$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft File: 498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft (raw, json) Hash identifier: yqbMDjuYzwwFLSM5SJhLaKMyarbtaso1SYC6x35kjXA= Subject key identifier: EC:EE:AC:8A:7A:EA:8C:ED:A3:08:26:C2:0C:AD:D1:59:B2:27:95:D6 Authority key identifier: 59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B Certificate issuer: /CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Certificate serial: 010D0C9F4328584B0905059083C7DBBFDC98DB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft Manifest number: 010D0C9F4328584073A83C495FDDA12A7824FCE4 Signing time: Sun 31 Aug 2025 04:00:03 +0000 Manifest this update: Sun 31 Aug 2025 04:00:03 +0000 Manifest next update: Wed 03 Sep 2025 04:00:00 +0000 Files and hashes: 1: 2511b1ae-2332-3985-bdcc-82984672479d.roa (hash: xHrjbqLLD1POofL8irs3mDyaTV+F2BFmQ2EUdYVbtJI=) 2: 31c2b97c-bc9d-393e-83e0-fd03ffa31623.roa (hash: uMmlvTWZJq9/eXt45P7flzf8YHCuDzbdDhvvmGpUxRQ=) 3: 3d876040-615b-3fd5-b6c7-b63f8cc00fcf.roa (hash: tWUF2UXE5iTm/c+QfunQ2F3kM3fyM+aaBjtRlgfVIRo=) 4: 498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl (hash: xcM7ho3I/si32OnMHH3isM4KPQmR0G2MMHFAFGpWTFE=) 5: 4e46c8dd-d06a-3d58-8a07-e0b519fd1e8b.roa (hash: ggmPJH6hA46znPxlrAI152CZtPiNdFhBdOcLOIeIaas=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:09:05:05:90:83:c7:db:bf:dc:98:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498c3f07-9b8e-44a0-92f4-538c0d72ea4e Validity Not Before: Aug 31 04:00:03 2025 GMT Not After : Sep 3 04:00:00 2025 GMT Subject: CN=b45d3281-0830-49b4-9a33-ea6a93822e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:33:9d:32:fe:58:47:66:63:db:eb:03:51: 4f:00:27:9b:8b:01:c8:96:ea:90:82:55:f4:d5:3a: c6:a6:db:ce:5d:bf:a0:84:31:79:f0:4d:23:4e:48: 5d:58:30:71:a5:dd:46:5d:ff:9f:d4:10:a3:ef:af: 3a:26:fc:59:e6:6c:9e:8c:4c:24:92:3e:c7:5c:43: 96:56:e8:ae:c7:80:3a:46:05:f4:fa:3f:d3:39:b0: b3:e3:04:c5:4a:96:58:49:cf:79:c8:4c:93:dd:a4: 5d:6b:00:df:58:1e:09:2e:f5:ed:65:9b:22:fe:e9: 27:ec:66:ef:20:e2:f4:49:68:ce:9c:cf:fd:b6:56: 61:b4:3d:99:d0:cc:1e:d2:ac:58:71:86:61:d8:3f: a5:ad:01:c6:17:de:d1:45:a0:6d:3f:08:7d:51:19: 6b:7a:7a:3a:03:47:41:7e:d4:ec:16:cb:94:d3:45: e3:e3:92:84:9d:98:b0:b3:23:27:ae:92:79:c4:16: 35:5f:e6:6d:45:2c:d1:b3:74:df:20:c7:60:c1:52: 33:f8:16:64:78:c4:99:97:34:54:d6:83:0c:00:cf: 43:3d:59:43:ca:7d:e4:2e:06:73:e7:7e:f8:1b:f3: 0e:fc:4d:bd:4c:31:7c:ad:e4:db:d7:c8:4f:f3:0a: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EE:AC:8A:7A:EA:8C:ED:A3:08:26:C2:0C:AD:D1:59:B2:27:95:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.crl X509v3 Authority Key Identifier: