$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft File: 25422be5-720b-40bc-8a4d-02579ec1bead.mft (raw, json) Hash identifier: 7wBZ+PxHz+MWPuIIkytd5PCck1QECGZoRN1X82pYqBc= Subject key identifier: 69:53:27:41:B8:40:F7:4E:60:61:3F:D2:5C:94:D8:87:B1:6D:4B:59 Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584AC3CED0435F943A05CE7C9611 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft Manifest number: 010D0C9F4328584073A84B9C832FD0665142AA28 Signing time: Wed 06 Aug 2025 09:00:03 +0000 Manifest this update: Wed 06 Aug 2025 09:00:03 +0000 Manifest next update: Fri 08 Aug 2025 09:00:00 +0000 Files and hashes: 1: 25422be5-720b-40bc-8a4d-02579ec1bead.crl (hash: t05zjV33FwqJsRgJgBO7ULuRubrlPwvmQn5Q4Pzx6gQ=) 2: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (hash: SK0JnzeEEpQvlFtJJ9HsQnjHjh+1IGx/xZJFSO8SNT4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:ce:d0:43:5f:94:3a:05:ce:7c:96:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Aug 6 09:00:03 2025 GMT Not After : Aug 8 09:00:00 2025 GMT Subject: CN=41688e87-0204-4d17-8ef0-e0d9eaadc76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:ce:b3:78:cc:f5:9a:ad:6e:1e:45:6c:7c: f6:94:7c:ef:76:f2:1a:61:6d:2d:0d:c1:60:1a:d2: da:2a:77:db:0c:20:78:ec:fb:99:b5:19:e6:37:f9: 62:0e:f3:a3:ba:48:f5:a3:9c:ae:6c:4f:3b:97:1c: 28:1c:f1:e1:6d:a1:72:80:dc:b2:b4:ae:eb:49:3d: 89:66:b5:7d:0e:1b:ab:fb:a2:0b:3f:66:51:09:ed: d4:fe:7e:19:0a:a3:a7:6a:9a:9a:99:ef:fe:9f:50: 1f:a5:c4:9d:41:d1:03:d3:d0:c3:62:fe:90:e4:8a: 5b:c1:1b:83:b8:b2:8d:90:dd:a5:00:70:3b:56:d4: 09:d4:6c:2b:ce:55:70:db:82:91:79:49:19:a5:cc: 3d:0d:9d:a0:c1:f4:5f:5f:49:ff:ba:2c:95:2d:20: 62:a8:24:cd:91:1c:cf:24:a6:2c:c1:4e:28:bc:aa: b0:63:7f:19:fb:2e:6d:98:53:04:8b:96:4c:09:68: bf:e8:1d:a8:c7:69:44:51:1c:e8:58:2a:40:61:34: 02:fe:1d:4c:34:e5:91:e3:94:37:7a:24:7c:b8:16: 71:00:97:0f:4d:7b:ec:49:11:0f:97:6a:f2:3f:e5: 7e:93:0f:f7:f1:b8:2f:fd:6e:25:ca:fd:89:1a:59: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:53:27:41:B8:40:F7:4E:60:61:3F:D2:5C:94:D8:87:B1:6D:4B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:70:e5:28:d0:ed:cf:81:47:0b:5d:fe:8b:f9:c0:7f:c2:bd: f0:92:40:10:d8:62:f2:db:2a:f8:aa:4d:8a:e6:94:39:f5:9a: e7:29:9f:c2:ff:7f:90:0a:72:d2:7e:44:38:76:db:6d:0b:01: eb:7c:60:43:56:ba:5b:30:58:86:52:f6:dd:e0:b4:67:c5:cb: 82:3a:61:e6:7d:8d:4f:4d:12:3e:70:ec:9e:2d:2d:c0:c0:06: de:16:73:77:55:39:2e:ba:19:e0:55:23:9c:bd:44:f5:e2:52: a5:62:96:0b:bd:cc:6a:af:2d:1a:7c:7c:b7:34:a2:c0:1d:9c: f2:5a:f2:12:55:fe:19:3e:f8:1e:a0:c3:67:8a:ef:39:fa:21: 50:cd:20:b1:b0:da:6b:1b:93:bd:46:b2:7e:5e:ed:75:df:e1: a9:4b:b5:9e:f8:e8:8a:f5:3c:b0:67:2f:ed:8f:d3:f6:48:ae: bf:67:c6:67:4d:e3:23:01:f6:f5:b0:b4:dd:17:e1:66:02:38: bd:8f:f1:d1:da:b4:29:d5:54:d7:f6:2e:ac:90:32:f4:21:8a: 42:6a:14:44:a3:e9:dd:5a:54:d5:da:2f:20:08:2b:24:00:cd: ee:15:5d:cf:c2:de:47:94:34:7f:d8:bb:6c:f1:b6:57:57:1e: 4e:3d:f2:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErDztBDX5Q6Bc58lhEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI1MDgwNjA5MDAwM1oXDTI1MDgwODA5MDAwMFowLzEtMCsGA1UEAxMk NDE2ODhlODctMDIwNC00ZDE3LThlZjAtZTBkOWVhYWRjNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteLOs3jM9Zqtbh5FbHz2lHzvdvIaYW0tDcFg GtLaKnfbDCB47PuZtRnmN/liDvOjukj1o5yubE87lxwoHPHhbaFygNyytK7rST2J ZrV9Dhur+6ILP2ZRCe3U/n4ZCqOnapqame/+n1AfpcSdQdED09DDYv6Q5IpbwRuD uLKNkN2lAHA7VtQJ1GwrzlVw24KReUkZpcw9DZ2gwfRfX0n/uiyVLSBiqCTNkRzP JKYswU4ovKqwY38Z+y5tmFMEi5ZMCWi/6B2ox2lEURzoWCpAYTQC/h1MNOWR45Q3 eiR8uBZxAJcPTXvsSREPl2ryP+V+kw/38bgv/W4lyv2JGlnYkQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGlTJ0G4QPdOYGE/0lyU2IexbUtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMjU0MjJiZTUtNzIwYi00 MGJjLThhNGQtMDI1NzllYzFiZWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEcOUo0O3PgUcLXf6L+cB/ wr3wkkAQ2GLy2yr4qk2K5pQ59ZrnKZ/C/3+QCnLSfkQ4dtttCwHrfGBDVrpbMFiG Uvbd4LRnxcuCOmHmfY1PTRI+cOyeLS3AwAbeFnN3VTkuuhngVSOcvUT14lKlYpYL vcxqry0afHy3NKLAHZzyWvISVf4ZPvgeoMNniu85+iFQzSCxsNprG5O9RrJ+Xu11 3+GpS7We+OiK9TywZy/tj9P2SK6/Z8ZnTeMjAfb1sLTdF+FmAji9j/HR2rQp1VTX 9i6skDL0IYpCahREo+ndWlTV2i8gCCskAM3uFV3Pwt5HlDR/2Lts8bZXVx5OPfIy -----END CERTIFICATE-----Generated at Thu Aug 7 04:33:20 2025 by rpki-client