$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft File: 71e68809-5436-4288-ad80-0df35fa0b945.mft (raw, json) Hash identifier: crjH5nemXt2bDEHzkC3ZHcb7YmMu0AQLkvulEGiDwHE= Subject key identifier: 45:19:5E:01:1A:E3:29:C6:81:6E:AB:C9:2D:CC:4A:21:02:19:F8:14 Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E Certificate issuer: /CN=71e68809-5436-4288-ad80-0df35fa0b945 Certificate serial: 010D0C9F4328584B1094ABD1640B207D053EB300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft Manifest number: 010D0C9F43285843D01EA36D495940E66CB0D1E2 Signing time: Tue 02 Sep 2025 21:00:08 +0000 Manifest this update: Tue 02 Sep 2025 21:00:08 +0000 Manifest next update: Thu 04 Sep 2025 21:00:00 +0000 Files and hashes: 1: 71e68809-5436-4288-ad80-0df35fa0b945.crl (hash: g4QkdUeGPsrvhic3F6B3wGF/VC+WPe4qfUv83qfokNY=) 2: 84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (hash: MpUVmOrn6UojCRkw8RcdDCMK+nBjO00i5ilQsaDwMk0=) 3: a4715222-51fd-3cc6-b174-0aa94bf55e04.roa (hash: XEAnlWQK3q2Mb62gQIJ4BDBCDn75YBA5xHtUQn5RKFk=) 4: d01de867-d842-3f15-838a-d66341794f48.roa (hash: I8vuNVQhE1l12S9Obi90zxhXIxSo4HjvkPBDoLVQrGo=) 5: d94c666c-ab56-3b94-8d3a-1c41efa3490f.roa (hash: eQITkdsgdIjFoFj1YWbCsmgZnRypKV56LfSi5mQO9cE=) 6: fb3cec3c-e3f8-30b4-ad6e-5eceda10994a.roa (hash: hhvenj1tSPL7QDH5ZGOZOJD6+fMI91/TdOqdR/Yw0Bc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:94:ab:d1:64:0b:20:7d:05:3e:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945 Validity Not Before: Sep 2 21:00:08 2025 GMT Not After : Sep 4 21:00:00 2025 GMT Subject: CN=b4f6619c-0350-4928-bc7a-7ebba02fdf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:21:8d:c7:f5:34:7c:23:73:f8:a5:1c:e2: 58:3b:31:64:39:33:07:96:f6:47:1f:fd:dd:55:57: 0d:88:92:f3:e1:e2:75:49:78:a4:0b:89:2e:d9:fa: 5f:8a:9e:12:7e:8f:a6:45:63:6c:04:b2:b4:97:c8: 7a:4c:7e:b8:65:5f:05:0a:ba:cb:52:81:a3:25:b7: b1:1e:23:54:52:d8:93:9d:c3:f6:20:93:89:ca:e2: 27:6f:2b:fe:aa:57:3e:e5:d4:28:5b:a8:70:2a:80: b6:a0:c2:46:73:5e:7b:e1:29:57:8b:f8:0b:10:95: 39:53:cd:72:65:1a:79:07:d9:46:1c:60:71:de:7f: 8f:af:06:9e:dd:f3:96:61:72:6f:69:a8:a8:d7:8b: 83:ea:bb:a2:99:39:ca:c9:2b:4d:59:70:15:62:7f: 91:e5:c9:06:a7:94:83:20:2c:94:a9:f5:81:b3:03: bc:8c:8e:4d:ac:47:73:94:1c:f8:70:56:16:2c:93: 62:da:c4:fb:e6:b8:65:24:a4:fc:c7:69:50:cc:ec: 02:3c:a7:0b:8c:76:bc:a4:26:f1:3f:02:7d:03:cb: 53:09:ec:5e:a0:40:93:9f:f2:d2:06:90:d9:d5:f2: bf:aa:67:c1:02:55:6d:7d:ee:b7:c3:e8:8d:44:19: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:19:5E:01:1A:E3:29:C6:81:6E:AB:C9:2D:CC:4A:21:02:19:F8:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl