$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft File: 8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft (raw, json) Hash identifier: qTJl29wpE8T/fmGCzyklZ+5CGQaHSYKbGOQXvpgl+Zk= Subject key identifier: CB:F6:E9:B6:13:85:21:E3:11:BD:24:84:7D:52:15:0B:4B:CF:5A:50 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584AF2EB285FFDC12A4F1E719D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft Manifest number: 010D0C9F432858473DCA7184D71EC5D06F5C5866 Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Tue 26 Aug 2025 06:00:00 +0000 Files and hashes: 1: 0156459b-1048-3ac6-b762-361ee7d49132.roa (hash: Ha5Xn2X2mr8vWkLfT6QFaFgj2NlU8UipcQMble+587w=) 2: 1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa (hash: MWEvxpOoKXdgW/8EBIUwSnN/AXBA6fFZv0D+4lBG/c8=) 3: 74643a59-339d-31eb-989b-007a513d5754.roa (hash: g/6G8KnjltsCn3zvczv2520Km+yCyj9SpFVYqAtnTUM=) 4: 79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa (hash: u1VDzm1R2vOEP2O7o5/Ca1LeLPJvUjR+M+HTSVUJJec=) 5: 8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl (hash: RGKuIg4/w4nueji/8eEhTjue77c4cSkrdFWkOy9CkJQ=) 6: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (hash: rOqeugRS0hVNUsurkROVXPH1hSOXfVWC3ejUMap1y/s=) 7: ebd76a09-c746-3e90-b835-0218552a1e60.roa (hash: iMMyG5dSJoNReO16s0jZCTDMK7t/uMIxd7oRELJF2dg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:28:5f:fd:c1:2a:4f:1e:71:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 26 06:00:00 2025 GMT Subject: CN=d92ec976-bdbe-499d-b4f8-4f224597bb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:29:75:bd:ae:39:67:d8:db:24:1a:7a:c0: 8b:08:c8:a9:87:42:9c:38:b0:5b:2c:6e:f1:d4:5a: c2:2e:60:e6:cb:d0:14:b2:73:dd:58:20:ce:91:e5: 49:78:52:6b:f4:7a:98:14:db:05:fd:cd:f5:10:04: ee:81:d9:d9:77:6a:43:76:55:3e:bc:0e:bb:b2:e9: e2:6e:cc:99:e0:e1:c4:ee:86:32:3d:e3:e3:4a:24: ec:a9:3c:24:6d:b7:b4:e7:be:56:a0:8a:95:c2:6f: 6f:6d:f4:65:b8:12:f6:01:e8:a5:4f:80:f7:1a:45: e5:7c:eb:63:c4:f2:ed:ce:38:01:3a:4e:3d:b1:15: 5b:b3:03:bd:db:0c:65:1e:cd:3c:54:43:17:c1:8f: ce:51:97:5f:b6:5d:43:72:15:80:03:d8:ac:7e:cc: de:13:db:f1:40:e8:56:ba:d4:77:8b:4d:bc:e1:a3: 52:2f:02:ed:92:ae:bb:20:a2:91:56:30:29:a7:d9: 64:bd:f8:b9:a8:85:49:20:fe:34:49:3b:5a:be:85: 16:53:7b:dd:9c:9b:98:54:8a:55:5e:a2:0d:ac:5f: 2c:8b:0c:a1:d2:b7:11:41:a4:69:91:b2:b0:50:7e: e3:fc:80:26:1c:22:a3:9b:d9:ce:9f:1f:05:ec:60: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:E9:B6:13:85:21:E3:11:BD:24:84:7D:52:15:0B:4B:CF:5A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:38:ad:2b:70:d1:fa:05:84:1a:ba:ba:66:a4:81:7d:27:61: 73:14:d6:ad:4c:38:4a:5e:5a:05:bd:ab:43:5d:26:ac:e0:3b: 15:ec:be:f6:1f:8f:cb:6d:f7:7c:52:6f:c3:06:34:33:f2:4f: 90:c9:cc:6e:27:a9:39:8a:4d:ff:e9:d0:ee:c0:91:11:d8:d0: 82:fb:aa:21:e1:be:69:7a:54:99:a0:b2:41:c1:65:10:b5:2a: bf:2e:5f:e8:b3:2a:79:88:47:cc:5f:00:42:dd:d3:34:d2:da: 37:0b:60:40:13:49:79:ee:9a:4a:8c:f3:a7:c8:d1:75:37:23: 3c:b4:15:69:c2:35:80:71:ed:f7:4b:43:d6:d6:da:8d:df:b7: d0:c5:71:5a:6f:a3:8e:fc:fd:1d:59:4d:ec:92:7a:96:ec:1a: 2b:b9:97:dd:2a:3f:d7:ca:ce:75:2c:a0:ee:a6:84:bd:31:40: 6c:cc:e8:ed:52:a4:6e:88:1e:ee:81:d4:43:f3:c0:e0:3f:12: 25:a0:82:35:0a:0f:95:2e:c8:01:da:7c:98:07:12:80:59:d8: 25:ea:38:a9:4f:1f:56:26:1e:d1:c2:c3:53:b2:48:be:96:d5: 45:59:6b:c4:87:5b:78:ab:f7:d0:12:a6:36:87:bf:ad:fe:dc: a8:66:01:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yhf/cEqTx5xnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNjA2MDAwMFowLzEtMCsGA1UEAxMk ZDkyZWM5NzYtYmRiZS00OTlkLWI0ZjgtNGYyMjQ1OTdiYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqYpdb2uOWfY2yQaesCLCMiph0KcOLBbLG7x 1FrCLmDmy9AUsnPdWCDOkeVJeFJr9HqYFNsF/c31EATugdnZd2pDdlU+vA67suni bsyZ4OHE7oYyPePjSiTsqTwkbbe0575WoIqVwm9vbfRluBL2AeilT4D3GkXlfOtj xPLtzjgBOk49sRVbswO92wxlHs08VEMXwY/OUZdftl1DchWAA9isfszeE9vxQOhW utR3i0284aNSLwLtkq67IKKRVjApp9lkvfi5qIVJIP40STtavoUWU3vdnJuYVIpV XqINrF8siwyh0rcRQaRpkbKwUH7j/IAmHCKjm9nOnx8F7GAz8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMv26bYThSHjEb0khH1SFQtLz1pQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvOGYxNGY4ZDctNTQwYi00 YTRhLWI1YWUtMGFmMTQ3ZjdjMWU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkOK0rcNH6BYQaurpmpIF9 J2FzFNatTDhKXloFvatDXSas4DsV7L72H4/Lbfd8Um/DBjQz8k+QycxuJ6k5ik3/ 6dDuwJER2NCC+6oh4b5pelSZoLJBwWUQtSq/Ll/osyp5iEfMXwBC3dM00to3C2BA E0l57ppKjPOnyNF1NyM8tBVpwjWAce33S0PW1tqN37fQxXFab6OO/P0dWU3sknqW 7BoruZfdKj/Xys51LKDupoS9MUBszOjtUqRuiB7ugdRD88DgPxIloII1Cg+VLsgB 2nyYBxKAWdgl6jipTx9WJh7RwsNTski+ltVFWWvEh1t4q/fQEqY2h7+t/tyoZgFA -----END CERTIFICATE-----Generated at Sat Aug 23 09:40:18 2025 by rpki-client