$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft File: 959a22b2-95d2-48c0-8feb-819d877ee1e3.mft (raw, json) Hash identifier: TLBUCteaI8iklmA76mHWQ4CHbSqFhXmSV52RKSLbySU= Subject key identifier: 53:F6:68:26:65:2F:8B:83:AD:F2:AF:23:4E:30:11:5E:D6:8D:6E:C1 Authority key identifier: 63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78 Certificate issuer: /CN=959a22b2-95d2-48c0-8feb-819d877ee1e3 Certificate serial: 010D0C9F4328584AEB3DC786B8D6221CD62A28C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft Manifest number: 010D0C9F4328584A4966E60750CFA833D217F343 Signing time: Wed 20 Aug 2025 12:00:08 +0000 Manifest this update: Wed 20 Aug 2025 12:00:08 +0000 Manifest next update: Sat 23 Aug 2025 12:00:00 +0000 Files and hashes: 1: 17922156-b32e-3f9a-8bc5-25eb9f4add68.roa (hash: u0IrYtLTMWCSUn3mg0l8wvlKjfkZBMphmVCBMjlLF94=) 2: 6238e14e-1c02-3174-9d3b-46ed6e0d2b53.roa (hash: AUliMC2dtaMELC6o8LyvgywzXkWFWVN9fH35RaXnns0=) 3: 76998c08-9ed9-3d5a-a403-0ea9a43b56d4.roa (hash: 7+SQucnbKQAKHmGcc80s/uDlIP0fMYkn3Kk1Hi+U1Hs=) 4: 8edd3ca6-6839-3602-82a0-a559bf5bbf9a.roa (hash: wEThmh/o02h3ci3kQj1FHS8eWW+Cv1+1tnZG1TZ3qh0=) 5: 959a22b2-95d2-48c0-8feb-819d877ee1e3.crl (hash: tybFHgDOsLxROoqWhmIuyn9RldQNFvMyAU4My7YZzEc=) 6: aca5ece8-7cc8-3a6c-b63b-8896537dc5d2.roa (hash: d+8ttzsjchGZskUJSns02uPYEH7AqZmqqy9qToviMWg=) 7: d6ffc25e-7072-3a97-ad1e-99780cceb137.roa (hash: bzriDiIA+DtE/TIvPitUdlcz2RgXSvBnWJKr4A5sN5I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:3d:c7:86:b8:d6:22:1c:d6:2a:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=959a22b2-95d2-48c0-8feb-819d877ee1e3 Validity Not Before: Aug 20 12:00:08 2025 GMT Not After : Aug 23 12:00:00 2025 GMT Subject: CN=bb601b8b-d5e3-4f50-a14d-dff6cda73ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:f7:63:6f:23:90:07:be:a8:ba:d3:ee:e1: ec:f1:cf:c1:46:27:41:a6:13:0b:88:fa:2a:a1:dd: 72:4d:68:77:20:3e:e9:89:0d:04:29:46:53:87:bb: 7a:87:21:71:fb:45:49:31:74:7f:55:3d:8d:f3:58: 63:ba:fa:36:08:a2:54:4c:6d:62:86:b4:53:00:1c: 07:f3:88:29:dc:a2:1c:e3:f0:4e:67:bf:e4:24:5c: 59:39:a5:40:52:73:cc:7e:c7:e9:6e:96:41:7c:34: 75:fc:09:6f:87:b2:7a:18:f6:2a:64:a2:6f:83:96: bb:aa:25:86:55:6f:c5:d4:5e:05:5d:8c:d7:94:8f: 4e:58:3b:13:7d:64:db:f5:fb:7e:c0:85:6e:cf:e8: e7:a2:ab:2c:77:b5:19:e4:7b:ee:a0:f7:76:d5:0e: 83:ee:81:14:0d:11:4b:a2:3e:27:50:20:11:03:61: 14:e8:5c:69:46:d1:52:07:48:0b:53:be:d8:66:77: 25:88:0e:f4:f9:61:7c:62:f3:e4:aa:51:7d:88:93: d4:35:79:71:ac:71:d2:e0:ac:5d:45:e7:22:83:23: 19:ed:74:70:7d:31:54:b0:b0:f0:be:cf:b2:8c:93: ed:f5:38:70:a8:f2:02:2e:9c:6e:98:28:2e:27:b8: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:68:26:65:2F:8B:83:AD:F2:AF:23:4E:30:11:5E:D6:8D:6E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3/959a22b2-95d2-48c0-8feb-819d877ee1e3.crl