$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft File: ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft (raw, json) Hash identifier: /56e+mQ1zKKc2CHO21FNwYjmNsP1xJmScyQg4P+DAM4= Subject key identifier: 90:5C:67:98:AA:64:BC:F4:35:21:EA:0B:FE:C8:DB:DE:C2:19:1C:69 Authority key identifier: 7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB Certificate issuer: /CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Certificate serial: 010D0C9F4328584AE8AEA4E3B369CCAFCDA34780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft Manifest number: 010D0C9F4328584ABED25002CD85F530472FFA10 Signing time: Tue 19 Aug 2025 14:00:08 +0000 Manifest this update: Tue 19 Aug 2025 14:00:08 +0000 Manifest next update: Thu 21 Aug 2025 14:00:00 +0000 Files and hashes: 1: 1a7be265-c5e9-32a9-9677-b65701a82f31.roa (hash: MrQXet+FmyQVy6kFhio6h2WE5hbqPb2Q9tOncXTDZm0=) 2: ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl (hash: /6rhVo3eZKi6cwNuDxciwaSx0+KLjO2jM1zJyEIA5LU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:ae:a4:e3:b3:69:cc:af:cd:a3:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4d79aa-f9dd-4dd2-9886-6676724e961f Validity Not Before: Aug 19 14:00:08 2025 GMT Not After : Aug 21 14:00:00 2025 GMT Subject: CN=0cc44be2-272a-43e2-afa2-41a68e92284c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:f2:b5:0a:28:50:15:9f:89:df:12:2c:6f: b5:56:93:34:17:52:91:92:66:3d:0a:47:0c:83:95: 06:c4:68:df:f8:96:1a:ce:e9:c8:c9:78:3f:40:76: 1b:fa:31:a9:01:7a:82:c4:0b:80:73:5b:2b:68:47: b4:30:d1:43:f2:dc:b9:6d:0c:3e:64:9e:eb:2b:05: 77:9a:51:ae:57:d0:5e:7e:71:d6:df:f2:03:52:ec: 34:01:5d:18:b5:26:85:5d:8b:28:39:76:2a:d9:2d: 4b:44:a6:b0:20:9b:81:ce:34:56:0a:94:3d:e2:ef: 09:d9:66:a8:13:dd:a7:bc:15:47:cf:13:96:cd:53: e9:9a:a9:1d:47:30:39:87:a4:af:dc:ab:52:6b:5c: 60:9f:7e:a4:d8:b8:87:02:e1:c6:05:dd:c0:56:fd: 75:46:c4:eb:44:18:b8:dd:4c:1e:99:ce:f2:59:48: 2f:65:d9:6b:b6:fc:1d:cf:22:2f:d5:78:1c:7e:b1: 7f:6e:87:92:47:c3:32:86:53:19:af:65:ff:c3:a1: 51:d4:f5:52:f8:95:83:c0:e5:fd:17:2b:49:d9:dc: 02:c1:c8:22:87:9d:99:4b:11:ff:9d:6b:d0:9d:51: 4c:9e:b2:1a:19:b1:26:7f:3b:9b:12:96:36:b2:a6: 35:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5C:67:98:AA:64:BC:F4:35:21:EA:0B:FE:C8:DB:DE:C2:19:1C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f/ae4d79aa-f9dd-4dd2-9886-6676724e961f.crl X509v3 Authority Key Identifier: keyid:7B:2B:78:9B:F9:99:84:00:07:FD:2E:22:98:A0:A3:00:AD:6E:E9:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae4d79aa-f9dd-4dd2-9886-6676724e961f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2e:d0:2e:13:85:d5:42:b9:d0:d4:7d:21:1c:ce:c5:9b:71: 