$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft File: cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json) Hash identifier: P6VOirYTGyz5HQiPeFVBCOzF5dXzMQhvtvILirJ5XdM= Subject key identifier: B5:35:5D:B5:69:5D:26:13:9D:A6:0B:89:ED:4A:21:BD:DE:01:95:24 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584AE9BA9CF9DD78A81A29E8BFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft Manifest number: 010D0C9F4328584ACB090E855DD5D7EE923FD38B Signing time: Tue 19 Aug 2025 23:00:03 +0000 Manifest this update: Tue 19 Aug 2025 23:00:03 +0000 Manifest next update: Thu 21 Aug 2025 23:00:00 +0000 Files and hashes: 1: aed05680-7f44-3f44-8086-236e2e2c39d6.roa (hash: sw7T79LUNfllVeW9e0JV5ptEYU3fukD5lOuA9gw9XtA=) 2: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: omvD4Daf7X46xdBfEVe1wF12KbT2IxefnHwJusUlmBA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:ba:9c:f9:dd:78:a8:1a:29:e8:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Aug 19 23:00:03 2025 GMT Not After : Aug 21 23:00:00 2025 GMT Subject: CN=4ef56003-e450-46f3-8259-68a5963e79b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:63:70:cc:74:04:16:2a:14:d7:a5:50:c8:10: 20:76:08:c8:67:ff:db:08:60:c5:72:ff:c6:59:cf: 7c:45:3e:50:eb:12:e0:68:48:ac:c1:4d:6e:7b:9c: b1:4c:a5:0a:3c:6a:83:01:b0:93:de:52:e3:aa:56: a1:ec:fd:d7:bb:30:5f:73:ad:bb:f4:74:42:41:3a: 7c:7e:07:85:f2:0d:69:5b:77:a4:94:aa:c7:79:e0: 5e:4d:43:da:d1:05:65:5c:ee:fb:1e:cf:5e:e6:d9: 93:ee:45:af:23:dd:9d:dc:fb:2a:7e:d3:62:8d:06: 4f:db:9b:18:7b:97:54:bc:0b:e2:66:a0:3e:a8:ec: 63:e8:d5:ae:47:ad:5e:e7:7b:5a:09:1e:c8:98:4b: aa:28:03:e6:1b:26:a7:2b:20:84:49:aa:70:92:e5: de:ff:12:df:e7:ef:a5:11:95:ba:3b:f7:bf:72:cb: d3:43:ce:80:f2:26:5a:2e:07:a3:20:f5:f8:66:e3: 6d:83:2a:01:2e:11:ac:ba:da:bd:80:a3:42:5c:d2: ed:5e:e6:41:d1:1d:f4:55:88:37:28:03:6b:ef:4e: bf:48:4f:b0:19:b3:18:6f:1a:c1:f0:1d:ef:98:23: 25:cd:13:7a:c6:b3:35:89:d5:ca:df:5f:56:c8:04: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:35:5D:B5:69:5D:26:13:9D:A6:0B:89:ED:4A:21:BD:DE:01:95:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:71:cc:72:67:b3:35:e3:dd:a1:00:43:34:f8:06:60:df:56: 51:59:6d:7a:a9:c9:58:cd:d0:2b:a5:b6:e9:12:5e:3e:b7:59: f6:45:31:ad:c8:c3:3f:24:53:79:4f:bf:b0:b4:97:b8:b4:39: c3:5c:ae:8f:2b:d2:06:2f:6c:cf:70:4c:9a:e2:7d:d1:39:0c: 5d:1c:13:fc:f4:d5:ea:43:8d:69:03:a6:b3:01:b0:b5:34:56: 5a:c7:b1:e9:49:88:22:c8:8a:04:9f:9b:c8:2f:06:11:30:a8: 70:4e:c4:e9:12:1e:e2:33:da:80:af:5f:88:cf:1a:97:3f:65: 07:c4:59:60:66:0e:a8:b5:db:8e:47:b7:59:09:19:ed:3c:1e: 53:95:2e:3f:72:a0:0c:ed:c4:77:07:2e:74:64:a1:6c:54:d4: 47:6b:a2:de:ec:f3:88:33:b2:ce:4b:5f:ce:dd:ee:c5:6e:d3: 5e:21:88:ef:ee:77:d4:b5:02:9b:3f:e1:40:cc:fc:4f:b9:91: 00:50:54:db:a9:80:3a:6e:07:d0:3e:8b:36:b9:0d:cb:e8:cc: 25:56:e1:80:75:9c:a9:a5:cf:31:c9:47:bd:4b:db:86:2c:39: 82:d3:73:74:50:df:e3:55:b3:e6:37:c0:21:69:20:26:c2:9a: dc:32:bd:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErpupz53XioGinov8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI1MDgxOTIzMDAwM1oXDTI1MDgyMTIzMDAwMFowLzEtMCsGA1UEAxMk NGVmNTYwMDMtZTQ1MC00NmYzLTgyNTktNjhhNTk2M2U3OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGNwzHQEFioU16VQyBAgdgjIZ//bCGDFcv/G Wc98RT5Q6xLgaEiswU1ue5yxTKUKPGqDAbCT3lLjqlah7P3XuzBfc6279HRCQTp8 fgeF8g1pW3eklKrHeeBeTUPa0QVlXO77Hs9e5tmT7kWvI92d3PsqftNijQZP25sY e5dUvAviZqA+qOxj6NWuR61e53taCR7ImEuqKAPmGyanKyCESapwkuXe/xLf5++l EZW6O/e/csvTQ86A8iZaLgejIPX4ZuNtgyoBLhGsutq9gKNCXNLtXuZB0R30VYg3 KANr706/SE+wGbMYbxrB8B3vmCMlzRN6xrM1idXK319WyATcNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLU1XbVpXSYTnaYLie1KIb3eAZUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvY2ZhYWVkOTAtY2U2OC00 ZTIyLTg3MGItN2I3ZDg2ZTk0OWUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRccxyZ7M1492hAEM0+AZg 31ZRWW16qclYzdArpbbpEl4+t1n2RTGtyMM/JFN5T7+wtJe4tDnDXK6PK9IGL2zP cEya4n3ROQxdHBP89NXqQ41pA6azAbC1NFZax7HpSYgiyIoEn5vILwYRMKhwTsTp Eh7iM9qAr1+IzxqXP2UHxFlgZg6otduOR7dZCRntPB5TlS4/cqAM7cR3By50ZKFs VNRHa6Le7POIM7LOS1/O3e7FbtNeIYjv7nfUtQKbP+FAzPxPuZEAUFTbqYA6bgfQ Pos2uQ3L6MwlVuGAdZyppc8xyUe9S9uGLDmC03N0UN/jVbPmN8AhaSAmwprcMr2E -----END CERTIFICATE-----Generated at Wed Aug 20 05:24:17 2025 by rpki-client