$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft File: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft (raw, json) Hash identifier: qJYw1cKC3vlkiqXGIri2dW69jSPV1JjMeYBNfimMlcU= Subject key identifier: 57:F6:F1:E6:89:53:55:4A:7E:91:B3:C3:6D:3B:C3:52:D6:CA:79:C6 Authority key identifier: 92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F Certificate issuer: /CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Certificate serial: 010D0C9F4328584AC3B1130CFDDEA1A7D6F18E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft Manifest number: 010D0C9F4328584A21C7587CA6AD09944CFCDEBA Signing time: Wed 06 Aug 2025 08:00:08 +0000 Manifest this update: Wed 06 Aug 2025 08:00:08 +0000 Manifest next update: Sat 09 Aug 2025 08:00:00 +0000 Files and hashes: 1: 79a68e4a-63c9-343a-a4c3-0a5e94130274.roa (hash: ZWMCDRTzzONSpdbpkYQ7cowm69mMTrmW0k0vbaLDLwA=) 2: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl (hash: xMpWOZHJJUt7aQFiZwuk+VCVlGGDfmudZxcBK+aGsM8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:b1:13:0c:fd:de:a1:a7:d6:f1:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Validity Not Before: Aug 6 08:00:08 2025 GMT Not After : Aug 9 08:00:00 2025 GMT Subject: CN=6fe73c1a-bbb3-42f5-912b-94808d190c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:5c:55:38:b6:5d:fe:8d:7b:01:63:35:fa: 3a:5b:88:34:d9:08:7c:09:e2:18:1b:80:78:42:df: e6:df:b6:55:f2:8a:af:83:2a:ab:5a:66:e0:aa:9b: e0:7d:a0:95:94:c8:62:72:fb:ca:8a:3b:59:0f:f8: 4b:fe:ef:8d:d6:ff:ca:33:02:e0:df:16:a5:99:64: 38:ed:d6:f1:6b:e8:89:d2:07:03:c8:b5:79:05:3b: a6:8f:1d:01:60:8f:fd:8e:1e:11:4f:cc:87:ba:54: 67:20:de:37:a3:b9:f8:c7:c1:aa:19:51:40:76:9e: e5:24:f0:62:e4:95:a7:fb:e1:8c:ea:0a:37:78:74: 8a:88:9e:ae:4d:e0:9e:e5:50:ad:18:b1:3c:a4:a9: 56:b8:ba:db:99:84:5d:53:06:3d:3b:08:d0:d1:75: f8:52:da:43:d1:23:a9:61:24:b7:8f:4e:4f:47:8a: 65:43:df:c5:2e:17:01:de:96:9d:fa:cd:88:88:2e: 98:8b:38:5c:bb:7e:ac:8f:a3:f8:f1:99:e2:52:43: c2:9c:d9:08:8c:8d:a9:d9:ca:cb:3a:18:97:e2:c4: f3:83:20:48:4d:96:24:3f:aa:0f:f4:fc:05:db:7d: a9:9a:26:2f:0d:41:cd:1d:d3:6b:d3:fc:6d:45:52: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F6:F1:E6:89:53:55:4A:7E:91:B3:C3:6D:3B:C3:52:D6:CA:79:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl X509v3 Authority Key Identifier: keyid:92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:95:d1:af:ce:4d:e7:51:03:98:c6:1a:d9:cb:21:2b:e5:d0: b4:bc:38:5b:51:02:54:ad:c5:03:81:f9:7f:31:4d:2d:8c:ff: b8:80:4b:fc:8d:9b:0c:88:e3:dd:3c:d2:47:42:f5:37:6f:a6: bc:68:c3:57:fb:1f:ed:e8:3a:a0:c6:cd:7e:fb:a7:5d:62:b3: 3b:12:58:d2:8f:68:ae:9c:56:6b:53:1f:29:f9:b7:b1:7e:13: 6f:8f:63:2c:0c:70:ba:61:7c:94:f2:5f:45:1e:76:34:9b:5e: 9d:30:12:eb:db:82:fd:91:9e:86:bf:de:75:84:75:8c:31:8b: ff:0d:06:83:b4:4a:89:84:80:46:28:c5:84:4a:0b:d7:40:16: ed:07:d6:b9:8e:35:30:25:af:42:46:ac:b4:94:b9:ba:f1:cf: 33:ff:dc:21:5d:c1:a7:18:0a:2f:33:76:e0:50:86:70:15:48: ec:84:a7:26:7d:fe:4c:37:e1:9f:62:b2:bb:80:2b:ff:eb:80: ba:0c:39:31:44:d2:00:97:b4:98:89:a9:be:1f:c0:e3:71:0e: a8:3a:6a:8c:6b:17:49:b2:1e:57:26:b8:fb:54:6e:12:1a:63: e0:6e:43:95:f5:35:7d:ba:a2:a0:ee:9a:9a:b0:94:f1:e3:32: ca:32:b4:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErDsRMM/d6hp9bxjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3MjBlMTMtOGNmNi00YmQ3LThiNGUtOGRkM2ZmODYy ZjI4MB4XDTI1MDgwNjA4MDAwOFoXDTI1MDgwOTA4MDAwMFowLzEtMCsGA1UEAxMk NmZlNzNjMWEtYmJiMy00MmY1LTkxMmItOTQ4MDhkMTkwYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikxcVTi2Xf6NewFjNfo6W4g02Qh8CeIYG4B4 Qt/m37ZV8oqvgyqrWmbgqpvgfaCVlMhicvvKijtZD/hL/u+N1v/KMwLg3xalmWQ4 7dbxa+iJ0gcDyLV5BTumjx0BYI/9jh4RT8yHulRnIN43o7n4x8GqGVFAdp7lJPBi 5JWn++GM6go3eHSKiJ6uTeCe5VCtGLE8pKlWuLrbmYRdUwY9OwjQ0XX4UtpD0SOp YSS3j05PR4plQ9/FLhcB3pad+s2IiC6Yizhcu36sj6P48ZniUkPCnNkIjI2p2crL OhiX4sTzgyBITZYkP6oP9PwF232pmiYvDUHNHdNr0/xtRVKqrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFf28eaJU1VKfpGzw207w1LWynnGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jODcy MGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQzZmY4NjJmMjgvYzg3MjBlMTMtOGNmNi00 YmQ3LThiNGUtOGRkM2ZmODYyZjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzg3MjBlMTMtOGNmNi00YmQ3LThi NGUtOGRkM2ZmODYyZjI4L2M4NzIwZTEzLThjZjYtNGJkNy04YjRlLThkZDNmZjg2 MmYyOC5jcmwwHwYDVR0jBBgwFoAUkgUiKDDULHHZvg2GIYRFZT8oiH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jODcyMGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQz ZmY4NjJmMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtldGvzk3nUQOYxhrZyyEr 5dC0vDhbUQJUrcUDgfl/MU0tjP+4gEv8jZsMiOPdPNJHQvU3b6a8aMNX+x/t6Dqg xs1++6ddYrM7EljSj2iunFZrUx8p+bexfhNvj2MsDHC6YXyU8l9FHnY0m16dMBLr 24L9kZ6Gv951hHWMMYv/DQaDtEqJhIBGKMWESgvXQBbtB9a5jjUwJa9CRqy0lLm6 8c8z/9whXcGnGAovM3bgUIZwFUjshKcmff5MN+GfYrK7gCv/64C6DDkxRNIAl7SY iam+H8DjcQ6oOmqMaxdJsh5XJrj7VG4SGmPgbkOV9TV9uqKg7pqasJTx4zLKMrTo -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:37 2025 by rpki-client