$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft File: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft (raw, json) Hash identifier: rWO8b1l2cHfAitg2f2MyG3sBfNrKobPL1M4DFxn6NwM= Subject key identifier: 16:80:6E:4E:0C:AF:69:89:D7:9B:1E:66:5B:43:DF:96:9E:58:32:9D Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584ABC3F44FF12113EEC6BBA9E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft Manifest number: 010D0C9F43285847FF6DB89C0ACD762A7E013B01 Signing time: Sun 03 Aug 2025 16:00:08 +0000 Manifest this update: Sun 03 Aug 2025 16:00:08 +0000 Manifest next update: Tue 05 Aug 2025 16:00:00 +0000 Files and hashes: 1: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl (hash: RcxX+HBpGrvrObSY50yBmE8IutITGpVUCgwNdWYmb/4=) 2: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (hash: j54xa0fhBWBRwMBhQ9HGUwL0VWBzA13FaZD5cCNyUnU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:3f:44:ff:12:11:3e:ec:6b:ba:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Aug 3 16:00:08 2025 GMT Not After : Aug 5 16:00:00 2025 GMT Subject: CN=2a4e626d-9104-4465-bcd9-e01340744f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:0d:74:05:17:3a:40:21:8f:26:8a:f3:d1: 74:f5:cc:31:3f:8a:64:e1:80:58:ed:21:4f:1e:0b: 86:1b:c2:05:50:e8:56:25:f6:22:3b:17:af:58:49: 1f:9d:22:30:9f:d1:6b:06:b4:3e:b1:72:f8:eb:41: ef:83:6e:1c:52:22:c6:c9:40:85:c9:74:3d:46:7f: 2a:f2:0e:1c:ab:0d:4f:39:93:18:e1:09:08:8f:71: 10:98:c0:b3:f0:f1:6d:7a:35:c4:d2:e3:51:10:6c: 47:1c:16:aa:d8:94:03:43:bb:16:88:da:d3:fe:a3: 50:90:97:36:95:fd:3c:64:fd:8d:d0:d1:d9:e0:fe: ea:dd:7d:e4:29:18:b1:ea:56:9b:47:7b:3c:bc:bf: 9d:e6:19:b5:10:f2:e6:45:8b:8b:8a:12:c9:39:d8: 76:65:85:1f:cb:85:c7:16:46:d0:aa:61:6a:3f:4a: 19:90:53:99:f1:3c:03:a1:1f:74:7e:78:bb:25:e2: d1:af:f9:26:da:3b:50:13:3a:ab:98:9a:cb:d4:ea: c8:5b:22:87:34:9b:0e:a6:66:ab:34:8a:d9:d5:e6: 3b:c0:d4:02:6b:2f:57:c7:ac:5c:1d:f5:98:a9:10: 3a:ae:16:92:0e:eb:2d:c2:06:70:88:52:b9:0a:d7: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:80:6E:4E:0C:AF:69:89:D7:9B:1E:66:5B:43:DF:96:9E:58:32:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:7c:4a:65:8b:59:a8:07:3a:9b:d3:8c:2a:5f:6f:14:e0:dc: 4b:58:a0:20:45:12:a3:22:74:11:7c:18:ec:71:cd:56:3e:be: a3:ae:22:19:01:39:a3:1b:be:92:1d:e5:a2:dc:70:ba:c0:87: da:8c:00:f6:4b:73:d4:0c:84:21:5a:fb:6f:39:49:be:f0:64: d8:74:25:e7:65:25:6a:67:57:24:8b:c3:e1:f3:0c:3b:41:47: aa:7b:9f:61:ab:a2:50:87:38:76:39:eb:a4:7c:08:31:51:9e: a6:55:8f:2d:57:b8:01:7c:f4:17:40:f2:45:f7:bd:17:86:8a: 8d:c4:f2:07:c7:cb:e7:9d:d9:44:ce:04:95:18:aa:c3:03:c4: e2:cf:8c:34:ca:d6:53:d1:5f:54:23:89:86:92:04:26:90:39: 17:76:be:6e:2e:da:c9:7f:a5:26:33:27:98:15:05:05:dc:f4: 72:15:aa:a5:61:08:b8:78:be:da:39:d1:37:04:6c:91:cf:f5: 50:7b:3d:bc:bd:b0:8f:10:06:17:5d:67:58:d5:7c:f9:9c:66: 73:27:04:8c:a6:08:45:6a:eb:3f:d6:32:67:c7:bb:84:40:3b: bb:8c:19:f1:c2:6b:40:59:a0:49:aa:83:11:5b:5c:7e:3f:2d: 78:b1:df:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8P0T/EhE+7Gu6niAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MDgwMzE2MDAwOFoXDTI1MDgwNTE2MDAwMFowLzEtMCsGA1UEAxMk MmE0ZTYyNmQtOTEwNC00NDY1LWJjZDktZTAxMzQwNzQ0ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8INdAUXOkAhjyaK89F09cwxP4pk4YBY7SFP HguGG8IFUOhWJfYiOxevWEkfnSIwn9FrBrQ+sXL460Hvg24cUiLGyUCFyXQ9Rn8q 8g4cqw1POZMY4QkIj3EQmMCz8PFtejXE0uNREGxHHBaq2JQDQ7sWiNrT/qNQkJc2 lf08ZP2N0NHZ4P7q3X3kKRix6labR3s8vL+d5hm1EPLmRYuLihLJOdh2ZYUfy4XH FkbQqmFqP0oZkFOZ8TwDoR90fni7JeLRr/km2jtQEzqrmJrL1OrIWyKHNJsOpmar NIrZ1eY7wNQCay9Xx6xcHfWYqRA6rhaSDustwgZwiFK5Ctcz9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBaAbk4Mr2mJ15seZltD35aeWDKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvOWY3NWU4ZDctZTQ1Zi00 NzY3LTg5MzktYTJjNTM5NGMxZTdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAfEpli1moBzqb04wqX28U 4NxLWKAgRRKjInQRfBjscc1WPr6jriIZATmjG76SHeWi3HC6wIfajAD2S3PUDIQh WvtvOUm+8GTYdCXnZSVqZ1cki8Ph8ww7QUeqe59hq6JQhzh2OeukfAgxUZ6mVY8t V7gBfPQXQPJF970XhoqNxPIHx8vnndlEzgSVGKrDA8Tiz4w0ytZT0V9UI4mGkgQm kDkXdr5uLtrJf6UmMyeYFQUF3PRyFaqlYQi4eL7aOdE3BGyRz/VQez28vbCPEAYX XWdY1Xz5nGZzJwSMpghFaus/1jJnx7uEQDu7jBnxwmtAWaBJqoMRW1x+Py14sd8p -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:38 2025 by rpki-client