$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft File: 52a20e5a-3a5d-4417-92d7-250e134c6d09.mft (raw, json) Hash identifier: b4DHsrmMmSfVYNw+sZf0X/L937rFnchveG4DLF1dWzc= Subject key identifier: 9F:8D:3B:CB:32:8C:B0:4D:F0:3D:60:0D:F4:41:5E:A3:2E:10:47:FC Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584AF9E5D24DC0D7373F3AB91440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft Manifest number: 010D0C9F4328584073A82194633A7F2D5BDD0F22 Signing time: Mon 25 Aug 2025 18:00:03 +0000 Manifest this update: Mon 25 Aug 2025 18:00:03 +0000 Manifest next update: Wed 27 Aug 2025 18:00:00 +0000 Files and hashes: 1: 1ed11bba-2055-382e-ae61-183dfc3956d0.roa (hash: CPTNydFZRv55zsJvokVcAjei4+QXiWP0aBZRlxu/rdI=) 2: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (hash: uCc3uq0rAE7AcH3/6QbvRO6ErCHTGxo4K0vSf9Q16zI=) 3: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (hash: RS8UpwvY7qIH+niRJ9o70Cd5QMtt5cXf084bdT1YcGk=) 4: 52a20e5a-3a5d-4417-92d7-250e134c6d09.crl (hash: 11X35WFzjkINxdngz3m98CJWzlz+ig47vDBEB7BcN/0=) 5: b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa (hash: 1XPiq6jTp2ugxFTePWPckrPkrMVx8id1rGqEs4WoBv0=) 6: d71bc207-ec65-3381-a9cd-02c1fbbed0b1.roa (hash: Uv01++AeIllk05V+eRPOZe/GE8TxEwgW6mbF/ANoJ/o=) 7: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (hash: UkBGSm6gTEWeeeJlmGMJnaeHmLHW8qonTv2deTj2HI0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:e5:d2:4d:c0:d7:37:3f:3a:b9:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Aug 25 18:00:03 2025 GMT Not After : Aug 27 18:00:00 2025 GMT Subject: CN=fb99511b-df79-413a-be99-c7114f1b41e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:e6:9d:d7:10:41:11:b7:55:d9:34:89:3b: 5c:75:8a:0e:b3:bf:ba:62:7f:a2:ef:05:c6:54:fc: a5:7a:a0:ae:05:e7:ff:cf:d8:17:57:b1:ac:92:50: 49:a7:01:44:40:c3:f7:fa:35:c6:2c:6c:8d:ff:38: 60:d3:58:90:56:2c:65:a0:70:d8:45:4c:de:a7:4f: ee:c3:b6:79:30:b7:77:95:a9:02:f1:e6:83:2f:45: 0d:14:d0:76:57:75:d4:2b:d3:4f:d3:54:01:04:2d: 2f:b4:ea:ca:7a:ec:1b:b7:b0:9b:0f:a1:13:12:b7: 97:4b:4d:34:74:d0:1b:15:17:3d:70:c4:20:da:d6: 2b:6f:24:c5:2a:68:07:c3:1d:3f:2c:c6:8c:bf:e1: 87:e0:47:c7:ad:bd:43:1b:64:62:f9:79:d3:ac:ca: 81:52:17:51:8b:4c:3e:3f:19:b2:30:18:6a:6d:5f: 18:87:33:85:cc:26:89:bb:30:44:84:f0:ae:a6:95: f9:f7:e2:d3:59:45:f6:0a:31:38:ac:64:4a:0f:b4: b5:61:cd:7f:eb:04:4d:c1:33:f1:ca:70:cd:b4:ca: 