$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft File: 9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft (raw, json) Hash identifier: M0CZLD7ZivgrnqbgKhoHCZ3R2TVRNZU7p75JDs62cXE= Subject key identifier: 9C:53:E4:BE:BB:61:10:F0:56:98:00:AE:06:6B:3C:E5:49:F8:C9:ED Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB Certificate issuer: /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Certificate serial: 010D0C9F4328584AF238704C039434A7979EA500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft Manifest number: 010D0C9F4328584073A830F9762076E794E7EC58 Signing time: Sat 23 Aug 2025 00:00:04 +0000 Manifest this update: Sat 23 Aug 2025 00:00:04 +0000 Manifest next update: Tue 26 Aug 2025 00:00:00 +0000 Files and hashes: 1: 80afc93c-8379-33e4-8c58-900d16b82c22.roa (hash: xCsMZmdxeJj5+N5XP0hv5YKCQfradKqRz0YGJywcoz4=) 2: 9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl (hash: +AacYPUn9nWhVpUPFNaNhv1g/0jSKEBHTQm4kTdzwOY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:38:70:4c:03:94:34:a7:97:9e:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Validity Not Before: Aug 23 00:00:04 2025 GMT Not After : Aug 26 00:00:00 2025 GMT Subject: CN=74c3c0f3-de3f-40af-9e0c-a911543be005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:e2:23:87:5c:d6:2c:61:14:c1:d3:fe:c0: 3e:df:fc:2a:b2:eb:24:6c:e3:90:e6:73:18:86:b2: 93:9c:c5:a6:0c:a4:b8:f1:56:39:8e:15:a4:73:99: 57:e6:c2:5c:5d:1d:40:78:5d:63:67:b5:71:79:6f: 1a:95:f1:c7:5f:3a:46:d9:71:9c:fa:53:30:59:85: f9:57:bb:02:03:70:e5:3a:17:7c:bf:85:a9:43:29: 6b:a0:96:dc:05:f5:45:a2:c1:ee:23:b1:88:b8:01: 2a:d2:db:56:e7:5c:bb:fb:d4:d8:15:41:a4:07:f1: b6:1e:ba:bd:db:5c:f3:cd:95:fd:a2:27:38:67:dd: ee:78:37:8a:f4:5a:9a:a6:d8:aa:2d:5b:d0:f5:86: 1c:71:6f:20:50:0f:37:01:7f:60:3a:d0:e1:47:37: 8b:17:0f:45:e7:8a:4f:e6:3d:30:9b:f6:71:54:1e: 1d:3c:be:57:61:48:6f:f4:1f:5a:ae:c4:68:54:83: 1f:c5:54:cb:1f:3c:9e:57:9c:18:10:3b:c0:5d:b5: 35:3a:ff:f0:a7:ee:a3:02:1b:6c:bd:84:26:a3:42: b1:6a:b1:cb:93:e1:52:53:01:a3:a0:af:6b:8b:69: 23:86:2e:4a:f5:56:87:f3:08:29:16:3b:d9:ea:38: 8a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:53:E4:BE:BB:61:10:F0:56:98:00:AE:06:6B:3C:E5:49:F8:C9:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl X509v3 Authority Key Identifier: keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:33:e6:a1:32:92:6d:3a:da:54:82:48:bb:5e:ec:90:ab:58: 