$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft File: 0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft (raw, json) Hash identifier: aEZLWcSR5+YXqK1lCMeBYy2p1UiXY22H+sH5a4rVDEA= Subject key identifier: B3:2A:AA:89:96:A3:4E:D3:7D:6C:F4:3B:9E:3B:3B:A5:59:6B:0D:2E Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584ACE64B270E6B3AE2969031189 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft Manifest number: 010D0C9F43285849EC4A33425EE8DEC9DC534895 Signing time: Sun 10 Aug 2025 04:00:08 +0000 Manifest this update: Sun 10 Aug 2025 04:00:08 +0000 Manifest next update: Tue 12 Aug 2025 04:00:00 +0000 Files and hashes: 1: 0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl (hash: xcnuPaul2/8W1qydi9hb957BwVyEGisRKcNnvKkQMq4=) 2: 7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (hash: wUMnzWq6W8YaXm8xmGhe6Tt/5OCOvav+/kxgTf726SE=) 3: 9114f267-64fb-3c87-ba5c-fe28d188d01d.roa (hash: H4Mb7G9Q1elVtdULhz1IVwjkPZ5oDOaYpO7nXSDjScM=) 4: b25fb2e5-3c67-3bf7-a50b-f0635fba80d8.roa (hash: 7WcfsdcAl6eopcBCLYyLKCfxXsvJAlmyWaUYO5/RHPA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:64:b2:70:e6:b3:ae:29:69:03:11:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Aug 10 04:00:08 2025 GMT Not After : Aug 12 04:00:00 2025 GMT Subject: CN=0711455e-a289-431e-86cb-fc014fd58ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:cd:95:f0:3d:c2:08:27:28:14:9d:e7:50: 3b:17:07:34:2c:26:81:f3:5e:6a:5a:ca:5a:5e:32: 36:ca:f3:7b:0d:6f:9d:be:b0:20:be:cf:dc:3d:8e: fc:ba:1e:33:e7:72:0f:f9:7d:4b:f4:f8:b9:c1:1e: ec:4a:58:05:a4:1a:ae:fa:9d:37:0b:7f:65:10:14: a6:b0:c8:f4:be:97:15:76:a1:f6:41:2a:48:39:04: bf:e7:8e:d4:3a:9d:46:88:80:dd:ad:bb:eb:85:ec: 7b:bb:f1:49:eb:26:e2:46:9b:83:02:ee:4c:2c:7a: d0:6b:39:f6:07:77:9c:cc:38:3e:0f:8f:7a:e0:dc: 1b:43:f7:c3:9b:ea:2a:1e:69:f1:e1:03:5f:38:68: 3e:dd:71:43:75:a5:d4:78:c7:e6:20:08:e8:a1:51: 9f:1f:b4:2c:c9:0c:9a:b9:8b:72:d2:09:e4:15:f5: 88:e5:4e:ba:ba:f2:ed:61:55:f6:bd:be:e5:3d:67: 7e:c2:26:dc:d6:3f:53:e1:65:07:d2:92:bc:c0:d4: ad:cd:75:5e:5f:b5:2c:07:f8:a7:2c:bb:16:0d:2a: 66:4d:23:b2:77:db:ee:66:57:c6:04:83:33:0d:13: 5b:46:0e:db:90:01:73:02:b1:42:88:25:4d:5d:91: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2A:AA:89:96:A3:4E:D3:7D:6C:F4:3B:9E:3B:3B:A5:59:6B:0D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ed:84:34:da:93:fd:f0:31:12:b5:28:bd:0e:d2:8b:40:6d: 2c:1d:b7:c7:3f:3e:bb:57:b2:77:d0:5b:d0:69:08:55:44:99: ab:ae:6a:5c:a1:16:08:1f:9c:3c:77:76:94:40:df:e9:3e:17: e5:b6:9b:75:7e:a3:a2:78:f2:e3:23:5f:ce:90:55:89:8f:21: 00:21:8f:37:de:4c:92:ed:33:1b:c4:1c:e5:8e:1f:91:bb:74: 74:a6:26:8b:aa:18:33:4b:a3:df:5c:ab:62:19:84:a0:f4:17: 96:c5:33:55:32:6f:4e:41:54:7e:35:5f:bf:1f:91:dc:fe:01: 86:7a:49:b7:cf:92:4e:1e:0d:3e:04:8c:b3:84:54:12:bd:4b: 38:ac:77:cc:b3:44:9a:48:aa:4c:ef:2c:3c:2e:3c:6a:48:96: 66:5a:d1:99:ae:c1:66:0f:4b:43:b6:f1:44:6c:53:21:64:3f: d3:fb:23:57:4f:a3:e8:ad:04:ce:b4:18:49:ea:9a:8a:7a:00: e8:3b:8a:f9:0c:56:bf:ab:61:d0:36:dc:51:c0:21:e7:0f:e3: d5:22:e0:66:c1:6a:83:ba:e3:4a:bb:fc:48:2f:a3:d8:08:d9: 28:5e:18:d3:c5:d9:4d:e3:f9:67:08:64:b9:0c:a4:89:99:d3: 50:2c:51:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErOZLJw5rOuKWkDEYkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI1MDgxMDA0MDAwOFoXDTI1MDgxMjA0MDAwMFowLzEtMCsGA1UEAxMk MDcxMTQ1NWUtYTI4OS00MzFlLTg2Y2ItZmMwMTRmZDU4YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkLNlfA9wggnKBSd51A7Fwc0LCaB815qWspa XjI2yvN7DW+dvrAgvs/cPY78uh4z53IP+X1L9Pi5wR7sSlgFpBqu+p03C39lEBSm sMj0vpcVdqH2QSpIOQS/547UOp1GiIDdrbvrhex7u/FJ6ybiRpuDAu5MLHrQazn2 B3eczDg+D4964NwbQ/fDm+oqHmnx4QNfOGg+3XFDdaXUeMfmIAjooVGfH7QsyQya uYty0gnkFfWI5U66uvLtYVX2vb7lPWd+wibc1j9T4WUH0pK8wNStzXVeX7UsB/in LLsWDSpmTSOyd9vuZlfGBIMzDRNbRg7bkAFzArFCiCVNXZF7/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMqqomWo07TfWz0O547O6VZaw0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvMGMzM2FmZjUtMTBkMy00 NTRhLThiMjctY2E0YzRmNTA4NTFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAM7YQ02pP98DEStSi9DtKL QG0sHbfHPz67V7J30FvQaQhVRJmrrmpcoRYIH5w8d3aUQN/pPhfltpt1fqOiePLj I1/OkFWJjyEAIY833kyS7TMbxBzljh+Ru3R0piaLqhgzS6PfXKtiGYSg9BeWxTNV Mm9OQVR+NV+/H5Hc/gGGekm3z5JOHg0+BIyzhFQSvUs4rHfMs0SaSKpM7yw8Ljxq SJZmWtGZrsFmD0tDtvFEbFMhZD/T+yNXT6PorQTOtBhJ6pqKegDoO4r5DFa/q2HQ NtxRwCHnD+PVIuBmwWqDuuNKu/xIL6PYCNkoXhjTxdlN4/lnCGS5DKSJmdNQLFF0 -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:31 2025 by rpki-client