$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft File: 0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft (raw, json) Hash identifier: iTpQ0klpO2ZBMke0z8A3lKsLvyk8+DQexmSEfbL5WE4= Subject key identifier: 68:F5:E1:B2:B2:82:AA:97:5A:F4:38:A7:04:56:E4:1E:6E:F1:E2:79 Authority key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 Certificate issuer: /CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Certificate serial: 010D0C9F4328584AF1680D6D4D33548A4B554220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft Manifest number: 010D0C9F43285849BB94F28724AAA6089AEB7FD7 Signing time: Fri 22 Aug 2025 17:00:08 +0000 Manifest this update: Fri 22 Aug 2025 17:00:08 +0000 Manifest next update: Sun 24 Aug 2025 17:00:00 +0000 Files and hashes: 1: 0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl (hash: Wk1X5f5sX/qqUy/VIEf+Qp3Ig3AqeacI58T3ZoymJwU=) 2: 0bbe2f43-7a7b-3107-8e8d-1e59c22dd597.roa (hash: TQbdTkmImHPvIgj/+l39m+lJhiJnUJO1SZbbeivhDL0=) 3: a508865e-49b5-3e38-9f07-6d36278922e2.roa (hash: tqf9hZqGygZ4Xc287DxUsjiboAZlikAlBV1F7++E4Xo=) 4: b4d466f2-e962-3689-8bcd-94237c4b2901.roa (hash: qW4la1NwMLpegWzsKOoFGCBNoi2TfS2DkjFqk30cNa8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f1:68:0d:6d:4d:33:54:8a:4b:55:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Validity Not Before: Aug 22 17:00:08 2025 GMT Not After : Aug 24 17:00:00 2025 GMT Subject: CN=3ab7b973-e144-4dc8-93f6-493c7ef5b0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:d6:c4:88:23:ea:9f:ec:4d:71:d5:4e:62: eb:53:28:4a:f1:19:91:08:45:cb:09:b0:5a:2d:31: e3:9e:5d:a2:24:86:72:47:db:4e:b5:90:6b:b8:e4: 36:9a:84:9d:88:b2:77:70:1f:fa:89:59:fc:7d:b2: 16:82:35:e8:ae:69:d7:00:fd:ce:62:c5:fc:a9:71: 5a:59:2c:da:ff:23:36:fa:a3:ee:ea:de:2a:5d:38: 59:ef:02:cf:17:d3:e6:85:ff:98:96:f2:ca:0e:78: 03:3b:04:f4:4b:ad:a9:e4:0e:c2:81:b3:3b:ed:56: 01:4d:7b:c6:15:25:2b:18:9c:fd:02:16:3c:5e:41: 67:63:a6:38:59:af:78:bb:10:38:c6:b6:f4:ed:b9: 83:eb:7c:10:d2:9b:77:0d:e4:5c:bb:2a:e3:16:bb: 45:27:63:62:80:ea:61:ec:f8:45:60:cf:2a:10:e9: 1f:e1:9a:20:ea:10:1c:6c:2a:c0:e5:b7:c4:b8:3b: 8f:3d:d1:8e:bb:7c:3e:f7:49:57:b5:ae:fa:79:7f: f7:32:98:cb:62:98:f9:9d:68:7d:c2:c3:33:24:f6: 36:e5:32:ba:66:7f:7b:42:38:71:2e:8e:c7:b5:4c: 79:93:cf:30:45:2f:e8:10:57:3b:e9:25:2a:ae:03: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:E1:B2:B2:82:AA:97:5A:F4:38:A7:04:56:E4:1E:6E:F1:E2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl X509v3 Authority Key Identifier: keyid:CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d4:2d:cb:2a:87:3b:d7:46:2a:9a:04:69:8b:eb:a5:6d:85: f4:57:aa:e2:cf:50:4e:d2:8f:2b:2e:47:c0:68:7a:72:23:e2: d4:f8:d1:4c:33:48:10:a9:07:b9:a1:f8:25:6b:9a:df:f5:01: 42:1f:50:3f:a7:3a:f7:39:cd:28:db:d0:a4:01:36:39:02:99: 75:83:41:62:13:fd:73:35:db:be:b1:f5:b8:9e:5f:de:34:84: 6e:1b:ad:46:6f:ad:d8:56:2e:7a:46:61:c2:ac:17:a5:b0:3a: c8:53:11:6e:89:68:04:81:12:ff:fa:1a:20:f8:bd:5f:54:49: 91:15:9a:07:17:5c:3e:5e:22:61:59:b9:2f:05:81:8e:df:7d: 2b:dd:e3:79:d2:5d:4f:e7:d7:42:6c:08:29:b8:bf:ec:ae:67: 17:90:64:be:b2:2c:37:9f:b3:fd:38:b9:67:d5:7b:f9:db:e9: 20:d6:db:d1:b8:69:af:0c:a7:a5:89:33:98:4d:ef:d3:27:40: 57:ab:c8:34:de:6b:d9:ed:19:5b:0a:1f:46:47:5f:5a:04:d7: ed:9f:ef:85:8a:74:9d:87:47:72:eb:c7:1e:6f:55:32:d7:6f: 0e:2c:cf:3e:99:de:8e:2a:1c:f2:14:2a:e0:c6:7f:3b:25:7d: ea:a3:ea:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErxaA1tTTNUiktVQiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyZTY0ZGEtMGNmMS00YmFmLWJlOTQtYzIxNmIyYjgx ZDFiMB4XDTI1MDgyMjE3MDAwOFoXDTI1MDgyNDE3MDAwMFowLzEtMCsGA1UEAxMk M2FiN2I5NzMtZTE0NC00ZGM4LTkzZjYtNDkzYzdlZjViMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1onWxIgj6p/sTXHVTmLrUyhK8RmRCEXLCbBa LTHjnl2iJIZyR9tOtZBruOQ2moSdiLJ3cB/6iVn8fbIWgjXormnXAP3OYsX8qXFa WSza/yM2+qPu6t4qXThZ7wLPF9Pmhf+YlvLKDngDOwT0S62p5A7CgbM77VYBTXvG FSUrGJz9AhY8XkFnY6Y4Wa94uxA4xrb07bmD63wQ0pt3DeRcuyrjFrtFJ2NigOph 7PhFYM8qEOkf4Zog6hAcbCrA5bfEuDuPPdGOu3w+90lXta76eX/3MpjLYpj5nWh9 wsMzJPY25TK6Zn97QjhxLo7HtUx5k88wRS/oEFc76SUqrgMuxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGj14bKygqqXWvQ4pwRW5B5u8eJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJl NjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJiODFkMWIvMGIyZTY0ZGEtMGNmMS00 YmFmLWJlOTQtYzIxNmIyYjgxZDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGIyZTY0ZGEtMGNmMS00YmFmLWJl OTQtYzIxNmIyYjgxZDFiLzBiMmU2NGRhLTBjZjEtNGJhZi1iZTk0LWMyMTZiMmI4 MWQxYi5jcmwwHwYDVR0jBBgwFoAUylexWTbC/nFNr5BRyu60vcQIq5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2 YjJiODFkMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE1C3LKoc710YqmgRpi+ul bYX0V6riz1BO0o8rLkfAaHpyI+LU+NFMM0gQqQe5ofgla5rf9QFCH1A/pzr3Oc0o 29CkATY5Apl1g0FiE/1zNdu+sfW4nl/eNIRuG61Gb63YVi56RmHCrBelsDrIUxFu iWgEgRL/+hog+L1fVEmRFZoHF1w+XiJhWbkvBYGO330r3eN50l1P59dCbAgpuL/s rmcXkGS+siw3n7P9OLln1Xv52+kg1tvRuGmvDKeliTOYTe/TJ0BXq8g03mvZ7Rlb Ch9GR19aBNftn++FinSdh0dy68ceb1Uy128OLM8+md6OKhzyFCrgxn87JX3qo+rU -----END CERTIFICATE-----Generated at Sat Aug 23 18:37:56 2025 by rpki-client