$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft File: 2d00478e-6a9e-4570-970a-f0a5baefc323.mft (raw, json) Hash identifier: Y3wd5XEvzeu1E+qyeYKq1SNx03FpnGGFpLc7t16QQ3s= Subject key identifier: D0:9B:F4:9B:38:4A:84:88:3D:E3:0F:5F:68:1E:A1:5C:A0:12:9D:F2 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584B34862F2B013E7EE1971C8EA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft Manifest number: 010D0C9F4328584073A81EB2087DF5616A46D408 Signing time: Mon 15 Sep 2025 18:00:03 +0000 Manifest this update: Mon 15 Sep 2025 18:00:03 +0000 Manifest next update: Thu 18 Sep 2025 18:00:00 +0000 Files and hashes: 1: 19dd8a48-a5b1-32f2-90cc-360536a432eb.roa (hash: rIGbix1Dskt2iufWoZr4MHwgnrE52nONSuqDXdHnLrc=) 2: 2d00478e-6a9e-4570-970a-f0a5baefc323.crl (hash: aH8fLHjprrK7B3jqOJ1yM05hRjNqVUHeXbCt/hNOvbo=) 3: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (hash: 7+ONbCoJqmGUSQ6G0xvaZKufEnVXb115NVvU42aL11Q=) 4: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (hash: A2DT2dDOzTN3Z6KNQx+q8kKOnzzqUcGXbkRZAax9UgY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:86:2f:2b:01:3e:7e:e1:97:1c:8e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Sep 15 18:00:03 2025 GMT Not After : Sep 18 18:00:00 2025 GMT Subject: CN=04320cf3-e23b-40b9-a7c6-ab06d495e09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:63:fd:ad:4d:ed:04:7e:52:dc:1b:bb:14: 94:69:5c:40:2c:74:0c:ff:de:2b:27:36:cf:ea:7c: 15:97:bd:00:76:77:1a:0a:2a:23:06:ff:80:c7:50: 2d:9e:6b:df:8a:4e:20:da:a3:b6:6e:11:f2:ea:bf: ab:64:d0:d1:3e:93:7c:b8:20:3c:65:4e:49:85:84: 72:63:4f:70:79:7c:c0:38:51:30:94:d1:72:48:ab: 6f:96:66:7a:1c:bc:ee:e8:43:a2:08:51:ef:96:b0: d9:66:bb:c8:15:d2:b6:d3:21:6f:f5:59:5f:af:3c: ed:3f:13:ed:79:51:30:ac:9f:6b:36:10:30:a5:eb: a9:2d:5e:c2:04:f4:25:62:31:2e:39:e6:d8:32:4f: 0c:b4:5a:c7:c3:62:ad:8e:1c:48:1e:d4:81:c7:2c: 49:ab:8c:76:4b:15:1e:ff:71:0d:ac:f0:90:06:af: b1:d2:a3:61:6e:4f:26:45:aa:1a:56:c2:99:63:85: ca:3c:2c:3d:ea:1a:e7:af:42:cd:2b:1c:02:24:40: 03:4e:8d:5d:b4:30:26:82:39:2a:7e:8f:ff:7d:a3: 27:e0:a3:0a:7f:01:55:8e:ef:1a:63:52:4d:97:73: 3e:50:e3:8f:87:8b:80:08:fd:c4:21:50:c5:d9:7b: 45:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:F4:9B:38:4A:84:88:3D:E3:0F:5F:68:1E:A1:5C:A0:12:9D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8a:27:77:19:3a:68:df:ef:ba:32:7e:e4:e5:12:2c:9b:af: 75:cd:a5:78:33:a9:98:b6:b2:7d:97:6f:8a:95:cf:ec:31:43: 5b:54:dd:3c:b2:1e:0a:c8:3b:3e:71:8b:22:71:2d:55:bf:0a: 96:69:52:02:19:04:83:12:d2:cb:6f:2c:ca:70:59:a1:9a:74: 3a:fb:d3:02:63:7d:d1:5f:ae:af:50:91:e7:cd:7e:b8:12:54: 60:0b:2b:f0:44:5f:21:8b:b7:50:fb:54:e8:86:a4:da:d6:ba: 5d:b4:73:bf:7c:98:a5:9b:2e:35:ac:c9:86:21:ee:3f:c7:a1: ff:de:76:d7:fc:28:48:ae:49:70:d1:c8:b3:12:14:20:a4:da: ab:bd:03:98:5a:f6:bf:bd:c3:52:85:47:18:ca:98:ac:26:32: 7e:e2:0a:ef:8f:75:38:f6:55:93:f1:68:97:d1:77:2e:03:a9: 2e:9f:eb:45:cc:2d:79:75:11:4f:c6:a4:32:67:b2:e8:a5:8e: 16:75:c2:81:49:61:fe:bc:86:94:bb:16:5a:b1:22:68:f1:d5: 27:b0:96:a7:7c:8d:93:67:88:eb:23:f9:8d:96:bf:69:0f:fe: cf:3a:8b:7e:48:d9:c2:50:26:b5:94:08:b0:e6:1d:2f:d6:d5: a6:5b:8b:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs0hi8rAT5+4ZccjqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDkxNTE4MDAwM1oXDTI1MDkxODE4MDAwMFowLzEtMCsGA1UEAxMk MDQzMjBjZjMtZTIzYi00MGI5LWE3YzYtYWIwNmQ0OTVlMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigJj/a1N7QR+UtwbuxSUaVxALHQM/94rJzbP 6nwVl70AdncaCiojBv+Ax1Atnmvfik4g2qO2bhHy6r+rZNDRPpN8uCA8ZU5JhYRy Y09weXzAOFEwlNFySKtvlmZ6HLzu6EOiCFHvlrDZZrvIFdK20yFv9VlfrzztPxPt eVEwrJ9rNhAwpeupLV7CBPQlYjEuOebYMk8MtFrHw2KtjhxIHtSBxyxJq4x2SxUe /3ENrPCQBq+x0qNhbk8mRaoaVsKZY4XKPCw96hrnr0LNKxwCJEADTo1dtDAmgjkq fo//faMn4KMKfwFVju8aY1JNl3M+UOOPh4uACP3EIVDF2XtFAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNCb9Js4SoSIPeMPX2geoVygEp3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvMmQwMDQ3OGUtNmE5ZS00 NTcwLTk3MGEtZjBhNWJhZWZjMzIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0iid3GTpo3++6Mn7k5RIs m691zaV4M6mYtrJ9l2+Klc/sMUNbVN08sh4KyDs+cYsicS1VvwqWaVICGQSDEtLL byzKcFmhmnQ6+9MCY33RX66vUJHnzX64ElRgCyvwRF8hi7dQ+1TohqTa1rpdtHO/ fJilmy41rMmGIe4/x6H/3nbX/ChIrklw0cizEhQgpNqrvQOYWva/vcNShUcYypis JjJ+4grvj3U49lWT8WiX0XcuA6kun+tFzC15dRFPxqQyZ7LopY4WdcKBSWH+vIaU uxZasSJo8dUnsJanfI2TZ4jrI/mNlr9pD/7POot+SNnCUCa1lAiw5h0v1tWmW4tt -----END CERTIFICATE-----Generated at Tue Sep 16 09:33:22 2025 by rpki-client