$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: B8uGXmhNa1yGuKqrHnwkiun+YKPyCPQk+p7B/5fa5MA= Subject key identifier: B0:7E:E6:28:E3:09:03:9B:CE:5B:A9:24:09:54:AD:EC:01:DC:C9:3C Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584AB59DD7D8D22EAD271CFE1680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA983393700605F7 Signing time: Fri 01 Aug 2025 07:00:03 +0000 Manifest this update: Fri 01 Aug 2025 07:00:03 +0000 Manifest next update: Sun 03 Aug 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: lLvztz3FxXHQlAry6HC5Ef2DRhpiQYrYQBRZN8RClDE=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: tvTz/xSN9xiuFSC/huSR/88T1Y7jECpflf1HgcsSw2s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b5:9d:d7:d8:d2:2e:ad:27:1c:fe:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Aug 1 07:00:03 2025 GMT Not After : Aug 3 07:00:00 2025 GMT Subject: CN=dcf16102-e732-4ebf-9446-29da57717a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:d2:cc:44:9f:9b:86:d2:b4:e0:e3:9a:d4: df:db:62:5f:1e:9b:a5:88:4d:a3:6c:de:4b:61:a8: 7f:f2:bf:89:91:20:94:fc:09:13:80:60:1a:d4:90: 5b:9c:13:ee:c4:48:eb:bf:e7:c8:79:ed:79:5c:4c: e4:fd:22:9e:57:21:df:2f:ce:f2:85:a7:bd:32:50: f5:57:79:84:4a:24:cd:e7:30:b7:b1:cc:ed:ea:cd: 7f:6b:01:d8:f6:f2:7d:ce:da:af:3a:c5:d5:1a:9c: bc:f9:f5:04:76:dc:66:57:1c:15:fe:21:5a:07:3e: 11:d3:94:e5:a4:2d:1b:ec:16:d7:0a:3b:00:b1:22: 5e:f1:08:47:64:0a:53:f3:41:a0:ce:b4:9d:60:b3: 8f:a5:b8:b0:3f:4d:3c:b3:f4:e1:46:d4:dc:a6:43: 75:cc:f7:37:10:a8:c2:2d:54:2f:40:a9:10:6a:3d: 29:7b:08:d8:f6:39:1a:5a:fd:17:07:0b:e5:df:c0: 48:cb:59:a1:1a:f8:44:ac:2c:35:f2:9e:d5:62:99: 60:41:61:9e:3f:bf:b5:be:a7:6e:3e:27:b0:ce:2e: 61:eb:06:30:64:67:9a:82:45:f5:94:a5:28:f6:a2: c2:14:3e:a4:bc:ea:82:c8:65:7d:8b:a2:f4:87:49: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:E6:28:E3:09:03:9B:CE:5B:A9:24:09:54:AD:EC:01:DC:C9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:cd:5b:a1:38:c5:a7:38:d0:a4:8f:05:6a:24:6b:98:b2:e6: df:fc:ab:05:80:e3:6b:a2:f3:25:ad:98:5d:fb:13:2b:e1:26: a4:fc:70:e6:4c:42:5c:00:42:1b:35:9b:29:9b:ae:6e:66:67: d3:01:f8:46:1c:c3:1c:5d:62:81:de:a2:96:70:98:07:9e:c4: 6d:1a:a9:38:fe:bc:b7:54:85:f5:36:1c:6f:39:c9:10:01:e9: 8c:e3:9e:10:18:5e:0e:06:ef:d1:93:ea:c6:11:37:cb:fa:9c: e6:7f:4c:71:09:2d:52:6a:83:b5:8f:88:fa:6f:23:c5:05:14: 64:8d:67:c7:b7:75:dd:b6:b1:24:d5:b4:cd:23:4f:f2:26:d7: 66:fa:1b:06:ab:2e:2d:f4:78:a3:2e:68:24:68:78:2e:2c:50: d6:51:84:a5:fc:a6:c1:ea:32:c5:ce:f4:22:7d:09:6d:12:d8: 17:a8:56:82:1a:36:ea:81:8f:23:cb:3d:ca:ed:e9:56:d5:ac: b9:32:86:fc:d1:f1:96:09:bd:76:f5:b0:94:2c:de:b1:82:97: ce:6a:4b:8b:b4:80:ca:b2:2b:55:5d:20:89:9d:99:ee:b5:ba: fc:c2:af:a9:0b:a9:9c:8a:21:64:12:d8:fb:86:64:72:84:fd: ae:60:2e:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq1ndfY0i6tJxz+FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MDgwMTA3MDAwM1oXDTI1MDgwMzA3MDAwMFowLzEtMCsGA1UEAxMk ZGNmMTYxMDItZTczMi00ZWJmLTk0NDYtMjlkYTU3NzE3YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9fSzESfm4bStODjmtTf22JfHpuliE2jbN5L Yah/8r+JkSCU/AkTgGAa1JBbnBPuxEjrv+fIee15XEzk/SKeVyHfL87yhae9MlD1 V3mESiTN5zC3sczt6s1/awHY9vJ9ztqvOsXVGpy8+fUEdtxmVxwV/iFaBz4R05Tl pC0b7BbXCjsAsSJe8QhHZApT80GgzrSdYLOPpbiwP008s/ThRtTcpkN1zPc3EKjC LVQvQKkQaj0pewjY9jkaWv0XBwvl38BIy1mhGvhErCw18p7VYplgQWGeP7+1vqdu Piewzi5h6wYwZGeagkX1lKUo9qLCFD6kvOqCyGV9i6L0h0m6cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLB+5ijjCQObzlupJAlUrewB3Mk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXzVuhOMWnONCkjwVqJGuY subf/KsFgONrovMlrZhd+xMr4Sak/HDmTEJcAEIbNZspm65uZmfTAfhGHMMcXWKB 3qKWcJgHnsRtGqk4/ry3VIX1NhxvOckQAemM454QGF4OBu/Rk+rGETfL+pzmf0xx CS1SaoO1j4j6byPFBRRkjWfHt3XdtrEk1bTNI0/yJtdm+hsGqy4t9HijLmgkaHgu LFDWUYSl/KbB6jLFzvQifQltEtgXqFaCGjbqgY8jyz3K7elW1ay5Mob80fGWCb12 9bCULN6xgpfOakuLtIDKsitVXSCJnZnutbr8wq+pC6mciiFkEtj7hmRyhP2uYC4I -----END CERTIFICATE-----Generated at Sat Aug 2 05:20:07 2025 by rpki-client