$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft File: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft (raw, json) Hash identifier: 6KCoB37L7JENErJUMz4NrToTw0mrlpZrE0A8BV0llvM= Subject key identifier: F0:51:C7:D8:80:9F:F8:69:F2:17:B5:19:0B:C0:01:1E:AF:22:49:2C Authority key identifier: D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC Certificate issuer: /CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Certificate serial: 010D0C9F4328584AF3F727D1FBFF7DCA77AF4000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft Manifest number: 010D0C9F43285842D168A689DC7162ABC8921702 Signing time: Sat 23 Aug 2025 15:00:08 +0000 Manifest this update: Sat 23 Aug 2025 15:00:08 +0000 Manifest next update: Tue 26 Aug 2025 15:00:00 +0000 Files and hashes: 1: 10315c07-19e5-332a-9619-ac334b5ed2bc.roa (hash: ShgCYrd9d6yewScB1g+x+CgFY4Iy5KQ+ZdWXKHXwWdw=) 2: 33cbc354-d185-3748-a67e-8b940dc311d1.roa (hash: kA7n3AUOuaclaNzKD7DJlzlrwD/mmZqyCfFsF17Ckhs=) 3: b32af959-6588-30ef-ac6a-e1c8ea97071b.roa (hash: cTuc89Wly5aDuCmiSspX099spjte5etxuN0qUTmUYxA=) 4: dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl (hash: 1nzFvV6echaL+QMRO5Y+AV2WC9YyWuGXECrrtD6hIS4=) 5: e038b69d-c3ca-38eb-960c-9dbf206c11f8.roa (hash: 9NU4ce7C359h5GlApa9CXhMJVDcnSDl43imzwPoYVVI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:f7:27:d1:fb:ff:7d:ca:77:af:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be Validity Not Before: Aug 23 15:00:08 2025 GMT Not After : Aug 26 15:00:00 2025 GMT Subject: CN=f31f24b1-e97b-4da4-a133-b54c2c6c748b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:bc:8d:2e:6d:0d:6e:8b:1e:2f:e5:30:17: 96:8f:de:be:a9:02:7b:1c:f3:e6:41:81:28:ba:7a: 78:cb:c0:e8:17:d3:88:b1:70:1c:c8:ef:06:51:60: b5:d7:a4:70:bb:19:93:ba:04:d4:ac:f0:ca:e3:95: 3a:b9:d5:42:ed:50:c1:68:c6:52:26:61:28:a8:f2: be:3e:9d:e9:de:9f:19:a9:ed:54:c1:e2:3e:bd:a1: 48:97:0b:e3:13:fa:23:0d:6e:61:15:06:57:81:c8: 04:61:30:58:50:80:c8:84:5f:70:9c:92:63:bf:fb: f6:7c:03:73:6b:0b:45:8e:7d:64:97:47:b0:90:3e: fa:5b:58:b5:23:ac:bb:f6:32:46:98:26:57:e2:a0: da:5f:3e:23:c9:9d:a4:b7:fe:27:a1:d6:56:d8:19: bf:47:a5:f4:43:6b:b2:60:22:a3:c0:59:a8:77:0b: 51:d2:b5:31:60:b2:8b:cd:81:7e:d5:d3:c2:52:01: aa:5b:96:e9:bb:a9:74:7b:75:8f:67:f8:4b:fd:d8: fa:f0:36:f6:88:6a:e0:9a:24:e7:f9:58:ff:ac:d3: be:bd:3c:74:ae:d2:c3:3a:a8:65:9c:8f:82:a5:9b: 75:ad:26:a6:be:2c:6f:da:54:52:72:0f:0c:af:0d: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:51:C7:D8:80:9F:F8:69:F2:17:B5:19:0B:C0:01:1E:AF:22:49:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.crl X509v3 Authority Key Identifier: