$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft File: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft (raw, json) Hash identifier: qRkGjEYDAEesZEnFTTTk+n4WXQSfPAJY/BcwcxwVyUA= Subject key identifier: EC:34:10:22:01:CE:E5:60:2A:32:90:DD:86:52:1F:8C:4F:69:07:AD Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584AFAD40D4FAA8E13525EECC500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft Manifest number: 010D0C9F4328584073A837989C436B4363A20E0E Signing time: Tue 26 Aug 2025 02:00:03 +0000 Manifest this update: Tue 26 Aug 2025 02:00:03 +0000 Manifest next update: Thu 28 Aug 2025 02:00:00 +0000 Files and hashes: 1: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (hash: 1sgmNfnbbiVLWVaplxkSWy5aNvY58bAHZPyyolsHRU4=) 2: 2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl (hash: tggZo2oxifE+fjj7NYOZbrSJMn3aQSYuyLj0aJG7uB0=) 3: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (hash: PHxz0dhEAuHCh3PuuIKqldrafwu3e1ehDbsaItPWbqs=) 4: 7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa (hash: ejfolScVUjLd3SD4wVVGBeESIxBA7yWkhzCadBHuYJM=) 5: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (hash: pdR1F+Zb+k/P+EYbIpJmmvSb1J5Ct1TVuhlgevgVzRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:d4:0d:4f:aa:8e:13:52:5e:ec:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Aug 26 02:00:03 2025 GMT Not After : Aug 28 02:00:00 2025 GMT Subject: CN=023161b5-34af-4961-a5da-b5a470b55e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cc:bc:27:db:01:cd:76:3f:53:6d:c7:8a:81: 22:17:77:2d:0f:e5:51:fb:ec:c2:07:dc:27:9d:e1: 1d:62:65:89:84:14:00:92:3e:3a:4d:58:47:f2:64: 17:8a:aa:d2:89:b0:16:d4:17:cc:0b:7b:36:05:50: e6:cc:de:f8:57:ff:95:de:22:f7:fb:28:a5:b6:52: 1e:a0:01:37:df:79:eb:12:c8:c7:b8:c7:42:b6:08: 58:f4:6f:d4:b6:55:cb:4a:f9:34:b4:c3:3e:a4:27: ef:ea:ad:44:f6:b5:83:33:ac:4b:fd:23:b3:c9:b2: f0:91:a3:ec:ed:43:67:ec:6f:92:cf:32:f3:2b:93: 82:84:7c:96:6f:99:01:d5:4c:24:66:a9:e3:13:69: 55:1b:9d:de:8d:9a:42:30:b6:1d:f8:40:07:e8:a9: b8:a1:cc:e0:55:d5:18:53:ab:ff:fc:fb:14:0e:fd: 2a:db:8d:01:ff:32:74:11:2e:5d:e8:c4:5b:50:db: f3:77:91:25:db:61:63:00:e4:26:c6:0c:c6:d4:0d: 14:a1:c4:93:c5:16:4a:fe:51:87:3f:d5:6d:70:ec: a6:05:b2:a2:a7:0e:d5:a5:59:8a:9e:56:e0:08:61: 16:a2:8d:58:51:b2:11:dd:66:19:ed:8a:92:90:0c: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:10:22:01:CE:E5:60:2A:32:90:DD:86:52:1F:8C:4F:69:07:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b3:7c:0c:ec:29:b5:e6:62:d3:f1:81:f9:0e:64:14:f0:12: fa:b2:9f:d0:45:49:f9:76:bd:bf:40:67:93:b3:64:e9:8e:00: bf:43:6d:12:83:22:51:2f:f3:b0:c2:7a:c9:1d:bb:2e:d8:af: 1a:2a:80:97:f2:d3:4f:c0:a5:7d:0d:0a:13:01:a4:37:79:84: 4a:1c:5b:88:2b:ed:06:d5:1e:12:7d:da:f6:fd:5e:54:0d:76: 73:56:31:b3:22:bb:39:9a:16:6e:32:18:01:e1:45:b4:1d:e4: 1b:f1:47:b8:cf:30:21:1c:7f:a7:77:5c:85:87:f6:6e:f2:97: 95:2f:4b:5a:40:be:fd:e5:0c:d2:c1:83:f6:76:88:e1:5b:6a: 8d:07:09:2d:b5:ae:08:d3:be:f3:f6:6e:94:38:e9:aa:e0:b7: 0c:69:bb:66:64:16:a3:95:e7:bd:f8:c3:38:e6:b0:c0:6c:40: 7e:b7:a5:52:f0:6b:b9:90:bb:e9:42:04:7d:e0:3f:4b:ec:f1: d1:79:f5:82:de:8f:f6:be:48:90:f4:d0:af:ba:1b:5d:fa:b2: a4:77:f2:21:75:ec:55:e3:72:ff:3c:e2:ca:42:53:db:67:6d: 9b:9e:be:d0:62:65:53:ed:bb:4c:59:65:11:2e:c5:96:6c:1b: 70:a0:28:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr61A1Pqo4TUl7sxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDgyNjAyMDAwM1oXDTI1MDgyODAyMDAwMFowLzEtMCsGA1UEAxMk MDIzMTYxYjUtMzRhZi00OTYxLWE1ZGEtYjVhNDcwYjU1ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcy8J9sBzXY/U23HioEiF3ctD+VR++zCB9wn neEdYmWJhBQAkj46TVhH8mQXiqrSibAW1BfMC3s2BVDmzN74V/+V3iL3+yiltlIe oAE333nrEsjHuMdCtghY9G/UtlXLSvk0tMM+pCfv6q1E9rWDM6xL/SOzybLwkaPs 7UNn7G+SzzLzK5OChHyWb5kB1UwkZqnjE2lVG53ejZpCMLYd+EAH6Km4oczgVdUY U6v//PsUDv0q240B/zJ0ES5d6MRbUNvzd5El22FjAOQmxgzG1A0UocSTxRZK/lGH P9VtcOymBbKipw7VpVmKnlbgCGEWoo1YUbIR3WYZ7YqSkAzTdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOw0ECIBzuVgKjKQ3YZSH4xPaQetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmU2OWU1NWQtM2JhZi00 MWU2LTllNjctYmJlNWVkODg4YmU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArs3wM7Cm15mLT8YH5DmQU 8BL6sp/QRUn5dr2/QGeTs2TpjgC/Q20SgyJRL/OwwnrJHbsu2K8aKoCX8tNPwKV9 DQoTAaQ3eYRKHFuIK+0G1R4Sfdr2/V5UDXZzVjGzIrs5mhZuMhgB4UW0HeQb8Ue4 zzAhHH+nd1yFh/Zu8peVL0taQL795QzSwYP2dojhW2qNBwktta4I077z9m6UOOmq 4LcMabtmZBajlee9+MM45rDAbEB+t6VS8Gu5kLvpQgR94D9L7PHRefWC3o/2vkiQ 9NCvuhtd+rKkd/IhdexV43L/POLKQlPbZ22bnr7QYmVT7btMWWURLsWWbBtwoCh3 -----END CERTIFICATE-----Generated at Tue Aug 26 05:33:54 2025 by rpki-client