$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft File: d455139a-f627-4743-8284-7fbd2f76dd8b.mft (raw, json) Hash identifier: zwYKm9BkA4/Z2oAcCRkLhfMcy0VP2b5ubw6HhnwEl3g= Subject key identifier: 95:05:7B:72:95:3A:CD:57:21:E8:6C:D4:A1:8C:2E:13:65:63:EE:31 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584AF291D06B2401003977B60600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft Manifest number: 010D0C9F4328584073A83A583C0DF001CA2A843A Signing time: Sat 23 Aug 2025 03:00:08 +0000 Manifest this update: Sat 23 Aug 2025 03:00:08 +0000 Manifest next update: Tue 26 Aug 2025 03:00:00 +0000 Files and hashes: 1: 58c14212-20fe-398a-92cb-4c98613dce46.roa (hash: ve/xG+1IRbDCSLHmmPkPFTkJCQjJs+1zpR5STgr0uz0=) 2: 6c142cb8-b620-3745-8e33-abb1772dfd03.roa (hash: +aam0R/r+NMV7GJ2AnY5MlPOSVcI1dFOyiFScw7MElw=) 3: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (hash: ZlrzMOqE8Q7rQ5wQXISrOcZnltvLQNeoJkmBQXTQC+c=) 4: a474ef21-5145-3424-b8cb-6fe09836be86.roa (hash: RwQLnDhWJg2Yxw1AQYysWlQ1nSosLhn9YeQuSw9+E/k=) 5: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (hash: lApao/w2w9BEu9Fm1/UkDPdofDuy7ZhqHvKomas/mHk=) 6: d455139a-f627-4743-8284-7fbd2f76dd8b.crl (hash: EeQtT/a/kRgiryJQuz2Xxko0GByIJscxSxXqBtvHPkE=) 7: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (hash: pusPmFVRFv7mRBCdrnrIoX2cLo+6OfiqkhFEffszf0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:91:d0:6b:24:01:00:39:77:b6:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Aug 23 03:00:08 2025 GMT Not After : Aug 26 03:00:00 2025 GMT Subject: CN=ae34b9d9-8fdd-4ae2-ab87-4c8fee2338c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:73:82:ae:04:08:6a:96:89:3f:d4:ac:b7: 37:0e:97:77:88:2b:a6:8c:5a:95:5b:b3:22:3c:fc: a1:e6:56:ba:48:19:2e:28:34:38:6b:22:35:c1:20: 82:e3:d8:e8:48:6f:13:e2:53:9f:76:9c:d8:ef:ce: 7e:03:f2:d7:8c:fc:b6:29:d8:ec:e1:fe:87:7e:ae: 1e:fc:ce:10:1e:7b:fa:fe:76:8f:2f:b6:2c:0c:3e: 43:42:ac:01:ac:cc:d0:de:dd:9f:b5:e9:b3:09:c1: 01:44:c4:c8:9c:a3:b5:61:19:d8:fb:9a:67:26:47: f7:1d:04:7f:79:d7:a7:6f:d2:55:b8:da:fc:e5:e9: 2d:71:61:f1:57:23:8d:f5:00:9c:8f:89:30:bc:5a: 8a:ad:1e:44:5c:a2:36:ca:ac:86:f3:17:26:2c:18: 48:8c:57:8f:84:69:1d:c1:d3:0b:a2:61:00:3d:1a: cb:d8:e5:96:b6:9c:29:0d:df:9e:d5:02:76:c6:18: 91:80:19:10:35:11:29:37:56:1f:da:a5:d2:9a:b1: 70:93:ac:aa:96:eb:47:6d:2c:e1:3b:87:54:8a:c4: 