$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft File: a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft (raw, json) Hash identifier: dtscRmO7dVlDUkTmSlbdF3Fas0Aru2GuzH3xjNoaVMI= Subject key identifier: 0F:3A:67:03:3A:EB:70:72:E4:04:14:DA:F1:81:BA:57:31:3E:4B:FF Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584B0AFF43FD6734D62A465BD740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft Manifest number: 010D0C9F43285843E950AA0F557A5B5938B60741 Signing time: Sun 31 Aug 2025 21:00:03 +0000 Manifest this update: Sun 31 Aug 2025 21:00:03 +0000 Manifest next update: Wed 03 Sep 2025 21:00:00 +0000 Files and hashes: 1: 06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa (hash: wospGR2++fB1AnE/YljysTjNaFDPDFLuIgoG9sJSE1E=) 2: 4f00197c-82ad-39dc-96d1-b0d2703738e7.roa (hash: bMWNb9SGzxRx5G3yyGTZy+/kQX9YDdoY+H4Tz4bbobI=) 3: a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl (hash: L043MOviJo6K5A61PGjg5v3DVRvBAXk/79iQmYnFYvE=) 4: d3f55b78-b0db-358b-92ae-a01f4943931a.roa (hash: 04+DxMMbb45Zv3tadi789LxslILIDUXTWqRxbYB0beM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:ff:43:fd:67:34:d6:2a:46:5b:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Aug 31 21:00:03 2025 GMT Not After : Sep 3 21:00:00 2025 GMT Subject: CN=d9190e08-be65-43ce-ba8c-1896721e3111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:87:19:f0:cd:c6:24:ff:9f:3e:0b:84:14: 0e:4a:a2:59:ba:58:63:db:1e:e6:0d:b9:5f:bf:7d: c9:3f:0d:b1:48:16:c9:ca:0b:c5:8c:cb:10:a1:bf: 67:f3:6c:e4:61:0a:52:2c:43:fb:85:3d:90:89:c9: 70:5f:ee:41:15:a4:f1:b1:17:1a:a6:ab:ef:e9:db: cd:23:d6:94:df:5d:d7:26:22:d6:d0:40:5e:de:4c: 23:0f:b7:15:3e:0d:63:05:e4:5b:fe:40:18:d3:d2: 87:1f:9e:02:1f:a5:d2:63:f3:ae:e2:76:cd:2f:5c: 7c:2b:44:90:ae:d3:78:eb:4d:1d:a8:d9:91:ac:55: ad:db:c7:84:bc:fc:ee:a6:4d:4d:a0:ff:85:df:89: 68:dd:e8:dd:12:96:79:d1:31:89:f2:ba:8c:4e:b8: bf:85:d2:88:0a:ad:5a:ee:9b:46:87:1a:a0:aa:52: 6c:1f:fe:8e:82:37:a9:78:64:a1:4d:82:5c:85:17: 9f:ce:2b:4f:28:d4:29:c0:9c:ba:cf:ba:e8:2d:8f: 4a:15:9c:20:2d:8a:a9:7a:8b:e4:db:5d:2d:8f:fb: fe:d4:66:29:ed:fb:ec:b5:9b:24:c5:74:fa:d7:e8: b9:0c:7b:21:81:60:6f:78:52:55:cd:1b:c5:b4:22: 50:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3A:67:03:3A:EB:70:72:E4:04:14:DA:F1:81:BA:57:31:3E:4B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:14:41:fb:d5:85:5b:c5:84:f5:93:64:d4:09:09:ff:69:fd: 84:8c:fb:88:0f:e2:18:a3:ee:aa:5f:36:4d:ab:22:88:cc:79: cf:7b:10:0e:b5:b4:6a:c4:b3:f3:c5:3f:96:38:c4:97:05:b7: 10:83:43:71:62:47:84:32:31:70:5a:93:7c:e0:89:98:85:50: 90:9e:a8:fe:53:4c:51:c0:eb:5b:3a:5e:2b:87:29:05:47:ff: c1:94:6f:aa:c1:fe:85:f5:1f:c4:8c:ab:42:d7:4a:96:0a:36: 02:3b:5f:da:c0:62:83:22:4f:46:8f:b0:f8:27:ad:9b:09:a8: 4e:34:6c:aa:ad:2f:3d:29:ce:c4:cc:08:da:38:b6:f6:13:c4: 4a:d7:53:27:86:ea:da:74:29:eb:95:17:4f:1c:8e:2e:0b:37: a6:b7:81:10:0f:c1:32:32:e7:95:20:fb:52:62:32:2a:e2:a9: 01:c4:b1:74:b7:29:d8:ed:ee:cb:11:07:98:3c:b5:9a:04:ca: 07:69:8f:3c:a2:20:19:27:b5:01:d2:bf:07:4d:d5:2b:40:67: 07:a9:62:ea:4f:93:fc:64:fd:4c:b2:dc:89:5a:85:3e:9c:b9: 3e:1c:e9:75:16:48:a2:b7:b5:16:ab:59:6b:1b:51:ee:33:be: f9:76:08:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsK/0P9ZzTWKkZb10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MDgzMTIxMDAwM1oXDTI1MDkwMzIxMDAwMFowLzEtMCsGA1UEAxMk ZDkxOTBlMDgtYmU2NS00M2NlLWJhOGMtMTg5NjcyMWUzMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRiHGfDNxiT/nz4LhBQOSqJZulhj2x7mDblf v33JPw2xSBbJygvFjMsQob9n82zkYQpSLEP7hT2QiclwX+5BFaTxsRcapqvv6dvN I9aU313XJiLW0EBe3kwjD7cVPg1jBeRb/kAY09KHH54CH6XSY/Ou4nbNL1x8K0SQ rtN4600dqNmRrFWt28eEvPzupk1NoP+F34lo3ejdEpZ50TGJ8rqMTri/hdKICq1a 7ptGhxqgqlJsH/6OgjepeGShTYJchRefzitPKNQpwJy6z7roLY9KFZwgLYqpeovk 210tj/v+1GYp7fvstZskxXT61+i5DHshgWBveFJVzRvFtCJQuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA86ZwM663By5AQU2vGBulcxPkv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvYTFiZDlkNDMtYzEyNy00 YTllLWIwMzgtMGM0MzZjNWQ5MDVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJFEH71YVbxYT1k2TUCQn/ af2EjPuID+IYo+6qXzZNqyKIzHnPexAOtbRqxLPzxT+WOMSXBbcQg0NxYkeEMjFw WpN84ImYhVCQnqj+U0xRwOtbOl4rhykFR//BlG+qwf6F9R/EjKtC10qWCjYCO1/a wGKDIk9Gj7D4J62bCahONGyqrS89Kc7EzAjaOLb2E8RK11MnhuradCnrlRdPHI4u Czemt4EQD8EyMueVIPtSYjIq4qkBxLF0tynY7e7LEQeYPLWaBMoHaY88oiAZJ7UB 0r8HTdUrQGcHqWLqT5P8ZP1MstyJWoU+nLk+HOl1Fkiit7UWq1lrG1HuM775dgim -----END CERTIFICATE-----Generated at Mon Sep 1 01:04:08 2025 by rpki-client