$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft File: 44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft (raw, json) Hash identifier: 4f6N4iFWS1wLRxoJfx+riKZPZMm9lsJL9oTWi5SSJKs= Subject key identifier: 0D:D6:B0:2A:D8:D5:25:B7:CD:E5:B8:9A:45:1F:80:BB:50:A8:94:19 Authority key identifier: D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC Certificate issuer: /CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5 Certificate serial: 010D0C9F4328584AF7EC952AB4B46AA0E3E0C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft Manifest number: 010D0C9F43285847772142B4CAAF77A08BD30408 Signing time: Mon 25 Aug 2025 01:02:03 +0000 Manifest this update: Mon 25 Aug 2025 01:02:03 +0000 Manifest next update: Tue 26 Aug 2025 19:00:00 +0000 Files and hashes: 1: 44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl (hash: 9Sca5z1im4KmWeCN+70ltlig2zg8AxDB0q1+/eo1sQA=) 2: 79feea74-1d7a-36a9-8d6d-3fb485b20383.roa (hash: ofKdOcwpbI0okPJrxb7Ov9G2h3IOX5V6HCUKP5Ptclc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:ec:95:2a:b4:b4:6a:a0:e3:e0:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5 Validity Not Before: Aug 25 01:02:03 2025 GMT Not After : Aug 26 19:00:00 2025 GMT Subject: CN=28380f83-61bd-4c5d-bd75-19080f2f58fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:e0:2a:10:2d:73:f9:64:4c:89:99:b0:4b: 08:0c:7e:92:47:de:65:72:b3:d0:91:7d:82:84:10: 97:6a:4d:23:0a:0e:40:49:3f:7b:5c:1f:a3:4f:c5: b7:4d:8f:54:eb:2c:ad:e7:b7:9e:14:4b:b0:9f:4b: f8:0d:d8:f3:61:1c:84:30:1c:31:bd:c6:2e:97:9d: 4e:98:cd:f1:03:f2:b0:ff:fe:2e:61:c7:80:75:32: 55:91:03:bc:1f:b4:b2:8d:46:6b:a9:92:b8:10:33: b9:9f:62:3c:36:1a:c6:16:ac:bf:cc:18:ad:6a:d1: c4:e6:20:63:83:fe:cd:26:5a:3f:cf:5e:86:c0:c4: 86:c1:93:12:56:5f:ff:d0:cf:ca:28:82:46:96:89: c9:44:3a:47:f4:88:58:ab:f1:22:f7:87:7c:ec:7f: cd:05:40:78:6a:36:eb:99:61:d0:42:3e:af:1d:17: dc:14:fb:cd:2b:66:8c:7b:fa:fd:37:65:ba:1e:84: 41:08:55:e2:71:5c:64:b7:b1:f4:90:07:69:71:11: bc:a9:c8:58:e6:6e:b4:66:59:54:8b:2e:a3:78:cd: 72:29:54:20:74:58:55:a5:83:d0:cf:dc:31:85:3b: 6e:e6:86:ba:84:11:c8:bb:43:7b:9a:ea:4d:87:fd: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D6:B0:2A:D8:D5:25:B7:CD:E5:B8:9A:45:1F:80:BB:50:A8:94:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.crl X509v3 Authority Key Identifier: keyid:D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:08:5d:c0:8a:db:9a:dd:70:c3:7a:1a:62:c6:f4:30:81:18: 