$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft File: 804e20e1-66d3-4b19-8356-82071ce2a249.mft (raw, json) Hash identifier: UadCF/JjXYMCdM+9CUUnlVI5M9paaG2Gs+pbrIRkHjc= Subject key identifier: 77:90:D6:28:30:F1:76:9B:F1:93:FC:B0:60:E7:D7:66:A1:32:10:DA Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F4328584AE99CD810E59AD45BA1398C70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft Manifest number: 010D0C9F4328584073A82BE94AF06297D1D97BD6 Signing time: Tue 19 Aug 2025 22:00:03 +0000 Manifest this update: Tue 19 Aug 2025 22:00:03 +0000 Manifest next update: Thu 21 Aug 2025 22:00:00 +0000 Files and hashes: 1: 804e20e1-66d3-4b19-8356-82071ce2a249.crl (hash: jDqpDyDBQ3/HSqrMH/2+Or7z0G6PyyDML6E5qJdilvg=) 2: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (hash: xz0K5N11pkR4Ek5gVFi+gmsk9CmLhN3y0r5erIuD8vk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:9c:d8:10:e5:9a:d4:5b:a1:39:8c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Aug 19 22:00:03 2025 GMT Not After : Aug 21 22:00:00 2025 GMT Subject: CN=4ebb856e-abf8-4ec9-9d0e-0379b790f03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:00:c6:16:c8:bc:9e:37:a3:fb:5d:b9:c7:07: 65:07:f0:ae:d7:f0:e2:98:4c:c4:f3:6b:df:1a:b0: 7d:1a:d7:8c:d3:26:0e:e5:5e:36:c9:f9:4f:1b:74: f5:ff:a8:80:11:71:03:ff:0c:2b:e2:ec:b2:ec:98: 28:b9:75:2a:66:1a:6d:93:b5:6a:14:6c:06:f9:54: 75:7a:a7:cb:45:c2:52:a4:1d:4e:00:2b:19:fc:48: 13:d5:43:16:02:bf:d9:3e:b9:0b:39:fc:d2:24:7b: 37:e2:f4:98:96:bc:c2:6b:71:33:9d:3b:06:86:17: 26:94:9d:14:f0:7c:c0:0c:8e:30:2b:a4:af:87:75: f9:b3:c9:d2:ad:2f:fc:d0:cf:de:25:af:2a:ee:73: e6:9a:db:35:7b:46:0d:a9:2b:5e:85:9f:13:c3:b1: 9b:46:87:cf:4c:cf:2d:25:52:32:6f:0e:0a:c3:ec: d1:96:87:9a:6a:fd:fa:56:2f:54:f3:e4:51:c2:f1: 33:73:b4:75:15:87:a1:01:f9:fd:8b:47:b5:cb:5c: aa:08:5a:5d:2a:83:2b:67:4c:97:f5:bd:95:74:22: b1:6e:e9:41:04:b4:11:25:da:3a:5f:0e:64:a1:ee: 9d:a1:61:2f:67:56:41:85:96:98:81:74:be:42:f8: 7c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:90:D6:28:30:F1:76:9B:F1:93:FC:B0:60:E7:D7:66:A1:32:10:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6a:b8:26:e8:4e:d4:44:d2:35:5c:d4:77:63:37:0e:4e:03: c3:5f:10:ca:58:fd:8c:c5:79:e7:88:1d:1f:46:d2:a7:97:d9: 22:88:ff:78:49:a5:7a:cd:85:28:3a:fd:4c:7a:50:ad:e8:cf: f9:df:92:b6:db:bc:7f:36:29:0e:74:5a:74:c9:c4:44:d1:e9: 4c:f8:d5:ed:46:a7:ae:64:b5:58:c5:3a:51:8a:f9:76:31:8c: b3:fa:b8:10:f4:7c:20:82:59:e2:ae:6f:af:f7:70:d3:7c:1c: 00:1b:cc:f8:a9:25:49:2a:fb:ec:15:52:a7:bf:d6:be:eb:a8: bc:4e:82:58:1b:30:2e:e8:a4:fa:aa:66:0f:f1:6a:93:e8:f3: 7c:0c:ed:23:94:d0:c1:ba:44:6a:7b:ff:42:4f:01:31:e4:88: 8f:a0:39:6f:67:e9:58:42:1d:52:54:4e:66:9d:9b:3e:e4:41: 01:b7:46:fe:f3:3f:64:b3:d6:f8:8d:02:c7:39:7c:33:5c:0c: de:0e:03:17:ed:dc:d4:c1:c4:11:b0:95:4a:08:2d:d6:91:1e: 20:03:53:b7:b6:9f:df:94:d5:e0:87:6e:93:4a:fb:f5:4a:17: 6c:8f:bd:f4:5e:e2:19:17:83:49:cc:8d:2f:60:bd:90:15:3f: 78:cd:73:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpnNgQ5ZrUW6E5jHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI1MDgxOTIyMDAwM1oXDTI1MDgyMTIyMDAwMFowLzEtMCsGA1UEAxMk NGViYjg1NmUtYWJmOC00ZWM5LTlkMGUtMDM3OWI3OTBmMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwDGFsi8njej+125xwdlB/Cu1/DimEzE82vf GrB9GteM0yYO5V42yflPG3T1/6iAEXED/wwr4uyy7JgouXUqZhptk7VqFGwG+VR1 eqfLRcJSpB1OACsZ/EgT1UMWAr/ZPrkLOfzSJHs34vSYlrzCa3EznTsGhhcmlJ0U 8HzADI4wK6Svh3X5s8nSrS/80M/eJa8q7nPmmts1e0YNqStehZ8Tw7GbRofPTM8t JVIybw4Kw+zRloeaav36Vi9U8+RRwvEzc7R1FYehAfn9i0e1y1yqCFpdKoMrZ0yX 9b2VdCKxbulBBLQRJdo6Xw5koe6doWEvZ1ZBhZaYgXS+Qvh8lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHeQ1igw8Xab8ZP8sGDn12ahMhDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvODA0ZTIwZTEtNjZkMy00 YjE5LTgzNTYtODIwNzFjZTJhMjQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNargm6E7URNI1XNR3YzcO TgPDXxDKWP2MxXnniB0fRtKnl9kiiP94SaV6zYUoOv1MelCt6M/535K227x/NikO dFp0ycRE0elM+NXtRqeuZLVYxTpRivl2MYyz+rgQ9Hwgglnirm+v93DTfBwAG8z4 qSVJKvvsFVKnv9a+66i8ToJYGzAu6KT6qmYP8WqT6PN8DO0jlNDBukRqe/9CTwEx 5IiPoDlvZ+lYQh1SVE5mnZs+5EEBt0b+8z9ks9b4jQLHOXwzXAzeDgMX7dzUwcQR sJVKCC3WkR4gA1O3tp/flNXgh26TSvv1Shdsj730XuIZF4NJzI0vYL2QFT94zXNK -----END CERTIFICATE-----Generated at Wed Aug 20 21:30:58 2025 by rpki-client