOGMxYjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKxQVQ7kEcZCLfOXWxWJOe X/liVEZvcwdtlvD9UpqoV2s5lz7eCuC/IixzA+iorq6XaYhQmWS+NTnjZITP54Xp 9wrB1cf69JVyJJETPB+P1v4SZTmB8gqKz1F90MwciiRRG4+bH6v+3gva4dXvkov6 xF4X9SI37LLVHkcp3N7NF3chGJgALX2VljmoQ1QPiDmeNa0X/R3dIGbeaHw2/G5W Ask2/0HupxCqT29h8joBlMlwzpcq3iVHMPftO0bue0qWXItBwzCFtHegAN6B5ocP sSYF41Pzj3JBS6GB+yK/3B0vOrUWGv4EtFM4Q8C6Pp5vec9o2Ur4Mtx4Vg9X0O8y -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:42 2025 by rpki-client