$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft File: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft (raw, json) Hash identifier: SufHGGKShxMoiJcdxYnyDPOpajiaZ/9jXPfWrIMI6RM= Subject key identifier: 88:1D:10:5E:4B:B8:E9:58:48:18:9E:1E:6D:28:76:41:F0:18:93:0E Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584AF432AE13030191A75CDBD280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft Manifest number: 010D0C9F4328584073A81C71C685F3E52EAFE234 Signing time: Sat 23 Aug 2025 17:00:03 +0000 Manifest this update: Sat 23 Aug 2025 17:00:03 +0000 Manifest next update: Mon 25 Aug 2025 17:00:00 +0000 Files and hashes: 1: 41149ca8-84ee-3c37-b491-83ba1a424870.roa (hash: +BVOj8rcVNdjJ0BleW9liYQkdAz/1IQxuSN2+FMfOHs=) 2: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl (hash: P7rrXnd6Ykk0c/E/3/JkJ9SACxWGV3l2F8uj7XLdzpI=) 3: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (hash: 39xE20B69sy3savN6964hQQCq0niPaSjh6QIJvnvFJk=) 4: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (hash: 8M3ZKvCjjzzF8dsQAfN+8uJZRMxpW07T1PhkTGE+DgI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:32:ae:13:03:01:91:a7:5c:db:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Aug 23 17:00:03 2025 GMT Not After : Aug 25 17:00:00 2025 GMT Subject: CN=d2ffb2b0-a83c-4d74-b201-82fb61d6ebcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:84:8a:dd:9a:f9:60:f3:84:ed:f9:39:3c: f4:f4:ed:4f:85:64:08:c4:90:f4:8a:d1:4b:87:11: 0f:24:76:52:0d:3b:35:03:d1:07:e8:da:4f:79:0c: cb:6a:d3:73:c3:03:04:68:b2:54:c7:d9:a6:bd:13: 56:6e:ad:a8:35:df:db:cf:0b:8d:b3:c2:33:82:0c: e6:81:fa:6b:96:7a:9a:0c:df:74:30:11:bd:0e:da: c6:3f:6f:47:a8:a4:31:7b:5f:ed:3e:0b:af:71:bf: a2:f1:d5:15:7e:9f:8f:74:3a:a9:87:72:57:73:52: e8:9a:ee:60:0a:fc:d0:ee:91:5f:93:6c:54:44:ea: 00:84:be:7d:55:83:b1:b6:26:40:d3:96:5f:1a:50: fe:77:e5:9e:f2:ee:ec:17:33:56:e9:fc:e8:c5:55: f6:15:b1:3c:bc:90:7a:08:85:86:05:27:a7:b2:e8: fd:25:dd:d0:10:aa:f4:8a:bc:9c:40:cc:3c:3c:64: c7:79:41:e8:16:b4:a5:58:e6:2b:3d:ab:5f:bc:7f: 72:a6:2e:22:d9:4a:7d:9d:c6:a5:be:e7:14:7b:88: d5:eb:8c:d2:df:f6:62:ae:d3:c1:6f:83:84:d7:16: 22:77:0e:0a:d4:eb:a5:eb:83:7c:81:a0:67:9e:c8: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1D:10:5E:4B:B8:E9:58:48:18:9E:1E:6D:28:76:41:F0:18:93:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:30:d6:a2:4a:76:e3:c1:cc:f6:53:5d:5d:ef:5c:17:d7:d2: 5c:98:24:f5:df:53:41:cc:cf:67:6f:a5:5c:71:93:a2:e2:c2: d0:14:7d:fb:0c:23:10:3e:2e:b6:7c:a6:18:66:4a:29:55:bf: ec:9b:f6:89:0c:81:78:0b:11:bf:db:e8:2c:db:ca:d6:77:71: c9:cf:99:01:15:52:88:fc:d8:ba:06:07:94:90:9f:87:6b:84: 99:0c:29:2f:28:42:29:f7:67:c4:de:5d:33:de:0e:8a:12:aa: 39:4f:e1:40:e8:0a:4f:74:60:11:16:b1:58:63:71:61:b5:e5: 1f:9e:06:a8:e6:87:55:7b:7f:bc:b7:aa:16:64:1f:92:1f:34: b0:88:82:44:9f:6d:3a:85:a4:4c:eb:88:fb:ff:cb:21:f1:81: 96:b7:7f:2a:13:94:b6:67:c1:aa:8a:03:23:74:63:cc:66:99: f2:a6:09:85:61:bd:0a:35:04:15:6f:a6:99:3e:b5:e5:3f:c2: ad:8d:36:f5:6b:9b:20:c6:cb:54:50:8b:d2:6d:46:3b:d8:d7: c9:09:9d:0d:6d:94:aa:7b:64:0b:66:06:71:e8:74:6e:cc:f4: de:b8:1a:ec:ed:4b:71:3f:91:f5:7a:29:4e:2c:6f:c6:fc:7a: a6:ce:c0:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0Mq4TAwGRp1zb0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDgyMzE3MDAwM1oXDTI1MDgyNTE3MDAwMFowLzEtMCsGA1UEAxMk ZDJmZmIyYjAtYTgzYy00ZDc0LWIyMDEtODJmYjYxZDZlYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qSEit2a+WDzhO35OTz09O1PhWQIxJD0itFL hxEPJHZSDTs1A9EH6NpPeQzLatNzwwMEaLJUx9mmvRNWbq2oNd/bzwuNs8Izggzm gfprlnqaDN90MBG9DtrGP29HqKQxe1/tPguvcb+i8dUVfp+PdDqph3JXc1Lomu5g CvzQ7pFfk2xUROoAhL59VYOxtiZA05ZfGlD+d+We8u7sFzNW6fzoxVX2FbE8vJB6 CIWGBSensuj9Jd3QEKr0irycQMw8PGTHeUHoFrSlWOYrPatfvH9ypi4i2Up9ncal vucUe4jV64zS3/ZirtPBb4OE1xYidw4K1Oul64N8gaBnnsgm1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIgdEF5LuOlYSBieHm0odkHwGJMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvNWFiYTRiN2EtZGU3Yi00 ZTg0LWI5MTMtYTFiZWRiZTU4ZjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANMNaiSnbjwcz2U11d71wX 19JcmCT131NBzM9nb6VccZOi4sLQFH37DCMQPi62fKYYZkopVb/sm/aJDIF4CxG/ 2+gs28rWd3HJz5kBFVKI/Ni6BgeUkJ+Ha4SZDCkvKEIp92fE3l0z3g6KEqo5T+FA 6ApPdGARFrFYY3FhteUfngao5odVe3+8t6oWZB+SHzSwiIJEn206haRM64j7/8sh 8YGWt38qE5S2Z8GqigMjdGPMZpnypgmFYb0KNQQVb6aZPrXlP8KtjTb1a5sgxstU UIvSbUY72NfJCZ0NbZSqe2QLZgZx6HRuzPTeuBrs7UtxP5H1eilOLG/G/HqmzsC1 -----END CERTIFICATE-----Generated at Sat Aug 23 22:00:58 2025 by rpki-client