$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft File: a2d891cb-6de8-4437-8155-3741bf9d4144.mft (raw, json) Hash identifier: TYurPsw1pITbV+0+dD6+GInCAdHlHFS0OzrjHuGnhUs= Subject key identifier: 01:86:72:63:1C:40:AC:E1:20:3C:03:D5:FA:91:01:F2:54:7B:22:60 Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C Certificate issuer: /CN=a2d891cb-6de8-4437-8155-3741bf9d4144 Certificate serial: 010D0C9F4328584B1BBF6D7B9D66653DC19B0380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft Manifest number: 010D0C9F432858458ECB1B3EED5A1E71A2177A4E Signing time: Sat 06 Sep 2025 21:00:08 +0000 Manifest this update: Sat 06 Sep 2025 21:00:08 +0000 Manifest next update: Mon 08 Sep 2025 21:00:00 +0000 Files and hashes: 1: 05b1b493-9d94-3e6b-81eb-2cf069390bb0.roa (hash: zHUYwpG9CgF39S+yohZ5RaNie5t1qwADUKIZJRRXLBk=) 2: 1a554d21-9e17-3f96-a94b-91c96fdfa6bb.roa (hash: 4oP7LxLLGSDl6HnbIizT57PxVCPdNOBQu09DtowzRkA=) 3: 211bb791-f615-328f-aa4a-b58ac1a58dd9.roa (hash: 6XvtDzKEGaOrJYyefvl2ecjslgcqrGjOkF3t/7LeOeA=) 4: 52d0dfb0-f716-3523-9842-7e8666069752.roa (hash: GqKvcG0kiOFhIXpk7lM+gMxtAHLYJ2zuyKfrziG31m0=) 5: a2d891cb-6de8-4437-8155-3741bf9d4144.crl (hash: +k2mETA2Oq4i3JD8HVZwcRXCLRTsH2TDbNq0gzUN/o8=) 6: e2ebf041-a9c7-3a68-89f8-8e2e34b4b4cb.roa (hash: CpEqlbINvkUuM47XDciqeHM+OsYtK8BtJCSUrGtTeRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1b:bf:6d:7b:9d:66:65:3d:c1:9b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144 Validity Not Before: Sep 6 21:00:08 2025 GMT Not After : Sep 8 21:00:00 2025 GMT Subject: CN=8baa8c84-c20e-4ed0-a445-b4ba8de237cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:92:ff:a7:2f:c7:05:87:8f:4c:3b:a0:06:bc: 40:69:c6:25:79:dd:5f:cd:50:61:65:8b:46:59:5b: 2d:83:ff:18:1f:60:34:7b:b0:4e:a2:e7:62:7f:0e: 37:c2:6c:c1:17:0e:9f:8e:80:d6:d9:36:41:a2:94: 64:15:ba:a2:cf:1a:70:19:58:8a:6f:d9:be:de:27: c5:da:ef:5f:8b:64:46:8c:fc:11:e6:45:3c:a8:e2: 1d:48:6d:46:3e:d5:60:62:7f:95:4e:6f:de:9a:a4: db:59:51:3d:e1:00:27:49:98:4d:59:e7:f0:d5:06: 03:f4:c0:23:96:d8:86:30:de:c3:14:87:5c:13:02: 23:88:3c:72:8f:d6:f2:90:fb:20:c1:c5:aa:8f:31: 01:52:05:33:a9:da:5e:e3:95:80:34:1e:9e:af:63: aa:14:64:34:2f:64:29:e4:bd:06:fd:54:9a:60:1e: 03:70:5a:07:11:9e:d7:2b:c1:6c:69:ca:58:c5:a3: 21:41:ba:d6:57:f9:fc:a4:b0:b3:4d:2c:c0:a9:a9: ec:93:22:fb:fb:a2:91:b2:c9:19:f7:19:c6:25:49: cb:86:17:a2:d9:97:95:21:2f:89:03:4c:2f:0c:04: a4:e2:b5:b3:77:85:85:f0:66:4e:6a:61:51:6e:1e: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:86:72:63:1C:40:AC:E1:20:3C:03:D5:FA:91:01:F2:54:7B:22:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl