$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft File: dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft (raw, json) Hash identifier: DA1/48E5WE0jCay2fsHBrm5fR4mlVk4/WAJGwbEwJsI= Subject key identifier: 92:04:A0:DD:A8:EB:04:DE:BE:C2:20:D2:A1:82:36:C3:02:31:F3:4C Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 Certificate issuer: /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Certificate serial: 010D0C9F4328584ABC3F4020409858CA84A14980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft Manifest number: 010D0C9F432858413C6ECA503DB5BF15E31FECFE Signing time: Sun 03 Aug 2025 16:00:08 +0000 Manifest this update: Sun 03 Aug 2025 16:00:08 +0000 Manifest next update: Tue 05 Aug 2025 16:00:00 +0000 Files and hashes: 1: 381aa0d8-0713-3628-808e-2235213b6efc.roa (hash: csjifrExSXYc5/F0PHJxgOys75noduiwex5cxnraosE=) 2: dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl (hash: /0btA+bc3lsA0vNWruftQk0tHRpV/Un6oHDG8Y9QExU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:3f:40:20:40:98:58:ca:84:a1:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Validity Not Before: Aug 3 16:00:08 2025 GMT Not After : Aug 5 16:00:00 2025 GMT Subject: CN=28d4ce92-7ef0-4a20-b2d3-a23f734522c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:dc:8d:32:68:c8:fe:ec:dc:4b:25:48:61: 73:b8:d8:e5:d7:9d:1d:5a:52:f9:e1:9d:18:60:71: 19:0f:37:c4:6d:3c:59:b4:b9:f7:d7:1a:6f:3e:db: 2b:a2:f9:0c:79:eb:11:11:24:ac:2c:11:8b:74:3f: 77:d8:56:8f:93:08:d1:85:8f:fc:0b:f5:e7:fe:a9: 66:f6:92:57:7e:6e:7a:29:ec:b1:38:5a:9c:3d:42: bb:b7:d8:c2:48:f3:b4:9c:69:d4:43:1c:74:c5:ea: 7a:76:76:7d:18:17:55:57:2d:a8:e6:42:d6:41:e9: 08:58:e8:f5:f7:db:7e:dd:9d:20:52:f3:7d:81:18: 75:40:72:08:00:de:30:58:ce:80:bb:c2:82:e4:48: 9f:74:86:8d:a4:e1:46:0b:36:18:89:35:a5:49:7b: d3:62:3e:92:09:8e:6d:25:52:bf:1d:3e:cd:47:ba: a3:a4:0f:f3:95:ed:31:11:d6:4b:11:27:b4:17:ee: 8a:d1:09:78:60:1d:e6:d7:dd:aa:18:2d:1c:39:88: ff:03:0b:64:ce:37:0f:97:f2:d8:7a:aa:4e:4d:f9: 36:44:41:eb:d3:f2:f8:d5:7b:b4:b5:c8:11:dd:9d: 42:40:e5:c3:ad:c9:0b:cb:f9:3b:d3:3c:8e:2c:30: 63:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:A0:DD:A8:EB:04:DE:BE:C2:20:D2:A1:82:36:C3:02:31:F3:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl X509v3 Authority Key Identifier: keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:49:4a:61:8c:a0:ba:39:db:86:a6:3b:8b:94:f6:af:f1:93: 39:06:a4:d8:42:63:17:59:ff:92:01:81:5d:a4:ef:d4:ae:2e: 0f:7c:4e:57:6d:c4:8b:8a:06:43:6a:40:ce:d6:aa:73:0c:b6: e9:21:8f:cf:f4:23:56:3d:11:87:e8:6e:97:18:1d:71:c2:13: 3e:8a:5b:6a:2d:9d:35:74:b3:e6:df:5b:fe:a4:7f:18:63:5c: 18:fb:79:32:c0:c2:58:c8:4d:b9:2d:c2:d9:52:a4:6d:a6:8f: 55:88:dd:cb:37:4a:77:8e:7a:50:0a:10:90:12:52:65:13:0c: f6:2b:ed:bb:83:66:b7:eb:01:7a:67:5a:e7:99:87:72:c8:55: f7:b6:e6:9c:3c:0a:0c:78:20:2f:ef:06:74:65:cf:ac:ec:94: b3:0a:90:98:c5:03:4c:5c:4a:e2:1e:1d:98:5c:39:27:af:a5: f4:11:a3:e7:2c:c6:ac:c0:c9:ba:20:76:c3:24:f4:1d:32:98: 71:38:99:61:8b:88:ec:34:4c:f9:95:78:db:52:da:c1:cc:07: ba:4f:82:4f:c6:a5:11:e0:26:15:ae:2d:95:05:1d:be:72:2e: 20:83:61:6c:b7:0e:f6:ee:b2:8c:f3:6d:73:cc:af:59:29:67: e8:31:eb:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8P0AgQJhYyoShSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4M2UyOGEtZDM3Zi00YjdmLWJlNDktM2MyZTM1NTcw N2U3MB4XDTI1MDgwMzE2MDAwOFoXDTI1MDgwNTE2MDAwMFowLzEtMCsGA1UEAxMk MjhkNGNlOTItN2VmMC00YTIwLWIyZDMtYTIzZjczNDUyMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbzcjTJoyP7s3EslSGFzuNjl150dWlL54Z0Y YHEZDzfEbTxZtLn31xpvPtsrovkMeesRESSsLBGLdD932FaPkwjRhY/8C/Xn/qlm 9pJXfm56KeyxOFqcPUK7t9jCSPO0nGnUQxx0xep6dnZ9GBdVVy2o5kLWQekIWOj1 99t+3Z0gUvN9gRh1QHIIAN4wWM6Au8KC5EifdIaNpOFGCzYYiTWlSXvTYj6SCY5t JVK/HT7NR7qjpA/zle0xEdZLESe0F+6K0Ql4YB3m192qGC0cOYj/AwtkzjcPl/LY eqpOTfk2REHr0/L41Xu0tcgR3Z1CQOXDrckLy/k70zyOLDBjRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJIEoN2o6wTevsIg0qGCNsMCMfNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYzgz ZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJlMzU1NzA3ZTcvZGM4M2UyOGEtZDM3Zi00 YjdmLWJlNDktM2MyZTM1NTcwN2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGM4M2UyOGEtZDM3Zi00YjdmLWJl NDktM2MyZTM1NTcwN2U3L2RjODNlMjhhLWQzN2YtNGI3Zi1iZTQ5LTNjMmUzNTU3 MDdlNy5jcmwwHwYDVR0jBBgwFoAUVoA8g5cCkprdAA37bl0MJQG6mBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYzgzZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJl MzU1NzA3ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8SUphjKC6OduGpjuLlPav 8ZM5BqTYQmMXWf+SAYFdpO/Uri4PfE5XbcSLigZDakDO1qpzDLbpIY/P9CNWPRGH 6G6XGB1xwhM+iltqLZ01dLPm31v+pH8YY1wY+3kywMJYyE25LcLZUqRtpo9ViN3L N0p3jnpQChCQElJlEwz2K+27g2a36wF6Z1rnmYdyyFX3tuacPAoMeCAv7wZ0Zc+s 7JSzCpCYxQNMXEriHh2YXDknr6X0EaPnLMaswMm6IHbDJPQdMphxOJlhi4jsNEz5 lXjbUtrBzAe6T4JPxqUR4CYVri2VBR2+ci4gg2Fstw727rKM821zzK9ZKWfoMevK -----END CERTIFICATE-----Generated at Mon Aug 4 11:04:27 2025 by rpki-client