$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft File: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft (raw, json) Hash identifier: p8fjHGku9MCOC8Ue6YJMK3+jNxWMN6XDRocA+a5xj38= Subject key identifier: 00:83:38:ED:DB:B9:9C:E6:D6:80:29:FC:6F:50:EA:EE:00:04:4F:FD Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584AFBE0170F8642032017FFF2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft Manifest number: 010D0C9F4328584073A84F901BB38ADE99836287 Signing time: Tue 26 Aug 2025 11:00:08 +0000 Manifest this update: Tue 26 Aug 2025 11:00:08 +0000 Manifest next update: Thu 28 Aug 2025 11:00:00 +0000 Files and hashes: 1: 1f9b0a21-4e53-3251-bedd-62da810defe6.roa (hash: 3QfED4mCJmJvUjmrVBmY7dfVJFTWKSy756/SVpMup54=) 2: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (hash: aPLBaBA5HkeGDBwWrp4qrUhrZfjniIpUaRZvQPHEjWE=) 3: be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa (hash: oLn1UDrMqqEoUFpgL/W0M3cDYG8upJ0Ye0pc7XUFkIs=) 4: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (hash: mETipH2TxXUe/Cv/9Kuldi9NSAkPuDMp+V8s3vd/LuA=) 5: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl (hash: a4S7Yp0MU4+btZQYKMb0bH97wrwpa2is0qYB5e491uU=) 6: e8ade94f-71c7-3847-9891-9cce69f41ac8.roa (hash: Z4BS4TWSn8AMYWhk8uACJ21EvJAmzKL4+N9+QXRZYKc=) 7: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (hash: afZeDcoOuzBQi7C1TA2cLQpZ4+gEm3ZdLg28R1knChc=) 8: f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (hash: tqn5LA9xecf8N2tm6zC9p5CxBMNPVpF7dfumiL0rF0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:e0:17:0f:86:42:03:20:17:ff:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Aug 26 11:00:08 2025 GMT Not After : Aug 28 11:00:00 2025 GMT Subject: CN=ebe78efe-bf53-445b-b06f-0396433bca5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:61:f3:9a:e8:b6:1f:f1:c1:47:62:fd:d2: fc:9b:ce:fd:93:a8:bd:b5:72:0a:00:ca:05:22:76: 6e:e9:78:64:7e:d4:d4:e1:5b:c9:49:e0:be:44:4c: 61:17:15:37:9c:bf:8d:4c:f7:03:36:d9:b6:ed:9c: 80:4c:76:a0:23:be:cb:a3:e8:bc:c9:d7:21:32:0d: 46:30:21:41:5d:07:b3:49:9a:b2:00:89:b6:de:cb: 33:95:6c:db:d4:ce:ce:21:9f:2b:5a:0a:09:42:68: 95:3a:3f:af:37:32:b5:0d:95:32:f2:3f:51:97:b3: 2a:90:32:57:a1:28:78:e5:ce:3b:99:56:7c:e4:88: 90:39:ba:ea:5c:7a:28:a2:e5:e3:49:d2:c5:8f:c0: 42:b7:94:84:ea:e6:1b:30:3b:dd:ca:31:df:65:d6: 30:06:be:f4:e2:c8:1b:bf:37:7c:8b:e6:4b:0a:7b: eb:82:b7:d1:1b:66:bd:dd:34:6f:0a:8f:2d:a9:dc: 