$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft File: 2db44f79-e35b-441b-afb7-a18d6b001f54.mft (raw, json) Hash identifier: ne8Vwe4Fp6bs9z8d/lb7bjvTvlnxMLbxH9PdVW+LFqE= Subject key identifier: 94:34:52:E0:D8:97:2E:DE:CC:76:27:EF:42:11:25:0F:A4:63:10:58 Authority key identifier: F6:10:14:67:EA:77:F1:58:86:7E:02:B8:CF:2A:99:21:A1:C7:1F:92 Certificate issuer: /CN=2db44f79-e35b-441b-afb7-a18d6b001f54 Certificate serial: 010D0C9F4328584ABC5D0249993349549DB2A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft Manifest number: 010D0C9F4328584A4F7E4D5DA8787595B74CCCD8 Signing time: Sun 03 Aug 2025 17:00:03 +0000 Manifest this update: Sun 03 Aug 2025 17:00:03 +0000 Manifest next update: Tue 05 Aug 2025 17:00:00 +0000 Files and hashes: 1: 2db44f79-e35b-441b-afb7-a18d6b001f54.crl (hash: xy6egseOZwhfrNs9enk7mZTJcPLR7bu8J20sDdtNuNw=) 2: 3d457293-2df9-38bd-b7dd-af5950a413fc.roa (hash: N+Fsaur4NzsFofi3A6ANsj2YqoGeCL3JnLCwLscxtmM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:5d:02:49:99:33:49:54:9d:b2:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db44f79-e35b-441b-afb7-a18d6b001f54 Validity Not Before: Aug 3 17:00:03 2025 GMT Not After : Aug 5 17:00:00 2025 GMT Subject: CN=5567f2a1-b18f-4497-a5fd-fe2396639232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:e7:1b:0e:f3:c9:e4:75:35:05:3a:52:85: 0a:b4:01:27:d4:31:80:14:81:90:10:dc:db:e5:3e: 97:e3:d8:74:73:89:6a:d1:64:3a:91:ed:e1:73:0d: f5:6e:8a:d8:25:6d:64:64:1e:ab:57:ef:18:05:57: 9e:11:a8:0e:51:6d:05:2a:c5:3c:af:ca:76:9c:f0: 40:1a:6a:98:cc:47:ec:fd:f9:11:02:4a:60:87:ac: 79:1d:f1:a1:58:6f:93:59:28:c5:29:21:c1:32:38: ea:6a:b2:a8:d6:9d:fe:30:5e:d2:5b:9c:bf:6a:a9: 35:1f:b5:3f:dd:85:fd:1d:63:96:eb:cc:46:6f:cb: d6:13:d5:a5:62:4f:12:64:4f:96:52:b0:30:bb:e6: 87:89:4f:50:3d:7a:f7:8a:6a:84:c7:62:22:7c:e6: 99:35:8f:c4:f9:3f:c5:c0:ea:0f:47:10:e3:0f:eb: af:e1:ba:6e:43:bb:40:76:01:3a:c0:e1:80:a5:bf: be:4e:31:48:06:2b:dc:66:d1:51:65:2a:ee:af:46: a7:44:fb:81:1c:f0:6c:75:11:7d:8b:83:e5:36:c2: 14:e0:a2:1d:b2:68:55:19:91:e7:81:8b:4e:c8:4a: 0d:3a:98:b1:11:13:9a:ba:00:db:90:a7:53:67:f9: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:34:52:E0:D8:97:2E:DE:CC:76:27:EF:42:11:25:0F:A4:63:10:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54/2db44f79-e35b-441b-afb7-a18d6b001f54.crl X509v3 Authority Key Identifier: keyid:F6:10:14:67:EA:77:F1:58:86:7E:02:B8:CF:2A:99:21:A1:C7:1F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2db44f79-e35b-441b-afb7-a18d6b001f54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0a:6f:f9:a7:0f:87:ff:24:db:7c:ed:d4:bd:8b:0d:c2:fa: 