$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft File: a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft (raw, json) Hash identifier: GtaPTTz5XQG6ORTsv96BYScPzvjo6PFeAwcWdM7k4K0= Subject key identifier: 67:93:80:F5:66:54:1D:F6:3F:3C:15:B2:E0:6C:4A:C1:80:53:5C:F8 Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95 Certificate issuer: /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059 Certificate serial: 010D0C9F4328584AF308E26E1D66489A7A5F51A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft Manifest number: 010D0C9F4328584073A845FF72442D03337CBC61 Signing time: Sat 23 Aug 2025 07:00:03 +0000 Manifest this update: Sat 23 Aug 2025 07:00:03 +0000 Manifest next update: Tue 26 Aug 2025 07:00:00 +0000 Files and hashes: 1: 472d7782-fafb-35e5-8651-ec91e082dd9f.roa (hash: Dmf2X1TRFETFb9jqFvz9mxPUrKSuWPPvReG7WO+qlX8=) 2: 513b70a1-3c50-3168-a6a9-58b6b68249ef.roa (hash: WIxRqf56T8/Y69KSx/IgQQVV6a1aydVneVAizgS812Q=) 3: a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl (hash: lKl1k3+SZFFH10yjlRJB/N+HGNDHo6NAF3fqfqZ2XGY=) 4: c1ef0eee-19de-307f-8352-756662d48fb6.roa (hash: PYuuIBTcnTRH2M6eJMrtxitXOA+WHuhALm8KecIlplU=) 5: d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa (hash: mDoCfOpyq9+mwigYd6qs92tZHL6qxyzj57zAhPfcDBY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:08:e2:6e:1d:66:48:9a:7a:5f:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059 Validity Not Before: Aug 23 07:00:03 2025 GMT Not After : Aug 26 07:00:00 2025 GMT Subject: CN=eb4e8640-25de-4b00-b40e-f843fe152490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ee:5b:9c:e8:9d:59:70:c0:87:dc:a8:d3:58: b3:93:fd:a4:a9:0c:7f:0b:89:71:8a:3f:4a:c0:4c: 2a:dc:55:2b:b4:74:6c:ab:38:46:06:b4:1a:ec:7f: a6:64:27:64:f6:a9:21:57:82:f1:df:7a:ba:da:fa: e8:bc:ba:76:97:05:bc:95:b3:e4:ca:10:4a:91:5a: e4:1a:22:90:1f:df:76:fd:19:87:0e:13:6f:3f:15: 6f:61:53:5f:50:52:10:d1:f9:1f:7a:82:70:48:ee: 81:99:e1:8c:2b:76:c8:b9:07:46:f7:f3:e2:1f:40: a1:d7:ea:1e:b4:f3:0d:64:ed:58:31:fc:0c:9d:2d: 40:32:dd:13:0c:87:71:ec:a3:1a:89:d7:18:53:9b: 51:d2:98:ca:f4:fe:2a:14:46:0b:c7:ea:b9:35:ae: af:be:48:c9:b5:5c:b3:15:9b:fc:55:80:d1:d3:db: ba:d1:80:f3:d1:89:ee:6b:5a:45:19:a2:69:a4:74: 6c:25:32:8b:59:fe:82:d1:9b:a9:64:d0:f5:ca:eb: c5:b7:82:c8:73:8c:1d:07:7e:ff:3b:da:14:39:c1: 11:09:78:f3:f1:fa:9e:bf:fb:47:5e:7e:8e:fc:34: e9:c3:09:b1:10:76:ee:c9:ba:54:22:b5:8a:f7:69: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:93:80:F5:66:54:1D:F6:3F:3C:15:B2:E0:6C:4A:C1:80:53:5C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl X509v3 