$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft File: 9f8abfb1-5f91-4570-a775-7435d3e52012.mft (raw, json) Hash identifier: pW19l2gGwJzfEHUNkEfEdyemfoG+LcbbwSHku/oBRXA= Subject key identifier: 00:86:22:91:E1:03:B7:06:36:05:13:08:60:BF:4C:44:17:1B:45:63 Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584A745C28315DA5FE156A46FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft Manifest number: 010D0C9F4328584073A82D5F5401C587F87D9D14 Signing time: Tue 08 Jul 2025 22:00:09 +0000 Manifest this update: Tue 08 Jul 2025 22:00:09 +0000 Manifest next update: Thu 10 Jul 2025 22:00:00 +0000 Files and hashes: 1: 20ba3136-7192-3d31-ba1d-b329c8840df5.roa (hash: rAl6p2BzVCQoFo6AbqHkmf/iXy1EGnU+bymAml7i/AM=) 2: 907a2032-3d7d-36e2-bc36-8924c1c162b7.roa (hash: 2Nbn4GKa9NuHcb5HbCfWAECGhx2t2ePW4kVzK9G9eSI=) 3: 9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa (hash: WxTzRWTahEIRDGYk4vMH6P8V90cfq/vlx2XtbkMjqH8=) 4: 9f8abfb1-5f91-4570-a775-7435d3e52012.crl (hash: Kprnc6wuVGxA8MCxaRt16FXWVf0UDO5FDAZG9oCXmlg=) 5: e0533640-95af-39f9-bfa9-1881a9fbeefb.roa (hash: rP22jywEcXpcX6W97q+05bRZzEuxt57QDhOI/yG18hY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:5c:28:31:5d:a5:fe:15:6a:46:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Jul 8 22:00:09 2025 GMT Not After : Jul 10 22:00:00 2025 GMT Subject: CN=381517fc-5c9a-4964-9b54-56e1288e6ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0b:43:8b:95:cc:ed:a8:dc:f9:35:b8:81:97: 89:bf:ab:5a:fe:bf:7d:cc:47:ea:ec:88:3c:72:98: 36:f6:4a:05:50:8b:d7:4a:1f:bc:0e:58:29:55:27: b7:d9:ef:5a:95:e0:a6:85:7c:21:4a:e6:70:20:b4: fe:12:eb:68:ea:27:ad:7f:e4:9e:86:6c:0a:bf:d6: 2d:6c:8c:60:c7:c3:07:63:53:5a:0b:89:ed:65:f2: 6c:69:a7:ff:9f:90:fa:31:7b:d9:7f:ed:f0:a9:b4: ab:f3:34:90:64:1a:47:26:5f:c0:94:a0:d2:89:5a: df:6d:4b:ef:7c:ea:3f:d1:d6:13:e6:6d:67:dc:82: f5:fa:66:2c:3a:ac:8a:ae:a6:1d:0a:43:fc:66:6e: 43:a4:28:7d:bb:c6:0e:1c:e4:34:aa:0d:d9:e5:48: 30:1b:71:4f:6c:28:f5:4e:31:c0:c1:38:d5:ee:6e: 87:58:dc:28:dc:a2:1e:d7:56:a3:99:09:4c:ef:8d: 2a:92:3a:bc:a1:2c:7c:b6:82:96:91:ee:df:87:d0: eb:23:76:f0:19:ee:ca:33:61:fa:41:be:9c:59:2d: 74:75:56:0f:9a:e7:56:84:8c:23:06:6e:0d:aa:bb: 6d:81:82:c3:89:56:96:51:37:12:bf:ef:b7:83:de: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:86:22:91:E1:03:B7:06:36:05:13:08:60:BF:4C:44:17:1B:45:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3c:76:97:65:0c:2c:1d:35:72:1d:65:7d:55:47:25:48:b8: 3f:ef:4e:87:2e:eb:d7:37:1c:a0:54:00:ab:2d:08:84:ec:55: fb:11:09:e9:df:4f:7c:dc:21:bf:c6:d4:e1:b0:10:09:32:26: e4:9b:a6:d8:96:c9:4a:07:5c:75:47:71:e5:20:c5:8a:df:f5: 80:b2:d6:0c:83:e9:77:37:d6:ad:b0:c1:78:e4:17:7e:14:4a: 3c:55:c0:4e:98:d2:0b:49:07:d7:a9:e6:d1:4d:6b:7e:c6:41: d0:b9:c7:cb:d1:0a:67:e2:a9:6f:a7:e7:f6:45:47:ba:f2:fd: 4f:40:18:1a:bd:7b:b4:0a:ed:81:2a:ab:45:63:89:a3:4c:2c: 67:9f:35:f9:de:68:00:4d:d5:ef:0b:3a:23:ca:6d:f8:8c:fa: d7:68:a7:c1:4e:f0:7d:d1:fa:99:7d:dd:31:92:6f:e5:0e:6d: 93:34:98:a9:6a:bc:b4:9a:2e:af:e0:ec:7b:3f:92:dc:b0:e2: 0a:be:18:da:64:d4:e7:a1:46:1a:c8:4c:ed:05:13:26:cb:8c: 30:28:43:42:8c:06:31:be:24:62:d5:4d:4d:41:0e:ed:c8:a9: a6:49:8f:af:fa:ae:40:be:a8:68:52:15:f7:70:89:19:26:45: b1:8a:52:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0XCgxXaX+FWpG/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI1MDcwODIyMDAwOVoXDTI1MDcxMDIyMDAwMFowLzEtMCsGA1UEAxMk MzgxNTE3ZmMtNWM5YS00OTY0LTliNTQtNTZlMTI4OGU2YWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQtDi5XM7ajc+TW4gZeJv6ta/r99zEfq7Ig8 cpg29koFUIvXSh+8DlgpVSe32e9aleCmhXwhSuZwILT+Euto6ietf+SehmwKv9Yt bIxgx8MHY1NaC4ntZfJsaaf/n5D6MXvZf+3wqbSr8zSQZBpHJl/AlKDSiVrfbUvv fOo/0dYT5m1n3IL1+mYsOqyKrqYdCkP8Zm5DpCh9u8YOHOQ0qg3Z5UgwG3FPbCj1 TjHAwTjV7m6HWNwo3KIe11ajmQlM740qkjq8oSx8toKWke7fh9DrI3bwGe7KM2H6 Qb6cWS10dVYPmudWhIwjBm4NqrttgYLDiVaWUTcSv++3g95iRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFACGIpHhA7cGNgUTCGC/TEQXG0VjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOWY4YWJmYjEtNWY5MS00 NTcwLWE3NzUtNzQzNWQzZTUyMDEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApPHaXZQwsHTVyHWV9VUcl SLg/706HLuvXNxygVACrLQiE7FX7EQnp30983CG/xtThsBAJMibkm6bYlslKB1x1 R3HlIMWK3/WAstYMg+l3N9atsMF45Bd+FEo8VcBOmNILSQfXqebRTWt+xkHQucfL 0Qpn4qlvp+f2RUe68v1PQBgavXu0Cu2BKqtFY4mjTCxnnzX53mgATdXvCzojym34 jPrXaKfBTvB90fqZfd0xkm/lDm2TNJipary0mi6v4Ox7P5LcsOIKvhjaZNTnoUYa yEztBRMmy4wwKENCjAYxviRi1U1NQQ7tyKmmSY+v+q5AvqhoUhX3cIkZJkWxilKA -----END CERTIFICATE-----Generated at Wed Jul 9 20:34:53 2025 by rpki-client