$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft File: de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft (raw, json) Hash identifier: 5fnNAnB8RtkmaCgg6Jzg4QSB4o8YvVEkeDf+fEryBOU= Subject key identifier: A0:24:BE:EE:DA:3F:31:C5:44:07:EB:E0:3C:2E:6B:99:83:98:BD:50 Authority key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Certificate issuer: /CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Certificate serial: 010D0C9F4328584ABEEC2E32FEF723CAF992C628 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft Manifest number: 010D0C9F43285848B4FA0FEA2B359536FF72A78B Signing time: Mon 04 Aug 2025 15:00:08 +0000 Manifest this update: Mon 04 Aug 2025 15:00:08 +0000 Manifest next update: Wed 06 Aug 2025 15:00:00 +0000 Files and hashes: 1: 9d9939e1-e7c3-3ea6-a720-303f759b790e.roa (hash: Kx4Th+Oy8cik2+HtTQUmZwAiNpmAINnSN7m0+4AXdrM=) 2: de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl (hash: gW//Ug9yfpe4q0ZbDU0knU9dUKEzp28mtWKqa3Y1DTY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:ec:2e:32:fe:f7:23:ca:f9:92:c6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Validity Not Before: Aug 4 15:00:08 2025 GMT Not After : Aug 6 15:00:00 2025 GMT Subject: CN=982985a5-9389-40cc-9205-1407a1df61e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cb:f1:c4:28:9f:66:a5:02:2c:c2:61:42:72: fd:46:60:03:99:61:25:19:00:48:e9:c2:4c:2c:cd: f2:81:8d:68:f5:80:29:94:1b:57:91:15:01:40:d0: a2:d0:7b:c5:e5:71:48:49:70:cf:c2:3e:07:e0:b0: 26:13:ef:14:93:49:47:8d:6b:ea:89:e4:2b:dd:da: 46:78:ab:d1:fa:82:32:df:1f:4a:f3:d3:b2:85:e0: f8:4f:a0:54:9b:ed:fc:8a:66:32:8a:bd:b5:c0:62: 67:a6:e4:fb:a9:4f:79:5a:f6:4d:cc:0a:77:27:d3: e4:07:e2:fe:2b:0a:61:36:04:a2:d3:9a:2a:d9:14: 78:4f:cd:6c:d2:f2:e4:1f:1b:d5:fc:d9:84:9e:f9: 86:3e:61:1a:7f:22:05:c3:02:c6:1a:18:ac:38:95: cd:55:9f:1d:fc:49:13:e5:c0:d5:26:c6:7f:15:aa: b1:9a:ac:72:68:70:fa:69:1c:34:ef:f3:cc:5e:c0: 8f:cb:14:a6:b1:ec:81:11:e8:84:b1:c1:07:a1:13: 76:40:48:0b:22:89:e6:00:4e:24:0e:6d:1a:b3:36: 62:71:fa:3d:3b:95:31:22:47:cb:94:6b:19:60:8d: 0f:e7:55:e9:f7:87:3d:21:f6:bb:07:d5:d3:9e:f0: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:24:BE:EE:DA:3F:31:C5:44:07:EB:E0:3C:2E:6B:99:83:98:BD:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl X509v3 Authority Key Identifier: keyid:7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d7:03:95:fe:6f:01:2f:35:05:6c:56:59:0b:ef:47:bc:40: b5:1a:d6:61:f5:78:c9:b6:74:2b:e3:87:8c:6a:ed:f9:74:44: ef:a9:d4:4e:84:56:19:00:e4:d2:09:0b:dc:32:08:42:b7:ff: bb:2e:2c:f8:01:24:46:7e:91:93:9d:8c:5a:ea:a1:ea:30:15: b0:38:15:94:22:33:7f:23:a9:12:b8:9e:c7:93:09:ec:11:16: 18:2d:20:c5:c4:81:ec:e8:e4:1a:69:a1:08:72:fa:30:7b:cf: 8b:57:e7:34:f4:cd:1f:15:e4:e9:1e:fd:d4:d7:65:16:c5:ec: c4:5d:00:cf:ba:b9:ef:b2:08:df:b0:bb:b1:25:7c:2d:70:1f: 30:11:83:35:15:64:88:fb:01:7a:35:9e:7f:05:7e:b5:65:35: 0a:ea:a5:e8:59:29:75:e1:1d:0e:e0:39:72:7b:33:8e:e8:76: d2:d1:d2:c5:73:23:fd:8f:52:57:9e:91:2f:77:d0:73:9e:a4: ae:2e:67:5b:5d:23:e1:6c:01:a6:71:12:54:26:4e:d7:a7:61: 81:72:a5:5c:a7:46:b0:6c:db:a2:3d:42:55:2f:5b:2b:fd:96: c6:df:f8:5c:23:d5:3b:ae:a9:db:b2:10:01:51:db:0e:0d:f8: 3d:2f:be:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+7C4y/vcjyvmSxigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4MzQtNTc0ZTliYjJl ODJkMB4XDTI1MDgwNDE1MDAwOFoXDTI1MDgwNjE1MDAwMFowLzEtMCsGA1UEAxMk OTgyOTg1YTUtOTM4OS00MGNjLTkyMDUtMTQwN2ExZGY2MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7svxxCifZqUCLMJhQnL9RmADmWElGQBI6cJM LM3ygY1o9YAplBtXkRUBQNCi0HvF5XFISXDPwj4H4LAmE+8Uk0lHjWvqieQr3dpG eKvR+oIy3x9K89OyheD4T6BUm+38imYyir21wGJnpuT7qU95WvZNzAp3J9PkB+L+ KwphNgSi05oq2RR4T81s0vLkHxvV/NmEnvmGPmEafyIFwwLGGhisOJXNVZ8d/EkT 5cDVJsZ/FaqxmqxyaHD6aRw07/PMXsCPyxSmseyBEeiEscEHoRN2QEgLIonmAE4k Dm0aszZicfo9O5UxIkfLlGsZYI0P51Xp94c9Ifa7B9XTnvBrvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKAkvu7aPzHFRAfr4Dwua5mDmL1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZTFi YzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJiMmU4MmQvZGUxYmM4MGYtNWQ1Ny00 Yjk2LTg4MzQtNTc0ZTliYjJlODJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4 MzQtNTc0ZTliYjJlODJkL2RlMWJjODBmLTVkNTctNGI5Ni04ODM0LTU3NGU5YmIy ZTgyZC5jcmwwHwYDVR0jBBgwFoAUe28mCpExx7ylAoEKwNq9qG9EUbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRl OWJiMmU4MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAX1wOV/m8BLzUFbFZZC+9H vEC1GtZh9XjJtnQr44eMau35dETvqdROhFYZAOTSCQvcMghCt/+7Liz4ASRGfpGT nYxa6qHqMBWwOBWUIjN/I6kSuJ7HkwnsERYYLSDFxIHs6OQaaaEIcvowe8+LV+c0 9M0fFeTpHv3U12UWxezEXQDPurnvsgjfsLuxJXwtcB8wEYM1FWSI+wF6NZ5/BX61 ZTUK6qXoWSl14R0O4DlyezOO6HbS0dLFcyP9j1JXnpEvd9BznqSuLmdbXSPhbAGm cRJUJk7Xp2GBcqVcp0awbNuiPUJVL1sr/ZbG3/hcI9U7rqnbshABUdsODfg9L76M -----END CERTIFICATE-----Generated at Mon Aug 4 19:09:48 2025 by rpki-client