X509v3 Authority Key Identifier: keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5c:1b:5d:65:22:dc:f0:5b:36:3f:36:63:81:94:51:28:13: ab:e0:e7:d0:0c:64:ae:d2:09:e6:9a:06:e7:4c:3b:86:67:af: 60:16:28:1d:b6:b2:e2:ab:7a:90:d8:2c:38:37:4d:56:be:e0: 1f:01:3f:3f:93:a3:56:39:c1:41:3b:c4:37:93:11:ba:01:fc: 5f:3d:8f:37:33:37:55:96:63:1b:ea:d5:39:dd:a7:d4:55:ff: c3:db:31:67:c8:fe:be:92:e2:23:79:35:15:3a:b7:6d:30:d8: cf:d1:79:a2:d1:60:36:44:a5:ea:51:7b:d7:95:8c:7f:11:25: c1:f4:c3:45:d7:cc:90:e0:01:3c:97:32:1a:63:4c:3a:b3:5e: 5e:36:66:d3:48:f6:2b:19:d9:28:25:d7:32:25:b9:cf:af:8b: de:09:4a:68:2b:4d:23:01:47:03:df:da:f0:2c:5e:93:56:df: 15:fe:8b:57:91:6b:5c:f1:32:5d:62:1e:7e:67:15:9b:75:cd: c7:79:3a:b6:69:15:61:ca:02:fb:0e:15:de:57:d2:13:8c:1d: d0:ab:37:e6:57:d7:18:3b:d3:ff:9c:bd:be:fa:c8:bb:43:2a: 57:54:f2:21:1f:06:e5:9f:79:d4:c6:23:31:31:5a:71:36:9a: 9a:aa:bf:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsbv217nWZlPcGbA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJkODkxY2ItNmRlOC00NDM3LTgxNTUtMzc0MWJmOWQ0 MTQ0MB4XDTI1MDkwNjIxMDAwOFoXDTI1MDkwODIxMDAwMFowLzEtMCsGA1UEAxMk OGJhYThjODQtYzIwZS00ZWQwLWE0NDUtYjRiYThkZTIzN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5L/py/HBYePTDugBrxAacYled1fzVBhZYtG WVstg/8YH2A0e7BOoudifw43wmzBFw6fjoDW2TZBopRkFbqizxpwGViKb9m+3ifF 2u9fi2RGjPwR5kU8qOIdSG1GPtVgYn+VTm/emqTbWVE94QAnSZhNWefw1QYD9MAj ltiGMN7DFIdcEwIjiDxyj9bykPsgwcWqjzEBUgUzqdpe45WANB6er2OqFGQ0L2Qp 5L0G/VSaYB4DcFoHEZ7XK8FsacpYxaMhQbrWV/n8pLCzTSzAqanskyL7+6KRsskZ 9xnGJUnLhhei2ZeVIS+JA0wvDASk4rWzd4WF8GZOamFRbh4LiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAGGcmMcQKzhIDwD1fqRAfJUeyJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMmQ4 OTFjYi02ZGU4LTQ0MzctODE1NS0zNzQxYmY5ZDQxNDQvYTJkODkxY2ItNmRlOC00 NDM3LTgxNTUtMzc0MWJmOWQ0MTQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTJkODkxY2ItNmRlOC00NDM3LTgx NTUtMzc0MWJmOWQ0MTQ0L2EyZDg5MWNiLTZkZTgtNDQzNy04MTU1LTM3NDFiZjlk NDE0NC5jcmwwHwYDVR0jBBgwFoAUNRjObbLGRnGg5RoaN77iaavMDJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMmQ4OTFjYi02ZGU4LTQ0MzctODE1NS0zNzQx YmY5ZDQxNDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9XBtdZSLc8Fs2PzZjgZRR KBOr4OfQDGSu0gnmmgbnTDuGZ69gFigdtrLiq3qQ2Cw4N01WvuAfAT8/k6NWOcFB O8Q3kxG6AfxfPY83MzdVlmMb6tU53afUVf/D2zFnyP6+kuIjeTUVOrdtMNjP0Xmi 0WA2RKXqUXvXlYx/ESXB9MNF18yQ4AE8lzIaY0w6s15eNmbTSPYrGdkoJdcyJbnP r4veCUpoK00jAUcD39rwLF6TVt8V/otXkWtc8TJdYh5+ZxWbdc3HeTq2aRVhygL7 DhXeV9ITjB3QqzfmV9cYO9P/nL2++si7QypXVPIhHwbln3nUxiMxMVpxNpqaqr8a -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:24 2025 by rpki-client