$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft File: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft (raw, json) Hash identifier: tSRKWWM8j/oxjmFQI+PzynOx7run1QQB/7tVyx9lLh4= Subject key identifier: B9:20:41:27:A8:35:6F:EE:39:DF:A7:C7:D5:00:5D:19:4B:37:83:A0 Authority key identifier: B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 Certificate issuer: /CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Certificate serial: 010D0C9F4328584AE97F11D5AFCE9DBBB78BEB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft Manifest number: 010D0C9F4328584ADB979262E885ABB43C7FA306 Signing time: Tue 19 Aug 2025 21:00:03 +0000 Manifest this update: Tue 19 Aug 2025 21:00:03 +0000 Manifest next update: Thu 21 Aug 2025 21:00:00 +0000 Files and hashes: 1: 402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl (hash: KwJZVuzTqd2EAOTbEOgFXvpSTWayZTOZuzVV4ki8EEw=) 2: b04b7367-5452-3760-b2f3-796a906930bc.roa (hash: gOj/pod3M/8DLSawP5P9s7HXCj28UZAYqR8FiGWENDk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:7f:11:d5:af:ce:9d:bb:b7:8b:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402c6b65-dcfd-412a-8788-8baa91fb3a1d Validity Not Before: Aug 19 21:00:03 2025 GMT Not After : Aug 21 21:00:00 2025 GMT Subject: CN=fb840579-9899-43d5-9b48-3f811a212e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:70:96:c7:19:bc:31:09:a1:ec:31:97:75: 7d:cc:0b:f4:d4:3a:cc:d3:7b:6c:e0:6f:57:12:2e: 18:95:a9:ca:14:72:b4:cd:88:a3:a8:c7:77:f6:11: 1d:41:fe:09:17:73:59:0b:88:db:8e:d2:85:43:f0: 4b:cb:09:31:5f:e6:5c:a4:ff:64:de:0d:82:a5:68: 88:75:b6:ea:f8:16:4a:73:2f:39:ef:2c:3b:eb:13: 83:56:42:a0:8f:71:5b:5d:36:07:3b:d7:cf:bb:51: 25:b4:f2:d0:9e:33:07:0d:c7:e0:98:95:fd:a4:74: 12:58:17:5a:b7:11:2f:07:8b:f7:24:2c:c8:3b:b5: 67:4a:6c:bf:47:21:33:8b:5c:e7:85:18:5b:5a:32: c7:27:42:34:37:42:4e:b0:7a:a5:6e:50:61:bc:c0: 98:f9:ee:47:48:fd:fb:08:56:bd:9e:b0:6d:6c:f1: 7c:fc:83:ba:30:03:a8:19:7f:d5:a4:51:83:f8:bd: e5:72:36:60:e3:9e:a6:dd:c4:8e:aa:41:c0:10:43: f0:e4:81:23:6f:fa:52:69:04:6d:45:0d:46:a8:61: e6:90:8b:a0:58:6e:3d:25:86:70:8f:0d:f9:ff:05: b1:99:9f:23:fa:4f:4c:31:20:e1:4b:f8:9f:50:24: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:20:41:27:A8:35:6F:EE:39:DF:A7:C7:D5:00:5D:19:4B:37:83:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d/402c6b65-dcfd-412a-8788-8baa91fb3a1d.crl X509v3 Authority Key Identifier: keyid:B6:C8:34:8E:66:86:9F:AC:35:F8:25:6E:51:07:5F:44:B4:51:49:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/402c6b65-dcfd-412a-8788-8baa91fb3a1d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:44:2b:63:be:68:92:5b:f8:49:1e:3a:d0:79:35:d6:0c:d2: 