$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft File: a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft (raw, json) Hash identifier: OtHq4ZiiAClAEkR+6XRVTY8qFo/ETh/HrhxTZNcXHo8= Subject key identifier: A9:23:AF:D9:73:CC:3A:89:24:3B:A2:45:EF:31:06:62:E7:6A:22:85 Authority key identifier: 42:42:7A:72:DD:4E:35:2F:31:08:25:14:35:43:07:FF:CC:AD:A2:B5 Certificate issuer: /CN=a686eafb-60a6-46e8-b535-fcb7eb7f5c45 Certificate serial: 010D0C9F4328584AF66879339CF7F03061406B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft Manifest number: 010D0C9F43285845A9B8D47E3ED1D5219FDC4872 Signing time: Sun 24 Aug 2025 12:00:03 +0000 Manifest this update: Sun 24 Aug 2025 12:00:03 +0000 Manifest next update: Wed 27 Aug 2025 12:00:00 +0000 Files and hashes: 1: a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl (hash: UAvd5y0r6MHZforw+GqRu1UtudV1kyIveuKqouW47JU=) 2: c2426f57-b823-345d-b891-0c00a98d5d07.roa (hash: JYOr2yRsUp3LSlBl/adWn//eByt+nNb0Kaya25f3aFA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:68:79:33:9c:f7:f0:30:61:40:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a686eafb-60a6-46e8-b535-fcb7eb7f5c45 Validity Not Before: Aug 24 12:00:03 2025 GMT Not After : Aug 27 12:00:00 2025 GMT Subject: CN=68f5e010-714a-4b3f-b2cb-259e60da7151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:fe:b0:2b:e8:3a:7c:15:ca:70:24:a1:55: ec:a6:9f:cb:28:a4:6b:fd:1f:fd:44:cd:2b:ce:75: 94:3f:21:5d:fa:c3:1b:83:fb:ad:d7:8e:bc:61:87: 30:d5:be:63:82:46:2f:06:62:df:33:4a:37:c7:4d: 39:31:a7:fa:56:51:51:42:46:dd:9f:0b:f5:6c:dd: 4b:ba:c7:cb:eb:c5:1c:49:19:c8:46:a6:b8:5a:17: fe:73:97:5e:14:e4:0f:95:28:66:83:30:69:3c:ae: 9f:db:bb:46:e9:0e:e9:64:52:2d:e7:af:69:52:52: 0f:05:d5:ad:b8:0d:fc:ac:b7:67:cf:a6:09:de:09: ba:ab:1b:38:55:de:80:88:5d:aa:aa:b6:de:53:41: e7:3f:06:4b:77:63:e6:53:71:6b:5b:c8:48:86:c1: f3:67:d7:ec:75:df:6e:44:42:4d:b2:8b:81:3e:a9: e3:d8:9a:e2:97:46:bd:f8:32:b0:cf:35:52:27:b4: b5:9d:b5:ff:b1:4e:f2:1a:2c:e2:3e:24:58:8a:d2: 5a:e6:34:19:23:21:71:7a:2e:5d:fe:c6:f6:34:90: d2:32:9d:b9:31:db:58:58:34:0f:0d:56:d0:e5:b7: 52:da:59:c3:75:57:77:d2:1f:1f:75:af:f6:d6:88: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:AF:D9:73:CC:3A:89:24:3B:A2:45:EF:31:06:62:E7:6A:22:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.crl X509v3 Authority Key Identifier: keyid:42:42:7A:72:DD:4E:35:2F:31:08:25:14:35:43:07:FF:CC:AD:A2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a686eafb-60a6-46e8-b535-fcb7eb7f5c45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a7:67:08:db:0b:6b:10:d1:83:7d:0f:36:a0:b1:3e:1f:63: 