$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft File: 700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft (raw, json) Hash identifier: JMUZ9guS7f37PEb9Qd0hOXiLR61nJozdBgfpAs+KtCU= Subject key identifier: 49:B7:B4:66:9F:FF:6A:D9:C3:57:17:29:EB:AB:02:A4:AD:75:41:53 Authority key identifier: B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9 Certificate issuer: /CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a Certificate serial: 010D0C9F4328584AFA216D4850C6D5879ACEE1A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft Manifest number: 010D0C9F4328584073A827D75E90CADDF4A5A9F2 Signing time: Mon 25 Aug 2025 20:00:08 +0000 Manifest this update: Mon 25 Aug 2025 20:00:08 +0000 Manifest next update: Wed 27 Aug 2025 20:00:00 +0000 Files and hashes: 1: 172a58ae-0159-3bc8-b56c-825b818215c1.roa (hash: 24XBYPqAY1LFcDlFZIPyS15xEiJSpQxW3mY9RtBS528=) 2: 700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl (hash: 0qbMgCL7c7lrciS4X0maXbTA729Qm2hBZzOVzLc7p0k=) 3: 84de89dc-15a9-3fcd-a3e0-3759e44040de.roa (hash: NLnXMozEQEngZkRTtySCDwGY4GRHRbaUnNZNUAiZsO8=) 4: ea7b7063-4ad5-39aa-843d-fbef4c39ccec.roa (hash: guUfI9IjC43mLotgwf61uIiGB1/7viJilEL3w0CMuEc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:21:6d:48:50:c6:d5:87:9a:ce:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a Validity Not Before: Aug 25 20:00:08 2025 GMT Not After : Aug 27 20:00:00 2025 GMT Subject: CN=849d13e2-e31a-4dd6-b755-b0363261110a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e9:fd:41:18:4d:3b:49:50:3a:d6:d5:f0:01: 08:19:59:b9:8b:af:38:9d:9a:d8:ee:10:2f:9a:a0: a6:ae:96:e4:7f:3f:56:b7:02:84:d2:46:49:6e:af: 82:d6:82:cd:6e:53:0a:e0:83:a3:7f:e3:9c:83:3d: 7a:00:08:61:29:cd:d5:41:52:ba:b2:21:ae:5b:98: 63:9d:69:ad:f1:96:ad:50:26:bb:76:34:9c:2d:88: a3:b1:bd:94:7d:15:69:56:52:c1:42:99:f0:0f:70: ae:bb:56:56:6d:9c:cc:7c:69:53:19:b8:c5:1e:c9: a2:3a:7a:62:8e:46:e5:ac:9f:1e:15:ee:0a:cd:12: 18:56:1e:03:2d:58:b2:3d:19:83:68:34:42:a5:ad: db:77:0a:be:3d:86:d6:80:72:e9:93:68:ca:3a:51: be:52:9a:97:4c:32:f0:42:63:da:23:cb:99:24:c1: 02:b3:fc:e6:54:f3:38:bb:3a:cb:0d:24:97:61:63: 50:2a:10:ce:8e:5f:d9:9f:88:ec:01:00:7d:ce:40: 5b:9f:a8:a1:a7:ee:bd:7c:fb:a2:98:f7:ec:25:1e: 2a:96:b6:f3:cc:e4:a4:12:5a:d1:63:fa:3d:9a:41: 86:a0:44:58:14:25:38:3b:8b:b9:98:6f:80:b0:5e: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:B4:66:9F:FF:6A:D9:C3:57:17:29:EB:AB:02:A4:AD:75:41:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.crl X509v3 Authority Key Identifier: