$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: CidMjlowOA21OtwXvFu15onpDGpYko8JRD8Mo6Cp2T0= Subject key identifier: 57:71:5D:A7:61:4A:A0:AF:12:96:38:ED:88:B7:08:2F:B4:8F:26:3D Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584AF414F003C10F385386AB2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A015DC Signing time: Sat 23 Aug 2025 16:00:08 +0000 Manifest this update: Sat 23 Aug 2025 16:00:08 +0000 Manifest next update: Mon 25 Aug 2025 16:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: KAboHbohE3zKmGK3g+W1CZcZk8OBPcd311Enn57Aq/Q=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: R9OytZBP6J+t42zrobxvsYGawtIxSjuLxCbkDCG6SLc=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: n2z+3A1twjjxZ0yrpq5cV2ahKgtJOVVL/i5yopt2Fns=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: f6YANkPrs87xICvxJzy6EyhrXCsNs9kfylGpsYgh1p0=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: JEENFa1c6U9p89a/H1aeuhUav9zagVhRcEmLftw074A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f4:14:f0:03:c1:0f:38:53:86:ab:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Aug 23 16:00:08 2025 GMT Not After : Aug 25 16:00:00 2025 GMT Subject: CN=a1b97a3a-63f8-493b-84dd-c569ad8970e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:e3:5b:81:e3:bd:c1:93:19:a5:cf:6e:68: ee:cd:57:1c:7c:6a:1b:32:34:9a:48:eb:69:96:75: 81:ce:ef:a3:64:05:60:95:f1:52:a5:58:e2:6e:f5: 2e:ac:dc:f1:6d:37:05:b7:07:c6:1c:c5:9c:f8:ca: 00:5f:7f:f4:70:2b:4a:a8:b0:6e:3b:0b:6d:e2:5f: 10:0a:ae:cc:29:19:d5:b3:4f:cf:be:67:f7:21:85: 71:93:ba:97:5e:fb:25:48:90:2f:69:8a:fa:51:e0: 01:b0:0d:66:4a:43:32:62:13:13:c5:0f:d1:af:c1: 76:c6:37:fe:d7:e0:38:d4:9d:0b:93:93:48:30:dc: 63:71:54:d6:ad:3f:f9:cc:91:31:89:fc:8e:cd:fc: f6:2b:ad:af:a5:bc:cf:b8:34:d3:69:2b:68:05:9e: 71:28:54:77:89:ec:4e:21:8a:48:40:bc:cf:b7:77: d0:19:32:00:74:b6:7c:5e:3a:54:09:71:47:6c:cf: 52:9b:3e:52:ee:2e:f6:3e:7a:19:29:a1:59:75:3f: dd:ee:7d:88:72:87:97:18:b6:eb:68:03:5c:d9:c0: 99:23:cf:49:d4:05:93:25:c9:72:29:27:12:9b:5a: 1c:9b:14:9f:30:00:9e:c6:e9:d0:62:ff:e3:78:b3: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:71:5D:A7:61:4A:A0:AF:12:96:38:ED:88:B7:08:2F:B4:8F:26:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:73:94:96:a0:e4:08:aa:f7:5f:ee:fc:3a:fa:c9:ea:4c:c8: 9d:b8:15:9b:4f:f2:16:d1:8b:49:a7:96:68:02:04:7f:38:36: b7:e1:66:2f:ce:08:eb:38:fc:23:05:2a:84:cc:bd:94:59:a1: 28:2f:bc:32:eb:ef:d7:f5:9f:38:f8:ae:de:fb:9b:17:ad:e0: e7:27:b6:a6:6b:ae:86:7a:b2:d5:be:7f:50:ec:45:b9:ff:10: 51:e7:cc:cc:e4:57:fb:c6:78:92:fa:02:63:c1:a8:fc:e5:a6: 0a:43:fd:a0:4c:7c:31:d7:10:22:a7:79:89:db:37:9b:22:3a: 0b:aa:cb:3d:c8:ad:51:13:22:d0:90:42:08:9a:4e:5e:5c:c1: f7:23:55:f7:4e:52:53:7d:84:eb:7a:a6:98:f0:44:00:3b:25: 6a:2f:0e:d8:9b:78:6d:15:0e:13:d9:a3:d1:78:3f:75:ed:35: 2e:24:5c:18:52:34:52:84:98:1f:dc:cd:39:25:3d:9b:b0:32: d8:98:e9:da:3b:eb:9e:3b:5e:37:fc:8d:9c:87:76:92:04:0b: f9:48:7c:56:dd:13:e1:e4:2e:4a:0e:81:4e:67:44:01:bb:03: d1:ca:05:a0:2b:81:ed:ed:3b:94:f3:73:5b:64:6b:f5:fd:63: ed:62:43:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEr0FPADwQ84U4arJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MDgyMzE2MDAwOFoXDTI1MDgyNTE2MDAwMFowLzEtMCsGA1UEAxMk YTFiOTdhM2EtNjNmOC00OTNiLTg0ZGQtYzU2OWFkODk3MGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lHjW4HjvcGTGaXPbmjuzVccfGobMjSaSOtp lnWBzu+jZAVglfFSpVjibvUurNzxbTcFtwfGHMWc+MoAX3/0cCtKqLBuOwtt4l8Q Cq7MKRnVs0/Pvmf3IYVxk7qXXvslSJAvaYr6UeABsA1mSkMyYhMTxQ/Rr8F2xjf+ 1+A41J0Lk5NIMNxjcVTWrT/5zJExifyOzfz2K62vpbzPuDTTaStoBZ5xKFR3iexO IYpIQLzPt3fQGTIAdLZ8XjpUCXFHbM9Smz5S7i72PnoZKaFZdT/d7n2IcoeXGLbr aANc2cCZI89J1AWTJclyKScSm1ocmxSfMACexunQYv/jeLPi1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFdxXadhSqCvEpY47Yi3CC+0jyY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXc5SWoOQIqvdf7vw6+snq TMiduBWbT/IW0YtJp5ZoAgR/ODa34WYvzgjrOPwjBSqEzL2UWaEoL7wy6+/X9Z84 +K7e+5sXreDnJ7ama66GerLVvn9Q7EW5/xBR58zM5Ff7xniS+gJjwaj85aYKQ/2g THwx1xAip3mJ2zebIjoLqss9yK1REyLQkEIImk5eXMH3I1X3TlJTfYTreqaY8EQA OyVqLw7Ym3htFQ4T2aPReD917TUuJFwYUjRShJgf3M05JT2bsDLYmOnaO+ueO143 /I2ch3aSBAv5SHxW3RPh5C5KDoFOZ0QBuwPRygWgK4Ht7TuU83NbZGv1/WPtYkOI -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:03 2025 by rpki-client