$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft File: 39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft (raw, json) Hash identifier: Nvsj0oOovkG5UwVliG1bL6R51Hq4bEaio8HNZb3fbMw= Subject key identifier: 38:C2:71:40:9D:71:70:3F:6C:4C:83:C2:50:54:BD:6B:4F:40:84:82 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584B1C8FDA272815570D40AE9A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft Manifest number: 010D0C9F432858453383E948707D908C515BCFEB Signing time: Sun 07 Sep 2025 04:00:08 +0000 Manifest this update: Sun 07 Sep 2025 04:00:08 +0000 Manifest next update: Wed 10 Sep 2025 04:00:00 +0000 Files and hashes: 1: 1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa (hash: yxIniteDsWlz+BpKlVj+hxq6jwg7Krbqyr3hg2+tMIM=) 2: 39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl (hash: aQ6NghqYQLe2t4NyKIRicz+Fij2ezcdLNja3NTaSi1s=) 3: bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa (hash: ZNOJWlKijc/hB4O/JREFW/NFSy0Ls/h2KWvFif+MsNo=) 4: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (hash: g/pxKEoFFaMOQRm16X6VN0UxeV1URV4qCDyAKh7M65g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:8f:da:27:28:15:57:0d:40:ae:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Sep 7 04:00:08 2025 GMT Not After : Sep 10 04:00:00 2025 GMT Subject: CN=8dcaff7d-6d70-4ffe-991f-a58cf61326cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:62:39:21:95:65:63:23:47:35:37:5c:f6: 0f:c1:40:a1:8a:c9:d2:69:01:b6:48:4c:27:01:eb: d5:a1:4f:b0:16:27:42:5c:1d:3c:19:9e:8d:45:0c: 3e:c3:82:a8:73:a7:98:2a:01:a9:c4:60:6c:95:b2: a5:01:ed:50:a7:15:7b:70:2b:b4:5f:87:15:a3:0b: f7:6f:ff:1b:e0:a6:b9:5e:93:33:b7:a2:24:e5:f2: 52:81:64:8b:76:c4:d9:97:0a:fa:f2:31:4a:33:fc: ce:00:5b:0d:72:bc:e3:3f:15:ee:a4:9b:e0:65:2d: 0f:f9:49:78:e2:2d:86:80:16:df:4b:b5:58:78:64: 15:d8:42:a5:2f:ab:2d:b3:8f:57:20:6b:df:0f:23: 5a:c5:3b:ca:62:28:fa:a7:5c:b8:26:00:eb:dd:61: 11:1c:61:17:4e:f4:60:ea:15:0a:0e:20:17:dc:ed: b8:e2:a3:a2:fe:da:0b:51:ab:29:c3:50:4d:16:dc: 6c:8a:b8:10:80:d6:8c:c7:ed:1a:9f:f8:c8:c9:f0: 07:25:e2:c8:5d:99:66:07:57:97:11:e7:95:02:8c: cf:cd:21:96:10:5b:cb:a1:bf:65:e0:77:cc:2b:f4: c9:1c:95:d2:37:7e:7c:ba:08:8f:46:87:43:6d:96: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C2:71:40:9D:71:70:3F:6C:4C:83:C2:50:54:BD:6B:4F:40:84:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:58:94:b2:ee:65:bf:15:d6:1f:fa:10:16:53:39:b8:71:10: 86:35:bb:bf:c3:a6:2f:4d:ba:3d:8c:7b:5b:1f:a2:b8:d9:46: c5:5f:b0:87:3d:3e:8f:d8:cd:fa:17:c6:e1:45:31:69:37:c4: 09:eb:43:59:ff:1a:d1:0f:13:6e:e1:71:10:c4:3c:84:ad:6d: 28:76:62:ab:43:f8:d3:b8:cd:ce:4c:b6:69:d1:4e:4f:07:19: 2d:d7:ce:53:d0:5b:2c:f7:cb:ce:a8:38:c8:1f:aa:fb:ac:61: d0:ce:23:6a:37:a1:24:58:9e:e2:bd:7e:3b:94:da:e9:60:a8: e0:6d:64:3b:18:64:3f:2e:71:f1:7d:96:1b:f2:e2:94:7a:6e: 8b:5d:94:52:c7:05:5e:11:3d:ab:15:d0:cd:5d:cc:39:d7:39: 2a:57:74:8d:f6:ce:a1:6c:b3:1c:0f:dc:f7:0d:55:af:06:f0: 6e:c4:55:b5:1b:17:08:6e:f3:48:e6:f7:55:46:01:53:3d:d5: c3:cd:39:c4:10:f0:2c:09:68:5c:97:d0:17:e4:1d:f5:16:bf: 8a:2a:8f:cd:b4:fb:6e:0c:8e:2b:01:bf:29:ad:a9:6a:2c:aa: 81:65:51:df:01:26:4b:f6:c9:d3:6d:2e:87:15:1e:84:8c:1f: 2f:74:04:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEscj9onKBVXDUCumgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI1MDkwNzA0MDAwOFoXDTI1MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk OGRjYWZmN2QtNmQ3MC00ZmZlLTk5MWYtYTU4Y2Y2MTMyNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKJiOSGVZWMjRzU3XPYPwUChisnSaQG2SEwn AevVoU+wFidCXB08GZ6NRQw+w4Koc6eYKgGpxGBslbKlAe1QpxV7cCu0X4cVowv3 b/8b4Ka5XpMzt6Ik5fJSgWSLdsTZlwr68jFKM/zOAFsNcrzjPxXupJvgZS0P+Ul4 4i2GgBbfS7VYeGQV2EKlL6sts49XIGvfDyNaxTvKYij6p1y4JgDr3WERHGEXTvRg 6hUKDiAX3O244qOi/toLUaspw1BNFtxsirgQgNaMx+0an/jIyfAHJeLIXZlmB1eX EeeVAozPzSGWEFvLob9l4HfMK/TJHJXSN358ugiPRodDbZZBiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDjCcUCdcXA/bEyDwlBUvWtPQISCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvMzk2NjdmOGItZTdiNy00 YzM0LWFhYTAtMDBmZGRiZWVmNDhkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNWJSy7mW/FdYf+hAWUzm4 cRCGNbu/w6YvTbo9jHtbH6K42UbFX7CHPT6P2M36F8bhRTFpN8QJ60NZ/xrRDxNu 4XEQxDyErW0odmKrQ/jTuM3OTLZp0U5PBxkt185T0Fss98vOqDjIH6r7rGHQziNq N6EkWJ7ivX47lNrpYKjgbWQ7GGQ/LnHxfZYb8uKUem6LXZRSxwVeET2rFdDNXcw5 1zkqV3SN9s6hbLMcD9z3DVWvBvBuxFW1GxcIbvNI5vdVRgFTPdXDzTnEEPAsCWhc l9AX5B31Fr+KKo/NtPtuDI4rAb8pralqLKqBZVHfASZL9snTbS6HFR6EjB8vdASR -----END CERTIFICATE-----Generated at Sun Sep 7 14:18:36 2025 by rpki-client