$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft File: fd61a214-d867-444e-b2f4-ca291d4c4419.mft (raw, json) Hash identifier: 9UxTOJ9rK8JayD7ovVya/sbpzzhlA94nXAUqtS64uLk= Subject key identifier: AC:95:B2:D4:F8:87:43:E4:AB:AE:FE:78:6A:52:84:F5:BA:8D:55:E9 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F4328584AE97F0CE1B3997F2449E60E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft Manifest number: 010D0C9F4328584073A828C80957C4AEF0069BCD Signing time: Tue 19 Aug 2025 21:00:03 +0000 Manifest this update: Tue 19 Aug 2025 21:00:03 +0000 Manifest next update: Thu 21 Aug 2025 21:00:00 +0000 Files and hashes: 1: 88824dc8-612f-344f-98c5-1b7608353512.roa (hash: MTX6NET4CjaIUEUhKjptWV3oNy0NWJq0TaGAwHZl4ks=) 2: fd61a214-d867-444e-b2f4-ca291d4c4419.crl (hash: /wPAS0c8+LmUH5sLPxtI2zpj3oyiw9HAuWtLUxIew3E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:7f:0c:e1:b3:99:7f:24:49:e6:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Aug 19 21:00:03 2025 GMT Not After : Aug 21 21:00:00 2025 GMT Subject: CN=b8d0691f-01ac-4398-a39c-f44b515d02c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:73:25:80:ef:35:1c:9b:44:f8:da:3a:cf: e0:a3:b7:59:15:e0:e0:25:a3:1f:6b:cf:03:66:5e: ba:5e:5f:92:e1:0d:75:ac:48:cf:d8:9a:97:79:42: f8:1e:0f:32:ad:d2:5a:13:f4:a6:59:b4:27:09:74: cf:d5:1b:f9:f8:f1:f6:10:11:f4:f0:9a:f3:17:c7: 0c:5b:15:60:71:29:84:da:5d:74:44:ba:30:63:6c: b8:76:2d:80:7a:23:17:80:7c:8a:26:9f:27:62:7b: 78:b5:bc:4e:a1:9e:c1:62:5c:36:27:45:da:41:67: d7:2d:a7:36:b5:77:ec:92:de:f9:59:b5:ed:b1:9f: d3:c1:43:18:66:85:ca:26:38:c0:b2:f7:9a:43:6f: 0a:96:0a:2d:0b:3e:88:d4:d3:2f:0c:16:eb:d2:78: 1f:a8:8c:d8:6f:d2:5a:c2:99:7d:95:1e:55:ea:9b: 97:07:c6:b7:32:c8:e7:9b:10:81:54:b7:d4:3a:b0: 3b:57:a2:fd:e0:0c:c3:51:c0:08:9a:ad:85:f6:dc: 95:b6:2d:c8:e3:c5:9f:5c:b8:d2:6c:fc:42:73:9a: 68:62:a1:58:f0:2e:af:f0:ed:18:01:66:b0:37:2f: ff:db:8a:9b:45:f4:f3:1f:e4:c3:d5:80:a2:eb:ce: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:95:B2:D4:F8:87:43:E4:AB:AE:FE:78:6A:52:84:F5:BA:8D:55:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c9:20:f6:3e:99:35:d9:5a:bf:6a:ef:03:af:fb:99:20:a4: 0a:55:b3:8b:ed:65:ba:cf:37:7b:1b:4f:c9:3e:5c:a1:c2:1f: 85:20:92:1c:87:69:09:0a:cd:02:7a:0f:80:44:6c:c9:b3:9b: 65:3c:29:0f:3f:e0:b9:d3:5d:31:b4:67:c7:6e:e3:49:df:87: 28:82:a7:65:74:2a:33:93:4d:cd:4f:d1:6c:07:18:b5:49:82: 06:7e:cb:99:84:54:b8:9f:46:e4:f2:93:a2:79:f2:86:f6:80: c9:f2:72:18:00:a1:4b:d0:35:80:c7:11:ad:31:b9:41:80:fc: 12:77:ec:79:dc:37:13:44:45:70:0d:58:a8:5e:0c:18:94:00: c3:3f:c2:c4:e2:aa:4b:01:e5:75:dd:51:a2:63:c9:19:3d:72: 7c:28:9a:ff:81:b5:23:13:a8:ba:d2:b7:11:38:ec:22:38:91: ea:f0:78:9c:60:58:b8:e3:2c:a3:2e:89:85:fc:f1:37:f8:db: 02:ea:7d:4c:4f:c7:40:4c:ba:a5:e0:d7:a8:72:ea:69:44:7e: 19:7b:87:f7:d9:c1:05:0b:f4:a6:7a:b9:51:79:2f:b7:fe:cc: 4e:96:e4:51:55:5d:7e:cc:0b:6f:3d:00:75:f6:69:b6:88:39: c4:bf:17:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpfwzhs5l/JEnmDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI1MDgxOTIxMDAwM1oXDTI1MDgyMTIxMDAwMFowLzEtMCsGA1UEAxMk YjhkMDY5MWYtMDFhYy00Mzk4LWEzOWMtZjQ0YjUxNWQwMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqJzJYDvNRybRPjaOs/go7dZFeDgJaMfa88D Zl66Xl+S4Q11rEjP2JqXeUL4Hg8yrdJaE/SmWbQnCXTP1Rv5+PH2EBH08JrzF8cM WxVgcSmE2l10RLowY2y4di2AeiMXgHyKJp8nYnt4tbxOoZ7BYlw2J0XaQWfXLac2 tXfskt75WbXtsZ/TwUMYZoXKJjjAsveaQ28KlgotCz6I1NMvDBbr0ngfqIzYb9Ja wpl9lR5V6puXB8a3MsjnmxCBVLfUOrA7V6L94AzDUcAImq2F9tyVti3I48WfXLjS bPxCc5poYqFY8C6v8O0YAWawNy//24qbRfTzH+TD1YCi687b0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKyVstT4h0Pkq67+eGpShPW6jVXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvZmQ2MWEyMTQtZDg2Ny00 NDRlLWIyZjQtY2EyOTFkNGM0NDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPySD2Ppk12Vq/au8Dr/uZ IKQKVbOL7WW6zzd7G0/JPlyhwh+FIJIch2kJCs0Ceg+ARGzJs5tlPCkPP+C5010x tGfHbuNJ34cogqdldCozk03NT9FsBxi1SYIGfsuZhFS4n0bk8pOiefKG9oDJ8nIY AKFL0DWAxxGtMblBgPwSd+x53DcTREVwDVioXgwYlADDP8LE4qpLAeV13VGiY8kZ PXJ8KJr/gbUjE6i60rcROOwiOJHq8HicYFi44yyjLomF/PE3+NsC6n1MT8dATLql 4NeocuppRH4Ze4f32cEFC/SmerlReS+3/sxOluRRVV1+zAtvPQB19mm2iDnEvxez -----END CERTIFICATE-----Generated at Wed Aug 20 13:50:05 2025 by rpki-client