$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft File: a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft (raw, json) Hash identifier: gjolW9hxUTK/NgbIo4Ng2gH71HyzAOgQNdXYS1d17tM= Subject key identifier: DF:C4:AD:5F:69:12:5D:B5:B4:8C:75:33:A9:5A:CF:34:C9:9A:BB:B8 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584B105914DD4F9BB9ABAB368560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft Manifest number: 010D0C9F43285849B63827E75B0598BE8CDEC114 Signing time: Tue 02 Sep 2025 19:00:03 +0000 Manifest this update: Tue 02 Sep 2025 19:00:03 +0000 Manifest next update: Fri 05 Sep 2025 19:00:00 +0000 Files and hashes: 1: 404125c1-db53-3460-abc1-3e2005096ff7.roa (hash: G2b6w60Nbi6MdVmiJtzjltUMDXGUne4LhLXw4e1NdRU=) 2: a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl (hash: Y9j9SPwRLBnc0kJIHpqi92ouIKimBWtq/IWIsGp8X2E=) 3: a6b04249-573a-37f5-8a07-38d5df8cdbef.roa (hash: Q0wBYJ5c60Qo5L7L2v/ouof6VnaKhjiWDMmC4ukzTZ4=) 4: ca3e899d-e724-35e8-8b43-cbdbe7c92eb0.roa (hash: NUHxVAoG39YEy0jtc4xB9UZy8XD9dNtrqEH2S0cXHME=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:59:14:dd:4f:9b:b9:ab:ab:36:85:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Sep 2 19:00:03 2025 GMT Not After : Sep 5 19:00:00 2025 GMT Subject: CN=0dc2fa88-739c-4e6f-9295-b309152e1298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:0c:1d:3f:cd:32:44:63:7e:e0:28:0a:6e: 3b:49:d2:2a:a1:57:0f:bf:c1:01:71:21:a1:4c:cf: c8:62:2d:8e:b8:e0:b6:c0:a3:3e:6f:5d:fd:74:94: 23:0f:fe:29:03:71:b4:d4:44:90:f9:ed:59:ba:c7: a8:5a:b1:2f:84:d5:7f:35:4b:3d:fc:2f:eb:14:40: b2:f1:89:07:a5:57:84:0d:1d:91:3a:1b:06:23:01: eb:6c:0d:9c:f3:b4:6c:f3:8f:25:56:15:81:e5:01: 7c:6b:4a:e9:8d:64:ca:cb:64:46:30:0a:df:67:0e: 2d:9f:b6:41:32:71:3e:ca:41:7b:f3:4a:89:89:6c: 72:1e:83:7d:10:79:0b:e6:50:d5:5e:fd:df:26:ee: 22:dc:f6:6d:c4:8c:5e:c4:81:07:22:03:da:42:c7: 7b:1d:f1:be:b2:54:fd:61:e6:15:dc:10:2d:b8:9a: 2a:32:33:03:c5:8d:7e:c1:9a:5a:35:63:6a:d8:1e: b1:bc:bc:21:21:cd:ff:31:dd:ee:3f:d5:85:a9:86: 38:12:01:cb:24:a7:25:45:ce:e2:6c:bb:c1:c2:74: 45:65:97:e7:3b:dc:ec:33:d6:28:ec:3c:95:08:18: 60:fc:1a:5b:bb:81:ea:d5:ed:91:75:09:b9:91:d1: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C4:AD:5F:69:12:5D:B5:B4:8C:75:33:A9:5A:CF:34:C9:9A:BB:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:60:5c:16:37:e2:a1:cd:6e:63:33:a7:0a:e6:c8:03:40:20: 57:b6:9a:ec:04:01:1f:6e:50:fd:69:d4:e6:a5:9a:b6:15:92: e9:74:97:9e:91:7e:36:88:01:18:72:fd:e3:b8:49:00:8b:4e: de:fb:cf:bb:89:f3:bc:df:77:ad:9b:14:bd:c2:b8:37:7c:db: 44:38:81:18:a6:0f:c6:f2:17:60:91:2f:c4:21:6c:d6:a5:a5: ef:24:ef:a4:ff:1b:e0:e4:9b:1e:a8:f7:50:6f:44:d0:aa:1d: 9e:b1:33:30:82:56:45:c2:d3:6e:d5:45:4f:23:ee:80:07:ae: 25:74:f1:9a:0c:92:0b:e8:85:ff:66:d8:52:1c:2d:56:b5:f6: 5a:64:05:c1:a6:bc:b0:b7:b5:6c:06:1d:aa:68:aa:0c:7f:63: 4e:41:85:02:86:53:35:aa:15:24:bf:04:6b:c1:7d:2b:f7:95: 76:8d:1e:7e:a3:d6:18:f7:7f:82:cc:33:b2:21:d3:82:55:17: 0a:30:4c:71:56:01:98:4d:68:ec:f0:36:b7:68:77:ab:44:4e: e4:e7:7b:b8:5a:14:58:af:4f:b6:8b:30:06:28:4b:b1:4d:62: 73:4c:21:b6:c7:30:3e:22:8d:7f:eb:bb:80:d6:12:6c:85:8d: bc:be:cd:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsQWRTdT5u5q6s2hWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI1MDkwMjE5MDAwM1oXDTI1MDkwNTE5MDAwMFowLzEtMCsGA1UEAxMk MGRjMmZhODgtNzM5Yy00ZTZmLTkyOTUtYjMwOTE1MmUxMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIcMHT/NMkRjfuAoCm47SdIqoVcPv8EBcSGh TM/IYi2OuOC2wKM+b139dJQjD/4pA3G01ESQ+e1ZuseoWrEvhNV/NUs9/C/rFECy 8YkHpVeEDR2ROhsGIwHrbA2c87Rs848lVhWB5QF8a0rpjWTKy2RGMArfZw4tn7ZB MnE+ykF780qJiWxyHoN9EHkL5lDVXv3fJu4i3PZtxIxexIEHIgPaQsd7HfG+slT9 YeYV3BAtuJoqMjMDxY1+wZpaNWNq2B6xvLwhIc3/Md3uP9WFqYY4EgHLJKclRc7i bLvBwnRFZZfnO9zsM9Yo7DyVCBhg/Bpbu4Hq1e2RdQm5kdENLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN/ErV9pEl21tIx1M6lazzTJmru4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvYTU1MGY2NGMtNDYzMy00 NWYwLWI4OTYtM2FjN2JkZjdlNWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLYFwWN+KhzW5jM6cK5sgD QCBXtprsBAEfblD9adTmpZq2FZLpdJeekX42iAEYcv3juEkAi07e+8+7ifO833et mxS9wrg3fNtEOIEYpg/G8hdgkS/EIWzWpaXvJO+k/xvg5JseqPdQb0TQqh2esTMw glZFwtNu1UVPI+6AB64ldPGaDJIL6IX/ZthSHC1WtfZaZAXBprywt7VsBh2qaKoM f2NOQYUChlM1qhUkvwRrwX0r95V2jR5+o9YY93+CzDOyIdOCVRcKMExxVgGYTWjs 8Da3aHerRE7k53u4WhRYr0+2izAGKEuxTWJzTCG2xzA+Io1/67uA1hJshY28vs3j -----END CERTIFICATE-----Generated at Wed Sep 3 15:21:32 2025 by rpki-client