$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft File: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft (raw, json) Hash identifier: mBef+5ZRIk+PORRFRCule8H5y/rU+Wm88U+TjT8tTiQ= Subject key identifier: A1:24:43:76:19:88:C1:A8:72:49:CE:F8:5D:E3:F3:D8:BD:25:47:B9 Authority key identifier: C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 Certificate issuer: /CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Certificate serial: 010D0C9F4328584AEA4F80F35B393E4065483C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft Manifest number: 010D0C9F4328584AB5537149436C417DA9533654 Signing time: Wed 20 Aug 2025 04:00:03 +0000 Manifest this update: Wed 20 Aug 2025 04:00:03 +0000 Manifest next update: Fri 22 Aug 2025 04:00:00 +0000 Files and hashes: 1: 09568afc-1b7f-31a0-b7ef-b103efdcc17b.roa (hash: jmTajJx+fTs6ApsIG19QFYHHNb6Ha5izA54cU461aJs=) 2: 8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl (hash: 0F/af3DozLR9wXDHTQK1sXPj7dYLUTnMa4sgJTchcGs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:4f:80:f3:5b:39:3e:40:65:48:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce08935-bd58-4f80-acf9-a66a5d74f52e Validity Not Before: Aug 20 04:00:03 2025 GMT Not After : Aug 22 04:00:00 2025 GMT Subject: CN=eb9347bf-5ef9-473d-810f-7c8601104ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:64:d8:30:01:82:7c:fe:77:08:6e:6a:73: ab:a0:ad:39:e1:c9:df:f5:e2:ba:56:55:11:b6:93: 6c:c6:2d:b6:8b:ea:04:91:f0:0b:6b:a0:85:3f:92: 68:ea:1f:6c:81:f7:dd:61:65:bc:d0:0e:3f:4c:b3: d9:46:ee:7e:41:94:89:af:e3:0b:56:60:e6:7f:65: 42:8d:16:b5:89:25:85:d3:79:17:a6:4d:95:f0:ed: cf:c2:1b:4d:9a:21:ed:c8:99:f1:c5:43:64:c8:43: ee:79:6c:da:82:4e:b5:e7:54:a6:5c:e4:a1:c2:35: 63:fd:8d:16:63:3a:79:d6:58:dd:53:c2:7c:a2:92: f0:ae:35:70:b6:a1:9a:39:d2:ce:3a:1f:06:a4:af: 14:b7:65:d0:5e:5b:e1:dd:64:f7:cf:b8:61:df:b5: 7b:8e:7e:3d:a1:20:60:4a:d1:3c:4c:48:bb:cb:9f: c2:12:c2:c7:c9:22:a8:e5:09:f3:20:b8:1d:30:4e: 22:5a:85:7d:55:68:10:4f:04:c3:3f:f4:04:86:63: 95:e3:9f:9c:96:39:12:f6:75:7a:cf:09:ad:12:00: 19:c8:c5:f5:0c:7a:e0:e3:7e:93:3b:f6:5c:b0:82: e5:14:45:62:dd:39:a5:b5:1c:67:3d:8a:98:8b:9e: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:43:76:19:88:C1:A8:72:49:CE:F8:5D:E3:F3:D8:BD:25:47:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e/8ce08935-bd58-4f80-acf9-a66a5d74f52e.crl X509v3 Authority Key Identifier: keyid:C8:4D:73:7E:51:D3:53:E1:F1:31:98:28:AE:D9:CB:65:C2:B3:89:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8ce08935-bd58-4f80-acf9-a66a5d74f52e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:34:18:b5:7a:74:05:31:cc:2e:1c:b9:59:6e:5d:7e:7a:b4: f8:fc:41:2f:4e:ee:74:74:fc:e9:25:f8:74:43:b2:ce:1d:e8: 32:c5:04:21:bf:bd:3d:74:6d:fe:a3:83:c5:54:49:54:07:f8: c9:77:ad:8d:1f:c4:42:65:c7:9d:45:55:68:d3:47:f2:b5:4b: c7:03:71:4a:99:68:4a:4c:e7:f9:d4:6c:b7:5a:03:f4:98:44: 7f:0c:4a:a2:7e:24:7d:35:0c:4f:13:97:95:e2:79:da:18:44: 18:e9:fd:7f:cd:ab:74:17:d3:5b:66:68:fe:c6:07:6d:cc:2d: 94:18:3d:8e:1e:c2:3f:91:53:c0:e0:ee:62:1f:3f:34:2b:29: 63:14:14:b6:e2:c9:5f:69:70:ce:8c:12:c8:f7:74:7e:6b:2d: ee:4f:18:ba:b5:be:26:2c:ae:38:7d:73:75:24:c5:6c:04:95: ab:20:51:e8:55:21:be:c7:d4:f7:14:9d:9e:f4:a7:50:c1:b3: 60:92:38:fc:63:ce:6e:ee:08:55:f8:fc:c6:2d:0a:1b:a5:d4: 34:91:78:bb:33:6a:b9:ff:85:e3:cd:ff:e5:23:f0:50:8a:a1: 48:7f:aa:1a:31:c1:df:2a:1b:fa:54:3e:17:27:ad:fe:63:fb: 2e:a1:56:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErqT4DzWzk+QGVIPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlMDg5MzUtYmQ1OC00ZjgwLWFjZjktYTY2YTVkNzRm NTJlMB4XDTI1MDgyMDA0MDAwM1oXDTI1MDgyMjA0MDAwMFowLzEtMCsGA1UEAxMk ZWI5MzQ3YmYtNWVmOS00NzNkLTgxMGYtN2M4NjAxMTA0ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Jk2DABgnz+dwhuanOroK054cnf9eK6VlUR tpNsxi22i+oEkfALa6CFP5Jo6h9sgffdYWW80A4/TLPZRu5+QZSJr+MLVmDmf2VC jRa1iSWF03kXpk2V8O3PwhtNmiHtyJnxxUNkyEPueWzagk6151SmXOShwjVj/Y0W Yzp51ljdU8J8opLwrjVwtqGaOdLOOh8GpK8Ut2XQXlvh3WT3z7hh37V7jn49oSBg StE8TEi7y5/CEsLHySKo5QnzILgdME4iWoV9VWgQTwTDP/QEhmOV45+cljkS9nV6 zwmtEgAZyMX1DHrg436TO/ZcsILlFEVi3TmltRxnPYqYi579TwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKEkQ3YZiMGocknO+F3j89i9JUe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Y2Uw ODkzNS1iZDU4LTRmODAtYWNmOS1hNjZhNWQ3NGY1MmUvOGNlMDg5MzUtYmQ1OC00 ZjgwLWFjZjktYTY2YTVkNzRmNTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGNlMDg5MzUtYmQ1OC00ZjgwLWFj ZjktYTY2YTVkNzRmNTJlLzhjZTA4OTM1LWJkNTgtNGY4MC1hY2Y5LWE2NmE1ZDc0 ZjUyZS5jcmwwHwYDVR0jBBgwFoAUyE1zflHTU+HxMZgortnLZcKziQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Y2UwODkzNS1iZDU4LTRmODAtYWNmOS1hNjZh NWQ3NGY1MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUNBi1enQFMcwuHLlZbl1+ erT4/EEvTu50dPzpJfh0Q7LOHegyxQQhv709dG3+o4PFVElUB/jJd62NH8RCZced RVVo00fytUvHA3FKmWhKTOf51Gy3WgP0mER/DEqifiR9NQxPE5eV4nnaGEQY6f1/ zat0F9NbZmj+xgdtzC2UGD2OHsI/kVPA4O5iHz80KyljFBS24slfaXDOjBLI93R+ ay3uTxi6tb4mLK44fXN1JMVsBJWrIFHoVSG+x9T3FJ2e9KdQwbNgkjj8Y85u7ghV +PzGLQobpdQ0kXi7M2q5/4Xjzf/lI/BQiqFIf6oaMcHfKhv6VD4XJ63+Y/suoVa6 -----END CERTIFICATE-----Generated at Wed Aug 20 05:21:20 2025 by rpki-client