$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: +3qlzowgEtMjueiqJRXT3Qv+5riOIhrpbZXW58pNLxs= Subject key identifier: 43:06:3D:65:8F:55:C4:26:15:5A:FE:1D:F4:6F:77:E1:3A:3B:46:1E Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584AF308E48A96DF643E52DFB020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA15A Signing time: Sat 23 Aug 2025 07:00:03 +0000 Manifest this update: Sat 23 Aug 2025 07:00:03 +0000 Manifest next update: Tue 26 Aug 2025 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: X97lq3X+gAXbrm5SDN25fQeYChYWG67b/AE7sXhYBNE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: gJJrtHu/t2gprtqiQFQ8HMBoOUgLrPXAzGG+f/grB/4=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: niwYcZizjmrtI3HGZrZSC+U3+BgDUgAfabZslpRcapA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:08:e4:8a:96:df:64:3e:52:df:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Aug 23 07:00:03 2025 GMT Not After : Aug 26 07:00:00 2025 GMT Subject: CN=8d83c842-f75f-41f7-a0bb-460ed41f608b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:07:36:6c:c0:b4:ad:d2:aa:9f:f9:f6:33: cc:22:7b:a1:01:ed:8e:e5:80:4c:28:ec:6d:fb:f4: 68:de:18:2c:bc:d9:57:c6:22:b4:98:1e:88:92:ad: a3:f6:7f:f1:8a:b2:9a:2b:12:99:9c:0b:66:6c:52: 05:59:6e:20:6f:23:62:b5:8d:0e:d2:c1:b8:86:ac: 9f:ba:5a:dc:b0:7f:d1:09:ac:b3:5c:e7:35:97:44: 55:da:d3:29:46:c2:50:b6:e3:8e:1c:09:22:e9:d7: f8:08:20:1d:5e:c8:7e:8a:52:c2:86:7e:bf:a7:23: 6d:9b:62:28:41:09:1a:81:1a:b3:e9:3a:c1:97:7f: 44:b0:7a:cb:26:80:08:45:52:2a:af:0e:36:d2:34: 68:32:c0:6a:09:3a:9c:09:0a:0c:25:c1:0f:77:ee: 52:82:da:19:d6:a5:c7:fd:59:2f:17:c4:da:9b:88: de:73:cf:c3:c8:82:d4:53:61:33:6d:21:c8:d6:18: 45:74:04:47:00:c2:d3:18:76:3e:37:c8:4e:5f:f2: 12:83:ee:f5:b3:2d:7c:b4:ce:50:d0:43:a2:da:d5: aa:77:1c:c3:2e:bf:28:78:f3:7f:86:67:aa:3c:5a: da:b3:19:41:13:3b:04:21:a0:0c:43:13:ae:03:7d: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:3D:65:8F:55:C4:26:15:5A:FE:1D:F4:6F:77:E1:3A:3B:46:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:48:57:75:30:8a:5e:35:8a:c0:0b:da:7b:92:d6:c6:ec:78: 5f:05:3b:d0:ac:33:a6:0b:52:d9:1d:db:10:cd:5f:62:37:61: 61:ba:bf:e6:f9:e8:11:2e:f4:86:32:30:f2:38:83:78:7b:47: 8b:93:bd:e1:c5:3e:da:d3:4f:9b:32:a8:91:37:e1:69:ac:cc: b6:d7:ba:82:7b:ee:72:75:57:49:cc:1b:64:d6:ae:11:d7:82: df:e7:6e:89:d7:ef:57:de:83:d1:d5:51:85:e8:2e:22:6f:21: 94:12:a2:d0:33:9b:72:3f:93:a9:50:a1:45:1a:20:cf:76:e4: 03:5a:f9:bb:95:09:23:68:b1:40:84:39:aa:9e:13:dc:90:42: 44:da:f8:a5:89:03:ee:ce:f4:28:d3:8e:48:b2:af:9a:86:29: 87:e2:93:41:35:75:37:f7:1c:72:9a:34:66:78:a3:48:55:72: a7:69:4c:4f:ee:fe:20:ad:f6:55:26:b4:fd:92:f2:63:ff:dc: de:ac:84:d7:d4:ea:ff:47:3c:fa:c3:d5:58:69:8d:cb:da:be: 09:aa:18:f2:2c:a8:4d:83:12:8a:48:2a:d7:be:c9:5d:90:92: 26:80:58:00:68:6b:5f:5e:24:ed:b6:df:4d:01:dc:7a:1e:7e: 6a:f1:f7:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzCOSKlt9kPlLfsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MDgyMzA3MDAwM1oXDTI1MDgyNjA3MDAwMFowLzEtMCsGA1UEAxMk OGQ4M2M4NDItZjc1Zi00MWY3LWEwYmItNDYwZWQ0MWY2MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzUHNmzAtK3Sqp/59jPMInuhAe2O5YBMKOxt +/Ro3hgsvNlXxiK0mB6Ikq2j9n/xirKaKxKZnAtmbFIFWW4gbyNitY0O0sG4hqyf ulrcsH/RCayzXOc1l0RV2tMpRsJQtuOOHAki6df4CCAdXsh+ilLChn6/pyNtm2Io QQkagRqz6TrBl39EsHrLJoAIRVIqrw420jRoMsBqCTqcCQoMJcEPd+5SgtoZ1qXH /VkvF8Tam4jec8/DyILUU2EzbSHI1hhFdARHAMLTGHY+N8hOX/ISg+71sy18tM5Q 0EOi2tWqdxzDLr8oePN/hmeqPFrasxlBEzsEIaAMQxOuA324yQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEMGPWWPVcQmFVr+HfRvd+E6O0YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjSFd1MIpeNYrAC9p7ktbG 7HhfBTvQrDOmC1LZHdsQzV9iN2Fhur/m+egRLvSGMjDyOIN4e0eLk73hxT7a00+b MqiRN+FprMy217qCe+5ydVdJzBtk1q4R14Lf526J1+9X3oPR1VGF6C4ibyGUEqLQ M5tyP5OpUKFFGiDPduQDWvm7lQkjaLFAhDmqnhPckEJE2viliQPuzvQo045Isq+a himH4pNBNXU39xxymjRmeKNIVXKnaUxP7v4grfZVJrT9kvJj/9zerITX1Or/Rzz6 w9VYaY3L2r4JqhjyLKhNgxKKSCrXvsldkJImgFgAaGtfXiTttt9NAdx6Hn5q8fcL -----END CERTIFICATE-----Generated at Sun Aug 24 00:34:07 2025 by rpki-client