5e:22:f6:bf:e2:a4:48:19:78:d8:7a:27:c4:6a:b2:90:b7:a5: 18:9d:50:c1:68:af:f1:32:ec:9c:ae:ba:11:55:9c:ff:c3:16: 0c:ef:05:b0:e7:67:9a:38:25:4f:4b:3f:ad:8d:6f:d6:2c:88: 83:6c:5a:22:9d:33:ed:78:14:00:c0:41:e0:3d:65:26:53:79: 53:81:86:28:7a:e1:b3:f0:3e:df:63:99:84:e3:b5:4c:03:56: 14:40:ab:36:3f:8d:59:21:f0:16:d3:a7:86:2f:bf:f0:50:9b: 9d:1f:57:eb:bd:a1:2a:29:be:68:ed:c3:33:49:c8:b8:5e:b6: 8b:8a:a5:84:ba:70:53:81:b9:bc:3c:de:a4:d2:e3:bd:d5:1a: bd:06:79:a0:06:dc:55:ca:90:29:65:45:74:3e:40:d4:78:af: 61:e1:87:0f:b0:66:cc:95:d4:ec:51:3a:29:1b:2a:5f:32:b2: ff:eb:b1:e7:bc:28:66:bd:cd:b0:cf:75:0a:58:52:e1:ba:49: ba:04:6c:6d:de:1c:69:49:ff:c0:c7:99:47:19:7f:ad:40:40: f0:ac:b5:f5:99:9a:e4:79:46:07:28:e1:7c:2c:5a:78:32:66: a7:bb:42:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr2aHkznPfwMGFAawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY4NmVhZmItNjBhNi00NmU4LWI1MzUtZmNiN2ViN2Y1 YzQ1MB4XDTI1MDgyNDEyMDAwM1oXDTI1MDgyNzEyMDAwMFowLzEtMCsGA1UEAxMk NjhmNWUwMTAtNzE0YS00YjNmLWIyY2ItMjU5ZTYwZGE3MTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ/+sCvoOnwVynAkoVXspp/LKKRr/R/9RM0r znWUPyFd+sMbg/ut1468YYcw1b5jgkYvBmLfM0o3x005Maf6VlFRQkbdnwv1bN1L usfL68UcSRnIRqa4Whf+c5deFOQPlShmgzBpPK6f27tG6Q7pZFIt569pUlIPBdWt uA38rLdnz6YJ3gm6qxs4Vd6AiF2qqrbeU0HnPwZLd2PmU3FrW8hIhsHzZ9fsdd9u REJNsouBPqnj2Jril0a9+DKwzzVSJ7S1nbX/sU7yGiziPiRYitJa5jQZIyFxei5d /sb2NJDSMp25MdtYWDQPDVbQ5bdS2lnDdVd30h8fda/21oggLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKkjr9lzzDqJJDuiRe8xBmLnaiKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNjg2 ZWFmYi02MGE2LTQ2ZTgtYjUzNS1mY2I3ZWI3ZjVjNDUvYTY4NmVhZmItNjBhNi00 NmU4LWI1MzUtZmNiN2ViN2Y1YzQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTY4NmVhZmItNjBhNi00NmU4LWI1 MzUtZmNiN2ViN2Y1YzQ1L2E2ODZlYWZiLTYwYTYtNDZlOC1iNTM1LWZjYjdlYjdm NWM0NS5jcmwwHwYDVR0jBBgwFoAUQkJ6ct1ONS8xCCUUNUMH/8ytorUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNjg2ZWFmYi02MGE2LTQ2ZTgtYjUzNS1mY2I3 ZWI3ZjVjNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgp2cI2wtrENGDfQ82oLE+ H2NeIva/4qRIGXjYeifEarKQt6UYnVDBaK/xMuycrroRVZz/wxYM7wWw52eaOCVP Sz+tjW/WLIiDbFoinTPteBQAwEHgPWUmU3lTgYYoeuGz8D7fY5mE47VMA1YUQKs2 P41ZIfAW06eGL7/wUJudH1frvaEqKb5o7cMzSci4XraLiqWEunBTgbm8PN6k0uO9 1Rq9BnmgBtxVypApZUV0PkDUeK9h4YcPsGbMldTsUTopGypfMrL/67HnvChmvc2w z3UKWFLhukm6BGxt3hxpSf/Ax5lHGX+tQEDwrLX1mZrkeUYHKOF8LFp4Mmanu0IU -----END CERTIFICATE-----Generated at Mon Aug 25 08:22:10 2025 by rpki-client