Authority Key Identifier: keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:98:d7:12:f2:d9:db:bd:cb:14:04:f3:43:77:f2:aa:b1:03: 9b:fe:a1:78:d6:93:42:5d:15:c2:44:3a:e8:ac:8c:a2:20:30: d0:1b:63:33:18:d2:3c:7a:4b:41:ca:d9:3a:f1:a3:1f:66:81: 13:6e:12:50:2b:c8:02:2f:50:97:96:ec:19:e8:91:b4:a0:2b: da:7e:fc:13:4c:40:8e:eb:dd:7e:bd:0c:17:88:e8:54:34:40: df:1e:cd:d3:17:fe:95:f0:ad:82:16:cf:fa:9b:4c:51:f2:30: 5a:b7:e3:bc:38:93:be:97:4c:7a:db:9e:b7:3e:60:55:f6:24: 33:da:99:2c:d0:a1:0d:ae:df:56:c7:55:df:47:5f:27:11:3b: c0:89:18:5d:f9:b9:82:05:10:43:de:9c:89:4f:90:9c:86:89: 5d:d8:b1:0d:4b:c4:dc:f5:70:a0:27:bf:1f:fd:02:87:33:e0: 31:5f:a0:a5:56:36:b6:83:e0:95:90:9a:fe:26:6b:1f:2d:7d: c7:45:fb:ba:aa:9d:72:02:1f:dd:77:05:64:de:8e:7a:a3:f3: fc:82:34:8d:5e:a8:25:90:a3:06:da:9d:ac:a0:9f:c8:55:a7: 66:58:2d:84:9c:18:59:f8:22:6d:1e:9d:56:d7:bd:e4:f4:fb: 69:ce:8d:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzCOJuHWZImnpfUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4OGI0YmItNjBjNS00ZjU0LThjN2QtNzViYmE4ZDRi MDU5MB4XDTI1MDgyMzA3MDAwM1oXDTI1MDgyNjA3MDAwMFowLzEtMCsGA1UEAxMk ZWI0ZTg2NDAtMjVkZS00YjAwLWI0MGUtZjg0M2ZlMTUyNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO5bnOidWXDAh9yo01izk/2kqQx/C4lxij9K wEwq3FUrtHRsqzhGBrQa7H+mZCdk9qkhV4Lx33q62vrovLp2lwW8lbPkyhBKkVrk GiKQH992/RmHDhNvPxVvYVNfUFIQ0fkfeoJwSO6BmeGMK3bIuQdG9/PiH0Ch1+oe tPMNZO1YMfwMnS1AMt0TDIdx7KMaidcYU5tR0pjK9P4qFEYLx+q5Na6vvkjJtVyz FZv8VYDR09u60YDz0Ynua1pFGaJppHRsJTKLWf6C0ZupZND1yuvFt4LIc4wdB37/ O9oUOcERCXjz8fqev/tHXn6O/DTpwwmxEHbuybpUIrWK92nCaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGeTgPVmVB32PzwVsuBsSsGAU1z4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjg4 YjRiYi02MGM1LTRmNTQtOGM3ZC03NWJiYThkNGIwNTkvYTI4OGI0YmItNjBjNS00 ZjU0LThjN2QtNzViYmE4ZDRiMDU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTI4OGI0YmItNjBjNS00ZjU0LThj N2QtNzViYmE4ZDRiMDU5L2EyODhiNGJiLTYwYzUtNGY1NC04YzdkLTc1YmJhOGQ0 YjA1OS5jcmwwHwYDVR0jBBgwFoAU7S0kbjS6oXrnqeo/ptG3b2GWnpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjg4YjRiYi02MGM1LTRmNTQtOGM3ZC03NWJi YThkNGIwNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAemNcS8tnbvcsUBPNDd/Kq sQOb/qF41pNCXRXCRDrorIyiIDDQG2MzGNI8ektBytk68aMfZoETbhJQK8gCL1CX luwZ6JG0oCvafvwTTECO691+vQwXiOhUNEDfHs3TF/6V8K2CFs/6m0xR8jBat+O8 OJO+l0x62563PmBV9iQz2pks0KENrt9Wx1XfR18nETvAiRhd+bmCBRBD3pyJT5Cc hold2LENS8Tc9XCgJ78f/QKHM+AxX6ClVja2g+CVkJr+JmsfLX3HRfu6qp1yAh/d dwVk3o56o/P8gjSNXqglkKMG2p2soJ/IVadmWC2EnBhZ+CJtHp1W173k9Ptpzo0K -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:31 2025 by rpki-client