$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft File: a5e2d89d-6269-4405-9578-836517825b32.mft (raw, json) Hash identifier: eblAStrPTTSC2y9SDGFtZWAidG1uUpg7PHeIFa0z2kQ= Subject key identifier: BB:BF:BA:C6:87:E5:7D:F4:CF:42:AF:2F:C0:8B:04:E0:A3:06:DE:23 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584AFBFDD539E3F98C9DB1E182C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft Manifest number: 010D0C9F4328584073A8537DAE1B6895C67B4829 Signing time: Tue 26 Aug 2025 12:00:03 +0000 Manifest this update: Tue 26 Aug 2025 12:00:03 +0000 Manifest next update: Thu 28 Aug 2025 12:00:00 +0000 Files and hashes: 1: 6d77179e-7a38-37d7-a8b9-33c836a847b7.roa (hash: qwKiHErn1AQg92rYg8h/ax3+49k3MkjeDsOOSQzm1fk=) 2: 7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa (hash: vih5XZMZ5MscufCx6xO5adIrmlhqvr67tj09cH6g3Mk=) 3: a5e2d89d-6269-4405-9578-836517825b32.crl (hash: MDsn815ntrzOTsOZjUJSNuZ5GWIThqcLbicvH4g2nMk=) 4: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (hash: z1DcpAzdYKuSjea7OBa3VMzWOFCBfayejgRP4VTGWp8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:fd:d5:39:e3:f9:8c:9d:b1:e1:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Aug 26 12:00:03 2025 GMT Not After : Aug 28 12:00:00 2025 GMT Subject: CN=2a8e6e21-3285-4739-9530-fd4f7d4d0ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:2f:4b:7b:59:36:28:19:5c:34:1a:1a:9f: ed:df:e8:d5:ff:3f:65:b1:f4:db:a2:10:d5:cd:43: ed:f1:5c:b8:bb:57:87:54:42:e3:b0:a0:d8:02:bc: 99:65:03:4e:d3:2f:e6:1b:cc:94:28:31:a5:75:f6: 31:41:83:3f:41:cd:cf:b8:0e:cc:1e:c6:7c:06:fb: 0d:ef:f0:8d:7b:d0:23:2f:86:d7:b3:26:07:4c:dd: f3:55:3e:24:9c:81:ca:b0:da:eb:c3:c4:e2:c4:45: 16:17:f6:00:13:79:76:7a:e9:04:1f:02:ee:33:1d: e4:80:8f:3a:a9:ef:fc:eb:3e:37:74:8c:48:3f:0d: 30:ad:ef:a8:fe:d5:12:60:57:06:d7:3e:46:aa:23: 69:e1:28:5f:c0:88:97:a9:3e:50:c0:64:ce:95:03: 07:6a:27:78:e4:11:5b:1c:90:af:f1:79:31:a4:a1: a0:6e:85:f7:e2:3f:de:e7:1c:20:b2:2f:8d:30:1c: 7e:d6:d1:40:47:87:fb:3a:fb:82:8a:bc:2a:74:fb: 0b:7d:8c:dd:b8:30:9a:1f:b3:f6:07:99:3b:95:94: d7:e9:d5:be:cf:c0:32:6a:9f:32:07:d0:44:cd:87: 6c:0e:2a:4d:55:f2:fa:6d:00:a6:ad:29:f3:ae:2e: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BF:BA:C6:87:E5:7D:F4:CF:42:AF:2F:C0:8B:04:E0:A3:06:DE:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f0:65:96:0c:2f:07:80:f1:56:fe:34:3d:25:6f:60:38:43: ec:98:0e:61:9b:a0:95:c6:19:a7:80:8e:d6:bb:17:98:13:f5: 23:1b:73:aa:e8:a5:8d:da:56:8f:3c:9e:8c:33:e1:b3:18:6b: a2:5e:23:03:66:d3:9e:18:da:5f:7f:66:7b:cb:25:a7:08:07: cf:db:45:6b:bf:fe:98:d3:23:7b:6b:bb:67:03:f2:3e:eb:dc: dd:5e:ff:de:46:11:1e:71:5a:4c:26:44:a7:87:2c:7b:79:67: 29:26:a1:c8:ba:4c:bb:8f:8a:ec:96:69:05:b4:ac:5c:ee:2f: 6e:d1:fe:67:16:87:36:78:e5:9f:b2:a4:54:ac:a2:ab:b1:fc: 81:f7:c6:df:df:b8:54:7b:6b:51:8f:22:05:9d:b2:40:b8:67: 1e:e9:83:66:c5:57:2a:4e:bb:41:2f:25:b6:8e:b8:b3:8e:c2: 45:ad:50:23:84:60:4b:fa:81:dd:3e:1d:0a:58:59:aa:4c:05: a0:e7:0f:9d:02:06:a5:60:86:ae:94:87:b8:de:0e:f3:a3:fe: 1c:b0:01:c2:1a:24:23:b6:b5:d8:2c:c9:5f:7d:37:16:f8:b6: 65:f5:9d:c3:ff:7e:9f:42:f9:62:64:c3:84:a8:d2:7d:58:d2: 9e:ae:34:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr7/dU54/mMnbHhgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI1MDgyNjEyMDAwM1oXDTI1MDgyODEyMDAwMFowLzEtMCsGA1UEAxMk MmE4ZTZlMjEtMzI4NS00NzM5LTk1MzAtZmQ0ZjdkNGQwYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkQvS3tZNigZXDQaGp/t3+jV/z9lsfTbohDV zUPt8Vy4u1eHVELjsKDYAryZZQNO0y/mG8yUKDGldfYxQYM/Qc3PuA7MHsZ8BvsN 7/CNe9AjL4bXsyYHTN3zVT4knIHKsNrrw8TixEUWF/YAE3l2eukEHwLuMx3kgI86 qe/86z43dIxIPw0wre+o/tUSYFcG1z5GqiNp4ShfwIiXqT5QwGTOlQMHaid45BFb HJCv8XkxpKGgboX34j/e5xwgsi+NMBx+1tFAR4f7OvuCirwqdPsLfYzduDCaH7P2 B5k7lZTX6dW+z8Ayap8yB9BEzYdsDipNVfL6bQCmrSnzri6tGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLu/usaH5X30z0KvL8CLBOCjBt4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvYTVlMmQ4OWQtNjI2OS00 NDA1LTk1NzgtODM2NTE3ODI1YjMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ8GWWDC8HgPFW/jQ9JW9g OEPsmA5hm6CVxhmngI7WuxeYE/UjG3Oq6KWN2laPPJ6MM+GzGGuiXiMDZtOeGNpf f2Z7yyWnCAfP20Vrv/6Y0yN7a7tnA/I+69zdXv/eRhEecVpMJkSnhyx7eWcpJqHI uky7j4rslmkFtKxc7i9u0f5nFoc2eOWfsqRUrKKrsfyB98bf37hUe2tRjyIFnbJA uGce6YNmxVcqTrtBLyW2jrizjsJFrVAjhGBL+oHdPh0KWFmqTAWg5w+dAgalYIau lIe43g7zo/4csAHCGiQjtrXYLMlffTcW+LZl9Z3D/36fQvliZMOEqNJ9WNKerjQW -----END CERTIFICATE-----Generated at Wed Aug 27 01:57:34 2025 by rpki-client