$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: TrK8KfJUX6HhyQjOtCcX8Hc1LIaUchpln06plqZmVcA= Subject key identifier: 36:0E:A3:45:F5:D5:49:8D:03:37:5E:F1:AF:A2:1F:8C:B5:4F:C3:12 Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584AC463B3B43C60BED78668C1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB35D Signing time: Wed 06 Aug 2025 14:00:03 +0000 Manifest this update: Wed 06 Aug 2025 14:00:03 +0000 Manifest next update: Sat 09 Aug 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: Gujyp+WdpfWcmJN5MZajgRVNYCBRGdF83/KMDURvMKU=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: QWPmR0soyExkBQEVIJIlUWYv/ouaDD4pZa47A6L1p+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:63:b3:b4:3c:60:be:d7:86:68:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Aug 6 14:00:03 2025 GMT Not After : Aug 9 14:00:00 2025 GMT Subject: CN=05954b37-e1c6-439a-bc0f-23bf60b9a430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:55:38:16:f7:34:fd:0f:44:3a:2e:6f:89: db:06:8f:76:db:f9:ab:fa:05:ea:7d:da:51:8c:50: ee:49:d1:c3:1d:96:6c:42:6a:57:93:5a:62:4d:ad: f5:fa:65:09:16:e2:86:07:78:77:94:24:5a:e8:5f: 62:e2:e3:b3:94:da:81:ea:fe:f8:f6:db:b5:28:d9: 62:f3:ef:3d:fe:57:78:d3:16:89:c5:68:98:c2:93: f3:2a:6b:fd:bb:74:71:b7:ac:fa:53:76:ba:d9:91: 0f:85:a8:49:0c:0e:48:5e:41:e0:4f:d5:58:77:d5: 40:5b:17:51:37:5c:9f:bf:b9:ea:9d:fb:04:e7:73: 79:8c:34:67:a2:41:63:a8:c8:82:12:02:1d:d0:57: f9:df:91:a6:c3:7e:12:f1:19:a4:e0:85:78:2e:4b: bc:fb:fa:2d:68:ec:05:bd:fb:9e:d1:c1:87:cd:d1: 64:93:5b:fb:7e:0b:10:10:71:7d:61:fb:b1:e2:e9: df:1f:52:aa:79:f4:25:cd:d3:31:28:f1:6f:11:90: e7:c8:26:e3:66:5d:f9:a6:39:60:54:8f:cf:5a:29: b5:83:f1:1e:0e:e4:36:67:05:8a:b3:fb:76:e7:d2: eb:76:31:4d:d3:d6:5f:36:58:62:ec:f7:26:f2:04: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:A3:45:F5:D5:49:8D:03:37:5E:F1:AF:A2:1F:8C:B5:4F:C3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:63:06:a7:e4:85:a1:c9:37:60:c7:22:49:c8:52:0a:4c:ec: e7:0b:69:7d:ea:06:92:08:6e:a8:35:1b:3a:16:65:ca:3e:7f: 56:cc:6c:a0:22:7d:c2:0a:8d:2a:94:ab:94:dc:80:4b:fd:97: 88:75:d6:a6:88:0c:1b:2d:78:d5:34:c9:ba:c4:3b:87:d7:e0: 5e:cf:7f:55:94:7c:aa:29:4f:03:e0:71:a8:1a:80:72:a8:08: 89:b8:96:8d:0f:9f:f2:d6:12:53:06:75:e0:67:15:75:5d:fd: 33:9a:59:b3:e4:c3:34:cc:75:10:6e:70:36:d6:82:f5:56:6e: 47:48:9a:9a:0d:18:a8:25:a0:6c:e3:40:de:3c:72:d0:6c:b9: f5:b9:55:2f:1e:65:06:62:a2:56:b9:92:35:3b:4c:a9:cf:f3: 19:6a:26:f2:2e:4d:29:56:da:9c:b5:71:37:75:b6:dc:bd:4a: 12:da:2e:f8:ab:f9:b1:6d:4f:ef:04:86:3a:db:ba:37:fd:8b: 52:27:5d:e9:f5:e6:a9:ce:fa:16:ed:71:a4:16:d4:a9:cf:99: 65:db:36:d7:1c:f4:76:f2:d5:48:43:a8:52:2f:24:6c:ac:a5: f1:67:f9:b9:36:12:94:35:56:04:aa:40:06:57:1a:b7:60:43: b1:e1:6a:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErEY7O0PGC+14ZowcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MDgwNjE0MDAwM1oXDTI1MDgwOTE0MDAwMFowLzEtMCsGA1UEAxMk MDU5NTRiMzctZTFjNi00MzlhLWJjMGYtMjNiZjYwYjlhNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvFVOBb3NP0PRDoub4nbBo922/mr+gXqfdpR jFDuSdHDHZZsQmpXk1piTa31+mUJFuKGB3h3lCRa6F9i4uOzlNqB6v749tu1KNli 8+89/ld40xaJxWiYwpPzKmv9u3Rxt6z6U3a62ZEPhahJDA5IXkHgT9VYd9VAWxdR N1yfv7nqnfsE53N5jDRnokFjqMiCEgId0Ff535Gmw34S8Rmk4IV4Lku8+/otaOwF vfue0cGHzdFkk1v7fgsQEHF9Yfux4unfH1KqefQlzdMxKPFvEZDnyCbjZl35pjlg VI/PWim1g/EeDuQ2ZwWKs/t259LrdjFN09ZfNlhi7Pcm8gQdfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDYOo0X11UmNAzde8a+iH4y1T8MSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoYwan5IWhyTdgxyJJyFIK TOznC2l96gaSCG6oNRs6FmXKPn9WzGygIn3CCo0qlKuU3IBL/ZeIddamiAwbLXjV NMm6xDuH1+Bez39VlHyqKU8D4HGoGoByqAiJuJaND5/y1hJTBnXgZxV1Xf0zmlmz 5MM0zHUQbnA21oL1Vm5HSJqaDRioJaBs40DePHLQbLn1uVUvHmUGYqJWuZI1O0yp z/MZaibyLk0pVtqctXE3dbbcvUoS2i74q/mxbU/vBIY627o3/YtSJ13p9eapzvoW 7XGkFtSpz5ll2zbXHPR28tVIQ6hSLyRsrKXxZ/m5NhKUNVYEqkAGVxq3YEOx4Woa -----END CERTIFICATE-----Generated at Thu Aug 7 04:04:54 2025 by rpki-client