X509v3 Authority Key Identifier: keyid:63:9E:16:CE:FE:54:7B:5B:F3:03:85:B9:B9:C5:F6:6A:34:06:3A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/959a22b2-95d2-48c0-8feb-819d877ee1e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:bb:ec:0a:5f:aa:9a:96:42:16:81:c2:47:2a:ab:73:1d:fc: 00:37:47:03:ca:53:36:bf:11:6b:8f:26:37:91:35:71:10:8e: fd:25:63:73:00:4f:dc:83:36:4b:5e:ed:ed:5c:33:6e:32:27: b0:ad:1d:d6:e4:a8:a6:2e:f3:92:1e:8e:11:49:d0:9f:84:26: aa:70:ee:31:ff:cd:c9:b5:0d:6f:79:dc:8e:b9:b1:af:03:06: 5d:33:aa:a3:9f:73:b0:ae:e0:f6:c3:39:8f:e4:79:53:cb:92: b5:58:bd:30:f0:a1:45:4a:85:7e:d5:d7:5f:d4:d4:59:a5:c3: 1f:34:fc:f2:64:91:1f:51:e1:d0:95:92:5a:93:d0:2f:fa:78: 98:a7:aa:6e:8f:14:a1:c4:02:f3:55:e3:6a:83:b6:c2:4a:ac: 33:34:f2:8f:67:8b:49:bd:09:c2:1f:c2:8b:a6:16:02:03:68: e0:c4:1c:41:ba:01:a6:54:56:d0:da:ab:0e:e8:3a:10:52:a2: 28:9e:71:b3:5c:9a:74:2b:95:39:0f:67:2f:bd:d4:71:04:b7: 82:35:ea:40:e9:f7:d6:6e:10:f8:ef:1b:1b:6f:13:63:8f:6c: d3:97:2d:ce:01:ff:48:e8:a9:31:62:91:dd:41:31:6b:1b:7d: 27:ba:e2:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErrPceGuNYiHNYqKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU5YTIyYjItOTVkMi00OGMwLThmZWItODE5ZDg3N2Vl MWUzMB4XDTI1MDgyMDEyMDAwOFoXDTI1MDgyMzEyMDAwMFowLzEtMCsGA1UEAxMk YmI2MDFiOGItZDVlMy00ZjUwLWExNGQtZGZmNmNkYTczY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ33Y28jkAe+qLrT7uHs8c/BRidBphMLiPoq od1yTWh3ID7piQ0EKUZTh7t6hyFx+0VJMXR/VT2N81hjuvo2CKJUTG1ihrRTABwH 84gp3KIc4/BOZ7/kJFxZOaVAUnPMfsfpbpZBfDR1/Alvh7J6GPYqZKJvg5a7qiWG VW/F1F4FXYzXlI9OWDsTfWTb9ft+wIVuz+jnoqssd7UZ5HvuoPd21Q6D7oEUDRFL oj4nUCARA2EU6FxpRtFSB0gLU77YZncliA70+WF8YvPkqlF9iJPUNXlxrHHS4Kxd RecigyMZ7XRwfTFUsLDwvs+yjJPt9ThwqPICLpxumCguJ7iK0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFP2aCZlL4uDrfKvI04wEV7WjW7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NTlh MjJiMi05NWQyLTQ4YzAtOGZlYi04MTlkODc3ZWUxZTMvOTU5YTIyYjItOTVkMi00 OGMwLThmZWItODE5ZDg3N2VlMWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTU5YTIyYjItOTVkMi00OGMwLThm ZWItODE5ZDg3N2VlMWUzLzk1OWEyMmIyLTk1ZDItNDhjMC04ZmViLTgxOWQ4Nzdl ZTFlMy5jcmwwHwYDVR0jBBgwFoAUY54Wzv5Ue1vzA4W5ucX2ajQGOngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85NTlhMjJiMi05NWQyLTQ4YzAtOGZlYi04MTlk ODc3ZWUxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXu+wKX6qalkIWgcJHKqtz HfwAN0cDylM2vxFrjyY3kTVxEI79JWNzAE/cgzZLXu3tXDNuMiewrR3W5KimLvOS Ho4RSdCfhCaqcO4x/83JtQ1vedyOubGvAwZdM6qjn3OwruD2wzmP5HlTy5K1WL0w 8KFFSoV+1ddf1NRZpcMfNPzyZJEfUeHQlZJak9Av+niYp6pujxShxALzVeNqg7bC SqwzNPKPZ4tJvQnCH8KLphYCA2jgxBxBugGmVFbQ2qsO6DoQUqIonnGzXJp0K5U5 D2cvvdRxBLeCNepA6ffWbhD47xsbbxNjj2zTly3OAf9I6KkxYpHdQTFrG30nuuLY -----END CERTIFICATE-----Generated at Thu Aug 21 05:02:10 2025 by rpki-client