keyid:B1:50:98:51:7F:5C:92:2A:E9:5E:CC:4C:9B:E4:A7:4C:59:A9:AC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700c41d3-ba1b-4d12-adcb-5f1a7ee4ac0a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:06:d4:4f:83:06:11:f2:48:c2:59:b8:89:c8:c5:d7:ba:f8: ab:94:1e:5d:b1:32:41:83:62:46:99:20:ba:66:28:1a:14:51: 29:e2:7a:79:b2:20:0c:82:3e:d1:6e:22:13:91:9c:2e:5c:19: 74:fa:38:e7:a1:0d:8d:76:0c:9d:5f:bd:8a:49:39:0c:df:19: 1d:24:3a:f8:bd:b2:19:a6:96:4d:df:8b:9f:3f:92:13:98:cf: 94:69:b6:16:20:19:e7:82:b7:58:f6:d8:24:b7:86:6a:57:f1: 85:ad:bf:19:71:f0:51:b9:6e:50:7f:ae:4c:71:9c:3e:d5:f5: 34:a2:49:94:04:0c:38:92:d5:85:17:c2:7f:9e:a3:a6:17:ab: fe:c8:6d:c6:c5:20:8c:18:77:b4:75:18:5e:b4:47:7d:27:9f: e4:5e:4f:3d:da:b6:33:70:70:6b:c3:86:12:b3:21:d6:5c:b4: 04:7a:5f:44:c5:6c:cc:fd:74:3c:41:6e:97:fa:0f:c0:f5:fb: 31:fc:c8:5f:ce:9f:98:b9:ac:ec:94:1e:77:13:a2:d8:a1:54: 2f:a4:35:5d:e7:1b:3c:98:45:97:bf:91:98:af:74:41:e5:bb: 33:8e:8a:37:41:0a:80:22:a6:1c:e1:e0:f8:46:5c:bf:e0:3e: 23:3b:c4:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr6IW1IUMbVh5rO4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwYzQxZDMtYmExYi00ZDEyLWFkY2ItNWYxYTdlZTRh YzBhMB4XDTI1MDgyNTIwMDAwOFoXDTI1MDgyNzIwMDAwMFowLzEtMCsGA1UEAxMk ODQ5ZDEzZTItZTMxYS00ZGQ2LWI3NTUtYjAzNjMyNjExMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7en9QRhNO0lQOtbV8AEIGVm5i684nZrY7hAv mqCmrpbkfz9WtwKE0kZJbq+C1oLNblMK4IOjf+Ocgz16AAhhKc3VQVK6siGuW5hj nWmt8ZatUCa7djScLYijsb2UfRVpVlLBQpnwD3Cuu1ZWbZzMfGlTGbjFHsmiOnpi jkblrJ8eFe4KzRIYVh4DLViyPRmDaDRCpa3bdwq+PYbWgHLpk2jKOlG+UpqXTDLw QmPaI8uZJMECs/zmVPM4uzrLDSSXYWNQKhDOjl/Zn4jsAQB9zkBbn6ihp+69fPui mPfsJR4qlrbzzOSkElrRY/o9mkGGoERYFCU4O4u5mG+AsF7XxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEm3tGaf/2rZw1cXKeurAqStdUFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDBj NDFkMy1iYTFiLTRkMTItYWRjYi01ZjFhN2VlNGFjMGEvNzAwYzQxZDMtYmExYi00 ZDEyLWFkY2ItNWYxYTdlZTRhYzBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAwYzQxZDMtYmExYi00ZDEyLWFk Y2ItNWYxYTdlZTRhYzBhLzcwMGM0MWQzLWJhMWItNGQxMi1hZGNiLTVmMWE3ZWU0 YWMwYS5jcmwwHwYDVR0jBBgwFoAUsVCYUX9ckirpXsxMm+SnTFmprOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDBjNDFkMy1iYTFiLTRkMTItYWRjYi01ZjFh N2VlNGFjMGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9BtRPgwYR8kjCWbiJyMXX uvirlB5dsTJBg2JGmSC6ZigaFFEp4np5siAMgj7RbiITkZwuXBl0+jjnoQ2Ndgyd X72KSTkM3xkdJDr4vbIZppZN34ufP5ITmM+UabYWIBnngrdY9tgkt4ZqV/GFrb8Z cfBRuW5Qf65McZw+1fU0okmUBAw4ktWFF8J/nqOmF6v+yG3GxSCMGHe0dRhetEd9 J5/kXk892rYzcHBrw4YSsyHWXLQEel9ExWzM/XQ8QW6X+g/A9fsx/Mhfzp+Yuazs lB53E6LYoVQvpDVd5xs8mEWXv5GYr3RB5bszjoo3QQqAIqYc4eD4Rly/4D4jO8S5 -----END CERTIFICATE-----Generated at Tue Aug 26 19:40:28 2025 by rpki-client