$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft File: df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft (raw, json) Hash identifier: qmWNw/4eqWd+T0WZWLSlyoYCWpa5rVwset4EGI06PZQ= Subject key identifier: F5:B7:CF:90:1C:96:36:25:76:AD:71:B9:B1:EA:3A:CC:4B:68:BA:A0 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584AFAB7450B2C2B44EDC1113200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft Manifest number: 010D0C9F43285845464B28A2C2FBF55DA9F9C79F Signing time: Tue 26 Aug 2025 01:02:03 +0000 Manifest this update: Tue 26 Aug 2025 01:02:03 +0000 Manifest next update: Wed 27 Aug 2025 22:00:00 +0000 Files and hashes: 1: 0570d7a2-4d9e-385e-9955-3fc7d8ca77ee.roa (hash: 1HCqHRYm3+MkuiERRhcG1NnQlvkS/yRhA2VSCjgyOqc=) 2: 16e56f4d-ab70-3766-907b-22447a23eeb4.roa (hash: C5Z1Bhm57a8Ci8uwBEGKZD7hjvEypp7NV2bEcZ/7pBM=) 3: bda6574d-81c2-38f7-b624-cdc878c38860.roa (hash: 7Mt8kpjFQBt0E2zVwbYPg/3rINhK6s/1s8mR6kvj0Yk=) 4: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (hash: ZN89WVnlZtXIJPl6sbRzbLxw3UDHy8KBdkb7M+ekdLI=) 5: df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl (hash: PZpcLapCKDQGgwRWVaKDERlA5I2EFdVqCQ3lTopjCLk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b7:45:0b:2c:2b:44:ed:c1:11:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Aug 26 01:02:03 2025 GMT Not After : Aug 27 22:00:00 2025 GMT Subject: CN=ec68de63-f671-4fe8-823f-45b166cdb147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:e6:8b:c7:0a:77:80:32:4c:a1:be:c3:b9: 5c:bf:72:1b:07:94:9a:e9:ef:bc:34:9b:d7:f5:ea: 7a:ae:1e:d3:9f:9e:68:29:ad:45:c5:98:09:0d:1c: 04:20:7a:6f:0b:2b:67:ca:89:0d:3b:41:d9:5b:a0: a4:6d:be:6a:60:68:26:88:f2:cc:c7:4b:50:e2:42: 5f:88:a5:83:41:14:d1:c1:a7:af:68:7e:7a:3f:f0: b8:40:35:73:fb:e0:c9:48:9a:4f:a3:e8:84:38:33: 78:31:a0:84:8d:f0:7c:e1:a5:1b:3b:92:2b:e4:23: 03:98:6f:fe:c4:5e:e5:89:22:2f:70:8f:a5:d0:64: c3:a6:57:15:d6:78:4f:fb:8a:22:4a:42:61:fc:d6: a1:cb:23:51:63:98:f5:ca:bc:8f:50:f9:63:1a:06: fb:83:f5:34:5c:59:15:54:0e:85:0e:b3:55:83:af: 78:09:14:ba:5c:c1:f8:4b:23:99:9f:66:04:96:d4: a6:12:3d:c0:91:d9:76:1c:ac:65:d2:31:b2:8e:13: 43:6c:29:86:58:e9:7f:54:8c:07:7d:86:46:99:80: 46:6f:99:d0:5b:30:d6:60:df:dc:8f:3e:31:56:06: 65:47:3a:8f:5f:b8:ce:8b:f1:03:91:9a:00:c4:9e: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B7:CF:90:1C:96:36:25:76:AD:71:B9:B1:EA:3A:CC:4B:68:BA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c3:4d:33:ce:f0:7e:80:46:76:75:d3:78:c1:d9:3d:11:32: 67:7e:68:4c:24:48:fb:b6:26:03:61:66:ec:be:28:b5:0a:e6: bd:c5:86:1d:02:48:e5:37:6f:ca:3d:84:87:09:61:cb:93:96: 44:6d:05:54:43:e8:2c:96:40:75:84:8e:c9:95:0d:ba:94:ba: f6:9f:d1:0f:27:df:da:0d:0c:17:92:0e:59:a8:b0:34:d9:23: b3:f0:95:b9:e3:af:9a:82:5e:07:bb:6d:ea:d9:00:6f:62:4c: 87:0f:76:4b:43:8e:07:2d:eb:e3:f2:b6:66:92:3f:5c:92:9d: 58:28:fe:d6:04:50:b5:73:f0:d8:1f:c1:59:35:35:98:61:f4: 43:4a:a0:dc:98:da:73:fc:90:89:3b:ca:3d:06:bf:b6:5c:d8: a2:23:9f:d0:eb:a4:38:ae:4c:9d:eb:99:5f:b7:ec:ab:70:5e: bf:37:bf:94:bf:31:c8:17:ef:92:a0:45:55:41:fa:da:cd:58: e7:a4:6d:95:a9:ad:bb:94:4e:98:5a:09:f5:9f:13:29:9e:54: cf:d5:ac:fb:57:20:af:8d:a5:0c:87:a9:d2:03:22:c4:e9:7e: 44:6b:87:1d:59:3b:da:8b:b2:19:40:a4:3c:98:c3:a8:34:2e: d6:d0:f1:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr6t0ULLCtE7cERMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI1MDgyNjAxMDIwM1oXDTI1MDgyNzIyMDAwMFowLzEtMCsGA1UEAxMk ZWM2OGRlNjMtZjY3MS00ZmU4LTgyM2YtNDViMTY2Y2RiMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU3mi8cKd4AyTKG+w7lcv3IbB5Sa6e+8NJvX 9ep6rh7Tn55oKa1FxZgJDRwEIHpvCytnyokNO0HZW6Ckbb5qYGgmiPLMx0tQ4kJf iKWDQRTRwaevaH56P/C4QDVz++DJSJpPo+iEODN4MaCEjfB84aUbO5Ir5CMDmG/+ xF7liSIvcI+l0GTDplcV1nhP+4oiSkJh/NahyyNRY5j1yryPUPljGgb7g/U0XFkV VA6FDrNVg694CRS6XMH4SyOZn2YEltSmEj3Akdl2HKxl0jGyjhNDbCmGWOl/VIwH fYZGmYBGb5nQWzDWYN/cjz4xVgZlRzqPX7jOi/EDkZoAxJ5voQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPW3z5AcljYldq1xubHqOsxLaLqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGYyZDJhNTItNWNhNy00 YTM2LTg0OWYtYTdkNmI4NzZlNjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/w00zzvB+gEZ2ddN4wdk9 ETJnfmhMJEj7tiYDYWbsvii1Cua9xYYdAkjlN2/KPYSHCWHLk5ZEbQVUQ+gslkB1 hI7JlQ26lLr2n9EPJ9/aDQwXkg5ZqLA02SOz8JW546+agl4Hu23q2QBvYkyHD3ZL Q44HLevj8rZmkj9ckp1YKP7WBFC1c/DYH8FZNTWYYfRDSqDcmNpz/JCJO8o9Br+2 XNiiI5/Q66Q4rkyd65lft+yrcF6/N7+UvzHIF++SoEVVQfrazVjnpG2Vqa27lE6Y Wgn1nxMpnlTP1az7VyCvjaUMh6nSAyLE6X5Ea4cdWTvai7IZQKQ8mMOoNC7W0PEh -----END CERTIFICATE-----Generated at Tue Aug 26 08:55:34 2025 by rpki-client