$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft File: 949c3388-1f02-441c-9195-5c40d8fd63d2.mft (raw, json) Hash identifier: vlTavHZzJhcjl4/udLIwHhJiObgod1AHolLc6LgMbkc= Subject key identifier: DC:87:08:35:49:0A:65:03:81:27:E3:BC:70:E5:7B:39:74:F1:4A:F0 Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA Certificate issuer: /CN=949c3388-1f02-441c-9195-5c40d8fd63d2 Certificate serial: 010D0C9F4328584B10D02DFD38873A659B4ABC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft Manifest number: 010D0C9F432858441BC29C76CABBEAB26E300CF6 Signing time: Tue 02 Sep 2025 23:00:03 +0000 Manifest this update: Tue 02 Sep 2025 23:00:03 +0000 Manifest next update: Fri 05 Sep 2025 23:00:00 +0000 Files and hashes: 1: 1f0f7151-1a17-3c20-b5f6-6c21ad2a655a.roa (hash: g0J62fFEPVvqU/A8XZUVeNppp7iY4dJS3aWog/JLfHg=) 2: 459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (hash: VG7pGusR9MxnDBaJ/hqXEEcoKgEFh/v3599Ers+/58w=) 3: 629373c6-f5f6-3553-83a0-b92d79ab0de8.roa (hash: APmHSaJgta7z9+giTedsJuwz9Ty8wapNfJGsv5TV1PQ=) 4: 779b7ba6-8e65-315b-a2cf-6a2a82df2f66.roa (hash: nsxgur7MsxY8+6e/7WbIfzxxzARTfC9M2bqls2UPoGQ=) 5: 949c3388-1f02-441c-9195-5c40d8fd63d2.crl (hash: LtJhNAf8s9W031wCa1/bAX7SB3Z8C/a/utUPqFb5LKw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:d0:2d:fd:38:87:3a:65:9b:4a:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2 Validity Not Before: Sep 2 23:00:03 2025 GMT Not After : Sep 5 23:00:00 2025 GMT Subject: CN=afcb7246-4b6a-4cd6-91c4-164e910066f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:a7:07:d1:1e:e3:1e:87:9f:2f:85:dd:a6: 43:f0:68:b3:58:94:83:e0:6c:01:11:c5:c5:70:b7: 7d:3f:95:3d:6d:54:f5:2d:99:22:04:cc:c1:28:4c: 99:00:df:ee:f2:d5:f5:bf:5e:c2:9a:5d:c1:2c:a5: ab:dd:8b:4f:a7:12:c1:cd:d3:7f:4a:c0:40:d1:eb: 52:42:6d:bd:7e:99:b1:30:ae:d3:5c:7b:fa:12:7d: 7d:72:0d:d5:9f:62:f8:da:1b:6f:f5:42:c9:72:6f: d3:14:6d:71:a6:01:ff:21:44:f1:71:31:62:46:1f: ff:bb:b7:b8:2e:21:5c:1d:e7:3c:3b:7c:52:1a:b5: 5b:f8:56:9c:d2:33:9d:ff:2e:ae:63:4e:ef:28:89: 94:5a:ed:4c:0a:4a:89:b2:df:a8:b1:c0:60:f7:77: 58:d1:3e:3a:ce:c6:2d:b6:8c:05:95:b4:62:7d:c8: f4:cc:10:ee:b2:65:cc:26:31:61:41:85:cb:46:0a: 14:a4:52:af:9e:ba:94:61:3e:ca:95:a9:85:5e:0c: b7:4d:1c:43:96:81:97:10:fb:7d:35:65:91:36:ef: 4a:e4:c7:61:ac:81:51:61:b1:8d:7a:73:7b:ba:50: 02:d7:b4:07:81:b7:70:1d:32:3f:36:a9:a8:06:96: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:87:08:35:49:0A:65:03:81:27:E3:BC:70:E5:7B:39:74:F1:4A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl X509v3 Authority Key Identifier: keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:09:2b:e9:93:f7:5a:3e:c6:92:44:43:c1:a1:5c:f0:3e:b3: 66:aa:c0:72:4b:b2:5f:c8:ac:b3:3c:ac:b9:5d:35:44:01:e2: cd:59:6f:f4:9a:54:2e:79:a2:8e:7a:2b:8a:af:a6:8a:27:5a: f9:02:e7:a5:77:2c:a0:b9:30:3a:ec:29:ba:56:f8:f2:36:1d: 08:5e:3e:f4:35:fe:4d:80:e1:72:47:18:b2:8b:8e:2b:1c:d2: 4d:39:0e:74:15:fd:5c:e8:b6:f3:36:90:d0:1a:9e:28:3b:56: d5:b1:9f:89:b0:cf:4b:2b:c1:36:47:90:77:8d:bc:94:3f:1f: 07:8a:d0:ae:6a:50:16:76:09:ad:c6:1a:f4:c2:f3:62:f0:54: 1a:82:48:19:0f:77:9d:14:7d:f9:d7:07:54:3d:6d:d4:6f:eb: 69:89:36:58:15:57:dd:ee:20:75:04:d3:44:17:71:87:bd:98: 6e:bf:90:aa:f0:02:1f:e9:0b:9b:99:8d:4d:50:b7:e0:77:f3: 23:a9:b5:fb:56:a8:df:65:da:e1:20:32:1b:74:e8:43:dd:85: 71:75:81:84:bc:a2:da:9b:7c:52:55:82:3a:86:9d:9c:06:c3: 77:ec:c4:f5:3b:17:91:d2:98:4c:bb:b8:61:e3:89:ac:5b:1c: 95:36:d0:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsQ0C39OIc6ZZtKvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ5YzMzODgtMWYwMi00NDFjLTkxOTUtNWM0MGQ4ZmQ2 M2QyMB4XDTI1MDkwMjIzMDAwM1oXDTI1MDkwNTIzMDAwMFowLzEtMCsGA1UEAxMk YWZjYjcyNDYtNGI2YS00Y2Q2LTkxYzQtMTY0ZTkxMDA2NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxqnB9Ee4x6Hny+F3aZD8GizWJSD4GwBEcXF cLd9P5U9bVT1LZkiBMzBKEyZAN/u8tX1v17Cml3BLKWr3YtPpxLBzdN/SsBA0etS Qm29fpmxMK7TXHv6En19cg3Vn2L42htv9ULJcm/TFG1xpgH/IUTxcTFiRh//u7e4 LiFcHec8O3xSGrVb+Fac0jOd/y6uY07vKImUWu1MCkqJst+oscBg93dY0T46zsYt towFlbRifcj0zBDusmXMJjFhQYXLRgoUpFKvnrqUYT7KlamFXgy3TRxDloGXEPt9 NWWRNu9K5MdhrIFRYbGNenN7ulAC17QHgbdwHTI/NqmoBpZd0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNyHCDVJCmUDgSfjvHDlezl08UrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDlj MzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQwZDhmZDYzZDIvOTQ5YzMzODgtMWYwMi00 NDFjLTkxOTUtNWM0MGQ4ZmQ2M2QyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQ5YzMzODgtMWYwMi00NDFjLTkx OTUtNWM0MGQ4ZmQ2M2QyLzk0OWMzMzg4LTFmMDItNDQxYy05MTk1LTVjNDBkOGZk NjNkMi5jcmwwHwYDVR0jBBgwFoAUaCxxzpCcX4cVDCzmk2cVx6mvEOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDljMzM4OC0xZjAyLTQ0MWMtOTE5NS01YzQw ZDhmZDYzZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsCSvpk/daPsaSREPBoVzw PrNmqsByS7JfyKyzPKy5XTVEAeLNWW/0mlQueaKOeiuKr6aKJ1r5AueldyyguTA6 7Cm6VvjyNh0IXj70Nf5NgOFyRxiyi44rHNJNOQ50Ff1c6LbzNpDQGp4oO1bVsZ+J sM9LK8E2R5B3jbyUPx8HitCualAWdgmtxhr0wvNi8FQagkgZD3edFH351wdUPW3U b+tpiTZYFVfd7iB1BNNEF3GHvZhuv5Cq8AIf6QubmY1NULfgd/MjqbX7VqjfZdrh IDIbdOhD3YVxdYGEvKLam3xSVYI6hp2cBsN37MT1OxeR0phMu7hh44msWxyVNtC5 -----END CERTIFICATE-----Generated at Wed Sep 3 15:32:20 2025 by rpki-client