$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: NgB28fPsMsMe8h0TzCP6Y3h9Bv5IFiGfIlndItpPFQA= Subject key identifier: 3A:BF:96:2B:25:27:5D:8D:C9:4C:86:23:B0:3B:F3:1F:B5:35:83:A6 Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584AF1680B4B70537130F8CBA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3618 Signing time: Fri 22 Aug 2025 17:00:08 +0000 Manifest this update: Fri 22 Aug 2025 17:00:08 +0000 Manifest next update: Mon 25 Aug 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: GIP/9/mWHyOfp8Wi6ZJhlAohABD7yjsWi4p0XlIBSrU=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: 91UdHEbWxTz3CnslKd5TMdytVXT8cJAWfS6hVGGQXSk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:68:0b:4b:70:53:71:30:f8:cb:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Aug 22 17:00:08 2025 GMT Not After : Aug 25 17:00:00 2025 GMT Subject: CN=34173b67-90e5-4c60-85aa-72e46072af4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:6a:3f:4c:47:c2:81:88:96:60:f2:0d:82: 0c:e4:d4:e2:a6:df:a4:63:fd:11:b1:0f:47:eb:be: 48:c1:dd:60:1e:36:34:f2:e6:63:cb:c7:f1:97:a0: 4b:c3:65:49:7a:2d:f5:96:a7:e0:3d:61:93:94:c4: ad:c2:f4:e2:65:dd:1a:75:9c:31:9e:29:7e:24:c5: e8:0a:7e:c0:0e:76:58:f5:97:9f:89:68:f8:22:91: f3:56:24:40:a5:7c:d6:29:d7:2b:97:ab:89:d9:bb: 3f:13:fc:3a:42:5a:51:9b:2c:5c:89:37:95:a4:19: 38:55:2e:fa:5a:57:45:ea:95:80:64:3d:76:84:aa: e1:c0:f9:c1:2e:89:27:06:80:10:6a:3a:f5:89:2d: 93:cd:0a:de:ae:bc:04:57:97:cb:35:9d:79:5e:b0: 8f:57:54:f6:fc:d5:b7:de:48:d0:d3:35:1f:48:1b: 92:16:0b:b7:db:72:2c:b9:81:42:cc:a5:a8:59:fd: 05:5c:d5:7e:14:18:76:90:fb:df:a7:2d:fb:e2:2c: f6:e0:4c:d4:97:df:b0:73:25:b6:49:8f:97:52:8f: 14:5b:20:02:1f:7c:fa:98:96:5e:ed:4f:57:85:90: 66:c4:ca:ad:74:17:78:9c:bd:45:b8:66:44:89:93: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:96:2B:25:27:5D:8D:C9:4C:86:23:B0:3B:F3:1F:B5:35:83:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3e:57:9a:22:64:ea:a7:5f:f3:1a:51:ff:ed:e7:92:d8:11: 0e:5f:2a:7e:1a:3f:d1:b1:8f:66:f3:76:ff:23:5a:0c:37:00: f2:b9:09:b2:e4:d8:d8:2b:d8:d4:44:93:f4:73:54:ee:2d:70: 7f:80:47:4f:5b:4d:e0:d1:ef:e1:66:b7:77:d7:81:3e:cc:2a: 89:5d:38:53:dc:94:ba:63:fa:d3:bf:4e:67:e5:13:55:a4:f0: c2:3d:ea:04:56:82:c3:05:74:9c:c7:86:af:63:f2:28:4b:56: 55:b6:57:34:7d:c3:b2:5e:90:ad:69:de:35:73:fd:f9:7a:dc: 40:7b:ef:dd:4e:0e:a9:4f:be:db:6b:3f:1b:96:a7:fa:21:f6: 27:df:54:7b:20:98:cf:e8:12:f5:16:05:2f:c5:bd:89:7a:89: 83:2f:11:57:2d:bf:cb:02:c1:99:1f:c8:f3:14:b5:5f:12:21: 0e:2a:2f:81:28:47:34:fb:b8:b6:8b:54:50:e3:84:9e:e0:3c: 10:77:26:8c:d6:71:63:be:eb:85:e8:8c:f2:48:37:97:19:32: dd:5c:ad:0e:c9:29:f5:56:02:27:47:06:e2:b4:65:72:4d:c6: 94:d5:7d:b4:e1:81:58:33:15:59:2b:ec:a8:d6:3f:98:bb:87: f1:27:f0:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxaAtLcFNxMPjLooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MDgyMjE3MDAwOFoXDTI1MDgyNTE3MDAwMFowLzEtMCsGA1UEAxMk MzQxNzNiNjctOTBlNS00YzYwLTg1YWEtNzJlNDYwNzJhZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23VqP0xHwoGIlmDyDYIM5NTipt+kY/0RsQ9H 675Iwd1gHjY08uZjy8fxl6BLw2VJei31lqfgPWGTlMStwvTiZd0adZwxnil+JMXo Cn7ADnZY9ZefiWj4IpHzViRApXzWKdcrl6uJ2bs/E/w6QlpRmyxciTeVpBk4VS76 WldF6pWAZD12hKrhwPnBLoknBoAQajr1iS2TzQrerrwEV5fLNZ15XrCPV1T2/NW3 3kjQ0zUfSBuSFgu323IsuYFCzKWoWf0FXNV+FBh2kPvfpy374iz24EzUl9+wcyW2 SY+XUo8UWyACH3z6mJZe7U9XhZBmxMqtdBd4nL1FuGZEiZMC9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDq/lislJ12NyUyGI7A78x+1NYOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbPleaImTqp1/zGlH/7eeS 2BEOXyp+Gj/RsY9m83b/I1oMNwDyuQmy5NjYK9jURJP0c1TuLXB/gEdPW03g0e/h Zrd314E+zCqJXThT3JS6Y/rTv05n5RNVpPDCPeoEVoLDBXScx4avY/IoS1ZVtlc0 fcOyXpCtad41c/35etxAe+/dTg6pT77baz8blqf6IfYn31R7IJjP6BL1FgUvxb2J eomDLxFXLb/LAsGZH8jzFLVfEiEOKi+BKEc0+7i2i1RQ44Se4DwQdyaM1nFjvuuF 6IzySDeXGTLdXK0OySn1VgInRwbitGVyTcaU1X204YFYMxVZK+yo1j+Yu4fxJ/B3 -----END CERTIFICATE-----Generated at Sat Aug 23 18:46:53 2025 by rpki-client