$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft File: aac421ae-305b-4a29-aacc-176ba3fca213.mft (raw, json) Hash identifier: JS8UGItgxZe2L45voSAYDXuDdIJDFjlKj9lkP6YOkwI= Subject key identifier: 49:F9:26:D5:39:A5:FB:36:72:60:1E:D7:2E:74:9C:E6:C8:54:52:7B Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584AF14A438C93215C83821493E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft Manifest number: 010D0C9F4328584073A81D430A6BA37152E9635E Signing time: Fri 22 Aug 2025 16:00:08 +0000 Manifest this update: Fri 22 Aug 2025 16:00:08 +0000 Manifest next update: Mon 25 Aug 2025 16:00:00 +0000 Files and hashes: 1: 0cb14997-c4f0-3cd0-aebc-2e616d6db4ab.roa (hash: urxh8eFh2I0MTmX/8YPx2aKzJLMfp2s3jtat17S6+Ck=) 2: 7489abd9-d972-3502-9bfe-8f60dd4caa20.roa (hash: xSY5tkt24MnV0+tOqatjL3KCJ9qBqVPZMDTFOBRijJA=) 3: 886d27bf-cb97-3238-8156-8de94bc20e4a.roa (hash: ihYeq3P8J1IfqP5unF6y5siKnaTljKjgrSVZqAf6vZI=) 4: aac421ae-305b-4a29-aacc-176ba3fca213.crl (hash: 86e21pnBDiUukxTZ+dYkvVTRvhRpp89CFlyqm0Jvbss=) 5: bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa (hash: ZGdUEEsmOpr61gi1T8e3PF7w4lb+FmlrgZG1Kbf7rus=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:4a:43:8c:93:21:5c:83:82:14:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Aug 22 16:00:08 2025 GMT Not After : Aug 25 16:00:00 2025 GMT Subject: CN=ad439a98-5400-4a9e-a956-84fcfeb13d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:73:de:78:a6:35:c3:ee:39:6c:c8:87:72: 82:64:77:5c:3a:27:63:5c:cf:d1:b3:f9:f9:97:87: 7a:a7:d1:cc:cd:55:3a:25:76:fb:b3:1c:5e:67:9c: 50:70:aa:ad:96:f4:03:31:20:6a:17:a9:9f:aa:5f: a0:43:bf:45:06:3d:5f:1c:5d:e5:88:27:68:75:32: 80:7a:ad:0e:ee:55:9a:34:01:ef:ea:cc:c3:ea:e2: 7a:92:d3:58:c4:fc:a0:5c:f0:e9:7f:98:2d:19:03: b7:77:40:b6:c7:a6:aa:1a:21:8e:a4:a5:03:c3:f1: 90:e1:56:11:4f:65:65:81:54:3c:52:1e:14:07:88: 4c:d9:66:63:81:71:2b:29:0e:10:d3:9c:31:92:db: 6d:ab:b7:29:cc:93:9b:9b:a5:dd:ac:37:56:ca:ae: 7f:4c:89:a7:5f:9f:09:3c:94:b5:ac:a2:9f:eb:e8: 99:98:86:55:e9:4c:af:94:d1:b1:c7:cd:b4:bc:dc: 0b:f2:e9:e1:05:e8:b1:4c:24:70:9d:8f:e4:77:a5: 73:7a:ef:31:c4:3e:53:75:d0:10:1e:29:5f:99:9d: 2c:e7:dd:7c:be:c3:6d:3d:b9:9c:ff:e2:7e:2c:8e: 4e:b2:8a:e1:ab:a4:a9:7f:e3:29:93:e4:ed:d8:12: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F9:26:D5:39:A5:FB:36:72:60:1E:D7:2E:74:9C:E6:C8:54:52:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:97:3c:67:78:c5:12:b1:a8:af:74:68:cd:79:fa:36:7c:a5: 79:4d:e2:87:90:37:ca:7b:41:c3:c3:89:a2:d6:52:10:65:83: 56:b0:f5:a2:19:33:76:b6:e8:d0:a6:87:e9:bc:bf:38:a7:a0: 6b:63:c1:ec:55:ad:ed:ce:34:f0:4e:0f:82:34:79:5d:57:b3: 00:48:fe:28:be:87:ed:04:61:8e:3f:c1:99:4c:c8:9e:80:02: 0f:24:b8:b6:b1:9e:00:df:a1:7d:66:36:a5:e2:04:7c:27:9a: 3b:a4:48:44:f5:b4:3f:12:54:12:c9:e4:4c:ea:dc:c2:46:e5: 74:26:e9:aa:43:a3:cd:d1:16:67:81:1a:2d:85:50:3a:d0:44: 5c:14:fc:1a:70:32:9d:d3:d5:6d:0b:89:bb:ab:77:af:c1:b4: 18:37:a9:3c:b3:4f:bf:df:c2:e9:31:13:fd:8e:2a:57:45:ce: 67:9e:46:22:7e:14:7b:23:75:f2:92:fc:0c:cc:b1:27:96:44: 3d:28:42:d5:bb:88:d7:e4:4c:bf:45:ce:a4:78:d7:11:4b:4a: ac:07:d9:ae:e9:23:29:f5:c6:f9:b9:c8:5f:b2:3f:d1:6d:ce: ab:db:be:af:02:31:68:25:89:d7:72:77:97:cf:f4:b5:f9:ee: f5:70:ce:8f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxSkOMkyFcg4IUk+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI1MDgyMjE2MDAwOFoXDTI1MDgyNTE2MDAwMFowLzEtMCsGA1UEAxMk YWQ0MzlhOTgtNTQwMC00YTllLWE5NTYtODRmY2ZlYjEzZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxRz3nimNcPuOWzIh3KCZHdcOidjXM/Rs/n5 l4d6p9HMzVU6JXb7sxxeZ5xQcKqtlvQDMSBqF6mfql+gQ79FBj1fHF3liCdodTKA eq0O7lWaNAHv6szD6uJ6ktNYxPygXPDpf5gtGQO3d0C2x6aqGiGOpKUDw/GQ4VYR T2VlgVQ8Uh4UB4hM2WZjgXErKQ4Q05wxktttq7cpzJObm6XdrDdWyq5/TImnX58J PJS1rKKf6+iZmIZV6UyvlNGxx820vNwL8unhBeixTCRwnY/kd6Vzeu8xxD5TddAQ HilfmZ0s5918vsNtPbmc/+J+LI5Osorhq6Spf+Mpk+Tt2BKRvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEn5JtU5pfs2cmAe1y50nObIVFJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvYWFjNDIxYWUtMzA1Yi00 YTI5LWFhY2MtMTc2YmEzZmNhMjEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBalzxneMUSsaivdGjNefo2 fKV5TeKHkDfKe0HDw4mi1lIQZYNWsPWiGTN2tujQpofpvL84p6BrY8HsVa3tzjTw Tg+CNHldV7MASP4ovoftBGGOP8GZTMiegAIPJLi2sZ4A36F9Zjal4gR8J5o7pEhE 9bQ/ElQSyeRM6tzCRuV0JumqQ6PN0RZngRothVA60ERcFPwacDKd09VtC4m7q3ev wbQYN6k8s0+/38LpMRP9jipXRc5nnkYifhR7I3XykvwMzLEnlkQ9KELVu4jX5Ey/ Rc6keNcRS0qsB9mu6SMp9cb5uchfsj/Rbc6r276vAjFoJYnXcneXz/S1+e71cM6P -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:03 2025 by rpki-client