$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft File: 31d2846b-36c4-41a9-86c2-a98e92bef162.mft (raw, json) Hash identifier: ojepdz+uBgQY5Gin3emeXWvPFuouPcpBhwrp4NNcJmg= Subject key identifier: F7:7B:8A:4C:46:79:AC:49:81:F8:2E:D9:3F:DD:8C:EF:EC:8C:9F:6F Authority key identifier: D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71 Certificate issuer: /CN=31d2846b-36c4-41a9-86c2-a98e92bef162 Certificate serial: 010D0C9F4328584AC445ECEB8968D3EE0D9C5780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft Manifest number: 010D0C9F4328584A411CB8FB258CA75D902BD930 Signing time: Wed 06 Aug 2025 13:00:03 +0000 Manifest this update: Wed 06 Aug 2025 13:00:03 +0000 Manifest next update: Fri 08 Aug 2025 13:00:00 +0000 Files and hashes: 1: 1c66c136-216a-334e-9397-93f9ed1f75ca.roa (hash: C48h0WnZqpNFFk3qXZfYAE0qNSQ7u5RuGVOdlEtGl+o=) 2: 31d2846b-36c4-41a9-86c2-a98e92bef162.crl (hash: zRofdE/diOjix+ANtIgHrfY/kyoBUHZh32WHYdqqwF8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:45:ec:eb:89:68:d3:ee:0d:9c:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d2846b-36c4-41a9-86c2-a98e92bef162 Validity Not Before: Aug 6 13:00:03 2025 GMT Not After : Aug 8 13:00:00 2025 GMT Subject: CN=b3becd42-0e99-4a6f-a77a-93c1dafcbcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:37:7d:80:77:f2:e0:f3:ed:00:08:97:28: 8d:6e:6d:39:f3:3e:6c:19:5f:c4:48:f2:22:2e:fc: 08:dd:db:5d:88:ff:1c:58:e6:31:7d:59:4b:4a:fa: f9:cd:5c:33:f4:9a:56:6a:3c:b4:de:9c:a0:24:5a: c1:2f:e1:ce:3f:bf:5d:49:39:3d:60:0c:2b:58:1d: a4:ca:fe:90:61:ad:6b:8a:78:8d:8f:01:30:ae:d8: 05:60:4f:5d:57:9a:84:6e:fc:bf:ed:33:63:49:88: e3:67:c4:a6:4c:a5:11:2f:39:75:53:86:1a:dd:6b: 39:b7:c8:b6:13:2b:5e:b5:21:cc:bd:33:f7:bc:35: b3:31:e7:e4:68:57:79:fe:6a:1d:5e:06:76:91:d3: 44:7b:33:55:c4:40:5b:5f:86:f3:d4:8e:b5:41:1d: c8:f5:24:e2:2a:ba:e1:98:68:40:7d:bd:9a:0d:8f: f1:3a:60:42:d6:e0:ad:47:a2:39:cf:9e:e6:5b:eb: b1:ff:80:3c:eb:73:5d:44:28:6b:4d:25:9c:19:2f: 00:11:99:a3:6f:2b:cc:9d:ae:71:a1:6a:85:2c:c4: 46:fa:d1:50:58:02:6e:3b:a7:89:28:b4:08:8a:63: bd:5a:21:08:07:db:27:32:1e:1f:ed:84:ed:5d:65: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7B:8A:4C:46:79:AC:49:81:F8:2E:D9:3F:DD:8C:EF:EC:8C:9F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162/31d2846b-36c4-41a9-86c2-a98e92bef162.crl X509v3 Authority Key Identifier: keyid:D1:1B:C7:AF:55:55:C9:0C:20:32:FC:68:AF:8F:AB:49:8E:5A:81:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/31d2846b-36c4-41a9-86c2-a98e92bef162.