$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: eb9h+3Jz8U4HmJrAkQZuzWdp9Lq4AsrVJsyAALMY+z8= Subject key identifier: 68:36:8D:EB:55:91:BA:B0:F2:02:C2:46:DE:66:52:57:87:0E:F6:DE Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584AE7FBFC5C58E8FEF680EB72A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43E5C Signing time: Tue 19 Aug 2025 08:00:09 +0000 Manifest this update: Tue 19 Aug 2025 08:00:09 +0000 Manifest next update: Thu 21 Aug 2025 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: M9OZp34aKCYeaX1TxdtkYuUs1h2FBBLK0gYrbUVGzFU=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: 6pTD6Mlf+G6Dnu0zI/myTbEreWOybpyMv6kzQsweVCU=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: RQnI+5S4fPW1nA25ebBlM4opr9khSgDfNfrzYVpKLwk=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: Ec6ssb2VN/eWdoMZf4jaCm+feqLm/yH48awfJFdKwLU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:fb:fc:5c:58:e8:fe:f6:80:eb:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Aug 19 08:00:09 2025 GMT Not After : Aug 21 08:00:00 2025 GMT Subject: CN=874a406f-3f14-4ee9-a985-9830735167d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:17:e7:0c:19:b8:da:4c:3b:b5:bf:a2:94: 67:51:6d:24:a8:65:f1:05:6d:80:48:5b:4a:0d:2b: d9:fb:f2:a1:3c:76:2b:27:5a:dd:fc:93:0d:fa:04: 8b:dd:16:a9:ae:37:6f:e8:7e:a7:d6:ac:af:5a:67: 88:cb:8f:9c:64:1b:23:5a:6f:4e:80:6c:41:8d:87: ab:e2:30:b4:04:d6:dc:69:48:a8:81:12:ba:c9:ee: 51:57:b8:f1:70:3a:62:8c:7d:82:18:f7:20:f4:40: 2b:aa:96:b9:29:52:58:50:38:eb:a4:78:f6:53:d8: 21:37:e2:c3:49:f0:66:be:93:a0:65:81:c9:45:f7: 4c:5e:40:28:2d:87:f5:a3:e7:9e:da:79:3e:c6:92: 29:43:96:f1:81:8b:51:3c:f5:d5:93:f5:8e:6d:c0: 1b:ad:cb:60:b8:f0:68:f8:45:90:5d:09:b4:d0:db: 93:e8:fe:f4:82:3b:69:63:d8:65:32:af:b1:21:a9: f1:a8:74:02:33:be:b5:2f:b8:30:35:ac:19:50:e8: 42:7e:f9:a9:b6:bf:91:d0:c0:62:85:86:75:97:47: c1:75:bc:6b:e6:82:83:b8:c8:3f:9b:8c:11:f2:ce: c1:6c:94:8e:77:f0:72:26:a3:00:0a:da:e2:d4:46: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:36:8D:EB:55:91:BA:B0:F2:02:C2:46:DE:66:52:57:87:0E:F6:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0f:28:5d:45:91:dc:5a:51:60:63:a2:8c:10:f4:39:2a:64: 23:a5:e9:35:dd:f7:b4:b6:2f:ba:df:bf:8f:b0:1f:a0:39:61: 1b:49:39:ea:dd:e4:a4:72:85:b8:cb:ff:de:b3:89:b5:36:00: c1:3b:15:ec:32:78:f2:3e:0f:f6:df:98:9e:5f:7c:fd:ef:fa: 5f:0c:31:a8:89:a9:8f:d5:bf:8f:b2:e4:b1:93:3a:c4:14:20: b9:e5:ac:c5:7d:e2:52:22:0f:d6:c2:3d:e3:b8:e4:42:83:67: f7:e3:5c:46:e6:be:e8:87:7f:00:91:d6:31:0c:a1:71:7d:c2: dc:f6:a1:73:5e:a6:20:83:99:c1:7f:21:b9:a2:82:6c:ce:7b: 57:65:03:4c:cd:ae:a3:83:2d:b4:78:11:0e:63:fd:a2:bd:ec: fa:39:c4:c1:e9:64:66:40:dc:ca:a8:28:78:4a:c5:62:33:3e: c4:9a:bd:e6:1f:0c:da:cd:e7:d9:80:66:e1:5b:fa:7e:db:fe: 8b:ea:ae:68:6e:b8:7d:5a:24:2f:91:75:2e:4d:69:60:22:78: d7:23:21:3d:77:99:2e:27:93:b6:c9:a5:07:df:4b:35:22:53: 18:ec:58:6f:6b:35:99:43:61:a5:38:05:78:33:42:e0:d8:8a: cd:10:cb:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErn+/xcWOj+9oDrcqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MDgxOTA4MDAwOVoXDTI1MDgyMTA4MDAwMFowLzEtMCsGA1UEAxMk ODc0YTQwNmYtM2YxNC00ZWU5LWE5ODUtOTgzMDczNTE2N2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0cX5wwZuNpMO7W/opRnUW0kqGXxBW2ASFtK DSvZ+/KhPHYrJ1rd/JMN+gSL3Raprjdv6H6n1qyvWmeIy4+cZBsjWm9OgGxBjYer 4jC0BNbcaUiogRK6ye5RV7jxcDpijH2CGPcg9EArqpa5KVJYUDjrpHj2U9ghN+LD SfBmvpOgZYHJRfdMXkAoLYf1o+ee2nk+xpIpQ5bxgYtRPPXVk/WObcAbrctguPBo +EWQXQm00NuT6P70gjtpY9hlMq+xIanxqHQCM761L7gwNawZUOhCfvmptr+R0MBi hYZ1l0fBdbxr5oKDuMg/m4wR8s7BbJSOd/ByJqMACtri1Eag5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGg2jetVkbqw8gLCRt5mUleHDvbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACDyhdRZHcWlFgY6KMEPQ5 KmQjpek13fe0ti+637+PsB+gOWEbSTnq3eSkcoW4y//es4m1NgDBOxXsMnjyPg/2 35ieX3z97/pfDDGoiamP1b+PsuSxkzrEFCC55azFfeJSIg/Wwj3juORCg2f341xG 5r7oh38AkdYxDKFxfcLc9qFzXqYgg5nBfyG5ooJszntXZQNMza6jgy20eBEOY/2i vez6OcTB6WRmQNzKqCh4SsViMz7Emr3mHwzazefZgGbhW/p+2/6L6q5obrh9WiQv kXUuTWlgInjXIyE9d5kuJ5O2yaUH30s1IlMY7FhvazWZQ2GlOAV4M0Lg2IrNEMuE -----END CERTIFICATE-----Generated at Wed Aug 20 00:36:59 2025 by rpki-client