$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft File: 85be797f-f426-4ba8-98b0-1c2b5f752753.mft (raw, json) Hash identifier: Tj2mXnFph59SMnb3oDunr6ScujfdTsGijTSFkIvCOEo= Subject key identifier: BB:B4:96:DF:8A:CC:48:FE:D1:B7:EB:7B:7C:B6:4B:96:E4:13:02:F7 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584AEA31B867916A81C3FCEE4140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft Manifest number: 010D0C9F4328584073A839281E4F1168C0BB170A Signing time: Wed 20 Aug 2025 03:00:03 +0000 Manifest this update: Wed 20 Aug 2025 03:00:03 +0000 Manifest next update: Fri 22 Aug 2025 03:00:00 +0000 Files and hashes: 1: 43d529a5-06fc-3596-b306-3805ee39efec.roa (hash: Z9jhbzeKokmew0tR2ppAZPIgqdGAXBwlyqSlbHzEQaY=) 2: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (hash: aQGoi/q1Jy50H+qKtYxLMipjou25kdQhmgAWgiXGJjo=) 3: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (hash: bKpeqi7SAmsyPw7JqH4nkYfVKWqlfrBPsnzvgnbnv/8=) 4: 85be797f-f426-4ba8-98b0-1c2b5f752753.crl (hash: LwaFJLpZieak+HQquMe+1OUDUNrh23hSqm+wsal8PN4=) 5: 9699501c-da98-381a-90a4-a8aa59586482.roa (hash: U2Z0vYpyKHOAL2nB6jm/OgECIGVfjh53bykn72pmaYk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:31:b8:67:91:6a:81:c3:fc:ee:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Aug 20 03:00:03 2025 GMT Not After : Aug 22 03:00:00 2025 GMT Subject: CN=ad34fca4-9eab-4452-b3d7-f255a8a57934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:ec:a0:39:11:dc:34:31:1d:45:a6:40:23: b5:2c:08:51:e7:12:b8:a6:dc:b2:e3:3b:fe:bd:39: 33:5f:cc:2b:bb:42:3b:01:67:ba:dd:d1:d5:56:18: 2d:c3:0e:78:30:d4:af:95:0f:72:c8:af:82:ef:61: 7f:b7:29:c3:05:2c:de:5e:11:ec:a4:bc:75:dd:ff: 2a:a4:fa:3f:05:2e:67:cd:63:f6:3d:75:35:1f:bd: 06:7b:89:ca:27:a9:31:54:d4:f5:ba:e6:7c:d4:19: 40:b3:8f:6b:24:2e:37:9a:e0:67:7e:04:c6:e1:66: 12:b6:3c:92:ae:6b:13:df:d7:05:35:40:47:6e:84: aa:ec:43:11:0a:77:c6:fc:14:d5:d3:34:29:21:3f: 48:74:c7:33:3a:06:7e:8a:1c:7a:ec:18:1a:a1:f0: e7:38:30:44:40:1b:6d:1b:dd:94:57:9e:fd:b8:67: dd:5c:af:c1:b0:e4:18:6e:6f:00:85:71:85:26:15: f2:18:c1:03:60:3b:4b:66:8d:3d:9e:06:3d:41:5e: 2b:a7:f2:71:fa:18:d5:b7:ca:e9:a3:0a:53:45:d0: cf:96:06:b4:8d:4d:7c:f4:97:d1:e5:f5:cd:c1:05: f8:c0:ac:4b:0c:d7:07:11:f8:3f:18:17:9c:c1:f5: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B4:96:DF:8A:CC:48:FE:D1:B7:EB:7B:7C:B6:4B:96:E4:13:02:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f4:e1:c8:8e:37:35:7c:ce:ac:0d:87:56:99:4f:57:7d:5e: 08:26:41:a1:aa:44:6e:b8:79:cc:72:3f:9d:d4:24:ec:01:2b: 41:8c:c2:aa:4c:30:89:a9:e5:7d:ad:25:4a:f8:c0:4f:26:e1: ec:5d:8b:87:f4:b4:b1:b5:cd:a2:f7:e8:96:12:98:3d:01:b6: c7:7a:6d:86:31:a2:0a:ab:fb:34:68:41:da:b7:fe:c1:98:cf: 0f:dd:56:3f:4f:d9:35:93:18:32:dc:64:45:33:2a:73:b6:e4: f6:7a:9c:d0:77:8b:9a:e8:44:14:b1:5d:b8:e1:25:15:3c:d2: 1c:30:ce:02:29:ff:85:a9:40:81:b1:fd:a2:b5:82:9e:b9:69: f4:91:c7:5f:dc:34:ca:66:df:c9:b4:08:25:de:f7:d3:c1:51: 84:8b:83:6d:40:f2:ea:37:99:c2:b4:95:35:e2:fd:88:48:92: 58:49:83:1a:c9:5d:b3:7e:5d:87:a7:dc:12:08:9d:bf:20:3e: 82:a1:f0:10:03:7f:e0:5d:00:33:a7:97:c5:d5:db:eb:d1:27: d2:c2:d8:33:1f:22:df:d4:9e:a2:e3:25:58:2b:b1:da:7f:d4: f1:ff:cd:0f:91:9b:3b:8d:65:e3:bf:38:b3:74:6f:0b:23:e5: 47:a5:e8:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqMbhnkWqBw/zuQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDgyMDAzMDAwM1oXDTI1MDgyMjAzMDAwMFowLzEtMCsGA1UEAxMk YWQzNGZjYTQtOWVhYi00NDUyLWIzZDctZjI1NWE4YTU3OTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuDsoDkR3DQxHUWmQCO1LAhR5xK4ptyy4zv+ vTkzX8wru0I7AWe63dHVVhgtww54MNSvlQ9yyK+C72F/tynDBSzeXhHspLx13f8q pPo/BS5nzWP2PXU1H70Ge4nKJ6kxVNT1uuZ81BlAs49rJC43muBnfgTG4WYStjyS rmsT39cFNUBHboSq7EMRCnfG/BTV0zQpIT9IdMczOgZ+ihx67BgaofDnODBEQBtt G92UV579uGfdXK/BsOQYbm8AhXGFJhXyGMEDYDtLZo09ngY9QV4rp/Jx+hjVt8rp owpTRdDPlga0jU189JfR5fXNwQX4wKxLDNcHEfg/GBecwfXbeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLu0lt+KzEj+0bfre3y2S5bkEwL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvODViZTc5N2YtZjQyNi00 YmE4LTk4YjAtMWMyYjVmNzUyNzUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP9OHIjjc1fM6sDYdWmU9X fV4IJkGhqkRuuHnMcj+d1CTsAStBjMKqTDCJqeV9rSVK+MBPJuHsXYuH9LSxtc2i 9+iWEpg9AbbHem2GMaIKq/s0aEHat/7BmM8P3VY/T9k1kxgy3GRFMypztuT2epzQ d4ua6EQUsV244SUVPNIcMM4CKf+FqUCBsf2itYKeuWn0kcdf3DTKZt/JtAgl3vfT wVGEi4NtQPLqN5nCtJU14v2ISJJYSYMayV2zfl2Hp9wSCJ2/ID6CofAQA3/gXQAz p5fF1dvr0SfSwtgzHyLf1J6i4yVYK7Haf9Tx/80PkZs7jWXjvzizdG8LI+VHpejR -----END CERTIFICATE-----Generated at Wed Aug 20 21:39:07 2025 by rpki-client