$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft File: 1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft (raw, json) Hash identifier: avRHxrOgiAIaBtPnHoU1fuvyVSc+6MU2d7QJeLpulfY= Subject key identifier: 62:28:16:92:B0:A4:BB:9B:8E:7A:81:AB:91:5E:52:A8:5D:AE:78:97 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584B0A12067B7B890D261D3A21C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft Manifest number: 010D0C9F4328584073A852CAC8FB461B77D2F030 Signing time: Sun 31 Aug 2025 13:02:03 +0000 Manifest this update: Sun 31 Aug 2025 13:02:03 +0000 Manifest next update: Wed 03 Sep 2025 12:00:00 +0000 Files and hashes: 1: 1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl (hash: BkwrQxp+EhTCdk0Eoj5VTexX4KcUmUiRgn1hvbwidkc=) 2: 1b6579d8-95e2-3cdb-ae21-72bf1d10f9ef.roa (hash: OTj5s6254VYiMOyh7IddZ4FyHJLvp2RvZVbKc0KK/R8=) 3: 1effb335-be49-3c5a-83a0-40a99c95a39e.roa (hash: Xy35sfHJ8+9Q75xHQqpxu0AHJKNzXtL4kzwcB8w8Kow=) 4: 24193cda-dfba-3da1-a667-f8eeba423d0a.roa (hash: Y7cnSGuKI5SMZfW7ERS751AiuJHRBw1Z89T6daJfrJg=) 5: 2b8f1862-bd0d-3d5e-84ee-2a53320170c2.roa (hash: DuushpSkoIQlNEjp9wN6mgNwEH43L1TktNy8FuiJtMA=) 6: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (hash: R8+Gm4mcBaDXEDL59wkI2Niwj6WM9Tk30O2vcXyyIF8=) 7: 636fe258-29db-3ab1-9122-bcd648393e79.roa (hash: Qh7L5ZE+F638d3FoGFnFa3JN6a4F89dNmrM5NaR/wXc=) 8: 6719af09-6236-3020-ae52-9a9de5dd536f.roa (hash: IZXQ8JMlRisEe2AzWkeU3chz994ws3NgCk5E9Cp7fL4=) 9: 6dbaf374-3c53-3e34-aab4-5884bed871ee.roa (hash: f8Q1d+rBu4LPpbzU2vot1xP+/9k1fxhoHx4nQmr6g2U=) 10: 83e6a022-36ec-38c3-8f95-349b73ff935a.roa (hash: hn0ljXN8ZH26mH1/pYxYI0T5e27IvVuvPXP7AapSB/w=) 11: 87362f3d-4cea-3ee0-967a-02095d0f35bf.roa (hash: nywofA5Sb1FR/nWKPl/aDBh/rxggfuqwOXUHO0xpGN8=) 12: 89cbdbb2-14b8-3187-878e-9d37888c582c.roa (hash: HWVbyqx73LDdE0noqw3fOoqINm1M/pjwlXozgVbCqNA=) 13: 9ef4612d-7b7a-351b-8aef-e70168dc2292.roa (hash: jH8ygkMRqyidxfZ7D0LTgVQaBYS6dbG/tWDH7mNHPtk=) 14: ac35c2b5-65fd-34d7-8216-230376162d02.roa (hash: 50qm4KERMctVpxO29pRNBdxEoH1ZgwMS0qBGaY7OrRg=) 15: b737c496-4672-34aa-b061-ed83ae9c485f.roa (hash: nwkG0ouSLKTlTnSWbyNyAGJUoyGtCn0U032q/eMDF90=) 16: cc3f750d-0905-3e47-862f-b41ca36a1c13.roa (hash: m4wi7f2GkcPgyRp2PBy9KP5bOYN/jT8bArLXar9Ixb4=) 17: d2d81e4c-a0a8-32b8-9197-f0b17241d3ea.roa (hash: Ms9qG7YYPk5cCs2QMk5HkqYX1A10Hiqfb4crqdB+WJ8=) 18: d9d98aaa-e56a-3f22-a449-3ad8ca9dd4a7.roa (hash: u+4Rl3/mmrdJ32O2Q32beE52+RR2NRF0y2GoXEP3gO0=) 19: eafe0940-5c5a-31fe-adf8-4d7bc944edda.roa (hash: G1pRWonqPblaJq0TW/BKK9+FEVvPsQZpIhrhY+d9JwY=) 20: f6f6bc98-2bd7-3223-bb93-05d0cebbf43a.roa (hash: Cv5VxyG02j+XK7/70kzhEDemH0BSGgyltHTXo4orRZk=) 21: f7c4b5bf-7d6f-3580-80db-3b65c9ef7997.roa (hash: v390RD0mFxIlwLqhAk3hIkYGFmcHUhQKtFxMjdRYNUA=) 22: fd7d27e1-2844-3485-97eb-beed65c7c4b0.roa (hash: VS3IdNuR3+L1DIf4+ljYmkd/w1g9sTKackOBVIlt+3M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:12:06:7b:7b:89:0d:26:1d:3a:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Aug 31 13:02:03 2025 GMT Not After : Sep 3 12:00:00 2025 GMT Subject: