$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft File: 866b2df4-0f0a-4b84-9eb7-c185258f5294.mft (raw, json) Hash identifier: SLpI4+SsLH4U1BdiaiczwmyRq+YmjgZ76uDO8lmnZMw= Subject key identifier: 14:BD:4F:AF:1B:59:1D:EC:AA:21:96:EA:67:05:7F:01:11:E7:31:69 Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294 Certificate serial: 010D0C9F4328584AFBE017264EF45EC194E64B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft Manifest number: 010D0C9F43285842D3B5452BA3202C7023BDC8A2 Signing time: Tue 26 Aug 2025 11:00:08 +0000 Manifest this update: Tue 26 Aug 2025 11:00:08 +0000 Manifest next update: Fri 29 Aug 2025 11:00:00 +0000 Files and hashes: 1: 02fc3568-a294-3f7b-a040-efba2cd76305.roa (hash: sbdAPHKEtGwogX2r7BVTX4jQ6H+eLAXzJH+sOgLHweY=) 2: 624ff661-6f73-31bb-813f-b64dbeff8dea.roa (hash: NemSptG63vxZM/ZxvbgUldGnlKOTJ26LoXVJcoD+Naw=) 3: 866b2df4-0f0a-4b84-9eb7-c185258f5294.crl (hash: Vcf/1BihGXkSOndv3ne9JgtTDQYLBy30eJbCAqsw6vk=) 4: e7f8b070-b54d-345a-99c3-6754564c0672.roa (hash: mzt+BLtZrhv69EZG04ppMffr2VjP7ekGV1D9+PnMaJA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:e0:17:26:4e:f4:5e:c1:94:e6:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294 Validity Not Before: Aug 26 11:00:08 2025 GMT Not After : Aug 29 11:00:00 2025 GMT Subject: CN=c730a429-01ae-4db0-be0e-ac588e914d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:b8:38:74:2a:79:87:f8:c0:b9:e8:31:5b: 53:4f:c9:71:0d:67:43:f1:71:61:21:8f:8d:c6:c0: 01:29:89:c6:fc:be:00:e6:5d:80:54:48:f6:3a:7e: 2a:f7:e3:23:60:96:b1:fb:ff:46:37:75:09:fe:6e: 52:21:c2:d8:cd:a6:42:cf:f2:c7:12:46:97:a0:7b: 49:8e:98:05:6c:46:80:36:af:ad:eb:0d:bb:75:c8: 15:5f:c8:c9:9f:71:96:dc:3a:de:da:01:85:35:de: f4:35:84:27:9a:0d:58:ee:b9:c1:76:d8:47:a4:28: 28:00:3e:d7:07:97:17:01:13:80:c2:f2:d1:8a:d0: 67:34:1c:c5:e6:68:b8:0a:fe:d8:ce:54:c6:13:32: 54:be:8e:d0:a2:2d:4a:1e:64:30:a0:7f:c6:2e:db: 02:47:e7:c6:7f:b5:51:95:d1:d8:91:9f:bd:61:61: 53:26:68:8d:a7:c5:0a:44:65:17:89:81:4b:06:2f: 3c:5a:53:60:2a:f4:a2:c7:4d:08:1a:26:9c:ed:d7: 28:4d:ab:0a:22:95:1a:bc:9b:f3:fa:30:4b:ff:1f: 52:69:f4:7d:d7:fe:90:2e:67:23:54:8b:52:6f:87: ed:39:81:83:25:7c:09:8b:55:79:94:c3:fa:46:e6: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BD:4F:AF:1B:59:1D:EC:AA:21:96:EA:67:05:7F:01:11:E7:31:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl X509v3 Authority Key Identifier: keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:75:c5:d2:bd:40:86:bc:e3:f8:9d:25:24:c0:4b:e5:09:5a: 