$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft File: aa912e91-41d3-4894-893c-8de4f94175f9.mft (raw, json) Hash identifier: tjWOeoiSk92/jknMiz8BXJqR1ku+ELh9Ccgo8azJdD0= Subject key identifier: B2:9E:93:DD:25:C3:4C:1D:5B:6A:C7:A3:4C:5B:9B:5B:BC:43:3A:4E Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584B0AFF44B6CAFB10D47EABDC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft Manifest number: 010D0C9F4328584073A82612B62F47807E021E92 Signing time: Sun 31 Aug 2025 21:00:03 +0000 Manifest this update: Sun 31 Aug 2025 21:00:03 +0000 Manifest next update: Tue 02 Sep 2025 21:00:00 +0000 Files and hashes: 1: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (hash: fMYCiIN876L2SHHLOaHbCdin0vdgc4Jbt2s9KJne/3A=) 2: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (hash: w7SU+XTKz3BQ+1CR3+5C2lw3nGJi8jAjLL+FQC49YxA=) 3: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (hash: uBkTY1QJyKOb9tvgMcXQ5nnvMjduGi+XNG9K7ycnPuk=) 4: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (hash: dRc+41GPvv2hVZCGtiq1pR5ysD9BvXG2oB0wyHwbN58=) 5: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (hash: ST1YMtw3m5+ioRUl8alvwzRBSbFYA0TfXHF37daStVk=) 6: aa912e91-41d3-4894-893c-8de4f94175f9.crl (hash: ePdK4eDflnTZONoijk8LsOPZJ73BqpKQKJut0lHVv9I=) 7: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (hash: 3VdpklYVAixt+F7xIS4hgdi3jAFoptLVbWNIvUvR1OY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:ff:44:b6:ca:fb:10:d4:7e:ab:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Aug 31 21:00:03 2025 GMT Not After : Sep 2 21:00:00 2025 GMT Subject: CN=f56e9bb1-7ec9-45bf-b6d5-fda7fd0b7aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:db:b4:46:21:42:4a:31:97:8e:94:e8:5f: 87:dd:ea:bd:00:5f:18:89:8c:1d:4b:01:48:7e:a3: 41:21:0e:8e:b2:3d:dd:5b:f0:93:92:4b:fe:33:31: 69:79:93:6a:97:87:eb:64:4b:7a:dd:8c:2d:b5:75: c2:73:45:22:ce:ab:36:5d:62:8d:c3:28:09:bc:3c: 3e:30:9b:c6:c6:9c:6e:ca:c5:ec:24:ef:db:2e:bd: cb:ad:24:97:5d:fc:20:f1:db:59:cf:45:a4:57:ce: e0:f2:8d:37:6f:9d:e8:5d:ec:28:b0:67:92:9d:0f: 89:68:9c:d8:c6:8d:00:75:60:50:c3:dc:69:37:61: 0d:0b:52:34:0c:9c:36:fd:b3:eb:51:d7:86:2b:57: ef:b0:e6:59:5c:9e:9f:ea:65:e7:4e:47:6c:65:23: c7:78:df:8d:04:13:8a:b7:cc:82:d7:c2:98:b2:af: 0a:e8:a0:da:8d:26:99:0c:3a:2b:f8:f1:cf:3e:d8: 2a:50:e5:b3:50:28:95:df:8f:08:97:64:d0:86:a1: d5:bc:c3:6e:5a:3d:54:d2:df:bf:0b:f0:b2:46:8f: f6:a6:a9:a4:67:3e:fe:89:31:d6:48:bc:d1:df:3d: 0a:5c:9e:b0:7e:21:1a:58:0a:8f:76:32:f4:be:8f: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:93:DD:25:C3:4C:1D:5B:6A:C7:A3:4C:5B:9B:5B:BC:43:3A:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:19:47:97:3d:4c:ff:c1:77:b1:8f:43:0b:75:98:4c:1f: 20:ae:56:85:a8:da:90:01:1a:b8:ad:f8:91:f7:89:ec:bd:f1: 2e:f7:2d:09:07:31:8e:5f:00:d6:31:7d:48:a7:75:32:85:71: ec:82:73:d2:fa:7d:b2:04:f6:79:5a:27:41:98:90:96:a2:f9: 0e:8d:40:11:a9:de:8a:f2:f8:ae:df:77:e2:66:04:1c:5d:b5: c6:3d:b6:97:52:8c:70:61:93:1a:f7:f4:fb:b7:c0:7b:c7:4c: dd:3b:aa:90:97:d2:1e:2a:37:ac:8e:8c:27:1e:d0:45:ac:db: ee:48:c2:d4:44:77:c2:fb:50:d9:d6:7d:57:25:a3:0c:d2:b1: 45:3c:7b:82:0a:31:8e:ff:20:af:d8:25:1f:d7:08:b1:78:6d: f0:20:e0:5b:80:b8:6d:0c:eb:29:51:1b:c9:85:9e:dc:45:57: 0d:86:3b:11:ea:7a:f8:c6:3a:3a:6f:48:29:ba:ed:87:4c:4a: f7:aa:78:9e:f4:0f:90:df:44:e3:9b:4b:85:60:0f:6d:24:b1: 03:73:79:e3:8c:81:0c:4f:4b:4e:1e:a3:1c:c5:e9:9d:a2:c0: 93:de:17:6f:32:80:7e:09:1b:38:b9:fd:30:cc:23:6f:38:c9: f8:88:e7:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsK/0S2yvsQ1H6r3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDgzMTIxMDAwM1oXDTI1MDkwMjIxMDAwMFowLzEtMCsGA1UEAxMk ZjU2ZTliYjEtN2VjOS00NWJmLWI2ZDUtZmRhN2ZkMGI3YWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO7btEYhQkoxl46U6F+H3eq9AF8YiYwdSwFI fqNBIQ6Osj3dW/CTkkv+MzFpeZNql4frZEt63YwttXXCc0Uizqs2XWKNwygJvDw+ MJvGxpxuysXsJO/bLr3LrSSXXfwg8dtZz0WkV87g8o03b53oXewosGeSnQ+JaJzY xo0AdWBQw9xpN2ENC1I0DJw2/bPrUdeGK1fvsOZZXJ6f6mXnTkdsZSPHeN+NBBOK t8yC18KYsq8K6KDajSaZDDor+PHPPtgqUOWzUCiV348Il2TQhqHVvMNuWj1U0t+/ C/CyRo/2pqmkZz7+iTHWSLzR3z0KXJ6wfiEaWAqPdjL0vo/i2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLKek90lw0wdW2rHo0xbm1u8QzpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvYWE5MTJlOTEtNDFkMy00 ODk0LTg5M2MtOGRlNGY5NDE3NWY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+9BlHlz1M/8F3sY9DC3WY TB8grlaFqNqQARq4rfiR94nsvfEu9y0JBzGOXwDWMX1Ip3UyhXHsgnPS+n2yBPZ5 WidBmJCWovkOjUARqd6K8viu33fiZgQcXbXGPbaXUoxwYZMa9/T7t8B7x0zdO6qQ l9IeKjesjownHtBFrNvuSMLURHfC+1DZ1n1XJaMM0rFFPHuCCjGO/yCv2CUf1wix eG3wIOBbgLhtDOspURvJhZ7cRVcNhjsR6nr4xjo6b0gpuu2HTEr3qnie9A+Q30Tj m0uFYA9tJLEDc3njjIEMT0tOHqMcxemdosCT3hdvMoB+CRs4uf0wzCNvOMn4iOfl -----END CERTIFICATE-----Generated at Mon Sep 1 01:07:05 2025 by rpki-client