$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft File: 868a77c4-49cd-4821-b1f2-58d35028b0ed.mft (raw, json) Hash identifier: c8RzKyz9yptkr7G5h/9Yy07enI/FnDPi266pN9iymVo= Subject key identifier: BD:18:AD:95:95:D3:79:EB:B6:5F:B1:CE:5D:F4:C9:E9:E9:3C:82:F8 Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Certificate serial: 010D0C9F4328584AF844EB84ED62CBC746690300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft Manifest number: 010D0C9F432858471C13A2BCD92E1239A14C7767 Signing time: Mon 25 Aug 2025 04:00:03 +0000 Manifest this update: Mon 25 Aug 2025 04:00:03 +0000 Manifest next update: Thu 28 Aug 2025 04:00:00 +0000 Files and hashes: 1: 868a77c4-49cd-4821-b1f2-58d35028b0ed.crl (hash: IyDqSV3n3x8UHFC7LyZnQ5UPFK/YcHXYUr3g+O8mlsI=) 2: 9d8b4a39-d907-3704-bc98-36248d887277.roa (hash: 7OdVtgIHLFvza2nXX7MqMSHPVAuiaYU7jaWjmWj2kXU=) 3: c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa (hash: orQgU7FK9r2viCZAl0DP1GdBVVb4+F3MJw9m4gIc3AM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f8:44:eb:84:ed:62:cb:c7:46:69:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Validity Not Before: Aug 25 04:00:03 2025 GMT Not After : Aug 28 04:00:00 2025 GMT Subject: CN=3c9c4eb2-770c-4e1c-af86-5651cfe33b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:43:a2:ae:b6:f7:46:9d:e2:44:d6:04:d6: 94:86:41:01:16:14:9f:89:32:0b:b8:9d:da:89:cb: 19:ca:aa:5b:ba:7c:c1:91:83:06:e3:94:1c:cb:f8: f4:a5:01:39:5d:57:19:87:b1:d7:c4:36:d8:7a:a9: 24:84:03:a6:aa:e9:dc:1f:90:bc:36:6f:4d:d6:34: 18:c1:28:7d:12:25:af:55:ef:b1:0f:62:21:83:92: 39:fe:29:1e:dd:d0:7a:b7:67:93:31:0e:c3:9d:88: 79:21:5b:bc:74:8c:74:79:b9:65:3f:2b:45:31:43: 59:8b:d9:c5:d8:d7:02:1a:30:c2:85:20:87:bc:c3: c0:d3:78:b5:ba:8e:d0:f1:b4:bd:20:ba:e9:1e:ce: 00:14:35:94:1d:2e:5b:c8:7a:70:0b:4b:13:31:56: d4:78:d0:13:ca:fc:dc:13:b4:53:14:96:d1:e3:f1: 8f:6a:ba:ac:8e:a2:88:61:61:36:8b:ab:1f:ff:e4: b8:aa:61:aa:ef:db:2c:5e:af:7b:36:97:c1:43:d5: d9:4b:f4:9b:8c:7d:9a:d8:b9:7f:12:da:07:da:13: 24:65:98:b9:fa:7e:28:47:f4:64:1c:91:db:6c:72: c6:29:50:29:45:2e:58:dc:e9:81:71:f9:59:d2:52: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:18:AD:95:95:D3:79:EB:B6:5F:B1:CE:5D:F4:C9:E9:E9:3C:82:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl X509v3 Authority Key Identifier: keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e8:2f:3a:d4:6c:19:56:f9:bc:b8:e3:7f:bf:c6:83:35:37: