$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft File: 5dcf6139-5993-4941-a803-3ff450a6149e.mft (raw, json) Hash identifier: R+BdBid/C4hHB9c/ot46tuzGEKKy2o0wbWRs8kg/8q8= Subject key identifier: 58:03:5F:A6:FF:56:DE:01:60:ED:3D:A4:61:2C:F5:5D:29:50:22:4C Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584AF257387ABECCD995495F7D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft Manifest number: 010D0C9F4328584073A830A825B3CDF9AFA7A532 Signing time: Sat 23 Aug 2025 01:02:03 +0000 Manifest this update: Sat 23 Aug 2025 01:02:03 +0000 Manifest next update: Tue 26 Aug 2025 00:00:00 +0000 Files and hashes: 1: 071de24f-a2ff-3b62-b6b0-574b57f26f78.roa (hash: eYhik1UjAmjF19hGxkIfx/4KVnOhTm7/Q3EzNol7ydg=) 2: 0f94adce-ee08-3d1f-952e-320e490ab5fe.roa (hash: 3T3kox5bwQ1FpYsuu5YR56dplpe596kfd1D63zxHW44=) 3: 1787c673-003d-3a23-b4b6-9acd9e9f16e4.roa (hash: fDGlkqkl0kwgi5VxoCosbfi0eMoydRHEzSD4ncZdgOw=) 4: 27839327-5c43-327a-b663-abb463ad9aae.roa (hash: RBoxJL+zCgol0VK5jgUXOx9tE1BoPCq5vWBkhKjPoKA=) 5: 2a16a396-2c27-3987-8c67-8adede3e55eb.roa (hash: TNcwv6l8gZk2BqAkU5hdWdt70Jj09opNM5wJxJdGdN4=) 6: 44643b53-3226-3f4b-bd05-b1740f15322c.roa (hash: HlNzgn6GnY67D/3cXvHDUMYMb5AaSYgOiJhnmAwiy/8=) 7: 4b9b1710-12bf-3899-8a1f-3116005d14f1.roa (hash: LhHHoFRmzpySQB43bdeb14HykQjqBWstUbtIgStIXx0=) 8: 512c61ca-308f-3648-8d94-4e9b144897e9.roa (hash: FveQxIPe0kzgQbQHoFI4bZUdRPZAgwjAL6zRn3vqNIY=) 9: 5dcf6139-5993-4941-a803-3ff450a6149e.crl (hash: xfFZnabGA7H8CHWkV+H6ulGhHDXhjXn0LSqZBWhLT3I=) 10: 6b11d489-fe5c-3318-8635-526482027dc2.roa (hash: DEesC05u7tVMrAZTZ6LSfYfnNjsoaX0FAHR7+PAxwQ4=) 11: 6bed32ee-2a45-3971-ae3b-818809e849f8.roa (hash: 14JGAauE+DpMc5l0uWqquUSpho0QHbZcxEYc3oWtsOU=) 12: 781a3928-c29f-38d2-ab28-4612346cae08.roa (hash: X3tdZK4X94BODmxfUfpaWS61XdnxsDbMgsZtOaE2Xdo=) 13: 7e421b60-b473-3684-baab-6577d1f6c5e5.roa (hash: bIlvsk/3X1XoG+fgIn5FQANvVsGqNQ99kvDAELcnfcQ=) 14: 88b48ebc-8d78-33c3-8999-36f6c19edbf6.roa (hash: 820BSilTgFS7iNUO5cgk7Oq7Fxbaru0VK5p6qD3yD6I=) 15: 928eba54-21a5-3c85-bd21-cdfbc3e482e7.roa (hash: 4MWQqqTypK6P4jVvVyaICKqECxhpvMyaebVqYGAXne8=) 16: c94833e2-0b44-31e2-8156-8ab40893b376.roa (hash: XBofa8CwG09Pr9dFeiAgpVc0CAc8bD50QN6DCmidMUo=) 17: cc6d68b2-9054-3c05-8ca6-63d33f2e6221.roa (hash: rULEuIR2CP/dC6Yef816f6alovxVb/LnAt/u0HN+r8Q=) 18: e7442001-9f69-3151-ae0d-f8559c2eb0de.roa (hash: RWibDCMZHICU8y9jj47qTSqh7mk2aESCeneWEufr0IY=) 19: f4f11ccc-96e3-3cf2-b098-334fb96b9cb7.roa (hash: G1eAu6F0O9FzzyqtD9jG7aqkqKsjLD3XLjatcVrH+oU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:57:38:7a:be:cc:d9:95:49:5f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Aug 23 01:02:03 2025 GMT Not After : Aug 26 00:00:00 2025 GMT Subject: CN=b8c64911-1203-4b56-9eea-f42bd6bde24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:6f:95:c0:76:d7:26:82:f2:e0:59:e4:84: 0f:8c:ff:c8:f2:84:5a:d4:82:41:6f:40:6b:07:58: f2:dc:4b:a1:c2:40:1f:d9:0a:e6:bd:c6:d4:fd:1c: 