$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft File: b0217be3-0b99-45d9-9156-e23551753455.mft (raw, json) Hash identifier: xg1k1FEBiAA/OZKhotHSWZsvfS8mii4rGm4fkaPKhss= Subject key identifier: 45:B5:DA:9B:B9:D2:FA:51:1C:05:3C:57:4F:22:38:F1:1F:E7:A5:58 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F4328584AEB5B910AC83034FD2775C180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft Manifest number: 010D0C9F4328584073A855A9EA20DD384E9A7256 Signing time: Wed 20 Aug 2025 13:00:08 +0000 Manifest this update: Wed 20 Aug 2025 13:00:08 +0000 Manifest next update: Fri 22 Aug 2025 13:00:00 +0000 Files and hashes: 1: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (hash: 4FAR/v75fJ7fFNJ+O5j+cnNLlaKPZJ17GymxpxGaGzE=) 2: b0217be3-0b99-45d9-9156-e23551753455.crl (hash: 1R6csYzYgpExoInR9ohi/XLyfahC7TylGJTlaEuGDcI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:91:0a:c8:30:34:fd:27:75:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Aug 20 13:00:08 2025 GMT Not After : Aug 22 13:00:00 2025 GMT Subject: CN=9db3d6d0-50e5-4522-aa30-d1592372d774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:f5:01:0d:93:86:be:28:e7:a7:04:48:02: ba:96:3e:5a:bf:f4:21:09:fc:db:2b:89:f1:70:e3: 2b:69:97:f8:a0:87:2f:c8:05:1a:82:47:52:f5:13: d6:e8:03:0e:ad:f6:d4:3a:30:11:ee:9a:63:09:21: c3:14:07:56:9f:27:ca:d1:91:22:5c:45:5f:a6:1d: c3:8a:fa:e4:34:d3:73:e9:09:78:44:f0:29:9a:3a: 6c:64:c2:59:4f:08:55:21:a6:22:02:82:dd:f9:e6: 7f:74:24:ab:f0:4c:dd:f7:fd:8b:e7:55:61:e6:20: 99:e5:1e:1b:34:34:7b:50:e1:af:89:b0:0d:a8:33: 2e:78:c7:e4:c1:6b:27:23:69:49:63:c5:f8:05:74: 85:06:5b:2d:21:33:6b:db:a6:a5:a1:54:d8:b9:da: 95:a3:c0:bb:ba:d0:97:cb:b4:a1:e3:57:6f:e5:3c: c6:14:50:73:9f:94:62:7c:14:89:86:14:20:fc:d1: 56:7d:17:25:7f:01:2b:2c:ad:02:d4:46:0c:c7:99: ad:49:26:71:17:56:4f:94:99:3b:93:bb:f8:ac:1d: 5f:c5:fa:70:1f:b6:f6:89:14:4f:39:5e:b4:0b:3e: 27:2d:37:07:bc:46:eb:c8:71:0f:e0:61:a6:88:25: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B5:DA:9B:B9:D2:FA:51:1C:05:3C:57:4F:22:38:F1:1F:E7:A5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e3:a2:c2:0b:05:69:82:f3:0e:f8:0e:6c:80:ba:be:e9:89: 2c:f6:2d:f2:18:2f:b4:4c:5b:09:c0:c1:99:57:4c:df:ca:21: 8f:42:d5:e7:8d:9c:83:a5:0e:4a:5f:43:1b:33:3f:da:54:9d: bc:1d:4f:ea:58:f6:67:38:67:c0:d8:f9:dd:00:d6:03:6c:83: 5c:7b:e1:a2:85:aa:70:9a:ba:77:57:dd:15:d3:de:5f:17:1a: 78:06:bf:01:34:ea:6a:73:8e:93:22:18:67:15:a0:16:ab:f7: 46:fb:79:b9:93:ca:d1:9f:16:d6:30:e2:14:30:96:14:35:90: 1a:bc:2a:69:7d:4e:0d:12:1f:39:a9:5b:54:55:0e:7f:e0:ed: 55:9d:26:37:ee:d5:c2:9e:ea:85:10:be:0f:45:cd:a7:60:e3: 93:7e:16:c6:17:d7:80:4b:ca:d4:2c:e0:cd:22:45:18:f0:a0: 68:e1:4e:c8:5d:23:dc:74:b8:b4:4c:8e:b0:e4:d2:77:1b:09: c3:58:fa:8e:6b:85:62:a3:33:3c:9b:ea:6c:0e:3e:d6:9b:24: f5:0c:6c:a1:f1:25:6b:74:ef:69:24:59:db:f5:a2:85:8e:fe: 2e:ea:98:cc:40:81:2f:37:5e:25:42:1d:f3:e5:fd:e1:84:4b: 5e:42:b4:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrW5EKyDA0/Sd1wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI1MDgyMDEzMDAwOFoXDTI1MDgyMjEzMDAwMFowLzEtMCsGA1UEAxMk OWRiM2Q2ZDAtNTBlNS00NTIyLWFhMzAtZDE1OTIzNzJkNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFX1AQ2Thr4o56cESAK6lj5av/QhCfzbK4nx cOMraZf4oIcvyAUagkdS9RPW6AMOrfbUOjAR7ppjCSHDFAdWnyfK0ZEiXEVfph3D ivrkNNNz6Ql4RPApmjpsZMJZTwhVIaYiAoLd+eZ/dCSr8Ezd9/2L51Vh5iCZ5R4b NDR7UOGvibANqDMueMfkwWsnI2lJY8X4BXSFBlstITNr26aloVTYudqVo8C7utCX y7Sh41dv5TzGFFBzn5RifBSJhhQg/NFWfRclfwErLK0C1EYMx5mtSSZxF1ZPlJk7 k7v4rB1fxfpwH7b2iRRPOV60Cz4nLTcHvEbryHEP4GGmiCU46QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEW12pu50vpRHAU8V08iOPEf56VYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvYjAyMTdiZTMtMGI5OS00 NWQ5LTkxNTYtZTIzNTUxNzUzNDU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH46LCCwVpgvMO+A5sgLq+ 6Yks9i3yGC+0TFsJwMGZV0zfyiGPQtXnjZyDpQ5KX0MbMz/aVJ28HU/qWPZnOGfA 2PndANYDbINce+Gihapwmrp3V90V095fFxp4Br8BNOpqc46TIhhnFaAWq/dG+3m5 k8rRnxbWMOIUMJYUNZAavCppfU4NEh85qVtUVQ5/4O1VnSY37tXCnuqFEL4PRc2n YOOTfhbGF9eAS8rULODNIkUY8KBo4U7IXSPcdLi0TI6w5NJ3GwnDWPqOa4ViozM8 m+psDj7WmyT1DGyh8SVrdO9pJFnb9aKFjv4u6pjMQIEvN14lQh3z5f3hhEteQrQi -----END CERTIFICATE-----Generated at Wed Aug 20 21:31:05 2025 by rpki-client