$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft File: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft (raw, json) Hash identifier: FRtHZhar+NyRI+M/wqpjbvMJ+r45Yb4XTXeG5zj4COs= Subject key identifier: A2:4D:CC:1F:B8:90:FB:26:FE:BD:BA:FE:71:32:B6:7F:9F:3C:95:16 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584AE9F729627E564ED989A4DA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft Manifest number: 010D0C9F4328584073A81C71C685F3E52EAFE230 Signing time: Wed 20 Aug 2025 01:02:03 +0000 Manifest this update: Wed 20 Aug 2025 01:02:03 +0000 Manifest next update: Thu 21 Aug 2025 17:00:00 +0000 Files and hashes: 1: 41149ca8-84ee-3c37-b491-83ba1a424870.roa (hash: +BVOj8rcVNdjJ0BleW9liYQkdAz/1IQxuSN2+FMfOHs=) 2: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl (hash: 9UJ4JQCeE+tiw5KGawfHUkxP2fsrF6145s2UqCbnsgM=) 3: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (hash: 39xE20B69sy3savN6964hQQCq0niPaSjh6QIJvnvFJk=) 4: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (hash: 8M3ZKvCjjzzF8dsQAfN+8uJZRMxpW07T1PhkTGE+DgI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f7:29:62:7e:56:4e:d9:89:a4:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Aug 20 01:02:03 2025 GMT Not After : Aug 21 17:00:00 2025 GMT Subject: CN=6e40745a-9c1c-44d8-9987-e8df74fa58b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:63:f0:d8:c5:57:93:da:5c:41:eb:76:6c:49: f9:69:88:83:bb:9d:4f:9b:1d:a2:1f:63:8f:24:3e: 87:16:f9:e5:14:6e:e1:e9:71:8f:67:7f:ee:31:0d: d2:28:be:1b:fe:63:40:5e:24:2a:6c:7f:64:a0:18: 0f:69:61:9c:82:18:f9:a2:0f:c2:e0:8f:29:89:29: d6:77:2e:3b:fc:df:eb:db:cd:1e:82:4b:58:2c:e8: 8e:98:38:30:15:a2:65:5f:27:80:4d:a3:29:57:13: 17:39:d7:28:fc:8c:00:81:f9:93:62:54:18:6b:1f: 2b:f3:f0:75:3d:b3:56:32:7f:50:4d:e0:c3:5d:1c: cc:78:92:e0:26:61:7b:9b:4c:e1:ea:65:b3:f3:34: f7:e2:05:48:70:ad:3a:54:94:23:36:05:a0:38:ec: 47:b0:b3:c3:7e:f8:4e:47:72:c4:4a:1b:9e:db:b5: 40:60:2d:14:06:4d:9b:9e:ba:b2:e8:c9:19:23:10: bb:ba:7d:5e:1d:3e:84:e1:2d:41:b2:0b:cb:1e:4d: 46:83:fa:16:10:fa:df:0a:e1:b4:48:df:33:da:e3: ce:1e:7c:08:15:06:27:f7:77:1f:39:7e:61:de:fa: 31:4f:92:a3:f9:49:6a:67:89:8c:93:a5:96:6b:e2: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:CC:1F:B8:90:FB:26:FE:BD:BA:FE:71:32:B6:7F:9F:3C:95:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:1c:42:4d:1e:f4:89:88:d3:ac:a5:1a:97:e7:de:90:22:1f: be:e5:d3:89:5a:3d:02:8b:e8:91:01:17:61:f2:63:42:2f:5b: da:aa:63:d3:88:4c:41:f4:20:85:10:13:6b:02:f0:84:3d:ea: a5:a7:2f:55:73:56:4c:3d:82:52:ce:17:01:7e:73:f6:e3:c9: 20:48:87:a9:10:31:1a:ae:c9:1a:df:18:c5:08:0c:e4:17:df: 68:2e:06:1b:2a:10:fb:0d:24:99:23:72:3b:e6:c1:d6:0d:ee: 63:2b:64:81:d0:53:58:33:8a:c3:93:5d:83:30:7c:7e:78:8c: 6f:c3:2c:dd:93:d5:99:18:a0:8c:81:ba:c1:ea:4d:61:8f:d9: 20:fd:79:d8:11:5d:d9:34:15:a6:29:7f:f0:73:65:be:2e:1c: 76:d0:5d:c4:e0:71:36:de:1d:ad:91:77:53:24:c7:be:3c:69: 9b:0a:cb:41:3c:0a:2e:20:62:1f:37:0a:7f:38:14:98:06:6f: 06:d9:25:55:6a:d1:61:c6:e6:9b:af:b3:2c:de:67:19:3a:da: cd:9c:d9:ac:40:e6:74:1b:b6:7a:ac:11:ab:22:98:93:69:33: 72:2f:b9:48:f2:38:ff:24:52:c4:81:55:6e:71:67:cb:26:19: 7c:6b:34:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErp9yliflZO2Ymk2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDgyMDAxMDIwM1oXDTI1MDgyMTE3MDAwMFowLzEtMCsGA1UEAxMk NmU0MDc0NWEtOWMxYy00NGQ4LTk5ODctZThkZjc0ZmE1OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82Pw2MVXk9pcQet2bEn5aYiDu51Pmx2iH2OP JD6HFvnlFG7h6XGPZ3/uMQ3SKL4b/mNAXiQqbH9koBgPaWGcghj5og/C4I8piSnW dy47/N/r280egktYLOiOmDgwFaJlXyeATaMpVxMXOdco/IwAgfmTYlQYax8r8/B1 PbNWMn9QTeDDXRzMeJLgJmF7m0zh6mWz8zT34gVIcK06VJQjNgWgOOxHsLPDfvhO R3LEShue27VAYC0UBk2bnrqy6MkZIxC7un1eHT6E4S1BsgvLHk1Gg/oWEPrfCuG0 SN8z2uPOHnwIFQYn93cfOX5h3voxT5Kj+UlqZ4mMk6WWa+JANwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKJNzB+4kPsm/r26/nEytn+fPJUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvNWFiYTRiN2EtZGU3Yi00 ZTg0LWI5MTMtYTFiZWRiZTU4ZjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoHEJNHvSJiNOspRqX596Q Ih++5dOJWj0Ci+iRARdh8mNCL1vaqmPTiExB9CCFEBNrAvCEPeqlpy9Vc1ZMPYJS zhcBfnP248kgSIepEDEarska3xjFCAzkF99oLgYbKhD7DSSZI3I75sHWDe5jK2SB 0FNYM4rDk12DMHx+eIxvwyzdk9WZGKCMgbrB6k1hj9kg/XnYEV3ZNBWmKX/wc2W+ Lhx20F3E4HE23h2tkXdTJMe+PGmbCstBPAouIGIfNwp/OBSYBm8G2SVVatFhxuab r7Ms3mcZOtrNnNmsQOZ0G7Z6rBGrIpiTaTNyL7lI8jj/JFLEgVVucWfLJhl8azTB -----END CERTIFICATE-----Generated at Wed Aug 20 17:12:28 2025 by rpki-client