$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft File: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft (raw, json) Hash identifier: rk5zybgUlyh2KNWc3hUB+Dytp4mtlQxktQNslCcqAEY= Subject key identifier: 68:D7:C2:FB:C1:BF:A9:7B:3C:6D:40:DC:06:D7:80:BD:9F:0C:66:A7 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584AF8F7A466E417A3F4A885D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft Manifest number: 010D0C9F4328584073A84EB6BC7F2571415E206E Signing time: Mon 25 Aug 2025 10:00:08 +0000 Manifest this update: Mon 25 Aug 2025 10:00:08 +0000 Manifest next update: Thu 28 Aug 2025 10:00:00 +0000 Files and hashes: 1: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (hash: bkiYnoOqhcayItxqIMqmToTEmjpCrdnwKfTIphL8Rs4=) 2: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl (hash: iNdzuprH3id+LOFjXgxlFnzxS9aqTTv/ECVXyqr1v04=) 3: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (hash: f4o8EMDAUN0zE5N7+Z3n7nvQF7dH1xLVe+73jgxNSnQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:f7:a4:66:e4:17:a3:f4:a8:85:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Aug 25 10:00:08 2025 GMT Not After : Aug 28 10:00:00 2025 GMT Subject: CN=94b1eb83-8f99-4375-ae64-d6ced4e65b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:9a:b2:42:b3:62:10:e5:89:40:c0:0d:1e: bb:6a:ee:1c:03:8f:7e:4d:f7:dd:19:58:7c:f4:d1: c5:90:b1:89:34:08:45:2b:4e:4f:90:3a:5f:8b:3e: fb:f4:7b:9f:bb:4d:55:36:b7:87:ff:b1:ca:b4:27: 41:bd:90:04:cf:25:7c:29:80:19:67:2c:98:33:e6: 94:1c:2d:ca:ff:f2:82:1f:75:c4:94:ba:c6:ff:94: 2f:01:62:e1:32:5e:34:2b:70:8e:c0:86:dc:9a:22: 0b:60:38:b7:de:38:a0:7f:12:b1:85:e4:0c:50:cf: a8:70:e1:85:64:f0:d2:bb:eb:02:f6:f8:0f:bc:0a: cf:55:d6:06:50:91:b1:66:eb:c4:51:87:99:13:73: 4a:92:75:f5:a0:0c:f5:68:58:30:af:05:a4:c5:90: 71:d7:9f:33:fc:da:59:d8:96:21:61:a4:19:86:32: 4e:4d:2f:ee:54:62:16:b0:28:14:ad:e1:a4:09:f7: d6:f9:70:72:c6:17:95:2d:75:a8:23:e8:25:47:51: 84:0c:1d:23:7a:05:06:37:82:45:e0:19:3d:6b:fb: 62:8b:10:9f:9d:1c:a9:0d:49:51:1d:4c:38:c8:bb: 61:17:8f:56:48:e1:5c:2e:19:30:a4:43:43:98:0d: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:C2:FB:C1:BF:A9:7B:3C:6D:40:DC:06:D7:80:BD:9F:0C:66:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:87:94:dd:19:77:da:99:8a:a3:50:72:3f:44:60:67:d2:04: 3d:84:12:c1:09:9f:1b:a8:b3:47:2d:81:09:87:34:f7:91:a4: bc:cf:77:1d:a1:8f:a1:a7:24:02:39:5d:fa:bc:62:1f:34:59: ad:79:b9:62:7f:69:8d:d2:f6:f0:83:e9:65:51:16:22:03:77: 3b:d1:51:b7:76:1d:29:5b:81:6b:db:6a:76:d0:e1:8e:5d:a2: f3:80:61:40:77:2b:4f:60:10:c4:22:1a:e8:3e:09:74:b8:4d: fe:7e:2d:54:f9:36:95:4d:08:aa:2a:f6:2b:6f:6b:aa:f0:c5: 24:8a:6d:6f:14:9e:f7:7f:9d:80:6c:0b:d3:3d:56:8a:da:e6: 3c:bc:a6:9d:4a:cc:93:ab:64:62:87:18:bb:6e:e9:2e:f7:94: 1c:ad:2a:54:d7:4a:a1:00:24:62:ff:04:96:79:e9:26:cd:06: 89:36:20:eb:9e:22:eb:5c:dc:0c:b6:46:31:1e:c7:13:97:4d: a0:ee:a7:ab:a6:e2:42:c8:b5:6c:3e:24:40:1a:15:18:31:2f: 03:d7:65:7f:85:82:3b:d5:c0:de:bd:56:85:01:bb:98:36:f2: 43:d4:97:58:20:e8:91:e4:dc:ec:e1:4a:e6:38:98:85:0b:e2: 6a:b0:d6:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr496Rm5Bej9KiF2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MDgyNTEwMDAwOFoXDTI1MDgyODEwMDAwMFowLzEtMCsGA1UEAxMk OTRiMWViODMtOGY5OS00Mzc1LWFlNjQtZDZjZWQ0ZTY1Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb+askKzYhDliUDADR67au4cA49+TffdGVh8 9NHFkLGJNAhFK05PkDpfiz779Hufu01VNreH/7HKtCdBvZAEzyV8KYAZZyyYM+aU HC3K//KCH3XElLrG/5QvAWLhMl40K3COwIbcmiILYDi33jigfxKxheQMUM+ocOGF ZPDSu+sC9vgPvArPVdYGUJGxZuvEUYeZE3NKknX1oAz1aFgwrwWkxZBx158z/NpZ 2JYhYaQZhjJOTS/uVGIWsCgUreGkCffW+XByxheVLXWoI+glR1GEDB0jegUGN4JF 4Bk9a/tiixCfnRypDUlRHUw4yLthF49WSOFcLhkwpENDmA3x+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGjXwvvBv6l7PG1A3AbXgL2fDGanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWEwNDNlNTUtZTVkMi00 ZDcwLWJmZTgtN2Y0MTE0ZDNmYzJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKh5TdGXfamYqjUHI/RGBn 0gQ9hBLBCZ8bqLNHLYEJhzT3kaS8z3cdoY+hpyQCOV36vGIfNFmteblif2mN0vbw g+llURYiA3c70VG3dh0pW4Fr22p20OGOXaLzgGFAdytPYBDEIhroPgl0uE3+fi1U +TaVTQiqKvYrb2uq8MUkim1vFJ73f52AbAvTPVaK2uY8vKadSsyTq2Rihxi7buku 95QcrSpU10qhACRi/wSWeekmzQaJNiDrniLrXNwMtkYxHscTl02g7qerpuJCyLVs PiRAGhUYMS8D12V/hYI71cDevVaFAbuYNvJD1JdYIOiR5Nzs4UrmOJiFC+JqsNb9 -----END CERTIFICATE-----Generated at Tue Aug 26 05:39:37 2025 by rpki-client