6c:42:65:2c:0f:13:a0:4c:3d:56:d0:47:03:2a:38:c8:1b:a7: de:43:b6:da:55:39:70:b7:8e:33:30:38:3e:8d:e6:64:f5:59: e0:08:92:6b:d0:2d:dc:c5:17:1c:0c:2e:ef:14:e9:c2:ee:30: 9e:d8:1c:03:0d:9d:82:00:02:93:5d:fe:48:41:56:bb:4f:ed: af:d3:85:9f:af:8a:0a:f5:76:c7:43:47:b8:33:39:36:70:f5: e2:2d:1d:79:f2:ff:a7:04:cb:e7:21:86:1e:82:30:b0:84:00: 74:9b:53:69:db:c2:25:77:64:80:b1:8a:da:fd:37:37:1f:95: 93:76:65:0b:14:39:51:d9:e9:f6:d2:aa:f2:6d:ec:d2:c1:94: 3a:22:cb:c9:87:bc:25:b1:18:05:89:e8:16:47:9c:34:be:ae: 5c:70:ef:a9:a3:fa:25:a8:c7:17:c1:51:7c:bf:26:a0:c7:a2: 8f:00:d4:7e:4f:b9:17:32:fd:8f:fc:70:71:58:0e:37:0f:c4: 4f:10:71:65:90:0e:b7:fe:ec:b8:49:07:01:6a:e5:a4:37:ae: 56:91:1f:14:58:d2:31:0a:f9:d3:b8:f6:8a:1b:a0:90:d1:c4: 95:94:c1:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErorqTjs2nMr82jR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU0ZDc5YWEtZjlkZC00ZGQyLTk4ODYtNjY3NjcyNGU5 NjFmMB4XDTI1MDgxOTE0MDAwOFoXDTI1MDgyMTE0MDAwMFowLzEtMCsGA1UEAxMk MGNjNDRiZTItMjcyYS00M2UyLWFmYTItNDFhNjhlOTIyODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZTytQooUBWfid8SLG+1VpM0F1KRkmY9CkcM g5UGxGjf+JYazunIyXg/QHYb+jGpAXqCxAuAc1sraEe0MNFD8ty5bQw+ZJ7rKwV3 mlGuV9BefnHW3/IDUuw0AV0YtSaFXYsoOXYq2S1LRKawIJuBzjRWCpQ94u8J2Wao E92nvBVHzxOWzVPpmqkdRzA5h6Sv3KtSa1xgn36k2LiHAuHGBd3AVv11RsTrRBi4 3Uwemc7yWUgvZdlrtvwdzyIv1XgcfrF/boeSR8MyhlMZr2X/w6FR1PVS+JWDwOX9 FytJ2dwCwcgih52ZSxH/nWvQnVFMnrIaGbEmfzubEpY2sqY1hQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJBcZ5iqZLz0NSHqC/7I297CGRxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRk NzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2NzI0ZTk2MWYvYWU0ZDc5YWEtZjlkZC00 ZGQyLTk4ODYtNjY3NjcyNGU5NjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWU0ZDc5YWEtZjlkZC00ZGQyLTk4 ODYtNjY3NjcyNGU5NjFmL2FlNGQ3OWFhLWY5ZGQtNGRkMi05ODg2LTY2NzY3MjRl OTYxZi5jcmwwHwYDVR0jBBgwFoAUeyt4m/mZhAAH/S4imKCjAK1u6cswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZTRkNzlhYS1mOWRkLTRkZDItOTg4Ni02Njc2 NzI0ZTk2MWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVLtAuE4XVQrnQ1H0hHM7F m3FsQmUsDxOgTD1W0EcDKjjIG6feQ7baVTlwt44zMDg+jeZk9VngCJJr0C3cxRcc DC7vFOnC7jCe2BwDDZ2CAAKTXf5IQVa7T+2v04Wfr4oK9XbHQ0e4Mzk2cPXiLR15 8v+nBMvnIYYegjCwhAB0m1Np28Ild2SAsYra/Tc3H5WTdmULFDlR2en20qrybezS wZQ6IsvJh7wlsRgFiegWR5w0vq5ccO+po/olqMcXwVF8vyagx6KPANR+T7kXMv2P /HBxWA43D8RPEHFlkA63/uy4SQcBauWkN65WkR8UWNIxCvnTuPaKG6CQ0cSVlMFI -----END CERTIFICATE-----Generated at Wed Aug 20 00:36:58 2025 by rpki-client