03:f9:11:d3:b8:37:d3:8f:64:02:8a:2a:1c:da:44:3a:a6:9e: 58:ed:53:7f:4b:05:90:84:bb:12:65:fa:ea:c1:fd:26:ef:84: 00:7f:e8:fb:d8:01:aa:95:90:bb:fc:08:e0:b5:b1:78:b7:89: 7b:85:2f:73:11:06:ee:fd:1f:9e:86:a1:22:88:f0:db:92:f9: 5f:7c:03:ca:4d:a7:c1:55:72:62:9b:f6:ff:2a:10:26:8b:20: 45:bd:c1:d7:26:46:87:9a:2f:09:08:c6:b8:0d:72:ed:54:0e: d3:06:bf:1d:2d:30:a4:69:2e:60:ba:4a:0f:5b:5b:c6:5e:74: 38:fb:64:a7:3d:0c:73:c8:06:10:6a:11:a0:47:8d:0d:72:4f: 71:66:00:50:7a:19:18:08:42:a3:6f:57:4d:0d:8b:59:8f:6d: c4:e0:c5:82:f1:9c:24:83:1c:4e:6a:3f:34:f5:40:6e:1c:0a: 7d:ba:5d:00:f6:08:b2:f4:cb:3e:2e:f6:f3:78:01:02:30:f9: 2f:61:d8:37:af:ad:f9:13:b5:6b:f0:9a:6c:2d:c4:4c:0e:38: ae:56:c4:2f:d2:4a:b7:8a:ee:e1:08:10:fd:8a:54:80:58:44: 3f:08:dc:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpfxHVr86du7eL6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyYzZiNjUtZGNmZC00MTJhLTg3ODgtOGJhYTkxZmIz YTFkMB4XDTI1MDgxOTIxMDAwM1oXDTI1MDgyMTIxMDAwMFowLzEtMCsGA1UEAxMk ZmI4NDA1NzktOTg5OS00M2Q1LTliNDgtM2Y4MTFhMjEyZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJpwlscZvDEJoewxl3V9zAv01DrM03ts4G9X Ei4YlanKFHK0zYijqMd39hEdQf4JF3NZC4jbjtKFQ/BLywkxX+ZcpP9k3g2CpWiI dbbq+BZKcy857yw76xODVkKgj3FbXTYHO9fPu1EltPLQnjMHDcfgmJX9pHQSWBda txEvB4v3JCzIO7VnSmy/RyEzi1znhRhbWjLHJ0I0N0JOsHqlblBhvMCY+e5HSP37 CFa9nrBtbPF8/IO6MAOoGX/VpFGD+L3lcjZg456m3cSOqkHAEEPw5IEjb/pSaQRt RQ1GqGHmkIugWG49JYZwjw35/wWxmZ8j+k9MMSDhS/ifUCQyrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLkgQSeoNW/uOd+nx9UAXRlLN4OgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80MDJj NmI2NS1kY2ZkLTQxMmEtODc4OC04YmFhOTFmYjNhMWQvNDAyYzZiNjUtZGNmZC00 MTJhLTg3ODgtOGJhYTkxZmIzYTFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDAyYzZiNjUtZGNmZC00MTJhLTg3 ODgtOGJhYTkxZmIzYTFkLzQwMmM2YjY1LWRjZmQtNDEyYS04Nzg4LThiYWE5MWZi M2ExZC5jcmwwHwYDVR0jBBgwFoAUtsg0jmaGn6w1+CVuUQdfRLRRSSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80MDJjNmI2NS1kY2ZkLTQxMmEtODc4OC04YmFh OTFmYjNhMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4RCtjvmiSW/hJHjrQeTXW DNID+RHTuDfTj2QCiioc2kQ6pp5Y7VN/SwWQhLsSZfrqwf0m74QAf+j72AGqlZC7 /AjgtbF4t4l7hS9zEQbu/R+ehqEiiPDbkvlffAPKTafBVXJim/b/KhAmiyBFvcHX JkaHmi8JCMa4DXLtVA7TBr8dLTCkaS5gukoPW1vGXnQ4+2SnPQxzyAYQahGgR40N ck9xZgBQehkYCEKjb1dNDYtZj23E4MWC8ZwkgxxOaj809UBuHAp9ul0A9giy9Ms+ LvbzeAECMPkvYdg3r635E7Vr8JpsLcRMDjiuVsQv0kq3iu7hCBD9ilSAWEQ/CNzA -----END CERTIFICATE-----Generated at Wed Aug 20 00:49:09 2025 by rpki-client