$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft File: 604a49f2-58d6-4709-bdaf-e7181b613801.mft (raw, json) Hash identifier: 2aI4yqSGmllgLLGqO7uBWsYb5ydNjC5cNatgzF7ajow= Subject key identifier: 11:5D:DB:00:BE:78:F1:4F:09:7A:D4:3C:D9:B3:00:6F:62:74:1E:CC Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584B22BA1E150DFACCCDA53FC300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft Manifest number: 010D0C9F4328584073A84B40EFAB577973049096 Signing time: Tue 09 Sep 2025 09:00:08 +0000 Manifest this update: Tue 09 Sep 2025 09:00:08 +0000 Manifest next update: Thu 11 Sep 2025 09:00:00 +0000 Files and hashes: 1: 0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa (hash: TdJUHLdOi1b3uAW57rgcU3RvjQ1iMoejGF82eRNGvg0=) 2: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (hash: ehU71ZCJSKk4FNNvouNdv1EPQ7Hg94QMD8n/f51Jbzo=) 3: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (hash: UdwnwDw3+CV6S+hahAaCCxt8iFQanWZt7ya+aI/+s78=) 4: 604a49f2-58d6-4709-bdaf-e7181b613801.crl (hash: HNGfhcTESYJHGnhw3vH7b0Ro2lLtlb1Ksrxf21kQ+qQ=) 5: c56c342d-12d7-376f-9120-568a7b965d35.roa (hash: oZXkN77ni8sfkI4w+24mNDUO9oBSVtxPMxUaJcmBfy8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:22:ba:1e:15:0d:fa:cc:cd:a5:3f:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Sep 9 09:00:08 2025 GMT Not After : Sep 11 09:00:00 2025 GMT Subject: CN=b92761d5-a927-4f89-8e58-dca01e1e4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:99:7f:0f:f6:4e:d7:ad:7e:4f:54:6d:84: 55:ca:05:80:eb:54:9d:60:cb:46:70:f5:80:35:f9: 29:84:df:26:aa:4b:a6:6f:af:d6:1d:6c:b1:f5:5e: 1a:69:e8:fb:77:67:ac:15:e9:23:b5:2c:db:9c:6d: db:0f:8a:37:9e:de:a9:9f:ae:df:28:82:2b:ea:0e: 00:2e:79:7e:af:69:66:18:d3:46:96:b0:12:9c:c9: 33:4f:fc:6f:52:b6:a7:11:2e:fa:26:6f:22:ec:4d: 75:4f:8c:1a:e4:ff:62:50:85:30:04:4c:a2:be:0c: 92:30:20:13:cd:d8:5b:82:9b:1f:88:9d:94:91:ac: 70:35:4e:49:52:95:88:45:0e:6b:73:e3:1d:07:7d: 1c:32:72:eb:88:05:35:dd:27:44:59:c0:c3:23:bd: 92:4e:3c:be:65:3c:71:c6:bc:f8:53:6f:95:32:b8: 81:7f:4c:df:41:55:45:57:b4:29:52:c3:a6:86:c5: b2:25:b6:d9:ec:e5:5b:87:e4:de:ef:95:5c:82:37: 47:60:a1:ba:77:e0:14:d4:16:1c:a4:f5:6b:f7:95: 19:2f:09:a4:95:b8:aa:eb:90:04:3d:77:42:fd:51: a5:59:19:19:a3:b2:2e:c8:37:aa:bd:ca:da:41:75: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5D:DB:00:BE:78:F1:4F:09:7A:D4:3C:D9:B3:00:6F:62:74:1E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:93:1b:15:ad:99:66:9e:99:a2:52:fe:b5:be:a3:a6:5f:34: 74:a3:20:39:07:2c:68:58:b2:91:f4:a7:ad:c4:b4:e0:af:55: 92:08:5b:16:17:9e:f4:a2:8a:22:11:7b:90:5c:19:28:87:de: 81:ec:cc:c8:65:5b:74:c8:2c:59:88:ce:a5:0a:69:d4:13:52: 2b:5b:d7:2f:78:83:10:c3:54:b3:3a:f7:d9:53:48:1c:7a:47: 7a:88:63:4c:b0:17:c5:86:1e:90:c5:a0:53:6b:25:74:3d:d3: fc:d5:87:bf:3c:ef:1a:60:97:d5:0d:9d:13:18:c0:64:a2:f2: 41:b3:db:e2:2a:31:ae:48:99:99:35:4a:69:9c:55:79:9f:59: 1e:f5:e7:b0:9f:92:6d:ad:d7:0f:62:a4:df:67:86:2c:c4:bc: c2:08:6f:7c:79:5a:e6:15:02:89:16:d1:32:f5:32:97:aa:e9: 73:cf:62:7c:5c:3c:b4:84:79:cc:82:55:3b:58:57:16:f2:4c: e4:7c:00:3f:2d:73:c4:aa:0a:49:11:27:f6:d9:5a:70:ea:96: 0a:2d:60:2d:65:33:d9:94:72:eb:4c:78:df:11:31:42:50:22: e7:49:45:06:aa:8a:c3:fe:78:14:65:7c:3e:9c:9f:58:29:5b: fa:51:e5:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsiuh4VDfrMzaU/wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDkwOTA5MDAwOFoXDTI1MDkxMTA5MDAwMFowLzEtMCsGA1UEAxMk YjkyNzYxZDUtYTkyNy00Zjg5LThlNTgtZGNhMDFlMWU0NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTeZfw/2Ttetfk9UbYRVygWA61SdYMtGcPWA NfkphN8mqkumb6/WHWyx9V4aaej7d2esFekjtSzbnG3bD4o3nt6pn67fKIIr6g4A Lnl+r2lmGNNGlrASnMkzT/xvUranES76Jm8i7E11T4wa5P9iUIUwBEyivgySMCAT zdhbgpsfiJ2UkaxwNU5JUpWIRQ5rc+MdB30cMnLriAU13SdEWcDDI72STjy+ZTxx xrz4U2+VMriBf0zfQVVFV7QpUsOmhsWyJbbZ7OVbh+Te75VcgjdHYKG6d+AU1BYc pPVr95UZLwmklbiq65AEPXdC/VGlWRkZo7IuyDeqvcraQXU3pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBFd2wC+ePFPCXrUPNmzAG9idB7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvNjA0YTQ5ZjItNThkNi00 NzA5LWJkYWYtZTcxODFiNjEzODAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCokxsVrZlmnpmiUv61vqOm XzR0oyA5ByxoWLKR9KetxLTgr1WSCFsWF570oooiEXuQXBkoh96B7MzIZVt0yCxZ iM6lCmnUE1IrW9cveIMQw1SzOvfZU0gcekd6iGNMsBfFhh6QxaBTayV0PdP81Ye/ PO8aYJfVDZ0TGMBkovJBs9viKjGuSJmZNUppnFV5n1ke9eewn5JtrdcPYqTfZ4Ys xLzCCG98eVrmFQKJFtEy9TKXqulzz2J8XDy0hHnMglU7WFcW8kzkfAA/LXPEqgpJ ESf22Vpw6pYKLWAtZTPZlHLrTHjfETFCUCLnSUUGqorD/ngUZXw+nJ9YKVv6UeXl -----END CERTIFICATE-----Generated at Tue Sep 9 15:34:45 2025 by rpki-client