$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft File: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft (raw, json) Hash identifier: 48bejcAsBE54YdjtFzcTRG73RNL6L3hGijwVh7TU2To= Subject key identifier: 21:CB:86:C2:65:75:18:7A:FE:0E:BC:6C:F9:C5:A7:53:26:3B:4E:3A Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF Certificate issuer: /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Certificate serial: 010D0C9F4328584AEAC6A8C1A00AC2D33EDF6600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft Manifest number: 010D0C9F4328584073A84684C5F38B644F883AE4 Signing time: Wed 20 Aug 2025 08:00:08 +0000 Manifest this update: Wed 20 Aug 2025 08:00:08 +0000 Manifest next update: Fri 22 Aug 2025 08:00:00 +0000 Files and hashes: 1: 28bf01a1-e0a0-3223-944c-d3b6117da09c.roa (hash: JswB/EF6yz/v7ATXgIDujXMB5Y4HuJzzYz2sKudhH8Q=) 2: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (hash: OVSSndFNffnRru+noiPtm4aR53TF0lJ6fnpOhi3I/5s=) 3: 5e0eab60-d72b-3d6b-a734-f57f01a45b0f.roa (hash: 5PHK0Q5nwSXaaeL1Hm+y+xlKcgV7UTpJs/nvS7Jmtoo=) 4: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (hash: TjhOYECRIqBnnwX9hPr8wjPr4dtWrjb8gPVU9N9UEbk=) 5: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl (hash: s+1mIpceN09X16qc4J4gbfbDFsWH4e1UKCWw240jIOs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:c6:a8:c1:a0:0a:c2:d3:3e:df:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88 Validity Not Before: Aug 20 08:00:08 2025 GMT Not After : Aug 22 08:00:00 2025 GMT Subject: CN=9c79a85d-4d85-4edc-8ae2-f20fcdbd66b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:00:bd:18:cb:b3:17:e1:76:4d:21:18:67: 71:3a:03:9b:42:92:41:47:cf:45:de:12:fc:63:d7: 9f:96:d0:ed:84:a1:11:ad:db:fa:68:b5:c5:55:da: 8f:f4:09:ef:fa:db:51:1c:67:7b:a6:bf:57:88:5a: 87:7d:91:e2:cb:6c:dc:02:e9:1c:53:80:85:c2:aa: 50:b3:33:17:ac:d8:f0:99:56:58:ef:df:22:85:d5: 7f:7d:4b:b5:ce:f5:08:91:c7:0c:2d:9c:d6:55:a5: cc:c1:2c:f5:bc:1a:31:a6:da:d9:56:dd:2f:e2:e6: be:6b:fe:d5:24:6e:30:c2:79:fc:ca:79:2e:20:ec: af:f5:18:fc:ae:47:25:f0:5f:0d:b4:cd:af:29:8f: 0e:bb:16:92:80:01:11:2a:d9:44:e0:55:65:a1:27: bf:67:d3:c7:f3:71:84:0c:63:b7:69:2a:e4:5d:e8: c2:6d:67:7b:5d:81:1d:cb:31:32:94:d1:4f:d3:77: 2e:ad:06:64:15:59:2b:27:02:e7:b0:72:10:98:ac: 1e:31:b5:9f:bf:0b:f1:84:65:61:9c:5d:17:46:26: aa:41:41:22:ac:c7:8b:66:35:25:21:f2:88:54:63: af:7a:36:42:38:9b:98:93:d7:50:ce:12:d7:f4:c2: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:86:C2:65:75:18:7A:FE:0E:BC:6C:F9:C5:A7:53:26:3B:4E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl X509v3 Authority Key