68:0d:b4:74:ad:e4:9c:c4:84:71:79:63:6e:94:17:c4:ec:e5: 8d:5c:16:9c:d8:b6:55:0d:4c:59:ef:db:18:19:79:a2:be:93: 5b:ce:42:36:29:53:59:1f:02:56:d8:79:14:1d:09:97:90:fe: 0a:8d:8b:1e:fb:13:05:7d:2f:e2:91:68:5d:46:f6:b8:b8:93: 6b:13:1d:36:94:31:ea:88:7b:0d:e1:f4:43:36:c4:1a:21:ad: 19:e7:f4:f6:f1:e5:c6:52:2f:d8:4f:2a:1b:c7:35:d9:56:95: aa:3d:c0:35:b2:65:65:8e:02:29:07:88:58:ab:cd:76:ac:8d: 8c:01:dc:44:bc:c4:3a:22:ae:03:41:f4:7c:95:e8:7f:07:93: 6b:61:8f:cf:85:cc:f7:2b:be:25:cc:1a:be:a4:1d:69:d8:8e: 99:26:ef:b7:fe:f3:5b:89:de:6f:00:3f:d3:c2:32:a5:7e:2f: df:97:f2:27:00:28:a8:1b:fd:94:52:67:29:b8:62:50:fc:87: 3b:01:d4:4a:4a:59:1d:9d:de:6a:10:96:02:d3:29:46:15:e2: c8:b2:4d:a4:88:30:d1:b2:5f:4e:7d:1e:d2:eb:7f:15:6d:0e: 45:62:35:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8XQJJmTNJVJ2ypoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiNDRmNzktZTM1Yi00NDFiLWFmYjctYTE4ZDZiMDAx ZjU0MB4XDTI1MDgwMzE3MDAwM1oXDTI1MDgwNTE3MDAwMFowLzEtMCsGA1UEAxMk NTU2N2YyYTEtYjE4Zi00NDk3LWE1ZmQtZmUyMzk2NjM5MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjHnGw7zyeR1NQU6UoUKtAEn1DGAFIGQENzb 5T6X49h0c4lq0WQ6ke3hcw31borYJW1kZB6rV+8YBVeeEagOUW0FKsU8r8p2nPBA GmqYzEfs/fkRAkpgh6x5HfGhWG+TWSjFKSHBMjjqarKo1p3+MF7SW5y/aqk1H7U/ 3YX9HWOW68xGb8vWE9WlYk8SZE+WUrAwu+aHiU9QPXr3imqEx2IifOaZNY/E+T/F wOoPRxDjD+uv4bpuQ7tAdgE6wOGApb++TjFIBivcZtFRZSrur0anRPuBHPBsdRF9 i4PlNsIU4KIdsmhVGZHngYtOyEoNOpixEROaugDbkKdTZ/mc4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJQ0UuDYly7ezHYn70IRJQ+kYxBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZGI0 NGY3OS1lMzViLTQ0MWItYWZiNy1hMThkNmIwMDFmNTQvMmRiNDRmNzktZTM1Yi00 NDFiLWFmYjctYTE4ZDZiMDAxZjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmRiNDRmNzktZTM1Yi00NDFiLWFm YjctYTE4ZDZiMDAxZjU0LzJkYjQ0Zjc5LWUzNWItNDQxYi1hZmI3LWExOGQ2YjAw MWY1NC5jcmwwHwYDVR0jBBgwFoAU9hAUZ+p38ViGfgK4zyqZIaHHH5IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZGI0NGY3OS1lMzViLTQ0MWItYWZiNy1hMThk NmIwMDFmNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChCm/5pw+H/yTbfO3UvYsN wvpoDbR0reScxIRxeWNulBfE7OWNXBac2LZVDUxZ79sYGXmivpNbzkI2KVNZHwJW 2HkUHQmXkP4KjYse+xMFfS/ikWhdRva4uJNrEx02lDHqiHsN4fRDNsQaIa0Z5/T2 8eXGUi/YTyobxzXZVpWqPcA1smVljgIpB4hYq812rI2MAdxEvMQ6Iq4DQfR8leh/ B5NrYY/Phcz3K74lzBq+pB1p2I6ZJu+3/vNbid5vAD/TwjKlfi/fl/InACioG/2U UmcpuGJQ/Ic7AdRKSlkdnd5qEJYC0ylGFeLIsk2kiDDRsl9OfR7S638VbQ5FYjXV -----END CERTIFICATE-----Generated at Mon Aug 4 11:17:16 2025 by rpki-client