$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft File: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft (raw, json) Hash identifier: Pbt+DMF5kIRTXnKzEBgtOUjun93aXuR2TilwCztLD5o= Subject key identifier: A0:35:08:9B:EC:13:92:98:98:AF:F1:D9:33:C3:4D:5B:1A:EB:E1:31 Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Certificate serial: 010D0C9F4328584AF9E5D3CA543C93BEF40DBE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft Manifest number: 010D0C9F4328584842AEA7D4A339FCE1EFCDBF00 Signing time: Mon 25 Aug 2025 18:00:03 +0000 Manifest this update: Mon 25 Aug 2025 18:00:03 +0000 Manifest next update: Wed 27 Aug 2025 18:00:00 +0000 Files and hashes: 1: 0395e48a-e337-3165-b134-5c62b28818bd.roa (hash: oWY4UWNb8FeLtDjddYLa/VHHaAIxBnXkNYK56SlL3yo=) 2: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (hash: tAXcFSSUI/RytvuR9/5sodlxDSsfZJx23bSwwG4JO/s=) 3: 522ee799-00c1-3c81-9a66-32d095f18a7d.roa (hash: fyTiE6N2+h1IwYXxLG1xsvpVziQi3bdsihNGhwk0R8A=) 4: 8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl (hash: yzzi+5oI8ClV8qDc4gJLkECAnqNRycRWNdQD18GQgw8=) 5: bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (hash: ZnKfOctg1Fv2UpTtGoa/Dlz/7fo8uSZMUSxdTnsZBic=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:e5:d3:ca:54:3c:93:be:f4:0d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Validity Not Before: Aug 25 18:00:03 2025 GMT Not After : Aug 27 18:00:00 2025 GMT Subject: CN=ed7aff6e-fd9b-48c3-894f-66cce018d60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:8a:3e:4e:24:9f:cb:ac:4e:e0:69:af:8d: 96:3d:e4:c3:fe:56:c6:36:14:26:2b:e4:97:75:d7: 18:b1:17:75:67:4b:97:e7:c3:83:95:55:fc:3a:e9: 76:a2:d4:ff:3c:6a:f8:f8:c7:71:60:96:f0:e7:47: af:12:9b:4f:1c:88:f5:6b:77:83:7e:d0:de:11:a7: 26:fe:1a:e7:d4:31:69:82:1e:a1:d4:c5:19:7e:ca: 2b:df:3d:ee:c2:6b:bf:7b:cf:0f:01:7e:ae:d6:a0: d1:df:08:85:d8:1c:ea:c1:d7:b1:fd:10:bd:56:cd: ac:b8:88:b1:df:5f:b6:5d:f0:b1:37:f4:5a:79:85: 78:60:3b:4e:3b:e5:da:66:ef:a4:4d:bf:23:6c:f7: b8:0c:a4:90:03:be:40:cb:c8:54:01:de:42:55:95: ec:31:a9:81:dd:af:88:e4:f5:74:b7:b8:11:d4:ff: 18:6c:88:d8:ee:6a:e8:49:e7:3c:02:32:b0:b6:ca: 66:b9:7a:98:2a:be:13:37:8a:42:e3:09:b8:d1:97: ab:7f:68:48:05:d9:b4:18:d8:91:cc:cb:5e:74:d9: 55:c5:7e:f8:47:22:1e:fa:f2:6d:96:d4:47:0f:0f: b8:bc:06:51:fc:f1:c0:2f:1e:33:c7:37:35:f2:50: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:08:9B:EC:13:92:98:98:AF:F1:D9:33:C3:4D:5B:1A:EB:E1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl X509v3 Authority Key Identifier: keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5a:23:2b:2c:19:9e:0c:1a:3e:8c:2f:7e:49:54:b7:62:d0: 19:cd:56:6f:6e:fa:74:d8:52:26:cd:1e:ad:43:a4:2a:dd:cd: 36:91:08:96:d3:89:03:5c:e6:02:a1:56:0d:a3:80:bd:ea:35: 4a:f9:9c:a7:c2:18:96:e7:31:37:dd:39:db:09:6f:55:4b:de: 00:1b:c8:1c:40:9c:d7:2c:48:2c:18:d2:a2:e9:bb:a6:2c:a8: 19:73:47:c0:66:e2:6c:bf:e4:85:eb:38:02:2b:62:b8:89:68: 34:44:c7:bc:0a:f1:59:fb:67:58:48:79:ea:5b:c1:75:c4:74: d2:b0:94:ba:23:93:79:90:d6:e1:b2:48:b6:49:e4:09:80:2f: e4:48:61:b1:0e:97:57:fb:bf:6f:94:3a:43:fe:c3:38:03:a7: 23:03:db:89:04:09:3f:1d:f6:6c:e5:84:2f:c8:65:af:d5:ac: 8e:4b:bc:9a:cc:63:87:3a:8e:e2:11:7a:ce:4c:ff:56:a8:f2: e7:35:b7:9f:82:fb:38:d9:d0:7c:38:10:22:1e:82:f3:26:27: 37:5d:c7:45:28:8b:ff:fd:a3:51:d8:7f:d3:bb:b3:92:11:f3: 7a:b0:67:75:ca:16:63:ac:71:60:bf:f4:8f:9a:44:1b:3f:68: 75:85:49:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr55dPKVDyTvvQNvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl M2Q1MB4XDTI1MDgyNTE4MDAwM1oXDTI1MDgyNzE4MDAwMFowLzEtMCsGA1UEAxMk ZWQ3YWZmNmUtZmQ5Yi00OGMzLTg5NGYtNjZjY2UwMThkNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVOKPk4kn8usTuBpr42WPeTD/lbGNhQmK+SX ddcYsRd1Z0uX58ODlVX8Oul2otT/PGr4+MdxYJbw50evEptPHIj1a3eDftDeEacm /hrn1DFpgh6h1MUZfsor3z3uwmu/e88PAX6u1qDR3wiF2Bzqwdex/RC9Vs2suIix 31+2XfCxN/RaeYV4YDtOO+XaZu+kTb8jbPe4DKSQA75Ay8hUAd5CVZXsMamB3a+I 5PV0t7gR1P8YbIjY7mroSec8AjKwtspmuXqYKr4TN4pC4wm40Zerf2hIBdm0GNiR zMtedNlVxX74RyIe+vJtltRHDw+4vAZR/PHALx4zxzc18lBu/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKA1CJvsE5KYmK/x2TPDTVsa6+ExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3 ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvODM4N2Q4OTQtZDJiYS00 ZTMzLThlODQtNDRiOWQ5ZDZlM2Q1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2 ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5 ZDlkNmUzZDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUWiMrLBmeDBo+jC9+SVS3 YtAZzVZvbvp02FImzR6tQ6Qq3c02kQiW04kDXOYCoVYNo4C96jVK+ZynwhiW5zE3 3TnbCW9VS94AG8gcQJzXLEgsGNKi6bumLKgZc0fAZuJsv+SF6zgCK2K4iWg0RMe8 CvFZ+2dYSHnqW8F1xHTSsJS6I5N5kNbhski2SeQJgC/kSGGxDpdX+79vlDpD/sM4 A6cjA9uJBAk/HfZs5YQvyGWv1ayOS7yazGOHOo7iEXrOTP9WqPLnNbefgvs42dB8 OBAiHoLzJic3XcdFKIv//aNR2H/Tu7OSEfN6sGd1yhZjrHFgv/SPmkQbP2h1hUla -----END CERTIFICATE-----Generated at Tue Aug 26 06:35:24 2025 by rpki-client