$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft File: 4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft (raw, json) Hash identifier: yRkRsM7UHy43VUoD1safDfWhZLS4ZULaqQjtsXsPY0E= Subject key identifier: 64:F3:50:DF:4C:4B:29:2C:09:69:30:DD:38:43:8E:7B:27:67:CE:74 Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E Certificate issuer: /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d Certificate serial: 010D0C9F4328584AF432ADC9D3A8C6BF18B9B600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft Manifest number: 010D0C9F4328584073A81F51F4F7C8221C424CE8 Signing time: Sat 23 Aug 2025 17:00:03 +0000 Manifest this update: Sat 23 Aug 2025 17:00:03 +0000 Manifest next update: Mon 25 Aug 2025 17:00:00 +0000 Files and hashes: 1: 4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl (hash: EmfVkQpO8SvVMY3vFgPsGtyLLOUtptS+Su3qkDUBCSw=) 2: 6de7239f-6a57-39d4-bd65-a97148b222c8.roa (hash: Z82h8oV/0abE8Y5PXmFVUBajaMYXXEiYLevcdl1eJBQ=) 3: 7f72dd33-eb43-3e6f-a53d-a61853418549.roa (hash: z5yNfcPA7SjFPsrLgNLJiX5vyRUferCjKhn4ryPstVs=) 4: 8364f6e2-aaec-33e5-80c0-465d381b7783.roa (hash: xrTP5t1IEYF/LHZ5d/zbbQTHBXQVfYOyh9LSd3m6IBI=) 5: f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa (hash: S7Tp+BVzx2Li4jSzjIDJ7IOOlJmlA0E3SjuqEnA9vYQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:32:ad:c9:d3:a8:c6:bf:18:b9:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d Validity Not Before: Aug 23 17:00:03 2025 GMT Not After : Aug 25 17:00:00 2025 GMT Subject: CN=abee07ba-49e1-47ae-8a85-5904ef012a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:1b:a8:df:77:fd:51:2f:31:0e:50:4e:7d: 93:da:03:f0:08:72:cb:d3:cf:01:80:cd:b5:4f:fb: ce:f7:90:c7:16:38:9f:74:01:73:7e:1b:b7:91:c6: 42:f2:c4:4f:2d:92:3d:72:d5:54:4c:75:e8:a3:a2: 34:51:e2:6d:49:28:c5:fb:fb:10:3b:27:ed:31:58: e0:5e:b0:a2:31:5a:3e:d4:a8:60:e5:14:55:29:0a: 5d:65:6b:5c:21:00:ec:f0:ca:30:4b:42:31:57:38: 26:96:27:77:16:1b:a9:ba:b7:a4:a2:89:5e:2d:ec: fc:c9:3c:f2:3c:ce:f7:29:c4:39:1b:35:6c:17:a7: c5:f3:e8:4b:37:71:4a:be:de:81:20:fe:af:ab:9c: 7f:09:48:da:4e:7a:55:92:c6:c9:9b:fd:76:de:42: 59:ad:c7:39:19:ad:b4:eb:7f:1b:fe:2a:9b:2a:24: 63:8f:be:d2:2a:e3:2c:c9:74:d3:b7:d9:50:8c:0e: 28:3d:94:20:63:ec:64:7f:25:a8:ba:24:5f:fa:40: 91:f5:18:78:b0:b1:ce:12:8b:a4:e5:71:af:7c:14: d3:df:96:0f:6c:f7:85:56:d8:b8:76:33:ce:2a:ff: 34:b9:9f:74:4e:28:1b:44:34:63:c7:5a:19:47:b6: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F3:50:DF:4C:4B:29:2C:09:69:30:DD:38:43:8E:7B:27:67:CE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl X509v3 Authority Key Identifier: keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:73:0e:e6:52:d0:72:f6:b1:84:1b:0c:85:2a:b8:f5:6d:ec: 10:26:2c:15:00:e0:bd:36:76:2c:3c:81:06:4a:16:60:4b:d0: c7:9a:dc:18:2d:b8:2e:b7:77:fd:71:69:b4:01:15:d9:05:57: 8a:bd:a5:7a:ed:a0:c8:52:d6:c8:1e:3e:a8:99:0c:d8:b9:69: 3c:a5:58:4c:32:8e:e8:bf:58:ef:6c:a6:de:c2:d9:c2:a1:36: dd:5e:dc:05:dc:5e:ba:f6:b8:5a:b9:26:09:b6:cb:dc:e8:0a: f0:d0:f5:ea:b3:cb:69:85:fe:3c:9c:2c:d3:f1:a7:fa:2b:c7: f5:0e:a1:d8:d9:0d:8e:b9:0e:07:f3:24:da:f2:9d:2b:79:50: 0f:c7:1d:47:e1:db:5c:a7:dc:4c:c3:4a:48:d7:db:04:2d:92: 6c:19:cc:74:95:0f:65:df:42:af:d4:7b:06:7b:22:9c:6d:d3: 50:83:9d:b8:c1:e2:4a:3c:95:f2:5c:7c:33:ca:25:36:40:3a: 46:90:1c:13:0c:5e:77:f4:f0:11:f2:80:3c:a2:f0:e4:b8:b5: 02:5f:3b:7b:51:78:25:17:0f:b2:ad:e0:2c:8e:10:ea:28:2d: 27:f4:49:ba:9b:4f:96:0a:6a:15:04:e2:bc:19:d8:43:b2:15: 43:3e:eb:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0Mq3J06jGvxi5tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk YjlkMB4XDTI1MDgyMzE3MDAwM1oXDTI1MDgyNTE3MDAwMFowLzEtMCsGA1UEAxMk YWJlZTA3YmEtNDllMS00N2FlLThhODUtNTkwNGVmMDEyYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSEbqN93/VEvMQ5QTn2T2gPwCHLL088BgM21 T/vO95DHFjifdAFzfhu3kcZC8sRPLZI9ctVUTHXoo6I0UeJtSSjF+/sQOyftMVjg XrCiMVo+1Khg5RRVKQpdZWtcIQDs8MowS0IxVzgmlid3FhupurekooleLez8yTzy PM73KcQ5GzVsF6fF8+hLN3FKvt6BIP6vq5x/CUjaTnpVksbJm/123kJZrcc5Ga20 638b/iqbKiRjj77SKuMsyXTTt9lQjA4oPZQgY+xkfyWouiRf+kCR9Rh4sLHOEouk 5XGvfBTT35YPbPeFVti4djPOKv80uZ90TigbRDRjx1oZR7aeJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGTzUN9MSyksCWkw3ThDjnsnZ850MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvNGRjYzZhM2EtMGU0Zi00 OGMxLTkxMTQtNWRkZGYyZDdkYjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3 ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk ZjJkN2RiOWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVcw7mUtBy9rGEGwyFKrj1 bewQJiwVAOC9NnYsPIEGShZgS9DHmtwYLbgut3f9cWm0ARXZBVeKvaV67aDIUtbI Hj6omQzYuWk8pVhMMo7ov1jvbKbewtnCoTbdXtwF3F669rhauSYJtsvc6Arw0PXq s8tphf48nCzT8af6K8f1DqHY2Q2OuQ4H8yTa8p0reVAPxx1H4dtcp9xMw0pI19sE LZJsGcx0lQ9l30Kv1HsGeyKcbdNQg524weJKPJXyXHwzyiU2QDpGkBwTDF539PAR 8oA8ovDkuLUCXzt7UXglFw+yreAsjhDqKC0n9Em6m0+WCmoVBOK8GdhDshVDPutE -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:31 2025 by rpki-client