$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft File: 604a49f2-58d6-4709-bdaf-e7181b613801.mft (raw, json) Hash identifier: EprEiIIBWefoamTgp8I+ndwNXSpCBZTN0KDutxKSM/c= Subject key identifier: C8:3A:1E:70:D3:7B:9B:23:5D:C4:BE:AB:E7:E8:55:00:37:9F:95:2B Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584ACC2EEACDB54E6AD632B81280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft Manifest number: 010D0C9F4328584073A84B40EFAB577973049077 Signing time: Sat 09 Aug 2025 09:00:08 +0000 Manifest this update: Sat 09 Aug 2025 09:00:08 +0000 Manifest next update: Tue 12 Aug 2025 09:00:00 +0000 Files and hashes: 1: 0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa (hash: TdJUHLdOi1b3uAW57rgcU3RvjQ1iMoejGF82eRNGvg0=) 2: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (hash: ehU71ZCJSKk4FNNvouNdv1EPQ7Hg94QMD8n/f51Jbzo=) 3: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (hash: UdwnwDw3+CV6S+hahAaCCxt8iFQanWZt7ya+aI/+s78=) 4: 604a49f2-58d6-4709-bdaf-e7181b613801.crl (hash: fG7rsi/3dARsHVz0ySOBCk7buwdbYE9bzLa1YreaSks=) 5: c56c342d-12d7-376f-9120-568a7b965d35.roa (hash: oZXkN77ni8sfkI4w+24mNDUO9oBSVtxPMxUaJcmBfy8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:2e:ea:cd:b5:4e:6a:d6:32:b8:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Aug 9 09:00:08 2025 GMT Not After : Aug 12 09:00:00 2025 GMT Subject: CN=0569ae6e-339a-47dc-9dfb-69fe1bac3764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:58:66:f7:82:4e:3a:a0:dd:e3:7c:56:10: 70:46:38:52:c7:10:e3:b4:d7:df:87:90:21:9f:cb: 96:3e:66:45:d1:7a:e5:72:79:12:3f:d3:62:ae:18: 97:0e:d8:ff:10:e9:c8:a0:be:c2:42:0c:e2:f5:8e: 25:93:ab:8c:e6:ee:70:e2:d8:3f:be:e4:fa:6f:15: c7:f4:7a:31:9b:60:1b:ed:e1:d8:dc:c8:92:75:43: e2:23:a2:bc:46:cb:cd:b3:b0:41:5d:72:26:77:e2: d4:8c:d1:fd:be:78:4f:95:7a:ef:57:4e:aa:42:57: cd:db:65:01:4b:08:97:c9:97:de:42:7c:12:b6:ac: b2:12:1c:21:03:fe:b1:93:f5:c2:fd:54:b6:64:bd: 66:73:b4:36:ea:50:52:20:60:9a:dd:43:ca:6b:1b: 12:38:24:23:0b:89:7c:39:a5:f6:bc:24:45:c9:3e: e1:80:af:11:31:94:ac:42:f9:c9:4b:95:c1:12:4b: 17:b9:64:64:db:d6:af:4a:c4:ec:38:2d:c4:24:0b: 5e:5b:89:79:9c:81:04:24:55:87:5b:43:91:24:a8: 8a:e7:74:50:4a:63:c9:db:47:b8:a8:12:12:92:39: 92:3f:b0:56:13:99:d2:20:3b:c5:bb:f2:41:f5:d2: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:1E:70:D3:7B:9B:23:5D:C4:BE:AB:E7:E8:55:00:37:9F:95:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0d:df:7b:fd:87:33:b6:8d:68:e2:9f:4a:86:7a:84:54:c3: 50:c9:97:09:a6:50:9f:cb:88:ae:ab:4b:49:fb:5f:42:a3:52: 85:ae:ef:02:1e:24:67:1b:57:d6:c5:0d:cf:fa:6f:7d:00:77: ae:49:23:bf:08:e4:e7:1d:4f:90:1d:9e:97:94:e7:88:1e:be: 5b:a1:68:b8:ae:0e:a0:b9:ea:d3:72:7b:f7:8e:1a:1b:a2:10: 5f:9a:d6:ce:49:f8:76:c4:3c:44:a1:79:1a:01:51:c9:54:4b: 4c:66:38:55:98:52:0e:9a:82:cf:5b:c7:b0:0e:a5:47:11:2b: 30:13:18:ba:73:14:ad:98:61:12:b7:c2:aa:49:25:cf:07:58: a4:f2:29:58:89:5c:97:2a:c0:db:08:e4:b7:6e:32:4d:50:e4: 96:ca:0d:ff:e4:9f:de:0c:4b:41:d8:6a:bc:b2:c2:70:aa:b0: 91:78:f1:4c:f5:ae:30:6f:fd:41:e4:7f:ac:41:9a:8d:36:61: c7:4c:b2:f4:bb:eb:23:1b:2b:06:47:b5:46:f9:ed:47:3a:6f: 23:06:e1:e6:e9:90:04:83:1b:43:af:ad:0e:bf:0d:19:c8:b5: a6:ce:57:d8:80:7d:54:8c:cb:4a:9d:f1:04:75:5f:84:30:02: 08:20:8b:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErMLurNtU5q1jK4EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDgwOTA5MDAwOFoXDTI1MDgxMjA5MDAwMFowLzEtMCsGA1UEAxMk MDU2OWFlNmUtMzM5YS00N2RjLTlkZmItNjlmZTFiYWMzNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI5YZveCTjqg3eN8VhBwRjhSxxDjtNffh5Ah n8uWPmZF0XrlcnkSP9NirhiXDtj/EOnIoL7CQgzi9Y4lk6uM5u5w4tg/vuT6bxXH 9Hoxm2Ab7eHY3MiSdUPiI6K8RsvNs7BBXXImd+LUjNH9vnhPlXrvV06qQlfN22UB SwiXyZfeQnwStqyyEhwhA/6xk/XC/VS2ZL1mc7Q26lBSIGCa3UPKaxsSOCQjC4l8 OaX2vCRFyT7hgK8RMZSsQvnJS5XBEksXuWRk29avSsTsOC3EJAteW4l5nIEEJFWH W0ORJKiK53RQSmPJ20e4qBISkjmSP7BWE5nSIDvFu/JB9dJHMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMg6HnDTe5sjXcS+q+foVQA3n5UrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvNjA0YTQ5ZjItNThkNi00 NzA5LWJkYWYtZTcxODFiNjEzODAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaDd97/Yczto1o4p9KhnqE VMNQyZcJplCfy4iuq0tJ+19Co1KFru8CHiRnG1fWxQ3P+m99AHeuSSO/COTnHU+Q HZ6XlOeIHr5boWi4rg6guerTcnv3jhobohBfmtbOSfh2xDxEoXkaAVHJVEtMZjhV mFIOmoLPW8ewDqVHESswExi6cxStmGESt8KqSSXPB1ik8ilYiVyXKsDbCOS3bjJN UOSWyg3/5J/eDEtB2Gq8ssJwqrCRePFM9a4wb/1B5H+sQZqNNmHHTLL0u+sjGysG R7VG+e1HOm8jBuHm6ZAEgxtDr60Ovw0ZyLWmzlfYgH1UjMtKnfEEdV+EMAIIIIsu -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:18 2025 by rpki-client