4e:39:eb:20:e0:ac:49:74:b0:53:b9:b7:0b:9d:c9: 7b:93:be:99:1c:fe:0b:4d:e9:92:32:33:8e:ca:c9: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8D:3B:CB:32:8C:B0:4D:F0:3D:60:0D:F4:41:5E:A3:2E:10:47:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a2:98:07:5a:fa:d8:3f:c1:5b:30:38:10:1a:6d:40:2c:2c: f3:39:ba:43:19:ea:14:6b:3c:65:43:83:35:9c:dc:25:75:eb: ab:af:c5:1f:bd:e0:f6:ca:d5:c2:ff:49:10:75:57:f6:e2:49: 94:73:c7:da:44:f9:57:ed:07:a0:9a:b6:2f:da:9f:01:83:6a: 17:2a:63:13:f7:d5:11:f5:f1:89:bd:4f:33:f5:55:41:24:d3: 4b:b4:db:b4:65:0d:c7:1d:49:73:3a:12:a2:05:66:42:cc:b0: bf:b1:91:84:3e:6c:6b:6e:5f:f5:6d:37:b2:2d:a7:55:79:c0: 3a:8d:e1:ac:9e:a7:07:a8:57:b4:83:db:f7:67:52:f3:96:ce: 52:8f:7e:f2:f4:25:bf:79:a4:3a:64:83:1d:33:6b:8d:fb:26: ca:00:13:12:38:fa:2b:c1:c4:7c:91:79:6d:1c:19:21:a8:26: 1b:36:e4:5a:5b:c8:72:c0:b4:d1:c3:9a:f9:0c:bb:d5:08:9f: f3:02:2d:de:63:a4:1a:e0:c2:a8:93:14:a9:ba:51:23:b7:8d: 30:7b:0c:33:f7:df:67:97:52:e9:8b:73:d8:20:5f:77:8e:34: b2:34:85:88:34:f2:10:47:77:d0:db:96:40:c1:51:9f:f6:56: 35:cd:fc:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr55dJNwNc3Pzq5FEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDgyNTE4MDAwM1oXDTI1MDgyNzE4MDAwMFowLzEtMCsGA1UEAxMk ZmI5OTUxMWItZGY3OS00MTNhLWJlOTktYzcxMTRmMWI0MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRPmndcQQRG3Vdk0iTtcdYoOs7+6Yn+i7wXG VPyleqCuBef/z9gXV7GsklBJpwFEQMP3+jXGLGyN/zhg01iQVixloHDYRUzep0/u w7Z5MLd3lakC8eaDL0UNFNB2V3XUK9NP01QBBC0vtOrKeuwbt7CbD6ETEreXS000 dNAbFRc9cMQg2tYrbyTFKmgHwx0/LMaMv+GH4EfHrb1DG2Ri+XnTrMqBUhdRi0w+ PxmyMBhqbV8YhzOFzCaJuzBEhPCuppX59+LTWUX2CjE4rGRKD7S1Yc1/6wRNwTPx ynDNtMpOOesg4KxJdLBTubcLncl7k76ZHP4LTemSMjOOysl8PQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ+NO8syjLBN8D1gDfRBXqMuEEf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNTJhMjBlNWEtM2E1ZC00 NDE3LTkyZDctMjUwZTEzNGM2ZDA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2opgHWvrYP8FbMDgQGm1A LCzzObpDGeoUazxlQ4M1nNwldeurr8UfveD2ytXC/0kQdVf24kmUc8faRPlX7Qeg mrYv2p8Bg2oXKmMT99UR9fGJvU8z9VVBJNNLtNu0ZQ3HHUlzOhKiBWZCzLC/sZGE Pmxrbl/1bTeyLadVecA6jeGsnqcHqFe0g9v3Z1Lzls5Sj37y9CW/eaQ6ZIMdM2uN +ybKABMSOPorwcR8kXltHBkhqCYbNuRaW8hywLTRw5r5DLvVCJ/zAi3eY6Qa4MKo kxSpulEjt40wewwz999nl1Lpi3PYIF93jjSyNIWINPIQR3fQ25ZAwVGf9lY1zfyV -----END CERTIFICATE-----Generated at Tue Aug 26 05:48:18 2025 by rpki-client