$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft File: 655fb139-547c-4d10-b4e3-9ca47b909ae1.mft (raw, json) Hash identifier: Q9j+JzTRl6V2dkphJwCBWSM8Eug5/6CGUDygJygx4FU= Subject key identifier: 4C:6D:6B:E8:B7:F1:D7:21:54:57:7D:2F:F2:49:22:23:7E:84:20:B1 Authority key identifier: D2:D9:2E:AD:0E:44:76:E7:13:56:5D:87:8E:BD:93:4C:26:5A:C7:A8 Certificate issuer: /CN=655fb139-547c-4d10-b4e3-9ca47b909ae1 Certificate serial: 010D0C9F4328584AEBB4D9222BBACADFDF4A70C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft Manifest number: 010D0C9F43285847A629B26839BFF3A92D1EC333 Signing time: Wed 20 Aug 2025 16:00:03 +0000 Manifest this update: Wed 20 Aug 2025 16:00:03 +0000 Manifest next update: Sat 23 Aug 2025 16:00:00 +0000 Files and hashes: 1: 40862018-14f1-3891-b0b0-c848dd5b0a55.roa (hash: 0ELrTZzH5P7C7vJeJcQEucAp+tLopXv63mo0+M1qu+8=) 2: 655fb139-547c-4d10-b4e3-9ca47b909ae1.crl (hash: u1AsOTsKqenCIwR6UYRdgSnlurWbUQNHA0Avapp0AUw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:b4:d9:22:2b:ba:ca:df:df:4a:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=655fb139-547c-4d10-b4e3-9ca47b909ae1 Validity Not Before: Aug 20 16:00:03 2025 GMT Not After : Aug 23 16:00:00 2025 GMT Subject: CN=d91b266a-226e-4730-9f9a-264a3a5c2a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:12:3a:39:32:57:52:23:a2:c7:fa:72:e8: 42:21:fc:45:ab:22:a9:8a:75:4c:3d:24:3b:4c:3f: 60:35:a8:a3:41:d0:e4:2a:ef:27:55:95:6a:3f:61: ab:6e:d7:52:1e:6b:2a:e8:20:17:26:79:be:27:05: 96:29:65:89:3b:69:27:20:9c:e8:19:d3:5d:25:92: a8:12:8b:b9:ff:07:fd:d7:95:19:9f:3b:b2:f2:76: 90:c5:32:d4:10:9c:e2:15:f1:46:73:15:65:b1:5e: d7:f2:be:78:cc:34:14:dc:e2:b9:25:cb:51:7f:9b: b4:a1:f6:7c:bf:bf:70:7c:0f:65:99:e2:49:f7:1d: 95:63:3e:6e:f8:76:02:42:4d:e7:9e:fa:00:48:5c: e7:d0:69:4d:6c:52:ef:27:64:e2:fa:68:50:50:b9: ae:db:21:7d:a2:c2:ab:fe:22:be:da:e3:da:d5:83: 53:e7:90:0c:00:5d:4b:a7:9c:2d:26:c1:29:72:a2: 71:3d:cc:fa:e9:e2:3d:6b:8a:57:9a:76:cb:ba:d6: ca:73:40:11:cd:cd:8e:9e:0b:16:ac:32:89:90:6e: 55:14:d9:3f:19:a4:c0:39:16:39:50:7e:72:3a:51: 2f:5f:ae:7b:27:5e:27:36:44:48:25:45:ef:e3:7b: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6D:6B:E8:B7:F1:D7:21:54:57:7D:2F:F2:49:22:23:7E:84:20:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1/655fb139-547c-4d10-b4e3-9ca47b909ae1.crl X509v3 Authority Key Identifier: keyid:D2:D9:2E:AD:0E:44:76:E7:13:56:5D:87:8E:BD:93:4C:26:5A:C7:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/655fb139-547c-4d10-b4e3-9ca47b909ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a9:2b:39:27:3c:8d:aa:76:72:ba:f7:c6:1c:dd:02:29:6a: de:cd:fc:ee:43:3c:23:87:b7:ba:ae:b5:8c:fe:3a:4c:b2:74: da:35:a2:73:0a:3b:64:a3:42:7f:9c:76:a3:c3:86:c8:33:cc: 49:01:f5:c5:68:15:46:1a:c6:42:45:42:63:dc:6b:8f:08:d3: fe:50:db:01:80:33:80:0c:39:47:c1:41:fb:24:16:d4:5a:b1: 96:52:d6:ac:be:1b:0a:87:00:68:9a:b8:dd:c8:12:2a:8f:4d: db:31:9e:d1:2f:b6:af:f6:f3:b4:18:09:91:a5:c3:c3:3b:24: 14:45:54:25:da:45:69:e2:86:f2:60:1b:92:c9:f2:de:f4:b5: 01:8e:82:4f:57:23:a5:17:29:1c:e5:9c:0d:1a:1c:e6:7e:db: a2:86:b4:df:a1:e6:4f:9b:64:dd:fd:b3:4d:3d:11:58:4e:a3: 53:ae:33:2a:9e:26:d9:ef:bb:52:64:0f:ca:43:91:51:60:cb: 7a:cd:4d:e9:f4:3c:61:10:2c:25:34:9b:08:ae:a3:62:9f:a4: ff:f5:e1:e1:f0:a7:4f:ef:92:ce:50:7e:5b:47:82:8e:a7:05: 85:fd:98:67:c5:c3:23:15:7f:65:bc:32:af:b9:58:bc:d5:cc: c3:3f:28:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrtNkiK7rK399KcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1ZmIxMzktNTQ3Yy00ZDEwLWI0ZTMtOWNhNDdiOTA5 YWUxMB4XDTI1MDgyMDE2MDAwM1oXDTI1MDgyMzE2MDAwMFowLzEtMCsGA1UEAxMk ZDkxYjI2NmEtMjI2ZS00NzMwLTlmOWEtMjY0YTNhNWMyYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzcSOjkyV1Ijosf6cuhCIfxFqyKpinVMPSQ7 TD9gNaijQdDkKu8nVZVqP2GrbtdSHmsq6CAXJnm+JwWWKWWJO2knIJzoGdNdJZKo Eou5/wf915UZnzuy8naQxTLUEJziFfFGcxVlsV7X8r54zDQU3OK5JctRf5u0ofZ8 v79wfA9lmeJJ9x2VYz5u+HYCQk3nnvoASFzn0GlNbFLvJ2Ti+mhQULmu2yF9osKr /iK+2uPa1YNT55AMAF1Lp5wtJsEpcqJxPcz66eI9a4pXmnbLutbKc0ARzc2OngsW rDKJkG5VFNk/GaTAORY5UH5yOlEvX657J14nNkRIJUXv43v4iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFExta+i38dchVFd9L/JJIiN+hCCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82NTVm YjEzOS01NDdjLTRkMTAtYjRlMy05Y2E0N2I5MDlhZTEvNjU1ZmIxMzktNTQ3Yy00 ZDEwLWI0ZTMtOWNhNDdiOTA5YWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjU1ZmIxMzktNTQ3Yy00ZDEwLWI0 ZTMtOWNhNDdiOTA5YWUxLzY1NWZiMTM5LTU0N2MtNGQxMC1iNGUzLTljYTQ3Yjkw OWFlMS5jcmwwHwYDVR0jBBgwFoAU0tkurQ5EducTVl2Hjr2TTCZax6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82NTVmYjEzOS01NDdjLTRkMTAtYjRlMy05Y2E0 N2I5MDlhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4qSs5JzyNqnZyuvfGHN0C KWrezfzuQzwjh7e6rrWM/jpMsnTaNaJzCjtko0J/nHajw4bIM8xJAfXFaBVGGsZC RUJj3GuPCNP+UNsBgDOADDlHwUH7JBbUWrGWUtasvhsKhwBomrjdyBIqj03bMZ7R L7av9vO0GAmRpcPDOyQURVQl2kVp4obyYBuSyfLe9LUBjoJPVyOlFykc5ZwNGhzm ftuihrTfoeZPm2Td/bNNPRFYTqNTrjMqnibZ77tSZA/KQ5FRYMt6zU3p9DxhECwl NJsIrqNin6T/9eHh8KdP75LOUH5bR4KOpwWF/ZhnxcMjFX9lvDKvuVi81czDPyiE -----END CERTIFICATE-----Generated at Thu Aug 21 05:53:56 2025 by rpki-client