f1:90:48:e3:6d:e4:25:d1:0c:ba:2d:f7:4a:60:48:db:f8:18: 23:bf:34:e1:94:15:4b:c6:e7:94:9d:bb:6f:e2:56:55:0c:b7: e9:78:5f:eb:d1:bf:c7:d6:54:cf:aa:f1:c5:ff:79:4c:32:62: 01:cd:6b:fd:90:fe:3e:e6:56:f4:8b:5f:6f:1a:57:ba:b2:94: b9:94:a8:d1:22:a5:31:c6:f5:c6:4d:18:5f:d3:94:11:6f:6e: 71:ef:d9:72:47:f5:ad:9d:56:bd:23:6a:a2:e6:0c:3c:a0:5b: 4e:18:5c:ac:68:c3:c0:e3:9c:20:90:8b:aa:99:67:e2:35:93: e4:3d:5a:54:2f:a1:a2:4c:d2:2e:4f:d3:6e:bf:3e:e9:41:de: 31:59:52:a2:90:65:8b:d1:ec:c3:35:2c:0e:d9:3a:bc:7f:3e: c7:8b:fc:4c:d2:55:f3:af:e3:a2:f3:c3:d5:02:ce:20:70:3f: 46:18:70:38:de:05:3e:59:fe:bf:00:dd:e8:8b:02:57:47:53: 7b:8c:6a:30:25:df:45:ba:90:21:72:ac:70:06:89:43:9a:f3: a8:73:58:55:36:90:f0:da:b7:8e:63:e4:50:2b:09:0a:9f:7c: 99:b0:8e:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr4ROuE7WLLx0ZpAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhi MGVkMB4XDTI1MDgyNTA0MDAwM1oXDTI1MDgyODA0MDAwMFowLzEtMCsGA1UEAxMk M2M5YzRlYjItNzcwYy00ZTFjLWFmODYtNTY1MWNmZTMzYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTFDoq6290ad4kTWBNaUhkEBFhSfiTILuJ3a icsZyqpbunzBkYMG45Qcy/j0pQE5XVcZh7HXxDbYeqkkhAOmquncH5C8Nm9N1jQY wSh9EiWvVe+xD2Ihg5I5/ike3dB6t2eTMQ7DnYh5IVu8dIx0ebllPytFMUNZi9nF 2NcCGjDChSCHvMPA03i1uo7Q8bS9ILrpHs4AFDWUHS5byHpwC0sTMVbUeNATyvzc E7RTFJbR4/GParqsjqKIYWE2i6sf/+S4qmGq79ssXq97NpfBQ9XZS/SbjH2a2Ll/ EtoH2hMkZZi5+n4oR/RkHJHbbHLGKVApRS5Y3OmBcflZ0lIztQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL0YrZWV03nrtl+xzl30yenpPIL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Njhh NzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvODY4YTc3YzQtNDljZC00 ODIxLWIxZjItNThkMzUwMjhiMGVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODY4YTc3YzQtNDljZC00ODIxLWIx ZjItNThkMzUwMjhiMGVkLzg2OGE3N2M0LTQ5Y2QtNDgyMS1iMWYyLTU4ZDM1MDI4 YjBlZC5jcmwwHwYDVR0jBBgwFoAUohnw63pfJLsgWQPIq44oAMhWrAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQz NTAyOGIwZWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG6C861GwZVvm8uON/v8aD NTfxkEjjbeQl0Qy6LfdKYEjb+BgjvzThlBVLxueUnbtv4lZVDLfpeF/r0b/H1lTP qvHF/3lMMmIBzWv9kP4+5lb0i19vGle6spS5lKjRIqUxxvXGTRhf05QRb25x79ly R/WtnVa9I2qi5gw8oFtOGFysaMPA45wgkIuqmWfiNZPkPVpUL6GiTNIuT9Nuvz7p Qd4xWVKikGWL0ezDNSwO2Tq8fz7Hi/xM0lXzr+Oi88PVAs4gcD9GGHA43gU+Wf6/ AN3oiwJXR1N7jGowJd9FupAhcqxwBolDmvOoc1hVNpDw2reOY+RQKwkKn3yZsI5C -----END CERTIFICATE-----Generated at Mon Aug 25 09:47:57 2025 by rpki-client