$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: AENhaSoC6EIP6CWa930UyXIB5XauxUe2r6c1uGUyiA4= Subject key identifier: 24:DE:16:48:C1:E1:C3:E8:30:95:AE:64:28:70:28:D1:9F:1C:A2:CE Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584ABC2172F96A27B7F17835F8E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C600 Signing time: Sun 03 Aug 2025 15:00:03 +0000 Manifest this update: Sun 03 Aug 2025 15:00:03 +0000 Manifest next update: Tue 05 Aug 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: fJ9So1lHtibUMBJjENYtAULCMEv+c/OJlL0O1S5IlyA=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: wWud481erXYhaT/bLshQNaDx8cAQV8TYBL+4ycmtdjk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:21:72:f9:6a:27:b7:f1:78:35:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Aug 3 15:00:03 2025 GMT Not After : Aug 5 15:00:00 2025 GMT Subject: CN=3470216f-72c6-46d7-b947-02ec77c359c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:38:3f:f8:d3:56:e4:62:9d:0d:9e:4b:3a: 9a:66:57:ed:c4:c7:d3:62:cb:3c:6f:f6:c6:ba:7e: e7:2e:55:15:2b:85:64:9f:1f:00:23:10:cd:86:a8: 85:ee:fa:cf:9d:4e:9f:37:95:c1:7d:07:17:b7:86: 0c:74:f9:a3:1a:28:37:85:ff:b6:27:b1:b4:63:65: d2:e3:58:e7:2e:03:0f:57:1c:90:35:48:7f:09:96: f9:07:c5:92:bb:b9:97:6b:2b:4a:5c:c0:01:c4:c5: 97:fa:ff:19:27:85:43:20:e4:14:dd:1e:c7:2c:d0: cd:4e:5c:bb:ac:62:78:58:fd:04:34:5e:d8:12:1c: 96:f0:a8:04:da:dd:60:6d:fe:c6:1c:97:d2:73:27: 63:74:b4:1b:a9:d8:4f:f8:1f:8d:44:c3:2f:17:28: 7b:f5:85:09:8f:06:d3:71:99:04:48:f2:99:7a:3c: f9:c6:fe:48:da:50:86:d2:b1:b1:2b:bf:ed:2c:d4: 37:60:4a:c3:06:bc:59:7d:52:99:f3:73:c4:ea:46: 27:d4:77:5d:b2:08:b2:a5:c4:97:3f:68:61:5b:7a: 41:1d:3a:da:19:e5:ba:b6:99:04:38:d1:25:52:3b: 57:7f:13:a8:d1:b2:d5:53:53:c1:77:89:2e:ac:77: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DE:16:48:C1:E1:C3:E8:30:95:AE:64:28:70:28:D1:9F:1C:A2:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:29:e3:e3:98:1a:28:43:03:f7:78:5e:75:9c:88:3d:a9:0d: ee:33:78:58:88:af:be:d6:32:ee:59:52:88:4f:29:67:94:a6: d9:6a:49:b0:a6:d4:56:cc:87:c0:88:e2:7e:82:36:5f:87:9e: bd:70:a1:2f:8a:3b:58:e4:f4:e6:72:18:4d:70:16:a4:1f:1b: 54:e6:4f:64:62:b2:3b:7d:8a:ff:e5:9f:4b:24:d3:e7:8f:a0: 62:bf:d0:27:d7:f8:ec:fc:bb:63:8e:d3:ee:23:b1:ed:2c:e4: 79:8c:bf:b5:62:46:b9:2f:01:01:6b:da:06:6b:b4:b6:bf:2a: 99:5c:a2:63:e9:54:77:8b:5e:79:5f:a5:7e:95:bd:a3:1b:d3: 8e:e6:99:f1:32:8e:94:b6:6d:17:97:e9:45:a4:9e:57:01:1e: 63:c2:15:a7:52:ed:51:f5:44:1a:63:e8:87:ab:3d:a6:d4:7c: f9:e7:03:1c:36:90:67:67:eb:61:b4:9d:ec:6d:e3:fd:a6:9f: 9d:d3:c2:08:22:38:aa:75:56:a7:23:a2:97:ec:5a:c9:df:80: 99:44:37:e8:bf:26:36:76:db:17:c5:51:99:f0:de:00:c2:8b: e7:e5:cd:22:51:8a:5c:97:c2:8f:34:66:11:1f:c6:6c:4f:fa: 52:50:bc:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8IXL5aie38Xg1+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MDgwMzE1MDAwM1oXDTI1MDgwNTE1MDAwMFowLzEtMCsGA1UEAxMk MzQ3MDIxNmYtNzJjNi00NmQ3LWI5NDctMDJlYzc3YzM1OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfQ4P/jTVuRinQ2eSzqaZlftxMfTYss8b/bG un7nLlUVK4Vknx8AIxDNhqiF7vrPnU6fN5XBfQcXt4YMdPmjGig3hf+2J7G0Y2XS 41jnLgMPVxyQNUh/CZb5B8WSu7mXaytKXMABxMWX+v8ZJ4VDIOQU3R7HLNDNTly7 rGJ4WP0ENF7YEhyW8KgE2t1gbf7GHJfScydjdLQbqdhP+B+NRMMvFyh79YUJjwbT cZkESPKZejz5xv5I2lCG0rGxK7/tLNQ3YErDBrxZfVKZ83PE6kYn1HddsgiypcSX P2hhW3pBHTraGeW6tpkEONElUjtXfxOo0bLVU1PBd4kurHcHxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCTeFkjB4cPoMJWuZChwKNGfHKLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWKePjmBooQwP3eF51nIg9 qQ3uM3hYiK++1jLuWVKITylnlKbZakmwptRWzIfAiOJ+gjZfh569cKEvijtY5PTm chhNcBakHxtU5k9kYrI7fYr/5Z9LJNPnj6Biv9An1/js/LtjjtPuI7HtLOR5jL+1 Yka5LwEBa9oGa7S2vyqZXKJj6VR3i155X6V+lb2jG9OO5pnxMo6Utm0Xl+lFpJ5X AR5jwhWnUu1R9UQaY+iHqz2m1Hz55wMcNpBnZ+thtJ3sbeP9pp+d08IIIjiqdVan I6KX7FrJ34CZRDfovyY2dtsXxVGZ8N4Awovn5c0iUYpcl8KPNGYRH8ZsT/pSULy7 -----END CERTIFICATE-----Generated at Mon Aug 4 11:13:10 2025 by rpki-client