$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft File: 688165c5-c42e-4c66-a760-e605ebd8b2a3.mft (raw, json) Hash identifier: qrr/TEmtAwGjUtZo0ftgb6eqyhFUQ41+cFjV6lrppF0= Subject key identifier: A8:CF:54:90:E0:AF:AA:C4:C1:6E:F4:66:75:90:2D:C5:51:31:EF:7A Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Certificate issuer: /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Certificate serial: 010D0C9F4328584AFD27A1E528D5A3961BD73180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft Manifest number: 010D0C9F43285843EC2A3DFC3E071D3540005C18 Signing time: Tue 26 Aug 2025 22:00:03 +0000 Manifest this update: Tue 26 Aug 2025 22:00:03 +0000 Manifest next update: Fri 29 Aug 2025 22:00:00 +0000 Files and hashes: 1: 4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (hash: mOkYa5SPgs1fV+4CEZPSJMwcBP3VVhkylpVhT8YmK4I=) 2: 688165c5-c42e-4c66-a760-e605ebd8b2a3.crl (hash: LT39/h++JQ1ZiPz21M24G0umL1p6aHb+PZqQGbv7OQo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:27:a1:e5:28:d5:a3:96:1b:d7:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Validity Not Before: Aug 26 22:00:03 2025 GMT Not After : Aug 29 22:00:00 2025 GMT Subject: CN=f06afec8-544f-400b-a718-9178a4bfdebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:37:dc:68:83:79:14:11:a4:85:e1:dd:c0: 62:4a:c8:f2:36:da:8c:a3:d0:3d:e2:3f:ec:7f:bf: 95:47:d2:6c:01:8e:03:50:14:2e:e5:d7:8f:94:32: 16:9a:e2:8f:06:e7:93:e8:0b:dd:4e:17:64:bb:04: b7:27:de:c6:a9:fc:c0:4f:4b:97:92:ec:8f:51:70: 36:5d:35:7b:1a:c9:12:d8:7c:7f:f0:b8:52:db:5d: 36:7c:87:09:03:95:60:9a:4c:26:51:e9:eb:7b:6a: d2:75:fa:08:ab:3b:3a:59:64:49:9d:cb:4b:00:f5: 79:ba:4b:31:84:f9:b5:34:67:5e:2c:eb:e2:0c:6c: 61:38:89:a2:7c:f2:30:9f:f5:d3:34:b5:39:21:c2: 03:5a:a0:b7:9b:94:94:16:0b:28:b6:7f:93:25:91: ac:1b:7f:56:ec:24:ac:f5:9f:86:17:5e:c0:1c:0b: fe:8c:db:cc:e1:9d:64:2d:26:69:a0:1e:8c:3b:02: 55:42:96:63:36:ff:04:8a:17:98:17:86:26:a2:d8: bd:08:36:03:e6:c3:11:ab:25:c9:5c:c7:cd:e0:6d: 26:c6:04:ef:16:41:23:69:26:21:0e:be:b2:21:fa: a9:78:ac:27:a9:85:6a:fa:63:e4:a1:ab:f9:de:53: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CF:54:90:E0:AF:AA:C4:C1:6E:F4:66:75:90:2D:C5:51:31:EF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl X509v3 Authority Key Identifier: keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ac:a1:c3:92:e6:a1:31:46:5d:12:74:29:dd:f7:84:b5:0b: e8:b5:cb:a3:58:15:fc:eb:63:49:42:43:a2:5f:90:60:66:22: f5:c8:58:ca:a4:51:a7:a5:e9:9a:82:16:39:0f:d0:a3:26:14: af:7a:fe:60:80:77:55:80:d5:06:d4:61:f2:c6:02:a8:d1:4e: 48:c7:2c:8f:08:a8:a2:5b:a0:29:6c:af:37:77:b6:34:1e:e1: d2:5e:f4:31:3a:59:c2:cb:fa:95:3b:02:d9:9d:8d:5f:70:ff: 37:6d:cb:9f:b8:41:b3:21:c9:81:ee:83:a4:38:a1:3b:b0:8b: 0c:56:00:39:06:5e:98:7b:d8:1f:18:52:2b:47:6c:a7:df:d1: 17:78:0c:45:42:de:8e:16:d2:b2:33:08:7f:87:3a:af:19:a6: 09:5e:b4:ac:2a:09:f3:7d:5a:1f:11:1a:af:05:f9:a6:2d:fe: 4a:08:9c:cc:ec:fb:1c:c6:cd:1d:c2:42:7d:d1:e0:9c:f7:2a: 48:c3:5d:80:df:9c:09:6b:7b:46:2c:6f:64:b0:8c:b5:fc:5d: 81:09:dc:a5:4e:37:67:2f:05:0c:13:d4:2f:11:9f:42:db:bb: a3:83:9b:f0:2a:16:79:d9:65:f6:15:42:bb:f5:2e:af:0c:72: 03:2c:9a:18 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr9J6HlKNWjlhvXMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4MTY1YzUtYzQyZS00YzY2LWE3NjAtZTYwNWViZDhi MmEzMB4XDTI1MDgyNjIyMDAwM1oXDTI1MDgyOTIyMDAwMFowLzEtMCsGA1UEAxMk ZjA2YWZlYzgtNTQ0Zi00MDBiLWE3MTgtOTE3OGE0YmZkZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1833GiDeRQRpIXh3cBiSsjyNtqMo9A94j/s f7+VR9JsAY4DUBQu5dePlDIWmuKPBueT6AvdThdkuwS3J97GqfzAT0uXkuyPUXA2 XTV7GskS2Hx/8LhS2102fIcJA5VgmkwmUenre2rSdfoIqzs6WWRJnctLAPV5uksx hPm1NGdeLOviDGxhOImifPIwn/XTNLU5IcIDWqC3m5SUFgsotn+TJZGsG39W7CSs 9Z+GF17AHAv+jNvM4Z1kLSZpoB6MOwJVQpZjNv8EiheYF4Ymoti9CDYD5sMRqyXJ XMfN4G0mxgTvFkEjaSYhDr6yIfqpeKwnqYVq+mPkoav53lMXZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKjPVJDgr6rEwW70ZnWQLcVRMe96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ODgx NjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJkOGIyYTMvNjg4MTY1YzUtYzQyZS00 YzY2LWE3NjAtZTYwNWViZDhiMmEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjg4MTY1YzUtYzQyZS00YzY2LWE3 NjAtZTYwNWViZDhiMmEzLzY4ODE2NWM1LWM0MmUtNGM2Ni1hNzYwLWU2MDVlYmQ4 YjJhMy5jcmwwHwYDVR0jBBgwFoAUCFKxuE4ZQXgKoxCx1kEM56sit2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1 ZWJkOGIyYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwrKHDkuahMUZdEnQp3feE tQvotcujWBX862NJQkOiX5BgZiL1yFjKpFGnpemaghY5D9CjJhSvev5ggHdVgNUG 1GHyxgKo0U5IxyyPCKiiW6ApbK83d7Y0HuHSXvQxOlnCy/qVOwLZnY1fcP83bcuf uEGzIcmB7oOkOKE7sIsMVgA5Bl6Ye9gfGFIrR2yn39EXeAxFQt6OFtKyMwh/hzqv GaYJXrSsKgnzfVofERqvBfmmLf5KCJzM7Pscxs0dwkJ90eCc9ypIw12A35wJa3tG LG9ksIy1/F2BCdylTjdnLwUME9QvEZ9C27ujg5vwKhZ52WX2FUK79S6vDHIDLJoY -----END CERTIFICATE-----Generated at Wed Aug 27 14:38:08 2025 by rpki-client