$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: qPNCePnIE9rcuIwKdT6aeserGBKq163z5YybEWajZJc= Subject key identifier: 27:17:5A:0D:AF:FF:39:37:E5:B4:C2:FC:0A:E8:8E:45:6A:EB:5C:FD Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584AF34473CCA918686ACEEC8800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B22 Signing time: Sat 23 Aug 2025 09:00:03 +0000 Manifest this update: Sat 23 Aug 2025 09:00:03 +0000 Manifest next update: Tue 26 Aug 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: DNxgqSiCn9qAfH8sBiFATlvzCTPKXEnGqjWHD1SR0Jc=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: umCrpaPooP2I8OnVYCI9fF1E7yoRbRDtLKIDMameL14=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: 7pFAb7Rgz2EPy2A6y0bci4TfTl3wFcAuIZV6sVou32o=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: FWCGEy1T99zFhWA/YrJOxxXcRefLvIRG6Bm3PxuvbMw=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: AD/o2YykghE/u9uFH7opd2V/rUpjZ1q70in9euV8ze4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:44:73:cc:a9:18:68:6a:ce:ec:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Aug 23 09:00:03 2025 GMT Not After : Aug 26 09:00:00 2025 GMT Subject: CN=b96a5c89-40f3-4a5a-8961-16f357dbf348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:be:2e:0f:32:5f:d3:db:6a:91:c6:eb:db: 00:3d:40:68:d5:cf:fd:ff:2c:10:58:ef:0e:ed:42: 5f:16:27:ca:22:f8:cf:78:bc:03:d6:24:51:bc:e0: 3d:b3:61:1d:fb:d7:ed:a0:f8:a3:fd:52:8e:3b:e5: e9:af:ba:c2:de:e1:ec:46:33:bb:d9:09:e2:29:28: ba:6d:2c:1a:b6:b2:5e:66:ef:19:d1:9f:2f:aa:67: 97:06:64:bd:81:be:c5:03:c7:27:c0:5d:2f:b3:d1: f8:70:cd:15:3a:3f:b6:f4:6b:f0:b1:c1:56:1f:28: ee:b4:cf:8f:da:d5:ec:e3:61:74:04:c2:d4:cc:91: 68:f5:93:6d:a4:de:a4:19:83:aa:26:03:9a:04:8d: ff:c2:7f:83:02:de:74:89:a5:d3:c3:63:e3:62:83: e1:10:58:40:a7:37:07:c8:54:f6:d2:c6:b9:94:d1: 7f:e0:33:0e:5f:f8:bd:ef:4e:c3:85:e4:9f:42:3c: bc:f1:52:95:a5:63:3e:71:50:48:31:ac:9e:78:d8: 1d:a3:7c:c2:6f:0b:eb:b7:60:c6:76:20:4b:df:6b: a5:90:33:a1:25:15:45:8f:7a:6a:40:e4:c0:42:64: ae:87:1c:91:89:dd:c0:9c:7a:55:f9:e0:5a:97:95: 8f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:17:5A:0D:AF:FF:39:37:E5:B4:C2:FC:0A:E8:8E:45:6A:EB:5C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:72:84:7c:2b:46:b1:da:f8:a6:88:53:74:5a:72:35:fc:4d: 6e:db:42:74:74:95:eb:47:8f:68:a5:ac:0f:52:cb:e3:86:0d: 6b:03:b9:22:89:52:f6:72:b8:7b:5a:5d:2c:f1:25:26:64:7c: bf:8d:ad:24:7c:c4:c8:98:cc:41:0e:00:4b:b5:bb:e4:fe:1a: a7:e8:ac:de:60:74:4d:10:a5:19:5b:a1:76:02:91:f8:fc:ae: ee:f8:e2:d4:fe:27:4d:12:fa:8e:b1:57:02:0f:f4:82:04:a8: cf:ba:68:e4:02:33:90:e3:39:ef:92:c5:57:33:46:d2:13:f0: 31:73:2d:da:c9:85:6f:13:cd:0e:c9:2f:16:87:e7:cb:e0:52: 93:39:62:34:3e:53:4e:a4:93:9f:89:45:d3:f1:20:53:b9:e8: 21:ec:d8:64:be:97:e7:26:81:fc:21:e6:37:38:27:02:35:ce: ed:59:44:07:87:6d:d3:c9:53:7d:a2:dd:ca:7d:f8:8d:15:60: 85:1d:f9:3d:03:80:11:95:30:14:9e:56:e6:ee:34:bc:5c:c2: ff:50:09:cd:d3:cf:35:54:07:5a:2f:75:d7:1e:ec:87:a2:d4: ef:b5:6f:3d:52:e7:db:1a:1b:cc:d1:c3:07:2f:17:dc:da:e9: e1:00:86:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErzRHPMqRhoas7siAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDgyMzA5MDAwM1oXDTI1MDgyNjA5MDAwMFowLzEtMCsGA1UEAxMk Yjk2YTVjODktNDBmMy00YTVhLTg5NjEtMTZmMzU3ZGJmMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvC+Lg8yX9PbapHG69sAPUBo1c/9/ywQWO8O 7UJfFifKIvjPeLwD1iRRvOA9s2Ed+9ftoPij/VKOO+Xpr7rC3uHsRjO72QniKSi6 bSwatrJeZu8Z0Z8vqmeXBmS9gb7FA8cnwF0vs9H4cM0VOj+29GvwscFWHyjutM+P 2tXs42F0BMLUzJFo9ZNtpN6kGYOqJgOaBI3/wn+DAt50iaXTw2PjYoPhEFhApzcH yFT20sa5lNF/4DMOX/i9707DheSfQjy88VKVpWM+cVBIMayeeNgdo3zCbwvrt2DG diBL32ulkDOhJRVFj3pqQOTAQmSuhxyRid3AnHpV+eBal5WPeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCcXWg2v/zk35bTC/ArojkVq61z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLcoR8K0ax2vimiFN0WnI1 /E1u20J0dJXrR49opawPUsvjhg1rA7kiiVL2crh7Wl0s8SUmZHy/ja0kfMTImMxB DgBLtbvk/hqn6KzeYHRNEKUZW6F2ApH4/K7u+OLU/idNEvqOsVcCD/SCBKjPumjk AjOQ4znvksVXM0bSE/Axcy3ayYVvE80OyS8Wh+fL4FKTOWI0PlNOpJOfiUXT8SBT uegh7NhkvpfnJoH8IeY3OCcCNc7tWUQHh23TyVN9ot3KffiNFWCFHfk9A4ARlTAU nlbm7jS8XML/UAnN0881VAdaL3XXHuyHotTvtW89UufbGhvM0cMHLxfc2unhAIZ6 -----END CERTIFICATE-----Generated at Sat Aug 23 10:52:54 2025 by rpki-client