$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft File: b4ac08c7-b64b-4701-92e6-e136f50164b9.mft (raw, json) Hash identifier: 5xFa7CoWeRuzdfag3N7ChuyKpGAdMRBV5JgdaSqsub8= Subject key identifier: 0A:5F:D3:19:2C:1C:EB:40:48:C2:18:2C:00:0B:20:B1:60:54:71:37 Authority key identifier: 29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F Certificate issuer: /CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Certificate serial: 010D0C9F4328584AC7A5904401F0CE692921A380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft Manifest number: 010D0C9F4328584073A820385373D51FA25FA4E9 Signing time: Thu 07 Aug 2025 18:00:09 +0000 Manifest this update: Thu 07 Aug 2025 18:00:09 +0000 Manifest next update: Sat 09 Aug 2025 18:00:00 +0000 Files and hashes: 1: b4ac08c7-b64b-4701-92e6-e136f50164b9.crl (hash: eyk5+UKKLij5UBljb2V/R9KI+3yzXUDyo3x046+mQIo=) 2: cfc625d2-59fc-3fca-a96c-ec36601abffc.roa (hash: mZLdP8/q9aDIGG5WkP6ru2aZDAWmMMXITGbx6OLOYvs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:a5:90:44:01:f0:ce:69:29:21:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Validity Not Before: Aug 7 18:00:09 2025 GMT Not After : Aug 9 18:00:00 2025 GMT Subject: CN=2727ff82-d8ac-489d-8937-5643d75f21d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:e7:5d:ab:8c:e9:6d:b1:27:0e:bd:f9:16: 7f:bd:3e:8b:c7:df:69:0e:30:6f:4f:2f:c9:66:62: 62:8c:d8:75:6a:55:d6:ef:16:14:73:4c:62:3c:7f: 96:e5:50:76:a5:e1:c0:20:d1:ee:ba:8c:35:f0:b6: ae:c0:9b:9a:79:2f:09:3c:61:91:09:e7:48:85:93: b3:2b:4a:4c:6a:b9:27:4c:57:53:3b:5b:37:35:3a: 6c:b2:34:d0:06:0a:0a:3e:25:0b:f5:2e:59:1f:04: 6e:67:05:57:6f:4a:d5:25:3f:8a:25:44:ea:ae:50: ae:e6:09:65:1a:af:f7:66:67:ce:66:16:8a:0f:45: e2:55:04:d1:1f:a1:65:cb:00:71:96:c0:5f:4c:2d: 67:b8:59:a4:e2:ed:3d:de:e7:05:be:70:c8:9b:07: 02:00:81:2f:f1:0b:8b:23:72:b3:1a:84:a0:c7:ab: 1f:e1:63:6f:aa:f4:81:54:7f:0b:54:27:e7:9d:0f: bb:73:88:b3:02:26:ae:c6:1f:ec:2a:e3:c9:56:46: d2:95:1b:9b:fb:7d:83:d3:00:fe:16:12:45:95:2d: f9:f6:e1:d4:91:a8:31:89:58:76:c7:fa:55:28:4d: 4c:15:a7:cb:f4:24:09:c6:79:51:ea:57:cf:8f:e1: 9d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5F:D3:19:2C:1C:EB:40:48:C2:18:2C:00:0B:20:B1:60:54:71:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl X509v3 Authority Key Identifier: keyid:29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:88:aa:44:36:f2:e3:13:a0:0f:1c:cb:85:74:6d:77:ae:bf: aa:36:59:f7:aa:b3:e8:ee:47:02:ff:a6:23:3d:e6:16:e7:41: b8:37:61:ac:6d:89:8f:66:1a:9b:76:7c:e4:cc:2e:c6:94:2a: 16:8d:53:9b:f8:d2:0b:39:db:32:3e:b6:78:03:2a:7b:13:8d: c4:64:b1:22:9b:d9:5b:95:79:35:19:a2:16:37:79:f0:a6:95: a1:90:2f:1b:df:47:6f:95:78:e4:26:cb:ba:fa:f2:1a:1f:65: 62:21:c2:0d:fb:ee:0e:92:d3:a4:1b:99:64:cd:6e:df:f4:4f: 52:08:9c:3b:8f:4d:d3:70:9c:57:0f:46:a6:52:10:fd:2c:1f: 72:ac:ae:7e:80:6c:a5:62:c1:0b:f9:13:78:56:48:12:d8:73: 91:92:40:df:42:7a:33:e4:c9:91:c4:2b:2a:51:82:04:d5:e2: e1:f5:99:a7:f6:6b:38:09:b3:2e:e7:f7:93:52:cb:10:2f:e0: 50:55:6c:59:d1:f0:07:3a:9b:88:da:bf:6d:a5:26:70:42:f2: b5:5c:48:48:f4:38:9d:6c:7e:37:0b:d2:b7:45:67:25:23:63: de:33:2f:15:9d:64:fe:a2:12:bd:ab:99:60:49:f6:3a:b4:e9: cc:2b:95:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErHpZBEAfDOaSkho4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRhYzA4YzctYjY0Yi00NzAxLTkyZTYtZTEzNmY1MDE2 NGI5MB4XDTI1MDgwNzE4MDAwOVoXDTI1MDgwOTE4MDAwMFowLzEtMCsGA1UEAxMk MjcyN2ZmODItZDhhYy00ODlkLTg5MzctNTY0M2Q3NWYyMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TrnXauM6W2xJw69+RZ/vT6Lx99pDjBvTy/J ZmJijNh1alXW7xYUc0xiPH+W5VB2peHAINHuuow18LauwJuaeS8JPGGRCedIhZOz K0pMarknTFdTO1s3NTpssjTQBgoKPiUL9S5ZHwRuZwVXb0rVJT+KJUTqrlCu5gll Gq/3ZmfOZhaKD0XiVQTRH6FlywBxlsBfTC1nuFmk4u093ucFvnDImwcCAIEv8QuL I3KzGoSgx6sf4WNvqvSBVH8LVCfnnQ+7c4izAiauxh/sKuPJVkbSlRub+32D0wD+ FhJFlS359uHUkagxiVh2x/pVKE1MFafL9CQJxnlR6lfPj+Gd5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFApf0xksHOtASMIYLAALILFgVHE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFj MDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2ZjUwMTY0YjkvYjRhYzA4YzctYjY0Yi00 NzAxLTkyZTYtZTEzNmY1MDE2NGI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjRhYzA4YzctYjY0Yi00NzAxLTky ZTYtZTEzNmY1MDE2NGI5L2I0YWMwOGM3LWI2NGItNDcwMS05MmU2LWUxMzZmNTAx NjRiOS5jcmwwHwYDVR0jBBgwFoAUKS+MJ4rGqxQxkWK87MITFfU7i38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFjMDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2 ZjUwMTY0YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCiKpENvLjE6APHMuFdG13 rr+qNln3qrPo7kcC/6YjPeYW50G4N2GsbYmPZhqbdnzkzC7GlCoWjVOb+NILOdsy PrZ4Ayp7E43EZLEim9lblXk1GaIWN3nwppWhkC8b30dvlXjkJsu6+vIaH2ViIcIN ++4OktOkG5lkzW7f9E9SCJw7j03TcJxXD0amUhD9LB9yrK5+gGylYsEL+RN4VkgS 2HORkkDfQnoz5MmRxCsqUYIE1eLh9Zmn9ms4CbMu5/eTUssQL+BQVWxZ0fAHOpuI 2r9tpSZwQvK1XEhI9DidbH43C9K3RWclI2PeMy8VnWT+ohK9q5lgSfY6tOnMK5V8 -----END CERTIFICATE-----Generated at Fri Aug 8 10:09:44 2025 by rpki-client