$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft File: aa34647f-3229-480c-9b05-3cf0b00fa173.mft (raw, json) Hash identifier: cGOVUgzPmR2GfwBUzfuycDg7LJujqGjzWWX/iJRLgGg= Subject key identifier: 27:DA:56:AE:B2:80:FA:0B:AC:BD:0C:C3:14:11:1E:98:24:80:89:C5 Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 Certificate issuer: /CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Certificate serial: 010D0C9F4328584AC9DB59340F2BE56189D73A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft Manifest number: 010D0C9F43285849B8591A0A2626962C4503E8E5 Signing time: Fri 08 Aug 2025 13:00:08 +0000 Manifest this update: Fri 08 Aug 2025 13:00:08 +0000 Manifest next update: Mon 11 Aug 2025 13:00:00 +0000 Files and hashes: 1: aa34647f-3229-480c-9b05-3cf0b00fa173.crl (hash: 3QAQSNweG78IB8v1+uvK90AZmz+YJevDbviJbzAY37Q=) 2: eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (hash: l1RQT7xrsLyFVvZZgUkS3H2+vm71Wq6oH469PjK8pe4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:59:34:0f:2b:e5:61:89:d7:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173 Validity Not Before: Aug 8 13:00:08 2025 GMT Not After : Aug 11 13:00:00 2025 GMT Subject: CN=adb70d4b-8ad0-4d2d-b912-69c2cc316e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:b3:45:53:91:4a:1d:a0:f7:35:df:1b:ed: 50:27:76:89:b0:09:b7:a9:a1:68:10:37:0b:2b:86: f9:d7:41:aa:8e:6f:53:83:c6:66:d4:05:6d:6f:2a: 17:b4:eb:51:11:82:44:dd:45:1c:61:95:8f:60:be: b2:ae:f9:12:a1:fc:fc:4a:42:d3:e2:8c:47:72:49: 1a:3f:7b:7a:0e:31:44:c9:ab:55:92:78:05:3a:0e: 92:4d:44:3d:14:0e:80:49:a2:f8:01:31:59:b7:e7: 5c:0a:5b:95:fe:fc:fc:c2:7f:d7:06:ec:72:f1:54: 3c:42:ed:67:7f:78:7c:32:c5:c4:ac:16:f4:5e:3b: a7:0d:9a:7a:71:cd:4b:b8:d1:98:33:9c:d3:fd:d1: 1e:a5:ac:c5:9b:95:ec:7a:42:58:8c:98:ae:68:6d: 2f:2d:a8:6f:29:dc:21:f6:75:98:d9:ce:94:3d:e0: ba:9f:6d:fa:a0:f9:6c:c8:a0:94:70:12:c0:43:dc: b6:2d:3d:af:46:9d:5a:85:2a:da:5a:1d:34:5a:03: 58:7b:e0:e4:27:05:8b:d5:10:2c:52:82:3a:6a:55: 74:68:b7:84:4b:ad:86:fa:4c:f3:ab:d6:14:45:19: 38:a9:db:e3:6c:82:9d:ba:04:d8:70:79:28:42:b3: 6b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:56:AE:B2:80:FA:0B:AC:BD:0C:C3:14:11:1E:98:24:80:89:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl X509v3 Authority Key Identifier: keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a1:c4:aa:5c:01:4d:c8:f2:39:d3:25:22:1c:cb:0f:20:fa: 1c:2a:16:1f:0f:1b:73:2f:80:ff:37:8b:3c:c7:a7:05:0b:34: e3:28:d0:d6:63:55:4f:d0:ce:8b:85:a9:e4:30:36:7a:3f:f4: 9b:ba:b8:07:ce:74:4d:d3:21:ea:54:cb:5e:06:e7:a3:1d:b2: 44:e6:90:31:0c:ab:eb:4f:7d:66:6a:e0:40:3f:9f:71:4c:19: 35:03:db:db:85:26:81:20:b6:9a:cf:ce:56:e6:0b:87:fd:b9: 92:39:da:0c:36:3a:a3:7c:7e:b1:9d:c2:e9:8d:e9:13:4c:bf: f1:ea:4c:29:03:e5:c0:dd:74:6b:4d:58:57:d2:60:9b:76:6c: 9d:60:3c:cc:03:87:3c:b6:1f:c3:c0:83:4a:a6:1e:f5:b5:da: 75:4b:6c:57:b7:f0:ef:2a:78:6d:bd:21:0e:3a:0b:8d:42:a5: 39:64:bf:4a:8d:43:01:e3:3f:8e:0a:94:43:67:22:d4:21:dc: d6:b6:8d:92:5e:52:81:ff:89:f6:24:66:7a:d8:7c:92:45:6e: 26:22:52:2d:98:e1:3d:3f:7b:7c:e8:ef:e6:7b:ed:cc:f0:d8: 46:3f:e7:70:9a:b2:74:ec:ec:aa:6d:28:1e:78:59:de:57:8e: 74:b5:75:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErJ21k0DyvlYYnXOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzNDY0N2YtMzIyOS00ODBjLTliMDUtM2NmMGIwMGZh MTczMB4XDTI1MDgwODEzMDAwOFoXDTI1MDgxMTEzMDAwMFowLzEtMCsGA1UEAxMk YWRiNzBkNGItOGFkMC00ZDJkLWI5MTItNjljMmNjMzE2ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QGzRVORSh2g9zXfG+1QJ3aJsAm3qaFoEDcL K4b510Gqjm9Tg8Zm1AVtbyoXtOtREYJE3UUcYZWPYL6yrvkSofz8SkLT4oxHckka P3t6DjFEyatVkngFOg6STUQ9FA6ASaL4ATFZt+dcCluV/vz8wn/XBuxy8VQ8Qu1n f3h8MsXErBb0XjunDZp6cc1LuNGYM5zT/dEepazFm5XsekJYjJiuaG0vLahvKdwh 9nWY2c6UPeC6n236oPlsyKCUcBLAQ9y2LT2vRp1ahSraWh00WgNYe+DkJwWL1RAs UoI6alV0aLeES62G+kzzq9YURRk4qdvjbIKdugTYcHkoQrNrKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCfaVq6ygPoLrL0MwxQRHpgkgInFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0 NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2YwYjAwZmExNzMvYWEzNDY0N2YtMzIyOS00 ODBjLTliMDUtM2NmMGIwMGZhMTczLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWEzNDY0N2YtMzIyOS00ODBjLTli MDUtM2NmMGIwMGZhMTczL2FhMzQ2NDdmLTMyMjktNDgwYy05YjA1LTNjZjBiMDBm YTE3My5jcmwwHwYDVR0jBBgwFoAU9mTNVuUvXLeBnCtI+xvNW5zH+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTM0NjQ3Zi0zMjI5LTQ4MGMtOWIwNS0zY2Yw YjAwZmExNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOocSqXAFNyPI50yUiHMsP IPocKhYfDxtzL4D/N4s8x6cFCzTjKNDWY1VP0M6LhankMDZ6P/SburgHznRN0yHq VMteBuejHbJE5pAxDKvrT31mauBAP59xTBk1A9vbhSaBILaaz85W5guH/bmSOdoM NjqjfH6xncLpjekTTL/x6kwpA+XA3XRrTVhX0mCbdmydYDzMA4c8th/DwINKph71 tdp1S2xXt/DvKnhtvSEOOguNQqU5ZL9KjUMB4z+OCpRDZyLUIdzWto2SXlKB/4n2 JGZ62HySRW4mIlItmOE9P3t86O/me+3M8NhGP+dwmrJ07OyqbSgeeFneV450tXXT -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:44 2025 by rpki-client