$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft File: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft (raw, json) Hash identifier: xN86Ssj6uD2OXVGCatM8nPlUDFq3amGjIqpi/m3iie4= Subject key identifier: 38:BD:52:00:26:DE:97:6C:AF:2D:2D:88:F6:B3:E4:66:60:17:D4:C5 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584B1D06F87618625BB0572C9C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft Manifest number: 010D0C9F432858440EC852E77A7AC987AC86ED35 Signing time: Sun 07 Sep 2025 08:00:08 +0000 Manifest this update: Sun 07 Sep 2025 08:00:08 +0000 Manifest next update: Tue 09 Sep 2025 08:00:00 +0000 Files and hashes: 1: 04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (hash: 1O7FMKmPA3fsyq+7OpqEHL0zXFLFBzfGRzSQsDgxkHM=) 2: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl (hash: BNEcFaV3PlcKhp88+tFQqjLNnXsHvyjC9ikbxntaIV0=) 3: c084590b-3ab2-32dd-af28-d65751098d7b.roa (hash: M3B14foCOtJxyd8T33jcSk88eWjmB37mzHHBJZS0wzU=) 4: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (hash: spfVAu/0PLO5I62zR3QH+XM04bQBv39AxRZXumXAJuk=) 5: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (hash: yd9o8HwafYIblgdtqlrOqfNS3PwSifqiELmajYdpObk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:06:f8:76:18:62:5b:b0:57:2c:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Sep 7 08:00:08 2025 GMT Not After : Sep 9 08:00:00 2025 GMT Subject: CN=ae1077bd-b696-42c4-8f6b-691a5c501445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:3e:7a:54:0c:1c:70:b7:b3:8c:d0:d3:7c: 85:25:d6:39:8c:3e:a1:09:bb:8a:b0:48:d5:6f:a3: b4:04:9c:96:06:7c:05:7d:4a:ab:f0:af:fa:ce:d3: 0b:1b:94:e8:32:52:49:9d:72:25:46:22:8e:48:d9: ab:31:c1:f2:6b:d7:21:ab:5b:e6:f2:d7:e2:83:34: 8e:a9:4e:50:f2:64:65:1b:10:90:6a:60:ce:d5:65: ac:23:ca:4c:7f:71:05:62:2b:53:92:d9:6c:53:6c: 16:c5:4f:65:0d:73:47:a3:aa:43:be:c3:7a:3d:42: 5a:1c:7c:3a:bc:19:35:aa:a3:5d:55:e7:dd:29:8a: 0c:8f:d8:8a:f4:9d:d8:0b:ef:b4:8e:81:30:08:56: c2:23:b0:9c:78:c4:c1:fb:b9:af:33:88:a8:e7:25: 73:98:cd:ae:93:8a:45:fa:e1:9b:e1:4d:8e:38:18: 73:ec:64:e2:61:59:0a:ce:dc:6d:61:b2:a3:ee:3c: 78:13:d6:f8:c6:cb:2d:ba:18:66:5b:ec:ce:ba:c0: f4:a7:f0:30:3d:f6:62:e7:68:d9:79:ab:7c:db:cf: 22:d8:3e:71:5a:99:ca:d8:73:24:ef:c3:3d:7d:a9: c2:58:9c:94:0c:2a:2f:cc:5e:fe:46:4b:39:50:04: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BD:52:00:26:DE:97:6C:AF:2D:2D:88:F6:B3:E4:66:60:17:D4:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:14:69:19:3a:8f:ab:64:32:06:14:66:5b:c7:e1:7e:0c:09: 7e:20:26:4c:ae:17:f3:1f:79:d3:f0:ef:60:ac:f5:23:d4:7e: 21:d6:ea:2f:63:e1:14:dd:dc:9f:59:4e:37:83:75:44:b1:10: 9e:23:67:a4:16:d1:59:59:2b:58:21:3b:d7:9f:6a:bf:4e:5b: 29:3c:38:59:43:6b:3f:3f:87:c3:81:ef:de:ff:2c:f6:53:f0: 47:7c:73:52:27:d3:85:8b:d4:c8:6c:c7:f6:0d:a9:aa:b5:2a: 69:3e:77:75:06:52:fe:53:7d:32:23:d0:95:aa:89:b1:48:94: 36:1c:a5:ba:3c:67:f0:0c:54:65:7e:7e:9b:b0:a1:9f:e1:34: 04:d6:34:ee:30:3b:16:c9:37:f4:80:b9:66:bd:c1:a7:74:1f: f5:6a:50:20:52:04:7c:06:f9:ba:0a:dd:f5:13:6f:73:d3:81: 38:ef:8f:a0:a6:5c:ad:7e:9b:df:d4:9e:56:bb:cf:85:dd:4d: ea:a9:30:cd:82:46:24:4b:b9:bb:a3:19:3a:c3:7f:7a:5c:d5: 92:49:6f:d1:81:ad:ce:36:29:01:9d:78:a4:bd:99:e6:22:81: fd:df:a1:0a:10:6a:c2:1f:08:26:85:e4:3f:72:80:ee:b3:ba: 79:24:bd:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsdBvh2GGJbsFcsnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDkwNzA4MDAwOFoXDTI1MDkwOTA4MDAwMFowLzEtMCsGA1UEAxMk YWUxMDc3YmQtYjY5Ni00MmM0LThmNmItNjkxYTVjNTAxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQE+elQMHHC3s4zQ03yFJdY5jD6hCbuKsEjV b6O0BJyWBnwFfUqr8K/6ztMLG5ToMlJJnXIlRiKOSNmrMcHya9chq1vm8tfigzSO qU5Q8mRlGxCQamDO1WWsI8pMf3EFYitTktlsU2wWxU9lDXNHo6pDvsN6PUJaHHw6 vBk1qqNdVefdKYoMj9iK9J3YC++0joEwCFbCI7CceMTB+7mvM4io5yVzmM2uk4pF +uGb4U2OOBhz7GTiYVkKztxtYbKj7jx4E9b4xsstuhhmW+zOusD0p/AwPfZi52jZ eat8288i2D5xWpnK2HMk78M9fanCWJyUDCovzF7+Rks5UARJbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDi9UgAm3pdsry0tiPaz5GZgF9TFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMWI5YmYyZjQtYzgzMS00 ZjFlLWEyZDUtZDdmYzQwNTM1YzhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWFGkZOo+rZDIGFGZbx+F+ DAl+ICZMrhfzH3nT8O9grPUj1H4h1uovY+EU3dyfWU43g3VEsRCeI2ekFtFZWStY ITvXn2q/TlspPDhZQ2s/P4fDge/e/yz2U/BHfHNSJ9OFi9TIbMf2DamqtSppPnd1 BlL+U30yI9CVqomxSJQ2HKW6PGfwDFRlfn6bsKGf4TQE1jTuMDsWyTf0gLlmvcGn dB/1alAgUgR8Bvm6Ct31E29z04E474+gplytfpvf1J5Wu8+F3U3qqTDNgkYkS7m7 oxk6w396XNWSSW/Rga3ONikBnXikvZnmIoH936EKEGrCHwgmheQ/coDus7p5JL3D -----END CERTIFICATE-----Generated at Sun Sep 7 14:17:31 2025 by rpki-client