$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft File: 29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft (raw, json) Hash identifier: a6wUtMtimj5IaUsvpAM//I/ZYhM7wE9LlxGu3HafKHo= Subject key identifier: BD:D2:3D:5B:B3:3F:B0:6D:6C:B4:1E:04:8B:85:1C:6C:8F:AB:4B:DD Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Certificate serial: 010D0C9F4328584AF3F7277F8ABCF3CD1335F58E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft Manifest number: 010D0C9F43285843E88E1CC30CF7312D57C34D29 Signing time: Sat 23 Aug 2025 15:00:08 +0000 Manifest this update: Sat 23 Aug 2025 15:00:08 +0000 Manifest next update: Tue 26 Aug 2025 15:00:00 +0000 Files and hashes: 1: 29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl (hash: E2/n5XjpO1ILtfNgyK50H0nPs6T5RmyrjfII0JPwWDY=) 2: 2b2ac11b-e48e-3d7b-bb47-74b882986e3b.roa (hash: xnpe894KwM4jvZuAdX+DnqiI9iMofQfdki0WVSqJHIc=) 3: 34c75caf-5f31-3ddf-b113-d584f51f166e.roa (hash: cYlXmmRvpcB0JIsCZ2ydkXyZi366DWwqMhLmPUf4mm8=) 4: 53fdbdf2-a0bc-3fd6-9a48-1c9ccbc1af83.roa (hash: 5cl/974nP17RWvS9oZWqtNHp5b7XLpxJijvdEYsxnCI=) 5: a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (hash: 4u0A0rqbsZzkvDseMJepHNYetb3msaWbu0NmFkeLiOE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f3:f7:27:7f:8a:bc:f3:cd:13:35:f5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf Validity Not Before: Aug 23 15:00:08 2025 GMT Not After : Aug 26 15:00:00 2025 GMT Subject: CN=3fdd96e8-2404-41a4-92f8-5ac436c60971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:0d:92:13:fc:90:b9:f7:14:a4:36:52:bf: 1b:70:57:d3:31:9b:7c:8e:52:4b:5d:9c:5e:da:7f: bf:23:f7:ab:8b:19:24:92:e8:17:d6:19:c3:64:b4: 8d:7e:45:d0:71:63:f6:22:bd:f8:99:b3:5b:57:58: 50:c7:4a:1c:04:db:de:ae:3f:23:fa:bf:1c:e6:cb: ad:c9:47:6b:ee:c9:b7:f2:f6:55:c2:df:58:4e:8d: c4:08:fc:56:53:b4:60:13:c5:88:2e:86:9a:ef:91: ea:62:48:15:d5:9a:bb:81:23:f9:af:96:67:a8:d1: 4a:d8:3d:8e:09:3c:de:0c:83:ab:15:86:8f:c9:ce: c5:20:cd:b4:e7:4e:e2:3f:ef:8f:67:8a:7a:20:a9: 35:f0:01:44:8d:2d:22:1f:60:44:d7:3c:39:91:a7: f1:3e:8b:8b:a4:44:79:a5:68:03:0f:69:83:ca:f2: f8:fb:3b:dd:de:51:f1:59:5a:bf:f6:2e:f7:8c:a6: e9:e9:a6:0c:e4:e4:a3:12:91:fb:c3:d7:71:73:72: 33:05:64:99:d1:f0:82:2b:9d:55:8f:f5:91:f9:b2: 92:ba:02:a8:4a:49:78:5c:95:46:dd:b1:37:0b:94: 9c:52:33:7a:20:b8:2c:fa:d0:30:35:7f:76:30:23: 41:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:3D:5B:B3:3F:B0:6D:6C:B4:1E:04:8B:85:1C:6C:8F:AB:4B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl X509v3 Authority Key Identifier: keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:11:eb:cf:6c:a3:5d:b5:a6:f7:51:ff:70:3f:8f:01:25:9c: 0c:63:3f:02:ee:04:24:b2:db:3b:d7:af:24:a4:27:75:8b:41: e1:ca:05:f0:c1:fd:cd:cd:93:95:18:69:48:66:70:76:f8:fe: f9:39:91:19:eb:45:cb:49:c5:c4:61:2f:6a:76:e7:b7:8b:18: 1b:8b:1f:e7:19:f5:fd:f4:41:88:21:d3:fa:3a:40:47:65:47: 47:26:7a:e4:e8:a4:2b:0d:a9:9f:a8:f3:ba:1b:ff:c4:ae:23: fc:2d:4e:71:3b:27:16:dd:25:95:3d:ca:d2:91:09:53:86:7d: f6:5d:5d:8e:25:36:1e:05:65:af:7a:a1:a2:c0:31:52:a6:43: 7d:fe:2d:2c:6f:36:de:2f:5d:c8:4d:60:4d:3d:88:36:08:19: 75:5a:f0:d0:e5:cd:02:8c:c6:6a:06:79:16:13:5a:a7:6b:ff: e8:e6:c1:8f:f8:84:21:11:bd:6d:3b:eb:e9:76:5d:88:e5:90: e7:53:02:4e:bc:cc:01:8c:15:f0:1e:b6:3b:8f:ed:d3:a7:06: e5:2d:db:7a:90:9e:2d:29:0f:90:dd:af:cb:e6:87:fd:e0:da: 8a:9a:45:89:ac:57:6e:85:6d:73:c9:23:ed:c2:ce:ef:89:99: 19:c8:df:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErz9yd/irzzzRM19Y4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlkMzViNWQtYjU2YS00OWVhLWJlMDEtZmNiZmY4ZTAy ZmNmMB4XDTI1MDgyMzE1MDAwOFoXDTI1MDgyNjE1MDAwMFowLzEtMCsGA1UEAxMk M2ZkZDk2ZTgtMjQwNC00MWE0LTkyZjgtNWFjNDM2YzYwOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QANkhP8kLn3FKQ2Ur8bcFfTMZt8jlJLXZxe 2n+/I/erixkkkugX1hnDZLSNfkXQcWP2Ir34mbNbV1hQx0ocBNverj8j+r8c5sut yUdr7sm38vZVwt9YTo3ECPxWU7RgE8WILoaa75HqYkgV1Zq7gSP5r5ZnqNFK2D2O CTzeDIOrFYaPyc7FIM20507iP++PZ4p6IKk18AFEjS0iH2BE1zw5kafxPouLpER5 pWgDD2mDyvL4+zvd3lHxWVq/9i73jKbp6aYM5OSjEpH7w9dxc3IzBWSZ0fCCK51V j/WR+bKSugKoSkl4XJVG3bE3C5ScUjN6ILgs+tAwNX92MCNBNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL3SPVuzP7BtbLQeBIuFHGyPq0vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQz NWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2JmZjhlMDJmY2YvMjlkMzViNWQtYjU2YS00 OWVhLWJlMDEtZmNiZmY4ZTAyZmNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjlkMzViNWQtYjU2YS00OWVhLWJl MDEtZmNiZmY4ZTAyZmNmLzI5ZDM1YjVkLWI1NmEtNDllYS1iZTAxLWZjYmZmOGUw MmZjZi5jcmwwHwYDVR0jBBgwFoAUCuttE9fwYHuK0QB7KKCVi0UQpC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOWQzNWI1ZC1iNTZhLTQ5ZWEtYmUwMS1mY2Jm ZjhlMDJmY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcEevPbKNdtab3Uf9wP48B JZwMYz8C7gQksts7168kpCd1i0HhygXwwf3NzZOVGGlIZnB2+P75OZEZ60XLScXE YS9qdue3ixgbix/nGfX99EGIIdP6OkBHZUdHJnrk6KQrDamfqPO6G//EriP8LU5x OycW3SWVPcrSkQlThn32XV2OJTYeBWWveqGiwDFSpkN9/i0sbzbeL13ITWBNPYg2 CBl1WvDQ5c0CjMZqBnkWE1qna//o5sGP+IQhEb1tO+vpdl2I5ZDnUwJOvMwBjBXw HrY7j+3TpwblLdt6kJ4tKQ+Q3a/L5of94NqKmkWJrFduhW1zySPtws7viZkZyN9R -----END CERTIFICATE-----Generated at Sun Aug 24 03:18:44 2025 by rpki-client