Identifier: keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1c:40:f8:10:b5:3e:a2:76:73:a2:12:c9:30:d1:a8:12:a0: 83:05:0c:06:b2:20:39:c1:d5:87:36:1e:e2:c5:d9:cd:e7:42: cf:1a:b6:51:3e:d3:0f:7b:8b:7e:be:a1:04:f1:0e:a5:30:81: 9d:f8:d6:85:7c:99:e2:68:6a:0e:1b:7e:ff:53:f8:2b:aa:46: 3a:da:91:fc:9f:c2:aa:45:aa:ef:26:a3:08:86:74:35:76:71: 92:4a:bf:d5:4a:ec:3d:60:31:e4:67:1b:47:e4:0e:04:60:be: be:58:bc:90:e7:10:d5:12:c2:29:90:18:06:40:ac:5e:53:e3: 05:6c:00:a3:e8:7f:36:17:73:44:79:35:a7:29:a0:64:c8:30: ae:00:e2:79:f2:42:8c:05:28:d4:2d:fc:2a:51:07:9d:bb:2f: ea:77:13:10:fa:12:1d:82:78:e2:20:eb:8b:34:32:91:0d:15: 67:91:9b:71:3b:19:28:3a:88:c7:94:1c:eb:5b:5e:2b:29:a3: 49:ad:3d:63:4f:97:0e:8f:b0:6e:3f:73:ff:3b:21:77:f8:1d: b6:9c:1c:91:e6:86:fa:fa:e0:d5:36:3c:7d:09:e6:3a:15:78: ed:50:bb:74:10:84:96:a8:3f:d3:d1:97:da:da:84:01:72:ab: 4d:47:95:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqxqjBoArC0z7fZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmMWEwNWYtZWZhYy00ZWYzLThiMjMtNWZkYmUzY2I0 ZTg4MB4XDTI1MDgyMDA4MDAwOFoXDTI1MDgyMjA4MDAwMFowLzEtMCsGA1UEAxMk OWM3OWE4NWQtNGQ4NS00ZWRjLThhZTItZjIwZmNkYmQ2NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeEAvRjLsxfhdk0hGGdxOgObQpJBR89F3hL8 Y9efltDthKERrdv6aLXFVdqP9Anv+ttRHGd7pr9XiFqHfZHiy2zcAukcU4CFwqpQ szMXrNjwmVZY798ihdV/fUu1zvUIkccMLZzWVaXMwSz1vBoxptrZVt0v4ua+a/7V JG4wwnn8ynkuIOyv9Rj8rkcl8F8NtM2vKY8OuxaSgAERKtlE4FVloSe/Z9PH83GE DGO3aSrkXejCbWd7XYEdyzEylNFP03curQZkFVkrJwLnsHIQmKweMbWfvwvxhGVh nF0XRiaqQUEirMeLZjUlIfKIVGOvejZCOJuYk9dQzhLX9MLZpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCHLhsJldRh6/g68bPnFp1MmO046MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Yx YTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRiZTNjYjRlODgvZGNmMWEwNWYtZWZhYy00 ZWYzLThiMjMtNWZkYmUzY2I0ZTg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmMWEwNWYtZWZhYy00ZWYzLThi MjMtNWZkYmUzY2I0ZTg4L2RjZjFhMDVmLWVmYWMtNGVmMy04YjIzLTVmZGJlM2Ni NGU4OC5jcmwwHwYDVR0jBBgwFoAUMR6T8lfYI525l+itPI4ghmPqWe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2YxYTA1Zi1lZmFjLTRlZjMtOGIyMy01ZmRi ZTNjYjRlODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/HED4ELU+onZzohLJMNGo EqCDBQwGsiA5wdWHNh7ixdnN50LPGrZRPtMPe4t+vqEE8Q6lMIGd+NaFfJniaGoO G37/U/grqkY62pH8n8KqRarvJqMIhnQ1dnGSSr/VSuw9YDHkZxtH5A4EYL6+WLyQ 5xDVEsIpkBgGQKxeU+MFbACj6H82F3NEeTWnKaBkyDCuAOJ58kKMBSjULfwqUQed uy/qdxMQ+hIdgnjiIOuLNDKRDRVnkZtxOxkoOojHlBzrW14rKaNJrT1jT5cOj7Bu P3P/OyF3+B22nByR5ob6+uDVNjx9CeY6FXjtULt0EISWqD/T0Zfa2oQBcqtNR5VU -----END CERTIFICATE-----Generated at Wed Aug 20 13:17:12 2025 by rpki-client