$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: JsozREr1DvR2Hml9V9kF0MTF6snh5xbGjh54cxgcqic= Subject key identifier: 77:70:6A:82:16:AF:29:AB:3C:BF:CA:47:AC:48:53:D2:93:8D:46:33 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584B36F78E611768F201240E0130 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C62C Signing time: Tue 16 Sep 2025 15:00:03 +0000 Manifest this update: Tue 16 Sep 2025 15:00:03 +0000 Manifest next update: Thu 18 Sep 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: fJ9So1lHtibUMBJjENYtAULCMEv+c/OJlL0O1S5IlyA=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: t2noZZW5iN8z6/bbwUjjCCx2LuRDbH4RwsxP9qjO2oU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:f7:8e:61:17:68:f2:01:24:0e:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Sep 16 15:00:03 2025 GMT Not After : Sep 18 15:00:00 2025 GMT Subject: CN=a34397b4-2b4f-4efc-a92c-0b09d1ff32ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:15:6e:44:b2:7a:dd:ab:cc:c8:50:4a:da:aa: 00:45:86:b1:2b:9f:f6:ed:4f:74:7d:ac:76:d4:5b: 57:bb:37:b1:c9:8c:50:e7:7d:0d:05:6a:cd:57:85: e1:09:44:fc:aa:35:9c:47:fc:26:7b:a7:1c:ac:39: dc:b0:17:06:f1:c3:ef:d7:c3:f4:1c:91:43:50:73: f9:0a:3b:d5:dc:66:d7:f9:db:29:66:cf:d8:55:b4: f2:9c:e9:c3:f0:bf:54:a9:c8:4c:0a:c1:59:4e:e6: 52:51:07:a4:53:08:1a:8b:b9:5b:d7:3d:02:79:cc: 69:b9:ef:23:b4:4e:aa:18:b6:1f:68:f5:62:44:03: 71:62:57:87:ba:e7:1b:b5:56:61:2a:e0:ef:73:d0: 30:68:89:81:90:37:06:15:9a:74:53:38:cc:69:10: e0:94:cb:d1:86:5a:51:28:7e:e3:3e:94:24:1f:76: d0:67:c4:b7:46:54:5d:96:5f:98:ad:ec:1e:ca:bf: 06:b7:90:48:77:72:93:cb:22:28:20:8c:a4:66:23: 6f:38:81:85:6d:b2:05:f9:bf:20:c9:f4:2d:fb:37: a3:37:63:17:bf:87:13:9c:d2:4b:c6:b7:82:ba:cc: 27:a9:5a:ec:dc:f3:1c:86:f1:e4:df:20:69:30:f3: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:6A:82:16:AF:29:AB:3C:BF:CA:47:AC:48:53:D2:93:8D:46:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:27:e3:0a:7c:be:00:62:67:d0:ba:c4:c3:01:89:d1:20:08: 69:1b:6c:29:34:e8:7b:9c:25:99:1a:89:6c:98:75:04:02:ee: e6:a2:39:fa:5d:db:25:67:c7:66:2c:f7:30:e0:c0:bc:52:71: 2c:97:5f:32:2b:38:24:e2:e9:5f:82:bd:10:01:94:6f:19:c3: 6c:1f:89:31:7d:fc:6e:02:26:19:4c:90:23:b2:d5:64:5c:eb: e0:c8:a5:ac:19:82:89:48:38:0d:96:aa:7b:10:99:ec:9b:03: 9d:d4:b0:26:bf:ac:a6:47:be:69:6e:f5:59:c5:e9:6c:f3:e1: 3c:50:0f:c0:30:8e:61:8d:db:f1:53:d5:6e:5f:46:ac:6a:94: f2:cb:88:c5:02:47:9a:b7:d2:66:4c:b3:43:3f:a6:23:66:6f: 26:ff:f6:15:41:c9:34:09:dc:4d:26:ce:84:a4:c5:8a:ac:57: 0b:fe:61:10:b8:ba:80:02:63:ce:26:4f:fc:13:e8:de:ce:69: 96:42:9b:fb:48:83:87:d3:d1:2f:26:3f:b8:11:b2:87:75:a5: 3c:c4:d7:a1:26:e7:28:2e:9e:95:c2:40:a4:92:e0:6e:15:86: 5a:03:09:02:d5:16:5c:4f:ee:9f:b1:7e:24:ca:07:bc:3e:8f: 80:66:54:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs2945hF2jyASQOATAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MDkxNjE1MDAwM1oXDTI1MDkxODE1MDAwMFowLzEtMCsGA1UEAxMk YTM0Mzk3YjQtMmI0Zi00ZWZjLWE5MmMtMGIwOWQxZmYzMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBVuRLJ63avMyFBK2qoARYaxK5/27U90fax2 1FtXuzexyYxQ530NBWrNV4XhCUT8qjWcR/wme6ccrDncsBcG8cPv18P0HJFDUHP5 CjvV3GbX+dspZs/YVbTynOnD8L9UqchMCsFZTuZSUQekUwgai7lb1z0Cecxpue8j tE6qGLYfaPViRANxYleHuucbtVZhKuDvc9AwaImBkDcGFZp0UzjMaRDglMvRhlpR KH7jPpQkH3bQZ8S3RlRdll+Yreweyr8Gt5BId3KTyyIoIIykZiNvOIGFbbIF+b8g yfQt+zejN2MXv4cTnNJLxreCuswnqVrs3PMchvHk3yBpMPODFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHdwaoIWrymrPL/KR6xIU9KTjUYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2J+MKfL4AYmfQusTDAYnR IAhpG2wpNOh7nCWZGolsmHUEAu7mojn6XdslZ8dmLPcw4MC8UnEsl18yKzgk4ulf gr0QAZRvGcNsH4kxffxuAiYZTJAjstVkXOvgyKWsGYKJSDgNlqp7EJnsmwOd1LAm v6ymR75pbvVZxels8+E8UA/AMI5hjdvxU9VuX0asapTyy4jFAkeat9JmTLNDP6Yj Zm8m//YVQck0CdxNJs6EpMWKrFcL/mEQuLqAAmPOJk/8E+jezmmWQpv7SIOH09Ev Jj+4EbKHdaU8xNehJucoLp6VwkCkkuBuFYZaAwkC1RZcT+6fsX4kyge8Po+AZlQW -----END CERTIFICATE-----Generated at Wed Sep 17 02:17:41 2025 by rpki-client