$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft File: df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft (raw, json) Hash identifier: bGiD5yHKtRDF+ohx5fM7VjzGajJND3Yd07FXp2ps75M= Subject key identifier: BA:FA:41:C1:55:7F:BB:43:11:AA:4F:EB:FC:17:7A:AD:54:99:E3:99 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584AF25734D75F57BCFC65549BAA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft Manifest number: 010D0C9F432858445B7C44B9550B038E11D4C8A4 Signing time: Sat 23 Aug 2025 01:02:03 +0000 Manifest this update: Sat 23 Aug 2025 01:02:03 +0000 Manifest next update: Mon 25 Aug 2025 19:00:00 +0000 Files and hashes: 1: 5878e216-f837-38e3-b277-8cb9c1df55e6.roa (hash: tV9gLjr4IKBpYoNJPvky8YHzcO0exdPVEJaH5/OK0Nw=) 2: 9f949324-ba14-3119-9cbb-e8baba338f7e.roa (hash: DGaL2mmxZIKK7fjRulTZsXygFwqrYX4Nf9w0jtxF+Ww=) 3: a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (hash: u+5EkasB1AFCQ4pDh6sMb84J7FiQGmELsRVxWzxp5jQ=) 4: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (hash: j6XsZFGjRhOIHkthBa8eBVgvF1wSQE3voP2tcTH0RpM=) 5: c289adc8-f56d-36ed-9305-ee284f075f34.roa (hash: oek1U3y+l1f/dyWDnXtRX30MdCGQOOxxvYMqxdFZAK8=) 6: df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl (hash: HO5r0VLT+QkofXfpfHrO6upps8lSLDSzYkMMJexXVqU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:57:34:d7:5f:57:bc:fc:65:54:9b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Aug 23 01:02:03 2025 GMT Not After : Aug 25 19:00:00 2025 GMT Subject: CN=51f35aec-3f75-4542-b3ed-5b479455b866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:e3:f5:db:4c:68:9a:02:21:c1:69:7a:60: 63:81:8f:8a:d5:fb:fd:84:6b:77:aa:6c:ba:01:7e: 4b:e3:99:e2:46:1f:34:c2:ff:35:23:7d:68:9f:af: a9:5e:7c:d3:8c:31:68:36:ce:52:32:b8:3e:8c:71: 93:5d:fb:90:75:7d:4a:13:2e:bb:2c:8f:8f:5a:d8: 65:16:6d:22:80:8b:24:c2:21:d5:fe:60:49:55:fe: 95:54:f3:c2:17:cd:2f:94:b1:e8:64:e6:f3:65:05: 65:e6:bf:8e:29:ba:a4:35:2b:2c:84:dd:95:df:ad: 16:03:10:db:6f:51:ff:ed:45:25:94:8a:f9:47:24: 99:21:7c:9e:30:b8:ea:07:5f:fb:7a:7f:c4:0e:0d: 01:d1:7f:ec:6a:5e:3b:2b:87:4d:6d:7f:c5:41:f7: 31:5e:07:dd:1e:f2:3e:42:48:84:34:f5:cd:1a:ed: c0:62:06:53:b9:31:4d:99:9a:9a:ec:9c:29:de:b6: 3d:e7:f8:f4:0d:a8:0e:a2:a7:b7:bd:bf:21:f7:47: bf:f6:32:52:0d:76:ab:03:e5:96:b8:4d:2a:09:72: ab:a2:5f:df:20:b0:52:46:1f:4b:2d:67:d6:de:52: 7f:32:c2:16:bf:8d:66:75:7c:7a:10:f4:b6:21:73: 91:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:41:C1:55:7F:BB:43:11:AA:4F:EB:FC:17:7A:AD:54:99:E3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d0:ba:d8:a7:96:32:a3:af:19:42:36:2d:19:a7:38:b3:96: b7:aa:72:16:ff:7d:9e:25:3f:ee:ce:a3:1c:39:58:da:92:b3: 8f:8f:ea:db:dc:4d:8f:11:5e:89:b0:e3:1a:7e:88:0e:37:e6: 8b:33:19:04:6c:0b:dd:7a:3d:8b:69:41:ef:96:b9:7f:cb:64: fb:ca:34:71:bd:16:b8:fb:5e:c6:db:a8:f9:5a:b0:c1:fb:23: f9:25:61:ee:f6:fc:27:f3:4d:05:a9:23:f1:a8:0e:0a:75:95: 93:c8:48:1e:17:ac:0a:1f:3a:54:d6:1e:20:ad:31:35:fc:ab: 3b:7f:1f:60:8b:16:d2:2f:40:c3:e5:69:ef:2b:76:0f:23:1c: 82:aa:d2:23:b9:bc:cb:22:a4:09:ea:9d:3b:ea:0d:98:96:ad: 96:84:af:25:da:c4:e4:05:bc:2a:e4:0a:08:0a:9c:7f:e6:ed: 0a:a3:11:44:14:b5:08:f0:c3:23:6c:1b:e4:4c:5b:d3:6e:41: 5a:62:85:84:3d:06:9f:0e:2d:24:5c:68:91:da:ce:93:a3:11: fd:e7:2f:90:14:89:ba:38:60:b7:32:fb:e5:d9:21:87:4f:96: 09:0b:9a:10:be:78:62:7b:85:24:a6:f3:4e:41:5c:61:4b:28: a0:11:8e:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEryVzTXX1e8/GVUm6owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI1MDgyMzAxMDIwM1oXDTI1MDgyNTE5MDAwMFowLzEtMCsGA1UEAxMk NTFmMzVhZWMtM2Y3NS00NTQyLWIzZWQtNWI0Nzk0NTViODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2nj9dtMaJoCIcFpemBjgY+K1fv9hGt3qmy6 AX5L45niRh80wv81I31on6+pXnzTjDFoNs5SMrg+jHGTXfuQdX1KEy67LI+PWthl Fm0igIskwiHV/mBJVf6VVPPCF80vlLHoZObzZQVl5r+OKbqkNSsshN2V360WAxDb b1H/7UUllIr5RySZIXyeMLjqB1/7en/EDg0B0X/sal47K4dNbX/FQfcxXgfdHvI+ QkiENPXNGu3AYgZTuTFNmZqa7Jwp3rY95/j0DagOoqe3vb8h90e/9jJSDXarA+WW uE0qCXKrol/fILBSRh9LLWfW3lJ/MsIWv41mdXx6EPS2IXOR+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLr6QcFVf7tDEapP6/wXeq1UmeOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvZGY2ZjE0YjgtM2M3ZS00 ZDY4LWFjMzYtZDU5OTliM2M0ZWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAh0LrYp5Yyo68ZQjYtGac4 s5a3qnIW/32eJT/uzqMcOVjakrOPj+rb3E2PEV6JsOMafogON+aLMxkEbAvdej2L aUHvlrl/y2T7yjRxvRa4+17G26j5WrDB+yP5JWHu9vwn800FqSPxqA4KdZWTyEge F6wKHzpU1h4grTE1/Ks7fx9gixbSL0DD5WnvK3YPIxyCqtIjubzLIqQJ6p076g2Y lq2WhK8l2sTkBbwq5AoICpx/5u0KoxFEFLUI8MMjbBvkTFvTbkFaYoWEPQafDi0k XGiR2s6ToxH95y+QFIm6OGC3Mvvl2SGHT5YJC5oQvnhie4UkpvNOQVxhSyigEY4k -----END CERTIFICATE-----Generated at Sat Aug 23 20:56:29 2025 by rpki-client