$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft File: 302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft (raw, json) Hash identifier: /roW9LmHhiGPEq4RUyxCNFsh3JAZxnuVfENOmdX3hfc= Subject key identifier: E4:08:A7:BC:1C:52:3D:C1:34:07:AE:DB:F0:90:D7:DE:CE:D2:EA:29 Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC Certificate issuer: /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2 Certificate serial: 010D0C9F4328584AF2EB25C53232214BF2D4E500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft Manifest number: 010D0C9F4328584073A841D5A6149577F77459E9 Signing time: Sat 23 Aug 2025 06:00:08 +0000 Manifest this update: Sat 23 Aug 2025 06:00:08 +0000 Manifest next update: Tue 26 Aug 2025 06:00:00 +0000 Files and hashes: 1: 302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl (hash: Mb12a8mioGOXqA3d9fjlR/9EPKdkUbDgBGsmu08qXno=) 2: c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa (hash: 5GQ7RJ7mYZsGxIJ5FHwfiKyDjVxOhlWuGoiBn6Bf/Cc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:eb:25:c5:32:32:21:4b:f2:d4:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2 Validity Not Before: Aug 23 06:00:08 2025 GMT Not After : Aug 26 06:00:00 2025 GMT Subject: CN=a8d7be2e-903c-4c2c-876a-3c4e529afc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:47:08:0e:29:c8:83:83:0a:14:98:77:d9: 18:32:e2:29:19:a1:6c:84:74:63:02:9c:a9:7d:43: c6:28:62:cd:1f:1e:3b:e2:41:49:a1:3f:81:2d:ef: 3f:92:b6:95:a0:54:e2:b0:48:ae:7d:1a:62:df:f8: 39:2a:dd:e7:63:25:f1:8e:b9:e7:60:77:6b:49:c1: ab:b0:76:a4:ff:96:dc:1e:87:b8:22:a0:3d:67:bf: 38:45:a1:d9:18:d8:27:3e:1a:ac:16:29:d5:64:79: 5b:65:31:c0:eb:aa:7f:16:59:80:5f:c4:01:c3:25: 77:43:f2:55:6b:70:09:ce:64:cd:84:4f:44:c6:e0: 5a:70:db:dc:4b:70:0a:3e:7c:bd:39:0c:44:ca:4d: 82:7d:69:05:cd:ee:6c:76:1d:66:16:67:e0:28:45: 60:1a:d6:29:ca:67:73:c4:76:04:e5:89:b6:66:6f: ec:af:99:60:03:c3:74:be:3c:5a:93:a4:e8:37:5b: 9e:44:02:e8:0b:9b:d0:85:c6:18:c1:e8:bd:b2:cc: 5e:5d:94:ac:45:05:63:13:98:37:99:a1:9a:56:3e: 3c:4b:16:fa:4a:83:38:f1:10:c5:70:44:74:4b:b0: 61:f1:3b:32:21:35:ae:06:20:5b:4b:2f:43:42:d2: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:08:A7:BC:1C:52:3D:C1:34:07:AE:DB:F0:90:D7:DE:CE:D2:EA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl X509v3 Authority Key Identifier: keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:36:28:f5:af:42:b7:e9:ad:31:08:0b:b4:21:a3:9a:da:ef: 6d:2c:f4:f1:a3:8d:38:e8:ef:33:34:ad:f0:69:36:40:d0:84: 92:b6:49:75:1a:85:b5:42:d4:3d:23:f1:e4:6f:c5:53:f1:7e: 4c:b8:ae:7a:e1:ce:91:4e:2b:c8:da:2e:43:25:59:5d:c3:16: 84:e6:cc:b7:3a:10:aa:b0:cc:95:5f:59:d5:1a:8c:af:2e:71: 1c:31:6c:e7:b8:5b:21:a6:72:ab:20:b7:00:09:ed:dc:19:43: 76:80:8e:db:b8:e7:96:68:af:b9:e1:ba:46:ee:86:41:0a:82: fd:d6:9b:2e:4a:c7:0a:56:85:cd:b4:07:7e:11:d8:e7:0c:47: b2:03:56:9d:45:1a:16:5f:02:e4:5f:29:c8:19:1e:9e:e3:6a: fa:8a:e5:8b:ad:a6:2f:15:18:e9:25:5d:ce:47:57:49:4e:62: a4:42:ca:23:66:ae:1b:7a:0b:2f:97:f4:7c:c5:d9:ab:a2:02: 76:a9:13:98:48:5d:61:51:22:b2:04:7f:68:67:2e:d4:64:c7: c1:0b:fe:1b:59:ed:6a:59:9b:ca:36:38:f4:40:82:36:28:84: 6a:6e:cf:57:9a:4f:6f:c4:de:dd:27:fe:b5:07:cd:d7:90:4d: 81:d2:50:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEry6yXFMjIhS/LU5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAyMTExYmUtYjk1NC00YzVlLWFjOWItNGY4NWMzYzEx ZmUyMB4XDTI1MDgyMzA2MDAwOFoXDTI1MDgyNjA2MDAwMFowLzEtMCsGA1UEAxMk YThkN2JlMmUtOTAzYy00YzJjLTg3NmEtM2M0ZTUyOWFmYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1pHCA4pyIODChSYd9kYMuIpGaFshHRjApyp fUPGKGLNHx474kFJoT+BLe8/kraVoFTisEiufRpi3/g5Kt3nYyXxjrnnYHdrScGr sHak/5bcHoe4IqA9Z784RaHZGNgnPhqsFinVZHlbZTHA66p/FlmAX8QBwyV3Q/JV a3AJzmTNhE9ExuBacNvcS3AKPny9OQxEyk2CfWkFze5sdh1mFmfgKEVgGtYpymdz xHYE5Ym2Zm/sr5lgA8N0vjxak6ToN1ueRALoC5vQhcYYwei9ssxeXZSsRQVjE5g3 maGaVj48Sxb6SoM48RDFcER0S7Bh8TsyITWuBiBbSy9DQtJAWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOQIp7wcUj3BNAeu2/CQ197O0uopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMDIx MTFiZS1iOTU0LTRjNWUtYWM5Yi00Zjg1YzNjMTFmZTIvMzAyMTExYmUtYjk1NC00 YzVlLWFjOWItNGY4NWMzYzExZmUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzAyMTExYmUtYjk1NC00YzVlLWFj OWItNGY4NWMzYzExZmUyLzMwMjExMWJlLWI5NTQtNGM1ZS1hYzliLTRmODVjM2Mx MWZlMi5jcmwwHwYDVR0jBBgwFoAUyFKA3kjxP0SpblZpaxNrBBJTmqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMDIxMTFiZS1iOTU0LTRjNWUtYWM5Yi00Zjg1 YzNjMTFmZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmNij1r0K36a0xCAu0IaOa 2u9tLPTxo4046O8zNK3waTZA0ISStkl1GoW1QtQ9I/Hkb8VT8X5MuK564c6RTivI 2i5DJVldwxaE5sy3OhCqsMyVX1nVGoyvLnEcMWznuFshpnKrILcACe3cGUN2gI7b uOeWaK+54bpG7oZBCoL91psuSscKVoXNtAd+EdjnDEeyA1adRRoWXwLkXynIGR6e 42r6iuWLraYvFRjpJV3OR1dJTmKkQsojZq4begsvl/R8xdmrogJ2qROYSF1hUSKy BH9oZy7UZMfBC/4bWe1qWZvKNjj0QII2KIRqbs9Xmk9vxN7dJ/61B83XkE2B0lD9 -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:54 2025 by rpki-client