$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft File: a1d568c5-f4e7-4018-a050-a2f04280e225.mft (raw, json) Hash identifier: P1AnATu6WF5zAc1saygcv5eZoNCln+WzfgYXiGnGM0Q= Subject key identifier: DD:2B:C0:2C:97:01:32:AD:20:AF:1D:FA:53:4E:7D:3E:F0:13:AA:71 Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Certificate issuer: /CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Certificate serial: 010D0C9F4328584AF7924E1635BC75EAC95A7D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft Manifest number: 010D0C9F43285847DBF247FABDDD04106F411E23 Signing time: Sun 24 Aug 2025 22:00:08 +0000 Manifest this update: Sun 24 Aug 2025 22:00:08 +0000 Manifest next update: Tue 26 Aug 2025 22:00:00 +0000 Files and hashes: 1: a1d568c5-f4e7-4018-a050-a2f04280e225.crl (hash: 7MxnBv7ZohqKM8uSmD+c/0fK5jPkVZiPo6c//liEwGs=) 2: e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (hash: QKbd2G7gEd2SZuMSpuFodJ74zHaN2DmcTGFo2AUj2vg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:92:4e:16:35:bc:75:ea:c9:5a:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Validity Not Before: Aug 24 22:00:08 2025 GMT Not After : Aug 26 22:00:00 2025 GMT Subject: CN=94bae73f-310b-42c1-9b29-48702cf03d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:9f:2c:75:5e:7f:71:51:db:aa:05:34:63: 6c:d3:5c:9d:2f:a5:9a:8e:a7:0e:42:4c:57:3a:0b: 9d:39:05:54:dc:aa:a5:14:a5:b7:87:7e:18:66:79: c8:c9:cd:e6:65:0b:9e:2d:a5:5e:d1:0c:b6:0c:8d: 25:fc:a8:cc:b1:0a:1d:ed:25:0d:a8:ac:74:7d:10: ae:12:41:c9:c3:db:43:77:7c:5a:6e:df:e4:80:a4: 1b:de:82:7d:71:03:87:77:1b:0b:e1:1e:c5:24:e2: be:91:c7:1a:5f:79:1a:c1:f4:b2:43:34:38:2a:65: e5:85:c5:8e:2e:ef:8e:00:79:35:1c:e4:58:a0:6e: 54:95:07:54:1c:87:41:e3:c5:ff:60:cd:bc:7e:19: 10:ad:34:da:94:1e:2d:6b:f1:28:d4:b1:68:c8:e1: 7b:9b:55:be:a5:94:c6:68:e5:12:83:68:8c:3e:30: ab:73:d3:bb:f0:fc:3c:f1:ef:15:84:c8:9b:fa:8b: c6:36:5d:3a:35:e0:a0:4e:25:14:d2:d6:82:ac:fc: 0d:8f:28:a8:19:9d:44:d0:bc:20:14:55:48:a4:a7: 95:13:54:8e:fd:d2:17:6e:43:06:f8:5d:64:a6:c4: 0f:47:1f:63:e8:38:f6:a7:e5:41:de:ef:3f:15:7b: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2B:C0:2C:97:01:32:AD:20:AF:1D:FA:53:4E:7D:3E:F0:13:AA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl X509v3 Authority Key Identifier: keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:24:1d:3e:e4:cf:57:4e:b9:d1:58:b7:2c:a4:26:f6:e2:cb: e2:8d:ca:c4:69:0c:e9:df:43:56:3d:ae:38:99:2a:27:68:7b: 34:7a:13:c0:d4:80:69:e1:7b:bc:23:c9:f0:3c:aa:d1:d6:18: 0f:67:1b:56:74:a7:6e:f4:60:42:57:22:a2:28:e8:91:21:45: 43:ce:90:04:fb:ac:9d:d5:c3:8b:b4:0a:6c:53:a5:d2:de:3e: c2:93:cb:9f:2d:02:6c:bc:75:f9:b4:c6:fd:15:ed:a9:64:3e: 5a:74:6b:65:85:07:3b:e8:a4:84:90:14:68:4e:e9:dd:83:25: 8d:c0:a5:06:b5:9b:c6:be:4e:3e:56:d9:86:63:ed:75:58:cf: 12:96:50:9b:a7:6c:fb:36:05:30:1b:9d:b2:65:9e:c0:9d:e1: df:57:74:aa:3f:b0:94:a9:98:04:1f:6a:3f:bb:48:60:18:91: 39:72:41:c3:d1:8d:84:38:0a:74:aa:4f:be:4b:ff:cf:a5:f2: d3:1b:d5:97:9d:8a:b3:c0:09:86:9a:f1:63:0c:77:d6:75:f4: 9e:3c:6b:2c:6a:5c:e0:34:13:36:74:b1:32:19:ef:8c:59:60: d1:46:71:c9:4e:b1:27:95:a2:19:72:86:18:a0:ce:7e:c6:0f: af:f7:2d:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3kk4WNbx16slafQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkNTY4YzUtZjRlNy00MDE4LWEwNTAtYTJmMDQyODBl MjI1MB4XDTI1MDgyNDIyMDAwOFoXDTI1MDgyNjIyMDAwMFowLzEtMCsGA1UEAxMk OTRiYWU3M2YtMzEwYi00MmMxLTliMjktNDg3MDJjZjAzZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmySfLHVef3FR26oFNGNs01ydL6WajqcOQkxX OgudOQVU3KqlFKW3h34YZnnIyc3mZQueLaVe0Qy2DI0l/KjMsQod7SUNqKx0fRCu EkHJw9tDd3xabt/kgKQb3oJ9cQOHdxsL4R7FJOK+kccaX3kawfSyQzQ4KmXlhcWO Lu+OAHk1HORYoG5UlQdUHIdB48X/YM28fhkQrTTalB4ta/Eo1LFoyOF7m1W+pZTG aOUSg2iMPjCrc9O78Pw88e8VhMib+ovGNl06NeCgTiUU0taCrPwNjyioGZ1E0Lwg FFVIpKeVE1SO/dIXbkMG+F1kpsQPRx9j6Dj2p+VB3u8/FXsQkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN0rwCyXATKtIK8d+lNOfT7wE6pxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1 NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4MGUyMjUvYTFkNTY4YzUtZjRlNy00 MDE4LWEwNTAtYTJmMDQyODBlMjI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTFkNTY4YzUtZjRlNy00MDE4LWEw NTAtYTJmMDQyODBlMjI1L2ExZDU2OGM1LWY0ZTctNDAxOC1hMDUwLWEyZjA0Mjgw ZTIyNS5jcmwwHwYDVR0jBBgwFoAUYK1fte4vsi2kNA7XGbVSe3y626AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYw NDI4MGUyMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADJB0+5M9XTrnRWLcspCb2 4svijcrEaQzp30NWPa44mSonaHs0ehPA1IBp4Xu8I8nwPKrR1hgPZxtWdKdu9GBC VyKiKOiRIUVDzpAE+6yd1cOLtApsU6XS3j7Ck8ufLQJsvHX5tMb9Fe2pZD5adGtl hQc76KSEkBRoTundgyWNwKUGtZvGvk4+VtmGY+11WM8SllCbp2z7NgUwG52yZZ7A neHfV3SqP7CUqZgEH2o/u0hgGJE5ckHD0Y2EOAp0qk++S//PpfLTG9WXnYqzwAmG mvFjDHfWdfSePGssalzgNBM2dLEyGe+MWWDRRnHJTrEnlaIZcoYYoM5+xg+v9y3B -----END CERTIFICATE-----Generated at Mon Aug 25 09:30:10 2025 by rpki-client