52:f9:46:cc:25:93:fb:54:cb:9f:12:c0:63:4f:46: 3d:b8:c0:4e:5b:82:b5:2c:2e:ad:35:ce:8d:a4:95: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:05:7B:72:95:3A:CD:57:21:E8:6C:D4:A1:8C:2E:13:65:63:EE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a9:f1:37:5a:3f:be:e3:49:26:b1:5d:a7:c8:aa:8d:e2:d7: e9:08:43:95:8e:b6:03:b1:6c:85:ee:c7:52:c2:90:a2:40:e2: 65:c0:bb:92:28:84:b2:f1:b0:ab:90:86:42:e7:20:57:78:ed: 90:8e:a1:94:81:08:df:76:df:16:d6:88:bc:29:47:f4:46:e3: ae:5f:58:11:a4:c1:f3:2a:2b:c8:b1:4d:8a:8a:fc:95:74:b6: ac:b4:be:25:bf:e4:dd:c8:87:27:56:06:aa:f9:4a:0b:c6:85: d2:dd:5c:19:1e:4f:37:61:78:4a:a6:47:6b:4e:5a:5d:5c:07: 2c:55:9e:31:ae:d4:31:e3:26:0c:8b:d2:dd:35:3e:ad:72:fb: 49:7f:1e:52:a3:38:36:57:5f:ad:12:17:ed:44:b3:4e:3f:05: a9:3c:81:08:d4:0f:6a:25:3a:d6:f0:b9:0d:18:58:27:12:a4: b5:83:3e:0d:f1:bc:5f:5f:ef:fa:bc:d7:21:09:fb:a5:f1:a6: 6c:d6:1c:48:ea:6a:71:cf:ca:a2:c9:aa:89:30:82:a0:7c:40: 68:c2:ec:dc:9c:e4:6c:ff:87:b9:33:05:59:10:2a:f7:75:65: 2a:fd:2b:0b:03:5c:82:2a:f3:b4:6d:5a:96:1b:59:59:83:0f: c7:cf:f9:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErykdBrJAEAOXe2BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDgyMzAzMDAwOFoXDTI1MDgyNjAzMDAwMFowLzEtMCsGA1UEAxMk YWUzNGI5ZDktOGZkZC00YWUyLWFiODctNGM4ZmVlMjMzOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj1zgq4ECGqWiT/UrLc3Dpd3iCumjFqVW7Mi PPyh5la6SBkuKDQ4ayI1wSCC49joSG8T4lOfdpzY785+A/LXjPy2Kdjs4f6Hfq4e /M4QHnv6/naPL7YsDD5DQqwBrMzQ3t2ftemzCcEBRMTInKO1YRnY+5pnJkf3HQR/ edenb9JVuNr85ektcWHxVyON9QCcj4kwvFqKrR5EXKI2yqyG8xcmLBhIjFePhGkd wdMLomEAPRrL2OWWtpwpDd+e1QJ2xhiRgBkQNREpN1Yf2qXSmrFwk6yqlutHbSzh O4dUisRS+UbMJZP7VMufEsBjT0Y9uMBOW4K1LC6tNc6NpJXpmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJUFe3KVOs1XIehs1KGMLhNlY+4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDQ1NTEzOWEtZjYyNy00 NzQzLTgyODQtN2ZiZDJmNzZkZDhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0qfE3Wj++40kmsV2nyKqN 4tfpCEOVjrYDsWyF7sdSwpCiQOJlwLuSKISy8bCrkIZC5yBXeO2QjqGUgQjfdt8W 1oi8KUf0RuOuX1gRpMHzKivIsU2KivyVdLastL4lv+TdyIcnVgaq+UoLxoXS3VwZ Hk83YXhKpkdrTlpdXAcsVZ4xrtQx4yYMi9LdNT6tcvtJfx5Sozg2V1+tEhftRLNO PwWpPIEI1A9qJTrW8LkNGFgnEqS1gz4N8bxfX+/6vNchCful8aZs1hxI6mpxz8qi yaqJMIKgfEBowuzcnORs/4e5MwVZECr3dWUq/SsLA1yCKvO0bVqWG1lZgw/Hz/kr -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:56 2025 by rpki-client