keyid:D4:08:14:4A:5A:B6:1A:EF:00:62:89:48:42:C1:66:F0:04:D3:CE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd68cb8b-0d91-4a0e-9f04-a3c78e55c7be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:45:0e:95:e0:cb:1c:80:80:6b:87:59:6f:9f:ad:86:67:20: dd:db:09:2f:83:cf:5c:50:9c:e1:54:95:76:15:b0:b1:13:cc: 59:e5:12:d6:02:9b:8a:9d:b9:15:66:be:b4:7d:05:e6:82:32: d1:58:c3:1f:2b:c6:d7:d2:3b:5f:cb:bb:0c:63:27:b5:06:d6: dc:2f:93:9b:ca:63:d7:e9:6e:b2:5c:ab:eb:26:70:64:41:d3: 72:de:83:9c:21:61:8b:63:51:a6:fc:1c:3c:42:cb:49:f1:a3: 4e:32:5e:6a:70:41:4c:26:e5:31:33:17:79:67:28:fd:9b:a9: 48:09:99:dc:2b:03:59:44:df:5b:37:e3:74:39:e3:67:c1:97: 37:f2:dd:ec:b9:00:88:0a:a9:a9:55:0b:4d:6b:b9:78:cd:95: af:4b:a8:c5:af:85:5d:74:6f:59:2b:90:3d:a5:b8:45:b5:25: df:11:d0:19:a7:5a:cd:24:20:43:4d:0b:09:bf:08:9a:3f:5b: 01:62:23:8c:5e:95:1b:a1:58:39:3c:a8:ec:a5:ea:e1:d4:36: 5b:45:60:d1:e9:aa:29:3f:ed:7f:73:eb:b2:bc:da:18:ed:0e: 14:10:8c:a6:c9:02:d0:e3:60:79:c2:b8:2e:68:5b:bc:fb:5e: c2:b9:02:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz9yfR+/99ynevQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2OGNiOGItMGQ5MS00YTBlLTlmMDQtYTNjNzhlNTVj N2JlMB4XDTI1MDgyMzE1MDAwOFoXDTI1MDgyNjE1MDAwMFowLzEtMCsGA1UEAxMk ZjMxZjI0YjEtZTk3Yi00ZGE0LWExMzMtYjU0YzJjNmM3NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iC8jS5tDW6LHi/lMBeWj96+qQJ7HPPmQYEo unp4y8DoF9OIsXAcyO8GUWC116RwuxmTugTUrPDK45U6udVC7VDBaMZSJmEoqPK+ Pp3p3p8Zqe1UweI+vaFIlwvjE/ojDW5hFQZXgcgEYTBYUIDIhF9wnJJjv/v2fANz awtFjn1kl0ewkD76W1i1I6y79jJGmCZX4qDaXz4jyZ2kt/4nodZW2Bm/R6X0Q2uy YCKjwFmodwtR0rUxYLKLzYF+1dPCUgGqW5bpu6l0e3WPZ/hL/dj68Db2iGrgmiTn +Vj/rNO+vTx0rtLDOqhlnI+CpZt1rSamvixv2lRScg8Mrw2HcQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPBRx9iAn/hp8he1GQvAAR6vIkksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4 Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3OGU1NWM3YmUvZGQ2OGNiOGItMGQ5MS00 YTBlLTlmMDQtYTNjNzhlNTVjN2JlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2OGNiOGItMGQ5MS00YTBlLTlm MDQtYTNjNzhlNTVjN2JlL2RkNjhjYjhiLTBkOTEtNGEwZS05ZjA0LWEzYzc4ZTU1 YzdiZS5jcmwwHwYDVR0jBBgwFoAU1AgUSlq2Gu8AYolIQsFm8ATTzrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDY4Y2I4Yi0wZDkxLTRhMGUtOWYwNC1hM2M3 OGU1NWM3YmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkRQ6V4MscgIBrh1lvn62G ZyDd2wkvg89cUJzhVJV2FbCxE8xZ5RLWApuKnbkVZr60fQXmgjLRWMMfK8bX0jtf y7sMYye1BtbcL5ObymPX6W6yXKvrJnBkQdNy3oOcIWGLY1Gm/Bw8QstJ8aNOMl5q cEFMJuUxMxd5Zyj9m6lICZncKwNZRN9bN+N0OeNnwZc38t3suQCICqmpVQtNa7l4 zZWvS6jFr4VddG9ZK5A9pbhFtSXfEdAZp1rNJCBDTQsJvwiaP1sBYiOMXpUboVg5 PKjsperh1DZbRWDR6aopP+1/c+uyvNoY7Q4UEIymyQLQ42B5wrguaFu8+17CuQKJ -----END CERTIFICATE-----Generated at Sat Aug 23 18:46:47 2025 by rpki-client