$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft File: ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft (raw, json) Hash identifier: mnrdP/1EUe19slil6CWSBaOqGmjKbJzJHIe/TaBNq5c= Subject key identifier: 40:50:B0:A5:1B:3D:8B:B2:CD:D2:DA:AE:CF:1E:92:C8:8F:05:2D:F9 Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F4328584AC9DB578ED8373CF98D0BE880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft Manifest number: 010D0C9F4328584073A8546306A18980D7C0B4E1 Signing time: Fri 08 Aug 2025 13:00:08 +0000 Manifest this update: Fri 08 Aug 2025 13:00:08 +0000 Manifest next update: Sun 10 Aug 2025 13:00:00 +0000 Files and hashes: 1: cf55352d-0396-321a-a7aa-13ef996b8602.roa (hash: KQ28YgjLgghq2GkwK3Ro1I0ncc/QFBNnXTwl3smFf74=) 2: ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl (hash: 1Io8R5mLgbEc6pVVzxbUVyM5YB3qugzsJP4rQu1IIC0=) 3: e1a69dd1-1a42-3b71-a6ff-7ee5f3b46afa.roa (hash: JfSlFIc3ONzrUihCjSEL2Y07o/QCRZ3lf6pswizG7C0=) 4: f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa (hash: gMZkSVn8S3y9HAo+xFl4Fm2VaJB1lrpaJIxiTG5aKHs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:57:8e:d8:37:3c:f9:8d:0b:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Aug 8 13:00:08 2025 GMT Not After : Aug 10 13:00:00 2025 GMT Subject: CN=b7cf4874-8452-409d-9ec2-fc249b7746ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:88:42:e8:d2:65:97:62:2d:dd:54:dc:45: 76:aa:f4:a5:95:55:a7:96:f1:0a:2c:42:93:eb:f1: 62:47:6f:73:2a:23:f2:06:b9:bc:c7:8d:87:33:e0: 67:8c:e8:ba:45:8b:b8:da:ad:41:c5:c8:30:51:8e: cb:5b:ed:c5:36:bb:6f:09:52:c4:97:c5:17:7e:65: 0e:b0:3d:5d:21:1c:db:cd:3f:ba:93:27:6f:9a:14: 68:9b:e8:93:34:3a:c6:80:46:c1:16:2e:6c:2f:d4: 17:de:f4:17:3e:26:3a:21:f8:27:44:80:7a:fc:f5: f8:60:95:6d:61:21:b5:ba:e0:3c:62:a7:ff:7d:42: de:26:cc:ae:8f:25:5f:5e:4d:fd:5a:32:d7:63:1d: 2d:a6:b1:f8:2b:85:ff:bf:d4:7f:38:94:58:ce:41: 0c:0f:9d:21:17:ec:ea:19:72:4e:09:e3:bb:c8:ab: 56:99:92:ed:d1:cb:45:88:43:66:f2:f2:fd:e2:7e: 8b:0b:24:d5:60:f2:c7:a5:ba:cf:24:6f:94:5c:d3: d7:04:43:29:2e:aa:51:ab:96:70:92:c8:db:db:02: 3a:ea:66:d3:fd:4d:15:1b:60:9c:e3:22:f8:0d:0a: 01:ef:16:6e:a4:1c:68:b8:2c:f3:ec:e1:2c:d0:07: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:50:B0:A5:1B:3D:8B:B2:CD:D2:DA:AE:CF:1E:92:C8:8F:05:2D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c2:fa:3e:f6:1e:d0:a3:1c:63:62:33:3a:55:52:2f:fa:fa: 98:75:1d:20:70:fd:9d:9f:09:76:72:c7:fe:c7:83:7f:a5:af: 83:0e:4b:03:b2:6b:9e:f7:66:4d:dc:26:a3:47:e5:24:da:53: a5:26:9e:d9:62:fc:f6:73:e9:59:5b:3f:66:9e:63:38:0a:f8: 13:dc:ee:b5:26:6d:0f:4e:7a:8e:e3:33:2a:b6:80:6d:db:52: c9:4c:9a:70:f3:b7:25:16:06:88:32:b2:69:bb:a3:33:89:17: cd:a7:81:ed:3e:38:93:e3:83:0b:cd:75:4b:10:91:ca:fc:bd: 23:66:70:a6:e3:b2:49:c3:c1:2b:00:50:d2:4d:b9:d9:c6:8b: cb:49:d4:e8:58:28:eb:47:58:b6:90:4f:7f:6a:12:cd:d0:30: 42:6b:b6:1e:f7:c8:36:26:2f:15:04:44:5b:97:de:cf:ca:57: 58:c4:7a:c8:80:4e:1b:53:d2:b8:87:7c:8c:96:b7:d0:4d:93: 36:da:fd:dc:b5:ef:31:95:fc:e5:b4:08:d5:29:1b:08:88:ce: df:49:99:99:89:0a:1b:25:c7:19:2a:aa:9b:c4:3a:c7:80:dc: db:6f:08:d9:92:0f:d0:c0:34:20:c2:92:da:5a:1f:3a:b1:64: d4:7d:47:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErJ21eO2Dc8+Y0L6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI1MDgwODEzMDAwOFoXDTI1MDgxMDEzMDAwMFowLzEtMCsGA1UEAxMk YjdjZjQ4NzQtODQ1Mi00MDlkLTllYzItZmMyNDliNzc0NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJqIQujSZZdiLd1U3EV2qvSllVWnlvEKLEKT 6/FiR29zKiPyBrm8x42HM+BnjOi6RYu42q1BxcgwUY7LW+3FNrtvCVLEl8UXfmUO sD1dIRzbzT+6kydvmhRom+iTNDrGgEbBFi5sL9QX3vQXPiY6IfgnRIB6/PX4YJVt YSG1uuA8Yqf/fULeJsyujyVfXk39WjLXYx0tprH4K4X/v9R/OJRYzkEMD50hF+zq GXJOCeO7yKtWmZLt0ctFiENm8vL94n6LCyTVYPLHpbrPJG+UXNPXBEMpLqpRq5Zw ksjb2wI66mbT/U0VG2Cc4yL4DQoB7xZupBxouCzz7OEs0Af2gwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEBQsKUbPYuyzdLars8eksiPBS35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvZGRhZTUyYTUtY2RiNy00 MTVjLWFkNDQtNTEyNWJiMTIzYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAwvo+9h7QoxxjYjM6VVIv +vqYdR0gcP2dnwl2csf+x4N/pa+DDksDsmue92ZN3CajR+Uk2lOlJp7ZYvz2c+lZ Wz9mnmM4CvgT3O61Jm0PTnqO4zMqtoBt21LJTJpw87clFgaIMrJpu6MziRfNp4Ht PjiT44MLzXVLEJHK/L0jZnCm47JJw8ErAFDSTbnZxovLSdToWCjrR1i2kE9/ahLN 0DBCa7Ye98g2Ji8VBERbl97PyldYxHrIgE4bU9K4h3yMlrfQTZM22v3cte8xlfzl tAjVKRsIiM7fSZmZiQobJccZKqqbxDrHgNzbbwjZkg/QwDQgwpLaWh86sWTUfUez -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:46 2025 by rpki-client