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:72:94:6c:ec:22:d6:8b:f5:02:ce:79:13:33:bc:86:fd:b7: 5f:f5:83:3a:e8:bc:a7:1c:dc:ec:1c:51:af:11:7e:04:ad:30: 7a:af:71:c0:49:1c:a2:ad:5a:df:83:e4:ab:24:56:b8:07:d7: 95:db:d2:34:f9:f5:19:ce:3e:21:12:7a:a9:bf:38:a6:91:f0: a0:af:51:a4:99:4c:fc:36:b8:19:6c:d8:e5:65:16:36:8e:80: fb:4c:cb:f3:fd:02:54:59:2c:8e:5c:ab:90:59:f4:1a:3f:70: c9:30:87:33:3a:1a:3b:3e:c5:ea:08:3a:11:3a:da:75:99:ba: 91:1f:0e:42:c0:9f:d6:d6:62:b2:76:2f:52:af:b2:5b:bc:f1: 12:17:5a:aa:1e:fe:68:f9:ee:16:57:b8:06:58:ed:cd:6e:f9: 48:0f:df:86:8e:d4:9c:4c:7f:bb:85:a3:1c:11:c1:1e:78:85: 96:31:1b:dc:29:c2:41:b5:da:f2:25:b4:7c:88:93:e5:e6:e7: 95:89:a3:d9:b9:0a:0f:92:c8:d9:9d:88:9a:62:34:cf:6a:c7: df:5f:08:a4:b6:39:63:35:7e:34:19:1b:f6:73:18:63:b1:c2: 3d:2a:31:af:44:d5:e4:a1:5f:9d:6a:d1:27:52:53:46:c7:a1: bf:fd:cd:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErERezriWjT7g2cV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFkMjg0NmItMzZjNC00MWE5LTg2YzItYTk4ZTkyYmVm MTYyMB4XDTI1MDgwNjEzMDAwM1oXDTI1MDgwODEzMDAwMFowLzEtMCsGA1UEAxMk YjNiZWNkNDItMGU5OS00YTZmLWE3N2EtOTNjMWRhZmNiY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01A3fYB38uDz7QAIlyiNbm058z5sGV/ESPIi LvwI3dtdiP8cWOYxfVlLSvr5zVwz9JpWajy03pygJFrBL+HOP79dSTk9YAwrWB2k yv6QYa1riniNjwEwrtgFYE9dV5qEbvy/7TNjSYjjZ8SmTKURLzl1U4Ya3Ws5t8i2 EytetSHMvTP3vDWzMefkaFd5/modXgZ2kdNEezNVxEBbX4bz1I61QR3I9STiKrrh mGhAfb2aDY/xOmBC1uCtR6I5z57mW+ux/4A863NdRChrTSWcGS8AEZmjbyvMna5x oWqFLMRG+tFQWAJuO6eJKLQIimO9WiEIB9snMh4f7YTtXWVljwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPd7ikxGeaxJgfgu2T/djO/sjJ9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMWQy ODQ2Yi0zNmM0LTQxYTktODZjMi1hOThlOTJiZWYxNjIvMzFkMjg0NmItMzZjNC00 MWE5LTg2YzItYTk4ZTkyYmVmMTYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzFkMjg0NmItMzZjNC00MWE5LTg2 YzItYTk4ZTkyYmVmMTYyLzMxZDI4NDZiLTM2YzQtNDFhOS04NmMyLWE5OGU5MmJl ZjE2Mi5jcmwwHwYDVR0jBBgwFoAU0RvHr1VVyQwgMvxor4+rSY5agXEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMWQyODQ2Yi0zNmM0LTQxYTktODZjMi1hOThl OTJiZWYxNjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVcpRs7CLWi/UCznkTM7yG /bdf9YM66LynHNzsHFGvEX4ErTB6r3HASRyirVrfg+SrJFa4B9eV29I0+fUZzj4h EnqpvzimkfCgr1GkmUz8NrgZbNjlZRY2joD7TMvz/QJUWSyOXKuQWfQaP3DJMIcz Oho7PsXqCDoROtp1mbqRHw5CwJ/W1mKydi9Sr7JbvPESF1qqHv5o+e4WV7gGWO3N bvlID9+GjtScTH+7haMcEcEeeIWWMRvcKcJBtdryJbR8iJPl5ueViaPZuQoPksjZ nYiaYjTPasffXwiktjljNX40GRv2cxhjscI9KjGvRNXkoV+datEnUlNGx6G//c0C -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:52 2025 by rpki-client