$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft File: 85be797f-f426-4ba8-98b0-1c2b5f752753.mft (raw, json) Hash identifier: kdWGHKwhhalMgMrKD9wPd3Apb0YR/WmCkf1s4xFMkAY= Subject key identifier: 28:93:AE:88:BC:69:1D:8D:37:11:1E:47:90:F0:14:1C:82:6E:9A:95 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584AC31C25B1810C737B01149480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft Manifest number: 010D0C9F4328584073A839281E4F1168C0BB16FA Signing time: Wed 06 Aug 2025 03:00:03 +0000 Manifest this update: Wed 06 Aug 2025 03:00:03 +0000 Manifest next update: Fri 08 Aug 2025 03:00:00 +0000 Files and hashes: 1: 43d529a5-06fc-3596-b306-3805ee39efec.roa (hash: Z9jhbzeKokmew0tR2ppAZPIgqdGAXBwlyqSlbHzEQaY=) 2: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (hash: qBCyDEMH0h5/Zf1/uzjmj3uMrWqwhb7gZIED9I2bKWE=) 3: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (hash: qQqyL27l5Zt9ishyzQv7iQtvVJWeuEnour2/OQkKmtM=) 4: 85be797f-f426-4ba8-98b0-1c2b5f752753.crl (hash: H2RSOxMmyK+azHFCCHLvxWnWQPczRXm5lzLVcqO0uwM=) 5: 9699501c-da98-381a-90a4-a8aa59586482.roa (hash: sZNm9ej6IFh6RRwHro5/nNkbUT0qnVeHgSleTDSYOgM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c3:1c:25:b1:81:0c:73:7b:01:14:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Aug 6 03:00:03 2025 GMT Not After : Aug 8 03:00:00 2025 GMT Subject: CN=c46a8061-d09a-45c4-9b68-b051514883c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:18:23:44:9e:cc:f6:44:da:92:c7:4c:43: ab:8d:57:b1:34:ea:2d:a9:2a:19:0b:57:b8:39:5b: da:53:cf:82:10:f6:2c:00:11:5f:a2:d7:24:c8:63: d4:9c:95:40:95:d8:da:4f:8e:30:7b:65:f3:d4:73: 12:9c:0a:b1:fc:a5:06:29:1f:9c:f2:7f:52:f7:c3: c2:13:28:d9:0b:a5:46:e0:b6:9d:be:ff:2a:b9:f5: 5c:16:8d:ab:3e:f4:d1:a3:90:68:dd:3e:d9:9e:66: 32:4a:b4:8f:7d:a5:9c:b3:1f:fa:40:6b:74:b9:7d: 46:15:82:2e:1d:6c:ae:d0:7d:8b:9d:1b:bd:9d:2b: d3:7b:a6:72:34:5e:34:c1:31:ff:01:93:03:13:b1: 06:13:7a:a7:f8:4a:4b:03:af:a4:02:ee:8c:6a:a0: ca:28:c4:8b:f3:43:87:0f:f0:9f:70:6e:74:1f:f9: 23:4a:3e:35:d8:9a:08:50:0c:f5:15:22:40:1e:12: c9:54:d6:19:6a:0a:01:18:8f:cd:6c:66:9a:00:65: fd:a4:55:51:37:7a:fa:c4:fb:4f:c5:39:bf:02:93: 50:da:2c:74:c1:1d:21:7f:54:a6:0a:ff:f2:fa:2b: 5d:ad:e3:a4:b9:43:32:e8:b0:7a:07:46:2a:a0:5d: 09:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:93:AE:88:BC:69:1D:8D:37:11:1E:47:90:F0:14:1C:82:6E:9A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:60:97:1e:b0:4c:0f:93:e0:74:5d:df:37:ac:93:a0:92:e4: 33:d4:c8:c3:51:bb:32:ab:22:83:23:e3:75:cd:b7:d1:e1:e0: 5a:02:da:35:f2:45:d8:6b:20:c9:c4:ee:2d:d2:5b:c7:08:d0: 1f:eb:34:6b:dd:bc:03:92:78:76:a3:d3:cf:68:be:3d:0f:be: 20:15:2c:13:4c:3e:6e:00:a5:10:ee:60:65:34:02:62:2f:35: 7d:56:17:5d:e0:96:80:04:8a:09:97:6f:7d:95:aa:bf:2a:e2: 86:9c:27:87:c3:a6:f7:4d:3a:36:5a:82:b9:c9:2c:63:b3:1f: 69:c8:72:b8:99:fe:7e:d9:18:c0:cf:cc:9a:98:00:b3:e2:fb: 36:cf:6c:cb:9c:50:61:c1:44:32:19:2b:f7:61:33:cb:39:2e: 56:22:d1:f6:e0:ac:aa:bc:b1:b4:ce:dc:6a:11:e5:97:4f:cb: fa:5c:d0:14:de:f7:f8:cf:83:9e:3a:17:ce:0a:a9:9e:0e:e2: 14:98:0e:99:66:06:67:76:0f:bf:ba:1c:b9:a7:37:ba:41:af: e1:72:c5:29:9e:31:b3:3e:f6:bc:8e:c6:a0:1f:64:29:11:a5: b4:3d:05:b9:cc:7c:6e:20:dd:3f:24:ea:49:c6:90:0d:fd:0a: 27:c4:25:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErDHCWxgQxzewEUlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDgwNjAzMDAwM1oXDTI1MDgwODAzMDAwMFowLzEtMCsGA1UEAxMk YzQ2YTgwNjEtZDA5YS00NWM0LTliNjgtYjA1MTUxNDg4M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZUYI0SezPZE2pLHTEOrjVexNOotqSoZC1e4 OVvaU8+CEPYsABFfotckyGPUnJVAldjaT44we2Xz1HMSnAqx/KUGKR+c8n9S98PC EyjZC6VG4Ladvv8qufVcFo2rPvTRo5Bo3T7ZnmYySrSPfaWcsx/6QGt0uX1GFYIu HWyu0H2LnRu9nSvTe6ZyNF40wTH/AZMDE7EGE3qn+EpLA6+kAu6MaqDKKMSL80OH D/CfcG50H/kjSj412JoIUAz1FSJAHhLJVNYZagoBGI/NbGaaAGX9pFVRN3r6xPtP xTm/ApNQ2ix0wR0hf1SmCv/y+itdreOkuUMy6LB6B0YqoF0JywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCiTroi8aR2NNxEeR5DwFByCbpqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvODViZTc5N2YtZjQyNi00 YmE4LTk4YjAtMWMyYjVmNzUyNzUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiYJcesEwPk+B0Xd83rJOg kuQz1MjDUbsyqyKDI+N1zbfR4eBaAto18kXYayDJxO4t0lvHCNAf6zRr3bwDknh2 o9PPaL49D74gFSwTTD5uAKUQ7mBlNAJiLzV9Vhdd4JaABIoJl299laq/KuKGnCeH w6b3TTo2WoK5ySxjsx9pyHK4mf5+2RjAz8yamACz4vs2z2zLnFBhwUQyGSv3YTPL OS5WItH24KyqvLG0ztxqEeWXT8v6XNAU3vf4z4OeOhfOCqmeDuIUmA6ZZgZndg+/ uhy5pze6Qa/hcsUpnjGzPva8jsagH2QpEaW0PQW5zHxuIN0/JOpJxpAN/QonxCXG -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:05 2025 by rpki-client