86:ce:76:b1:cc:f2:18:aa:17:df:75:e8:60:d7:41:71:03:f9: 52:0f:c8:bf:35:3c:8a:f0:7e:b5:9a:5c:75:77:72:4f:28:a3: 8e:72:99:df:2a:b3:84:d3:8e:2a:11:d8:66:a0:5c:ef:0d:14: 2e:61:de:63:41:ee:a8:7c:ed:dc:08:2e:0a:52:d4:51:01:5e: 31:4b:38:15:9c:7b:fb:87:e2:a6:dc:4a:ea:cc:95:8b:09:30: 9c:b3:c0:04:70:a4:a1:f5:79:fc:fe:2b:c3:26:9d:c9:e5:96: 77:e6:f8:90:b3:09:2b:4e:be:50:ba:ec:37:19:f0:58:da:fd: 0d:b0:29:62:5f:83:62:4d:ab:1a:9f:69:75:32:05:f9:dd:a5: c6:54:f9:10:1f:b7:18:41:44:ee:dd:4b:18:a3:72:de:11:a5: dc:fb:b5:a1:1b:25:69:21:7b:9d:6b:e6:3a:5b:63:cd:fe:20: 6c:29:38:be:f0:0e:f4:91:13:5e:29:e1:11:e6:bf:84:2a:a2: 30:07:b3:c3:17:45:de:2f:fd:46:9c:74:c5:02:c2:03:0f:a4: f7:50:26:ea:41:93:47:b3:b4:16:b2:cd:e2:96:0f:32:be:85: d1:f4:2d:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr74BcmTvRewZTmS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY2YjJkZjQtMGYwYS00Yjg0LTllYjctYzE4NTI1OGY1 Mjk0MB4XDTI1MDgyNjExMDAwOFoXDTI1MDgyOTExMDAwMFowLzEtMCsGA1UEAxMk YzczMGE0MjktMDFhZS00ZGIwLWJlMGUtYWM1ODhlOTE0ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBa4OHQqeYf4wLnoMVtTT8lxDWdD8XFhIY+N xsABKYnG/L4A5l2AVEj2On4q9+MjYJax+/9GN3UJ/m5SIcLYzaZCz/LHEkaXoHtJ jpgFbEaANq+t6w27dcgVX8jJn3GW3Dre2gGFNd70NYQnmg1Y7rnBdthHpCgoAD7X B5cXAROAwvLRitBnNBzF5mi4Cv7YzlTGEzJUvo7Qoi1KHmQwoH/GLtsCR+fGf7VR ldHYkZ+9YWFTJmiNp8UKRGUXiYFLBi88WlNgKvSix00IGiac7dcoTasKIpUavJvz +jBL/x9SafR91/6QLmcjVItSb4ftOYGDJXwJi1V5lMP6RubRNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBS9T68bWR3sqiGW6mcFfwER5zFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NjZi MmRmNC0wZjBhLTRiODQtOWViNy1jMTg1MjU4ZjUyOTQvODY2YjJkZjQtMGYwYS00 Yjg0LTllYjctYzE4NTI1OGY1Mjk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODY2YjJkZjQtMGYwYS00Yjg0LTll YjctYzE4NTI1OGY1Mjk0Lzg2NmIyZGY0LTBmMGEtNGI4NC05ZWI3LWMxODUyNThm NTI5NC5jcmwwHwYDVR0jBBgwFoAUlXZb8dwS0UD6rVvU62UXQha+WnswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NjZiMmRmNC0wZjBhLTRiODQtOWViNy1jMTg1 MjU4ZjUyOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKdcXSvUCGvOP4nSUkwEvl CVqGznaxzPIYqhffdehg10FxA/lSD8i/NTyK8H61mlx1d3JPKKOOcpnfKrOE044q EdhmoFzvDRQuYd5jQe6ofO3cCC4KUtRRAV4xSzgVnHv7h+Km3ErqzJWLCTCcs8AE cKSh9Xn8/ivDJp3J5ZZ35viQswkrTr5Quuw3GfBY2v0NsCliX4NiTasan2l1MgX5 3aXGVPkQH7cYQUTu3UsYo3LeEaXc+7WhGyVpIXuda+Y6W2PN/iBsKTi+8A70kRNe KeER5r+EKqIwB7PDF0XeL/1GnHTFAsIDD6T3UCbqQZNHs7QWss3ilg8yvoXR9C0i -----END CERTIFICATE-----Generated at Tue Aug 26 20:00:16 2025 by rpki-client