$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: fQavW/FeayrD9C2R8pv+uMeAroz2VbqR/N9QmKpEwOQ= Subject key identifier: 63:9E:8A:DA:C8:C5:5D:84:5F:9D:24:81:75:52:94:92:75:69:04:2F Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584AC4818D8679FFD14729615380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1E43 Signing time: Wed 06 Aug 2025 15:00:08 +0000 Manifest this update: Wed 06 Aug 2025 15:00:08 +0000 Manifest next update: Sat 09 Aug 2025 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: ObG4QHTdEZPeyBZrfCDvjANprOE/6zoTIthRXqgB1U8=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: vOY2tTXXZkGgf/7CD9KTswFvk5GT8sXscoG7WDgRNvQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:81:8d:86:79:ff:d1:47:29:61:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Aug 6 15:00:08 2025 GMT Not After : Aug 9 15:00:00 2025 GMT Subject: CN=8de7f611-2a96-4e9a-a3b7-980b1d30292c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:05:3c:6c:a3:d3:44:da:e2:a4:74:05:ca: fa:8e:f2:0e:0b:d0:32:ce:dd:48:30:44:22:d8:8a: 51:8c:7a:b9:ca:9c:57:27:82:75:39:ba:90:c4:da: 3e:bc:2f:99:9e:6e:fd:59:83:df:dd:e1:b5:ae:0d: a1:65:64:4a:c4:00:cf:58:bd:bf:22:98:7c:2d:93: f5:2b:52:78:5d:02:8b:89:72:72:0c:e2:c6:77:28: 1b:1f:d0:b9:52:08:7d:b8:9c:78:24:dd:1d:27:b7: d8:29:d4:50:5d:3c:03:31:03:06:80:e9:95:b7:0d: 4f:8b:c0:8e:3b:c0:20:db:95:a2:c0:98:e7:be:17: e2:9d:0f:59:2f:bc:5d:35:c1:c4:86:ee:33:f2:58: b9:c0:e7:e3:ad:10:a1:db:0a:6e:36:5c:4d:08:57: 07:ca:9b:a2:e0:6b:db:b7:8b:ca:52:46:8d:4f:d9: d3:32:20:53:0b:b5:75:9a:ec:b6:bb:f5:ec:64:8c: 34:28:5e:a2:c2:65:ae:0f:47:06:89:07:c7:36:4c: 48:db:5a:48:c5:27:a0:32:2d:b1:19:6f:1b:dc:ac: 99:45:76:13:4e:81:60:8d:a4:b2:ba:f4:2b:09:a5: 9f:0a:fd:e6:ea:29:78:f0:8c:48:96:78:6a:15:27: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9E:8A:DA:C8:C5:5D:84:5F:9D:24:81:75:52:94:92:75:69:04:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:04:94:59:5f:3c:ed:b8:0a:56:49:d9:73:89:0b:17:12:3a: dd:9f:71:bb:ba:23:4d:de:17:e7:a8:61:77:cc:7f:ce:0a:05: 8b:65:5d:6d:c4:2b:07:25:0c:f3:c3:e5:60:a0:38:39:90:f6: c9:0b:01:36:7b:3d:72:3a:42:36:98:0b:5a:71:b6:e2:fd:27: b6:63:44:26:ec:a7:d6:46:b6:e2:41:92:53:72:ad:f8:1d:eb: 90:ab:a8:f3:d4:bb:7e:69:02:37:01:a3:b6:21:a2:39:9c:be: 6f:81:9d:4e:d1:ab:08:8e:1e:52:ef:21:a1:5c:7e:e4:e4:59: eb:7b:3a:26:f8:a2:84:9b:61:11:2e:5d:f4:9a:62:60:c8:70: a4:12:b0:ac:d6:e0:1d:8a:dc:96:d7:c3:ea:c5:41:f7:48:79: 4a:15:f6:68:68:8b:92:4f:1f:f0:c8:3e:cc:2b:5d:23:7c:e8: 62:01:60:cf:11:70:0e:4e:72:e0:4c:ae:62:fa:60:b7:e0:e8: e0:a7:9b:5f:1f:fc:7b:7d:6d:2b:5f:f1:e8:aa:ce:ce:09:fa: 5c:22:69:93:2e:3f:5d:9f:c1:32:1f:8e:40:03:9a:6a:44:8a: de:c1:5d:9b:3e:96:c6:12:fd:48:bc:c4:b8:52:58:08:41:22: ae:b6:8b:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErEgY2Gef/RRylhU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDgwNjE1MDAwOFoXDTI1MDgwOTE1MDAwMFowLzEtMCsGA1UEAxMk OGRlN2Y2MTEtMmE5Ni00ZTlhLWEzYjctOTgwYjFkMzAyOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAussFPGyj00Ta4qR0Bcr6jvIOC9Ayzt1IMEQi 2IpRjHq5ypxXJ4J1ObqQxNo+vC+Znm79WYPf3eG1rg2hZWRKxADPWL2/Iph8LZP1 K1J4XQKLiXJyDOLGdygbH9C5Ugh9uJx4JN0dJ7fYKdRQXTwDMQMGgOmVtw1Pi8CO O8Ag25WiwJjnvhfinQ9ZL7xdNcHEhu4z8li5wOfjrRCh2wpuNlxNCFcHypui4Gvb t4vKUkaNT9nTMiBTC7V1muy2u/XsZIw0KF6iwmWuD0cGiQfHNkxI21pIxSegMi2x GW8b3KyZRXYTToFgjaSyuvQrCaWfCv3m6il48IxIlnhqFScEeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGOeitrIxV2EX50kgXVSlJJ1aQQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBBJRZXzztuApWSdlziQsX Ejrdn3G7uiNN3hfnqGF3zH/OCgWLZV1txCsHJQzzw+VgoDg5kPbJCwE2ez1yOkI2 mAtacbbi/Se2Y0Qm7KfWRrbiQZJTcq34HeuQq6jz1Lt+aQI3AaO2IaI5nL5vgZ1O 0asIjh5S7yGhXH7k5Fnrezom+KKEm2ERLl30mmJgyHCkErCs1uAdityW18PqxUH3 SHlKFfZoaIuSTx/wyD7MK10jfOhiAWDPEXAOTnLgTK5i+mC34Ojgp5tfH/x7fW0r X/Hoqs7OCfpcImmTLj9dn8EyH45AA5pqRIrewV2bPpbGEv1IvMS4UlgIQSKutovH -----END CERTIFICATE-----Generated at Thu Aug 7 00:44:43 2025 by rpki-client