31:90:21:e1:cb:2b:83:c7:55:7b:a6:34:7d:e5:e3: a2:ac:25:20:ac:68:e7:e2:1c:b6:0c:53:ce:72:2b: f9:a6:76:c0:19:c9:53:87:76:89:a7:54:88:17:ab: 98:4a:ac:4d:ca:28:13:a9:c8:86:c5:13:d6:be:61: 79:c6:a6:43:02:79:52:06:50:df:db:e8:ac:5c:97: 24:7c:a5:03:9f:95:82:d0:8f:11:e2:d6:57:12:b7: fa:fc:26:84:48:ef:e4:73:24:09:b2:04:45:76:31: ae:71:fb:9c:81:0e:1c:d8:89:72:85:ef:a6:f8:ce: 68:9d:0c:5a:0a:74:1e:c2:fd:f5:91:b7:60:fb:88: 7f:a4:51:b2:24:a0:07:d6:b2:bc:4d:f1:d6:98:ec: bf:a5:28:fb:03:00:2d:34:85:0b:de:ad:e5:a1:d1: 05:68:6c:fb:56:de:30:a4:7d:33:69:aa:e2:5f:55: a3:52:dc:56:02:a6:16:f6:3a:56:4e:80:42:ab:04: a6:6f:a6:45:8e:85:d5:b5:99:20:c6:74:eb:52:d8: 63:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:03:5F:A6:FF:56:DE:01:60:ED:3D:A4:61:2C:F5:5D:29:50:22:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2d:69:71:fc:b9:da:8b:ca:20:a9:e5:5d:91:31:e1:d7:64: 4f:97:8f:93:f2:cc:ba:ae:b6:ea:50:a9:35:d6:89:39:ca:a3: b3:0a:33:23:c6:d8:ed:36:52:ac:86:ce:dd:cf:1e:8a:16:2e: 9a:3f:51:14:a2:26:ec:ff:b2:be:68:1f:38:2c:1f:53:aa:61: 81:e7:c6:94:05:cb:72:95:2c:aa:21:a5:b8:73:e0:6e:b5:dd: 1f:99:ca:2b:e6:9c:fc:57:60:ed:bf:58:64:e4:43:de:4a:36: f7:98:fc:2a:01:3a:1b:e5:07:9d:63:f9:09:1c:e0:a3:52:dd: 58:81:99:93:33:41:63:d0:ed:0e:19:f6:ba:aa:68:db:bc:c3: 03:59:db:b6:65:c6:34:bd:01:1a:8e:4f:8d:85:11:cd:9a:54: 31:4f:92:de:4e:92:52:82:a0:6c:27:36:00:68:51:cb:84:13: 76:71:2a:a1:39:b1:ba:ef:6e:99:f2:41:93:8e:87:23:d2:b7: 3d:e4:f9:8a:3c:5e:5e:07:72:b6:6f:48:ab:41:e2:fc:d6:3c: 16:4f:68:fb:a4:fa:24:57:41:42:54:dd:90:1b:de:e6:1c:39: 6b:db:0b:ed:12:fa:ba:28:5b:c3:e0:5f:62:41:a7:56:5e:d1: bd:e3:cb:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryVzh6vszZlUlffYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI1MDgyMzAxMDIwM1oXDTI1MDgyNjAwMDAwMFowLzEtMCsGA1UEAxMk YjhjNjQ5MTEtMTIwMy00YjU2LTllZWEtZjQyYmQ2YmRlMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SBvlcB21yaC8uBZ5IQPjP/I8oRa1IJBb0Br B1jy3EuhwkAf2QrmvcbU/RwxkCHhyyuDx1V7pjR95eOirCUgrGjn4hy2DFPOciv5 pnbAGclTh3aJp1SIF6uYSqxNyigTqciGxRPWvmF5xqZDAnlSBlDf2+isXJckfKUD n5WC0I8R4tZXErf6/CaESO/kcyQJsgRFdjGucfucgQ4c2Ilyhe+m+M5onQxaCnQe wv31kbdg+4h/pFGyJKAH1rK8TfHWmOy/pSj7AwAtNIUL3q3lodEFaGz7Vt4wpH0z aariX1WjUtxWAqYW9jpWToBCqwSmb6ZFjoXVtZkgxnTrUthj2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFgDX6b/Vt4BYO09pGEs9V0pUCJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvNWRjZjYxMzktNTk5My00 OTQxLWE4MDMtM2ZmNDUwYTYxNDllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgLWlx/Lnai8ogqeVdkTHh 12RPl4+T8sy6rrbqUKk11ok5yqOzCjMjxtjtNlKshs7dzx6KFi6aP1EUoibs/7K+ aB84LB9TqmGB58aUBctylSyqIaW4c+Butd0fmcor5pz8V2Dtv1hk5EPeSjb3mPwq ATob5QedY/kJHOCjUt1YgZmTM0Fj0O0OGfa6qmjbvMMDWdu2ZcY0vQEajk+NhRHN mlQxT5LeTpJSgqBsJzYAaFHLhBN2cSqhObG6726Z8kGTjocj0rc95PmKPF5eB3K2 b0irQeL81jwWT2j7pPokV0FCVN2QG97mHDlr2wvtEvq6KFvD4F9iQadWXtG948s9 -----END CERTIFICATE-----Generated at Sat Aug 23 19:07:40 2025 by rpki-client