06:4e:27:f2:08:75:49:66:db:84:d5:fa:a5:07:08:df:af:6d: de:17:49:44:dd:fa:dd:be:8e:62:de:3c:48:10:6e:b1:6a:8c: 55:e0:74:c2:10:d0:7c:fd:00:5d:36:c4:88:08:9b:dc:cc:9d: f0:d8:3a:06:25:3b:8a:3a:58:dc:af:3b:63:06:ae:45:77:cc: d2:e1:d9:d4:93:76:3a:13:dc:3f:95:94:fd:19:ac:4a:1d:63: 0e:3c:4e:2a:21:fd:1c:7c:ec:46:a1:42:da:09:2e:e1:73:d0: a3:e7:a2:cd:f0:c0:46:f1:2f:ac:3c:40:bb:c2:99:de:5f:69: 49:3d:02:1c:8a:68:eb:f5:f5:a9:46:b9:d2:53:35:d8:45:b2: 51:c9:f7:bf:b7:12:49:97:56:da:70:fe:22:d9:e1:b3:a7:e1: 85:9a:ea:0b:14:03:f8:85:ed:cf:c9:7d:e1:e7:1e:23:54:7e: 8e:92:f0:94:6d:9e:49:ac:4e:4f:5a:42:48:75:98:62:3a:3c: 6c:bf:0e:bd:72:cd:2f:dc:0f:f8:43:42:89:bc:8e:0e:fd:56: 1d:4d:d0:6d:f6:c3:c1:b1:79:49:58:1e:5e:ea:2f:ff:63:bf: 08:8c:c6:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryOHBMA5Q0p5eepQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjk2OGEtNmY4Yi00YzkyLWJhZTUtYzhmZDFjNzNk OTVkMB4XDTI1MDgyMzAwMDAwNFoXDTI1MDgyNjAwMDAwMFowLzEtMCsGA1UEAxMk NzRjM2MwZjMtZGUzZi00MGFmLTllMGMtYTkxMTU0M2JlMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQDiI4dc1ixhFMHT/sA+3/wqsuskbOOQ5nMY hrKTnMWmDKS48VY5jhWkc5lX5sJcXR1AeF1jZ7VxeW8alfHHXzpG2XGc+lMwWYX5 V7sCA3DlOhd8v4WpQylroJbcBfVFosHuI7GIuAEq0ttW51y7+9TYFUGkB/G2Hrq9 21zzzZX9oic4Z93ueDeK9FqaptiqLVvQ9YYccW8gUA83AX9gOtDhRzeLFw9F54pP 5j0wm/ZxVB4dPL5XYUhv9B9arsRoVIMfxVTLHzyeV5wYEDvAXbU1Ov/wp+6jAhts vYQmo0KxarHLk+FSUwGjoK9ri2kjhi5K9VaH8wgpFjvZ6jiKKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJxT5L67YRDwVpgArgZrPOVJ+MntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Y2Fm OTY4YS02ZjhiLTRjOTItYmFlNS1jOGZkMWM3M2Q5NWQvOWNhZjk2OGEtNmY4Yi00 YzkyLWJhZTUtYzhmZDFjNzNkOTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWNhZjk2OGEtNmY4Yi00YzkyLWJh ZTUtYzhmZDFjNzNkOTVkLzljYWY5NjhhLTZmOGItNGM5Mi1iYWU1LWM4ZmQxYzcz ZDk1ZC5jcmwwHwYDVR0jBBgwFoAUSh0rIJrR3Xexa1NtSjyGeV0epNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Y2FmOTY4YS02ZjhiLTRjOTItYmFlNS1jOGZk MWM3M2Q5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMM+ahMpJtOtpUgki7XuyQ q1gGTifyCHVJZtuE1fqlBwjfr23eF0lE3frdvo5i3jxIEG6xaoxV4HTCENB8/QBd NsSICJvczJ3w2DoGJTuKOljcrztjBq5Fd8zS4dnUk3Y6E9w/lZT9GaxKHWMOPE4q If0cfOxGoULaCS7hc9Cj56LN8MBG8S+sPEC7wpneX2lJPQIcimjr9fWpRrnSUzXY RbJRyfe/txJJl1bacP4i2eGzp+GFmuoLFAP4he3PyX3h5x4jVH6OkvCUbZ5JrE5P WkJIdZhiOjxsvw69cs0v3A/4Q0KJvI4O/VYdTdBt9sPBsXlJWB5e6i//Y78IjMYk -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:16 2025 by rpki-client