CN=d6760afe-a7ad-452b-b7d6-aa41b7c2e864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4a:12:fa:54:26:91:91:0e:27:20:29:0d:b8: 32:7d:10:ed:87:e6:33:ab:92:0e:25:62:83:72:9c: d1:8e:82:c9:f9:37:14:eb:c0:c7:43:96:ff:76:60: 60:2f:9b:0d:72:20:67:7f:43:1d:fc:9a:8c:81:2b: c3:ad:91:48:da:d5:c0:05:c1:6e:c4:db:b3:d2:40: 5e:7e:d5:66:0d:b0:b6:73:37:04:99:c5:f7:fb:ba: 2a:4f:22:d3:c2:e9:fa:cb:f7:48:92:9f:a5:e3:38: 23:13:33:20:ee:e4:1a:22:57:eb:f1:ce:73:69:99: 76:c5:4e:9e:36:73:0b:86:9f:6f:54:f4:83:88:8f: 15:c7:92:ad:2d:ba:ff:f7:d3:54:42:7b:17:d2:15: 14:6d:16:88:7d:53:ee:e9:da:00:1e:9e:77:f3:34: 4a:7b:40:1b:c2:c2:18:76:92:14:5f:4f:59:91:93: db:95:d3:16:e6:87:12:e9:0d:d0:4b:cf:88:83:b2: af:5a:c2:42:92:42:02:76:04:86:d4:79:3f:74:45: b5:7c:87:fb:f5:56:4f:04:61:94:14:45:47:bb:11: a6:e3:e3:1f:95:95:e8:60:77:aa:1f:db:7c:32:f8: e6:9b:ad:70:7b:58:53:0d:b2:cf:31:c9:35:ee:7b: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:28:16:92:B0:A4:BB:9B:8E:7A:81:AB:91:5E:52:A8:5D:AE:78:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5d:e1:e2:89:fe:f9:2f:62:46:1e:0f:1e:58:41:d0:2e:5e: 7f:11:49:bc:0a:be:7a:09:b7:00:be:9b:78:4e:25:3d:00:45: 51:57:73:b6:19:12:1c:87:2e:f5:01:3d:9b:c0:b8:a3:a5:af: 67:8e:60:36:45:8e:98:fb:34:62:61:5a:ff:d3:92:80:5f:8d: d1:54:72:11:2e:07:a0:28:98:b4:f2:5e:ce:2e:92:75:57:4d: a7:96:01:54:97:2c:5b:1a:44:f2:3d:ee:bc:4d:17:55:c8:ad: 79:16:e8:b6:d1:ab:2d:de:a7:2b:9a:5c:05:55:bf:ee:52:4e: 34:a6:9d:94:b6:32:d1:5b:58:8c:66:22:b3:06:1e:a2:27:a5: 36:d1:78:b7:db:0c:cc:3a:50:19:da:89:7f:7d:3a:d1:db:5a: f1:81:89:67:c8:51:74:8a:78:8d:d2:ba:d9:d4:cd:56:53:48: 28:fb:70:fa:da:fd:f7:5d:82:f6:7c:6a:95:83:81:33:b9:db: ce:bf:68:21:66:dc:c6:19:f8:b1:62:ba:62:09:87:99:c5:bf: 0d:ce:b8:47:94:50:0f:a1:90:93:b3:c2:50:36:0d:8f:fa:69: da:75:d3:9f:ff:25:98:38:93:8a:aa:a9:20:5e:e3:5d:d9:0d: 2a:44:f5:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsKEgZ7e4kNJh06IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDgzMTEzMDIwM1oXDTI1MDkwMzEyMDAwMFowLzEtMCsGA1UEAxMk ZDY3NjBhZmUtYTdhZC00NTJiLWI3ZDYtYWE0MWI3YzJlODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0oS+lQmkZEOJyApDbgyfRDth+Yzq5IOJWKD cpzRjoLJ+TcU68DHQ5b/dmBgL5sNciBnf0Md/JqMgSvDrZFI2tXABcFuxNuz0kBe ftVmDbC2czcEmcX3+7oqTyLTwun6y/dIkp+l4zgjEzMg7uQaIlfr8c5zaZl2xU6e NnMLhp9vVPSDiI8Vx5KtLbr/99NUQnsX0hUUbRaIfVPu6doAHp538zRKe0AbwsIY dpIUX09ZkZPbldMW5ocS6Q3QS8+Ig7KvWsJCkkICdgSG1Hk/dEW1fIf79VZPBGGU FEVHuxGm4+MflZXoYHeqH9t8Mvjmm61we1hTDbLPMck17nvvawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGIoFpKwpLubjnqBq5FeUqhdrniXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMWE2ODliODUtZGZlMS00 MTdkLWJlN2ItZTlkNGJjZGQ1OGQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdXeHiif75L2JGHg8eWEHQ Ll5/EUm8Cr56CbcAvpt4TiU9AEVRV3O2GRIchy71AT2bwLijpa9njmA2RY6Y+zRi YVr/05KAX43RVHIRLgegKJi08l7OLpJ1V02nlgFUlyxbGkTyPe68TRdVyK15Fui2 0ast3qcrmlwFVb/uUk40pp2UtjLRW1iMZiKzBh6iJ6U20Xi32wzMOlAZ2ol/fTrR 21rxgYlnyFF0iniN0rrZ1M1WU0go+3D62v33XYL2fGqVg4EzudvOv2ghZtzGGfix YrpiCYeZxb8NzrhHlFAPoZCTs8JQNg2P+mnaddOf/yWYOJOKqqkgXuNd2Q0qRPXU -----END CERTIFICATE-----Generated at Mon Sep 1 01:04:07 2025 by rpki-client