$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft File: 968bda65-4161-4dee-a348-29486c17acb2.mft (raw, json) Hash identifier: Cx10ybIxnVokhCvAYN8oD0RovWrQ+weDDIqre3BhXYE= Subject key identifier: 40:70:DA:0B:E2:90:77:AA:0A:14:41:AB:97:88:F3:E3:F1:54:1D:C5 Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 Certificate issuer: /CN=968bda65-4161-4dee-a348-29486c17acb2 Certificate serial: 010D0C9F4328584AE7C05FCDEA983A5F57B41980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft Manifest number: 010D0C9F4328584AA202387BD97139280BBB799A Signing time: Tue 19 Aug 2025 06:00:03 +0000 Manifest this update: Tue 19 Aug 2025 06:00:03 +0000 Manifest next update: Thu 21 Aug 2025 06:00:00 +0000 Files and hashes: 1: 968bda65-4161-4dee-a348-29486c17acb2.crl (hash: KxE8gL4YjLfQRX2q/PyyFCU1hJL6vUF7XX+RFiXiXK0=) 2: c1539d45-e25a-3367-9754-f7eba01827f3.roa (hash: lEIiEO54rkkCdbHqb+jgVf4IphjLIGtt5q0ng1MUFdY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:c0:5f:cd:ea:98:3a:5f:57:b4:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2 Validity Not Before: Aug 19 06:00:03 2025 GMT Not After : Aug 21 06:00:00 2025 GMT Subject: CN=d87ef8f8-6ece-48fc-81c3-1435cbc12598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:be:4a:b3:c4:46:9b:0a:c5:30:62:40:74:21: 8c:74:93:34:03:db:6b:09:9b:05:5d:78:b6:42:0e: e5:0f:17:74:f5:f5:d0:d6:d6:4d:a0:d0:03:78:b0: 76:27:36:33:b9:0b:77:b2:6b:e8:06:53:c7:d7:c9: 25:45:a0:0b:67:7b:33:8f:e3:51:1d:83:26:82:0d: 62:12:95:ba:cf:b8:f4:81:f5:3a:0a:b9:9d:0b:ee: ab:f7:21:7e:2d:3c:8f:51:63:4e:ee:55:42:9e:d6: ef:f4:c0:0b:55:cb:11:3f:a5:db:fd:f3:71:8d:29: ac:e6:3d:8b:3a:6c:88:ed:27:d6:8a:5d:c5:d7:b2: 42:cb:04:ee:01:d7:12:c4:44:e4:06:83:ba:1d:5d: 56:5b:49:1f:8f:d2:da:c3:16:0c:b8:14:f6:b3:5a: 4d:7d:27:19:a3:11:92:d7:ef:fc:d6:a1:68:18:3b: 95:8c:01:06:78:70:b3:bb:a6:2b:a3:a6:7e:ae:da: 81:cb:83:da:01:0e:b0:6c:f2:f6:92:15:e5:cf:70: fb:09:60:44:b6:09:0a:fb:a6:43:9f:4f:da:2b:b3: 09:10:de:0a:e0:85:89:80:48:c3:c0:cc:9f:5a:d5: b0:cf:9f:70:50:ef:1a:b8:f7:84:a8:85:01:ab:a4: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:70:DA:0B:E2:90:77:AA:0A:14:41:AB:97:88:F3:E3:F1:54:1D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl X509v3 Authority Key Identifier: keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ca:e8:1e:19:17:59:47:e8:db:cf:8b:98:c0:c6:6a:67:59: 5f:56:c0:e8:e1:aa:0e:cc:c5:8e:48:0e:7c:c3:41:49:70:46: 