95:3f:5a:40:8f:a0:12:11:89:26:38:c7:81:bd:13:3a:d4:3b: ae:62:43:b9:76:90:ad:4e:1e:a6:49:a9:2b:aa:78:e0:93:0a: 5f:2a:59:3e:16:15:de:2e:c5:d7:54:46:c4:f1:1c:89:d3:d5: b9:96:ca:1f:c6:a9:78:a1:2a:71:7e:68:f1:70:18:89:6e:b9: d7:a2:3c:37:a5:07:c7:67:af:3e:be:fb:e0:24:63:86:e8:97: ff:2a:23:25:2e:7b:77:cd:64:68:34:e5:c1:ec:8e:7e:c7:ba: 77:75:fc:29:71:b3:06:4a:53:f3:75:e2:b7:06:2e:cf:21:3f: c8:e1:f6:74:fc:9b:7e:5f:2a:23:4a:e8:a4:b5:11:c9:df:c4: 0c:e4:8b:8b:3f:2f:46:31:33:5b:2b:96:24:62:68:19:6b:77: 49:4e:2a:31:79:b3:4f:37:0f:35:85:84:ca:5d:d6:64:4c:e4: d0:07:72:c9:70:8f:e7:e5:d2:24:a0:5b:6c:03:92:23:44:0f: df:d8:9b:8c:04:22:dd:e1:c8:98:1d:b6:76:04:25:fa:cc:f6: 86:11:59:ef:84:8d:33:da:d9:10:66:5e:2b:a6:65:7b:4a:55: e8:7f:60:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr37JUqtLRqoOPgxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiOTIxZjctNjVkZC00YjMzLWIzOTktOWQzNzJmYjRh OWU1MB4XDTI1MDgyNTAxMDIwM1oXDTI1MDgyNjE5MDAwMFowLzEtMCsGA1UEAxMk MjgzODBmODMtNjFiZC00YzVkLWJkNzUtMTkwODBmMmY1OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5/gKhAtc/lkTImZsEsIDH6SR95lcrPQkX2C hBCXak0jCg5AST97XB+jT8W3TY9U6yyt57eeFEuwn0v4DdjzYRyEMBwxvcYul51O mM3xA/Kw//4uYceAdTJVkQO8H7SyjUZrqZK4EDO5n2I8NhrGFqy/zBitatHE5iBj g/7NJlo/z16GwMSGwZMSVl//0M/KKIJGlonJRDpH9IhYq/Ei94d87H/NBUB4ajbr mWHQQj6vHRfcFPvNK2aMe/r9N2W6HoRBCFXicVxkt7H0kAdpcRG8qchY5m60ZllU iy6jeM1yKVQgdFhVpYPQz9wxhTtu5oa6hBHIu0N7mupNh/3m4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA3WsCrY1SW3zeW4mkUfgLtQqJQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NGI5 MjFmNy02NWRkLTRiMzMtYjM5OS05ZDM3MmZiNGE5ZTUvNDRiOTIxZjctNjVkZC00 YjMzLWIzOTktOWQzNzJmYjRhOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDRiOTIxZjctNjVkZC00YjMzLWIz OTktOWQzNzJmYjRhOWU1LzQ0YjkyMWY3LTY1ZGQtNGIzMy1iMzk5LTlkMzcyZmI0 YTllNS5jcmwwHwYDVR0jBBgwFoAU18/Lg1PgOa7sPm+PHXgsUlHxS6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NGI5MjFmNy02NWRkLTRiMzMtYjM5OS05ZDM3 MmZiNGE5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3CF3Aitua3XDDehpixvQw gRiVP1pAj6ASEYkmOMeBvRM61DuuYkO5dpCtTh6mSakrqnjgkwpfKlk+FhXeLsXX VEbE8RyJ09W5lsofxql4oSpxfmjxcBiJbrnXojw3pQfHZ68+vvvgJGOG6Jf/KiMl Lnt3zWRoNOXB7I5+x7p3dfwpcbMGSlPzdeK3Bi7PIT/I4fZ0/Jt+XyojSuiktRHJ 38QM5IuLPy9GMTNbK5YkYmgZa3dJTioxebNPNw81hYTKXdZkTOTQB3LJcI/n5dIk oFtsA5IjRA/f2JuMBCLd4ciYHbZ2BCX6zPaGEVnvhI0z2tkQZl4rpmV7SlXof2AM -----END CERTIFICATE-----Generated at Mon Aug 25 09:37:06 2025 by rpki-client