X509v3 Authority Key Identifier: keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:13:2b:de:ef:f4:6c:a2:7b:91:a5:68:62:69:83:e4:20:9c: 2f:c1:6c:60:b3:37:be:7e:5c:b0:4b:4e:05:6e:48:0d:ec:50: d1:f7:1a:11:4b:fa:f5:04:d5:77:c1:ab:63:ab:1f:5d:80:29: 2b:de:f2:ab:0e:c0:b5:a1:59:46:21:c7:bb:c8:4d:da:81:85: d1:48:ed:79:15:4e:6c:2e:6d:87:33:d9:02:b0:eb:b3:d2:7f: 54:ed:f7:c3:dd:26:c1:3b:3a:c2:ec:70:8c:f9:39:76:90:a0: 0a:23:59:40:91:f3:0e:51:4c:93:f0:58:26:6d:3a:94:15:04: 2f:43:8f:44:48:d3:a9:66:d3:fe:5a:a7:64:56:8a:f0:78:a3: c4:42:d0:62:3c:26:23:b6:7e:4d:e4:9d:fd:3a:a0:4f:a3:79: 14:d0:b5:7a:31:85:91:d3:bd:82:92:ad:68:f9:5c:e8:32:a5: 32:d4:01:f7:96:02:f4:3c:57:33:5b:61:f9:ed:fc:8e:46:df: 52:73:bf:a2:65:49:39:f8:ac:eb:3d:d5:16:3a:36:ac:b6:4e: 48:6c:d0:b2:d5:95:23:88:e3:4e:36:48:e5:b3:da:3b:33:89: 38:76:f8:2a:4b:ad:fd:62:1f:7d:8f:81:14:16:b9:7d:3a:a4: 26:8c:b3:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsQlKvRZAsgfQU+swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlNjg4MDktNTQzNi00Mjg4LWFkODAtMGRmMzVmYTBi OTQ1MB4XDTI1MDkwMjIxMDAwOFoXDTI1MDkwNDIxMDAwMFowLzEtMCsGA1UEAxMk YjRmNjYxOWMtMDM1MC00OTI4LWJjN2EtN2ViYmEwMmZkZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrshjcf1NHwjc/ilHOJYOzFkOTMHlvZHH/3d VVcNiJLz4eJ1SXikC4ku2fpfip4Sfo+mRWNsBLK0l8h6TH64ZV8FCrrLUoGjJbex HiNUUtiTncP2IJOJyuInbyv+qlc+5dQoW6hwKoC2oMJGc1574SlXi/gLEJU5U81y ZRp5B9lGHGBx3n+Prwae3fOWYXJvaaio14uD6ruimTnKyStNWXAVYn+R5ckGp5SD ICyUqfWBswO8jI5NrEdzlBz4cFYWLJNi2sT75rhlJKT8x2lQzOwCPKcLjHa8pCbx PwJ9A8tTCexeoECTn/LSBpDZ1fK/qmfBAlVtfe63w+iNRBlW2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEUZXgEa4ynGgW6ryS3MSiECGfgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2 ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYzNWZhMGI5NDUvNzFlNjg4MDktNTQzNi00 Mjg4LWFkODAtMGRmMzVmYTBiOTQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzFlNjg4MDktNTQzNi00Mjg4LWFk ODAtMGRmMzVmYTBiOTQ1LzcxZTY4ODA5LTU0MzYtNDI4OC1hZDgwLTBkZjM1ZmEw Yjk0NS5jcmwwHwYDVR0jBBgwFoAUEFAAX4YwKrkehfZQ9nLTMqW7VE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MWU2ODgwOS01NDM2LTQyODgtYWQ4MC0wZGYz NWZhMGI5NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAEyve7/RsonuRpWhiaYPk IJwvwWxgsze+flywS04FbkgN7FDR9xoRS/r1BNV3watjqx9dgCkr3vKrDsC1oVlG Ice7yE3agYXRSO15FU5sLm2HM9kCsOuz0n9U7ffD3SbBOzrC7HCM+Tl2kKAKI1lA kfMOUUyT8FgmbTqUFQQvQ49ESNOpZtP+WqdkVorweKPEQtBiPCYjtn5N5J39OqBP o3kU0LV6MYWR072Ckq1o+VzoMqUy1AH3lgL0PFczW2H57fyORt9Sc7+iZUk5+Kzr PdUWOjastk5IbNCy1ZUjiONONkjls9o7M4k4dvgqS639Yh99j4EUFrl9OqQmjLPD -----END CERTIFICATE-----Generated at Wed Sep 3 15:25:58 2025 by rpki-client