67:48:3e:41:8a:ab:4e:aa:7d:bd:73:21:10:08:76: bf:72:8e:1c:b6:65:21:a1:f6:1b:92:fc:0a:40:6c: 7c:7f:03:42:a5:5f:89:dd:32:2c:67:eb:1a:89:51: 44:1d:d0:7f:d9:6d:3f:5a:7c:f7:1f:ff:67:8c:42: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:38:ED:DB:B9:9C:E6:D6:80:29:FC:6F:50:EA:EE:00:04:4F:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5f:ab:9e:b9:cd:2d:1e:7f:28:4e:3d:c8:a4:83:79:14:e0: 53:8f:1e:cd:74:0f:93:d5:d4:2e:be:57:b7:64:c8:93:9e:90: 02:20:63:32:05:a4:dc:db:fa:59:f0:aa:ed:32:a1:c3:60:db: e2:12:bb:5a:0f:ac:7d:9d:81:6f:98:4c:6c:6e:f3:ce:7d:7b: 2c:56:4a:3b:6b:15:7b:39:07:61:b5:41:53:c5:06:76:dc:0b: e7:96:7d:0f:20:46:e7:13:4f:d1:46:9e:a6:0f:06:24:ce:b0: 5e:02:a2:71:5a:31:d5:92:c3:13:c9:2f:ab:54:65:3d:c1:26: 6c:c0:e5:6b:c9:3d:67:7e:be:6c:3b:9f:d4:0e:55:3d:8e:b0: 04:f5:61:1f:db:af:17:8c:51:35:88:5c:2f:6a:a4:dd:71:3a: 8d:e7:1b:36:c8:36:ae:d6:12:82:ae:bc:a1:8d:94:4e:b8:e6: 2c:c9:c3:21:e5:65:65:5c:28:c9:f5:14:cb:64:af:51:81:40: 54:40:d5:86:3d:32:7b:7b:76:71:c1:fd:ea:63:5c:f9:65:61: e0:15:07:78:f5:f7:d1:2b:80:6d:65:a7:ca:7f:6c:cf:f1:dc: 45:ce:ef:60:51:21:dd:da:d1:f9:46:58:c6:77:c6:16:e2:b7: b7:a6:97:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr74BcPhkIDIBf/8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDgyNjExMDAwOFoXDTI1MDgyODExMDAwMFowLzEtMCsGA1UEAxMk ZWJlNzhlZmUtYmY1My00NDViLWIwNmYtMDM5NjQzM2JjYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6dh85roth/xwUdi/dL8m879k6i9tXIKAMoF InZu6XhkftTU4VvJSeC+RExhFxU3nL+NTPcDNtm27ZyATHagI77Lo+i8ydchMg1G MCFBXQezSZqyAIm23sszlWzb1M7OIZ8rWgoJQmiVOj+vNzK1DZUy8j9Rl7MqkDJX oSh45c47mVZ85IiQObrqXHooouXjSdLFj8BCt5SE6uYbMDvdyjHfZdYwBr704sgb vzd8i+ZLCnvrgrfRG2a93TRvCo8tqdxnSD5BiqtOqn29cyEQCHa/co4ctmUhofYb kvwKQGx8fwNCpV+J3TIsZ+saiVFEHdB/2W0/Wnz3H/9njEJ9YwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFACDOO3buZzm1oAp/G9Q6u4ABE/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZDU4OWYzZTQtMjcwMS00 OGY1LTljNmItN2VhOGQwNzFlY2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjX6ueuc0tHn8oTj3IpIN5 FOBTjx7NdA+T1dQuvle3ZMiTnpACIGMyBaTc2/pZ8KrtMqHDYNviErtaD6x9nYFv mExsbvPOfXssVko7axV7OQdhtUFTxQZ23Avnln0PIEbnE0/RRp6mDwYkzrBeAqJx WjHVksMTyS+rVGU9wSZswOVryT1nfr5sO5/UDlU9jrAE9WEf268XjFE1iFwvaqTd cTqN5xs2yDau1hKCrryhjZROuOYsycMh5WVlXCjJ9RTLZK9RgUBUQNWGPTJ7e3Zx wf3qY1z5ZWHgFQd49ffRK4BtZafKf2zP8dxFzu9gUSHd2tH5RljGd8YW4re3ppcX -----END CERTIFICATE-----Generated at Tue Aug 26 17:44:02 2025 by rpki-client