keyid:59:73:72:17:07:AF:C1:EE:C1:C0:B1:30:A9:28:07:EC:39:9C:14:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/498c3f07-9b8e-44a0-92f4-538c0d72ea4e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b0:7f:01:5f:04:da:0f:e2:80:3b:3e:65:da:59:b0:5b:9f: e3:fd:1c:6e:7d:0e:2a:61:a8:d5:15:b5:8f:80:5c:cd:08:30: 6b:0e:a6:1f:fb:3c:7d:e6:ab:e5:77:79:32:00:11:fe:4d:db: 50:73:42:99:4f:07:60:91:79:5b:ce:90:48:11:91:d0:9a:a6: cf:8e:f8:e2:40:ee:5d:65:7e:4f:49:bd:fd:33:f8:93:61:50: 6a:57:46:8a:a5:b1:3a:d6:27:48:96:1f:de:a0:0c:17:b2:f7: bf:80:6e:10:f7:f4:02:24:d5:9c:58:a9:c7:46:bf:c8:a0:e6: 1f:69:8a:d2:45:51:bd:10:0c:eb:81:49:57:f5:66:dc:9c:fb: a6:32:ef:65:8b:72:9b:43:65:6a:81:d8:4f:35:34:96:b3:4e: 8c:88:13:59:87:ed:bb:af:be:6b:f5:8c:40:f1:a8:91:db:c3: f6:28:f1:cc:07:7b:0d:e3:69:49:52:89:11:44:93:0d:24:c4: 2b:3e:40:cd:a7:f1:97:1d:6c:cf:aa:37:99:94:e3:19:d3:60: 9d:ba:65:bd:ad:c5:0c:20:7e:1f:19:8f:64:dd:44:70:b9:6b: 30:b4:1e:8f:ab:23:0f:3e:ce:ef:21:ea:35:74:49:35:9b:96: 23:da:d1:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsJBQWQg8fbv9yY24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk4YzNmMDctOWI4ZS00NGEwLTkyZjQtNTM4YzBkNzJl YTRlMB4XDTI1MDgzMTA0MDAwM1oXDTI1MDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk YjQ1ZDMyODEtMDgzMC00OWI0LTlhMzMtZWE2YTkzODIyZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIMznTL+WEdmY9vrA1FPACebiwHIluqQglX0 1TrGptvOXb+ghDF58E0jTkhdWDBxpd1GXf+f1BCj7686JvxZ5myejEwkkj7HXEOW Vuiux4A6RgX0+j/TObCz4wTFSpZYSc95yEyT3aRdawDfWB4JLvXtZZsi/ukn7Gbv IOL0SWjOnM/9tlZhtD2Z0Mwe0qxYcYZh2D+lrQHGF97RRaBtPwh9URlreno6A0dB ftTsFsuU00Xj45KEnZiwsyMnrpJ5xBY1X+ZtRSzRs3TfIMdgwVIz+BZkeMSZlzRU 1oMMAM9DPVlDyn3kLgZz5374G/MO/E29TDF8reTb18hP8wq0TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOzurIp66oztowgmwgyt0VmyJ5XWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80OThj M2YwNy05YjhlLTQ0YTAtOTJmNC01MzhjMGQ3MmVhNGUvNDk4YzNmMDctOWI4ZS00 NGEwLTkyZjQtNTM4YzBkNzJlYTRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDk4YzNmMDctOWI4ZS00NGEwLTky ZjQtNTM4YzBkNzJlYTRlLzQ5OGMzZjA3LTliOGUtNDRhMC05MmY0LTUzOGMwZDcy ZWE0ZS5jcmwwHwYDVR0jBBgwFoAUWXNyFwevwe7BwLEwqSgH7DmcFFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80OThjM2YwNy05YjhlLTQ0YTAtOTJmNC01Mzhj MGQ3MmVhNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhsH8BXwTaD+KAOz5l2lmw W5/j/RxufQ4qYajVFbWPgFzNCDBrDqYf+zx95qvld3kyABH+TdtQc0KZTwdgkXlb zpBIEZHQmqbPjvjiQO5dZX5PSb39M/iTYVBqV0aKpbE61idIlh/eoAwXsve/gG4Q 9/QCJNWcWKnHRr/IoOYfaYrSRVG9EAzrgUlX9WbcnPumMu9li3KbQ2VqgdhPNTSW s06MiBNZh+27r75r9YxA8aiR28P2KPHMB3sN42lJUokRRJMNJMQrPkDNp/GXHWzP qjeZlOMZ02CdumW9rcUMIH4fGY9k3URwuWswtB6PqyMPPs7vIeo1dEk1m5Yj2tFg -----END CERTIFICATE-----Generated at Mon Sep 1 01:04:06 2025 by rpki-client