$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft File: a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft (raw, json) Hash identifier: 2/h5sQen8eWVyHDlMe0k6uZOpFz2Xn32GkvnoFQ23ts= Subject key identifier: EB:7D:13:9F:F1:97:51:C3:48:98:D3:52:73:2A:EE:81:ED:6B:1B:0B Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15 Certificate issuer: /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d Certificate serial: 010D0C9F4328584AF7747A8785691962CF626380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft Manifest number: 010D0C9F432858460F3E853441ADCEB6CD522654 Signing time: Sun 24 Aug 2025 21:00:03 +0000 Manifest this update: Sun 24 Aug 2025 21:00:03 +0000 Manifest next update: Wed 27 Aug 2025 21:00:00 +0000 Files and hashes: 1: 668a0aeb-328b-3b87-9b83-66ab809813fb.roa (hash: wTdlB9Qrzw+fkk140BEVwPhYPEyD0PSJ0eyjQGP9vgs=) 2: 74f5b5c3-5536-3396-9029-ed677b8e6ca9.roa (hash: r2FvFOaa5wmJj9Eqe9iKSNq07FRXI1eOUFhil1lh7p8=) 3: a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl (hash: EVNq/JCELHEYKWibYL9WrikHW7JJ7EB3fdIlcV6ukPk=) 4: a872dc60-b0fd-32cc-a999-53e91767b69c.roa (hash: 7WBs6SUMzByelHy1quOn0hRY3vkku173H1ejF+No0N8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:74:7a:87:85:69:19:62:cf:62:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d Validity Not Before: Aug 24 21:00:03 2025 GMT Not After : Aug 27 21:00:00 2025 GMT Subject: CN=af1e0cae-ff89-4560-984e-f3a504566e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:01:8f:91:a1:9c:d1:f1:5d:66:f5:b1:b1: de:df:1e:47:43:af:d0:31:f3:ff:36:68:bf:77:ca: 69:9d:87:5d:40:10:19:a1:9d:5d:28:99:d3:e7:42: 45:99:08:9b:93:40:60:77:e0:6b:dd:0e:71:3e:cd: 69:39:84:b9:11:47:4b:0f:f2:5b:86:e3:04:98:78: dd:f2:e8:51:70:c9:d1:55:dd:4b:c6:2d:0c:11:41: f5:76:a5:32:fa:08:bd:13:b9:42:21:a0:da:c1:2e: 52:27:80:45:c5:76:c4:7a:df:15:eb:76:36:68:c6: c7:65:ac:3a:82:fd:be:ca:3c:49:19:67:60:9b:6c: 1c:36:df:c2:81:29:aa:0b:09:24:3b:f7:fd:bf:f7: fb:6d:63:a5:13:3e:0a:ac:4f:fe:f9:66:37:be:bd: e1:5c:de:e8:34:67:4c:fb:19:b3:e2:87:40:22:1a: 96:89:c4:f6:b4:cc:39:51:7f:f6:c4:03:62:66:48: b0:90:98:b9:36:67:ef:32:3b:1e:1d:4b:a6:f3:96: 5a:21:7b:22:9a:71:79:fa:ec:98:36:96:7c:db:73: 48:28:0c:5e:8a:1c:64:f8:bf:68:80:c8:29:2c:d9: 11:3d:4f:c9:40:72:c5:a7:55:17:5d:ad:c6:d3:9e: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7D:13:9F:F1:97:51:C3:48:98:D3:52:73:2A:EE:81:ED:6B:1B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl X509v3 Authority Key Identifier: keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:93:4a:41:ea:fe:b8:57:5d:7f:18:56:fc:bb:64:5c:ea:9f: 69:e6:fc:cf:59:ca:8f:05:24:62:5f:7e:6c:83:93:ce:f8:cd: e4:82:15:ed:a3:89:01:ac:81:e0:5d:cc:78:f1:f4:d6:14:68: 4a:e9:64:16:32:b1:ee:ee:87:c7:e6:2d:53:36:3b:20:87:fb: af:69:e9:fa:59:f6:c8:c5:9d:38:e8:54:cd:a4:b2:b3:9a:89: 2b:ad:65:a8:5c:86:fb:ab:00:45:2d:41:89:54:f2:b6:5d:82: c0:3f:c7:85:44:50:b4:1a:aa:06:59:91:b5:fc:97:64:d3:20: a2:a9:f3:45:f1:0c:18:bb:d0:98:ea:ed:06:d2:49:c7:8b:c6: ce:aa:21:ee:90:20:5f:4e:7d:cf:a9:b5:db:1a:4c:9e:cd:8b: 34:8d:be:3b:17:ed:a3:ab:51:4a:46:21:ab:75:e7:e4:58:dc: cb:ca:53:fe:4f:3c:b0:5c:04:e1:6b:7f:91:f2:5d:17:fc:d7: 91:6f:44:5c:5c:34:29:65:85:33:5b:56:05:b7:64:76:cb:2b: 3c:3d:bd:83:c9:f8:2c:a6:22:23:81:2f:bf:10:2b:a3:b7:05: cc:17:5b:1c:f1:2c:70:ea:d0:30:cf:70:c1:b2:5f:2f:07:32: 3c:30:7a:bf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr3dHqHhWkZYs9iY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmNjZWYtN2MzMC00YTQwLTkwY2EtY2UxNzAzYTIy YTFkMB4XDTI1MDgyNDIxMDAwM1oXDTI1MDgyNzIxMDAwMFowLzEtMCsGA1UEAxMk YWYxZTBjYWUtZmY4OS00NTYwLTk4NGUtZjNhNTA0NTY2ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMQBj5GhnNHxXWb1sbHe3x5HQ6/QMfP/Nmi/ d8ppnYddQBAZoZ1dKJnT50JFmQibk0Bgd+Br3Q5xPs1pOYS5EUdLD/JbhuMEmHjd 8uhRcMnRVd1Lxi0MEUH1dqUy+gi9E7lCIaDawS5SJ4BFxXbEet8V63Y2aMbHZaw6 gv2+yjxJGWdgm2wcNt/CgSmqCwkkO/f9v/f7bWOlEz4KrE/++WY3vr3hXN7oNGdM +xmz4odAIhqWicT2tMw5UX/2xANiZkiwkJi5NmfvMjseHUum85ZaIXsimnF5+uyY NpZ823NIKAxeihxk+L9ogMgpLNkRPU/JQHLFp1UXXa3G0565KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOt9E5/xl1HDSJjTUnMq7oHtaxsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmIy Y2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3MDNhMjJhMWQvYTJiMmNjZWYtN2MzMC00 YTQwLTkwY2EtY2UxNzAzYTIyYTFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJiMmNjZWYtN2MzMC00YTQwLTkw Y2EtY2UxNzAzYTIyYTFkL2EyYjJjY2VmLTdjMzAtNGE0MC05MGNhLWNlMTcwM2Ey MmExZC5jcmwwHwYDVR0jBBgwFoAUb/OlDaNR+7VH64u4PGhPsFxkHBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMmIyY2NlZi03YzMwLTRhNDAtOTBjYS1jZTE3 MDNhMjJhMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLk0pB6v64V11/GFb8u2Rc 6p9p5vzPWcqPBSRiX35sg5PO+M3kghXto4kBrIHgXcx48fTWFGhK6WQWMrHu7ofH 5i1TNjsgh/uvaen6WfbIxZ046FTNpLKzmokrrWWoXIb7qwBFLUGJVPK2XYLAP8eF RFC0GqoGWZG1/Jdk0yCiqfNF8QwYu9CY6u0G0knHi8bOqiHukCBfTn3PqbXbGkye zYs0jb47F+2jq1FKRiGrdefkWNzLylP+TzywXATha3+R8l0X/NeRb0RcXDQpZYUz W1YFt2R2yys8Pb2DyfgspiIjgS+/ECujtwXMF1sc8Sxw6tAwz3DBsl8vBzI8MHq/ -----END CERTIFICATE-----Generated at Mon Aug 25 08:19:59 2025 by rpki-client