94:74:62:2b:cd:4c:df:c0:b7:1c:7f:ea:3e:1d:29:ff:12:34: 23:b9:1e:72:f9:a2:71:45:45:2c:1a:7e:8a:78:b7:af:c8:aa: a7:03:f1:a3:31:a5:25:4f:0b:51:4f:80:ef:2f:54:13:5d:f7: 91:c9:28:0b:c9:5e:18:8f:72:12:b2:60:dc:4c:4e:c1:89:7e: a5:02:74:da:45:b7:e8:fa:5e:7c:bb:11:ad:95:83:76:68:fe: 86:bf:0e:08:93:31:f9:58:73:0a:64:57:88:9e:49:4c:7f:f6: 00:c3:12:c8:5d:12:f6:9d:3e:a6:29:1c:13:e6:d4:3f:78:84: d7:02:da:41:81:01:fd:5d:9b:b0:70:9e:99:9f:07:93:e3:88: 09:a7:dd:f9:5a:96:66:73:90:cf:25:dd:11:1b:7c:0e:e6:8e: 8e:28:d4:9a:68:77:a5:79:4e:52:3c:03:3d:ee:e3:55:06:7c: 59:01:f9:bd:e3:63:85:cd:4f:63:e8:65:c3:a4:e0:bf:86:b1: 13:b8:a5:32:6b:a0:03:11:c2:d8:0e:70:c5:d9:45:93:a1:24: 3a:c8:4a:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErnwF/N6pg6X1e0GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY4YmRhNjUtNDE2MS00ZGVlLWEzNDgtMjk0ODZjMTdh Y2IyMB4XDTI1MDgxOTA2MDAwM1oXDTI1MDgyMTA2MDAwMFowLzEtMCsGA1UEAxMk ZDg3ZWY4ZjgtNmVjZS00OGZjLTgxYzMtMTQzNWNiYzEyNTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh75Ks8RGmwrFMGJAdCGMdJM0A9trCZsFXXi2 Qg7lDxd09fXQ1tZNoNADeLB2JzYzuQt3smvoBlPH18klRaALZ3szj+NRHYMmgg1i EpW6z7j0gfU6CrmdC+6r9yF+LTyPUWNO7lVCntbv9MALVcsRP6Xb/fNxjSms5j2L OmyI7SfWil3F17JCywTuAdcSxETkBoO6HV1WW0kfj9LawxYMuBT2s1pNfScZoxGS 1+/81qFoGDuVjAEGeHCzu6Yro6Z+rtqBy4PaAQ6wbPL2khXlz3D7CWBEtgkK+6ZD n0/aK7MJEN4K4IWJgEjDwMyfWtWwz59wUO8auPeEqIUBq6T0eQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEBw2gvikHeqChRBq5eI8+PxVB3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Njhi ZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4NmMxN2FjYjIvOTY4YmRhNjUtNDE2MS00 ZGVlLWEzNDgtMjk0ODZjMTdhY2IyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTY4YmRhNjUtNDE2MS00ZGVlLWEz NDgtMjk0ODZjMTdhY2IyLzk2OGJkYTY1LTQxNjEtNGRlZS1hMzQ4LTI5NDg2YzE3 YWNiMi5jcmwwHwYDVR0jBBgwFoAUwSdUl9rMCYxMeGAB0fNOAbHxOkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85NjhiZGE2NS00MTYxLTRkZWUtYTM0OC0yOTQ4 NmMxN2FjYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALyugeGRdZR+jbz4uYwMZq Z1lfVsDo4aoOzMWOSA58w0FJcEaUdGIrzUzfwLccf+o+HSn/EjQjuR5y+aJxRUUs Gn6KeLevyKqnA/GjMaUlTwtRT4DvL1QTXfeRySgLyV4Yj3ISsmDcTE7BiX6lAnTa Rbfo+l58uxGtlYN2aP6Gvw4IkzH5WHMKZFeInklMf/YAwxLIXRL2nT6mKRwT5tQ/ eITXAtpBgQH9XZuwcJ6ZnweT44gJp935WpZmc5DPJd0RG3wO5o6OKNSaaHeleU5S PAM97uNVBnxZAfm942OFzU9j6GXDpOC/hrETuKUya6ADEcLYDnDF2UWToSQ6yEos -----END CERTIFICATE-----Generated at Wed Aug 20 00:51:12 2025 by rpki-client