$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft File: a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft (raw, json) Hash identifier: X0K7+c3JrOodY8wPVn2pfO37TyPGLkmDCqSe2CzNJPM= Subject key identifier: 74:2F:BD:36:A0:DA:4C:70:8D:D0:F1:33:A5:C8:00:73:A0:5E:94:01 Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Certificate issuer: /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Certificate serial: 010D0C9F4328584ABC7AC618A538074379C39600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft Manifest number: 010D0C9F4328584073A82103104C36B9178C398E Signing time: Sun 03 Aug 2025 18:00:03 +0000 Manifest this update: Sun 03 Aug 2025 18:00:03 +0000 Manifest next update: Tue 05 Aug 2025 18:00:00 +0000 Files and hashes: 1: a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl (hash: DwF0I6p615cGOJyRgYAz6AY4lw6ukS3h5osC2QWh7HE=) 2: c11bfbf6-a7cd-3788-996d-490b83f2c2d7.roa (hash: xZyT7w2So/uGVjZlCxKBl5NonHRFMDn8feTVq4rBmXE=) 3: ee78d578-cb00-360f-80f3-173b2465e141.roa (hash: OnAWSyRcW877s5ATQOWsa5hKGG/qf9Te01SaVTzv+HU=) 4: eee29780-d621-38a5-88f3-66f2279c1220.roa (hash: 3R11JDEBTjjH5Qu2fiVk0qMrz1DNZM8zITUWKOLdYW0=) 5: fdb7d79b-8caa-37cb-a97b-0a2767b34ea5.roa (hash: Om9wXCraWuHklQG/kdI0bOKSG0eqbL2AkfEtFMVNe38=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:7a:c6:18:a5:38:07:43:79:c3:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Validity Not Before: Aug 3 18:00:03 2025 GMT Not After : Aug 5 18:00:00 2025 GMT Subject: CN=965054b7-696c-457c-8645-fd782fa2ded8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:2a:d9:ff:4e:ef:90:0c:44:87:78:64:9f: c2:ca:97:29:92:25:f1:b8:f7:bd:60:50:77:02:85: 54:9d:b8:a0:d0:44:e0:77:a2:dd:eb:fa:5e:4e:73: 6f:dd:29:a1:de:97:ed:0b:c6:b6:14:e3:df:3e:55: 2d:32:ed:50:c7:8a:65:16:76:77:f1:a3:bf:dc:eb: aa:79:92:e7:3c:91:52:60:b4:65:72:56:52:b1:44: 55:75:52:12:58:b7:72:bc:6e:78:12:57:39:c5:37: fd:89:d9:90:6f:af:89:74:2a:31:b7:0c:75:26:af: 3d:12:bf:0b:3d:11:ae:07:5e:d1:b9:3e:0b:ea:4e: c0:e4:48:87:da:5d:54:10:85:92:12:8b:12:8f:25: c2:83:ef:63:bc:c3:7e:4a:af:03:81:04:01:ed:04: a7:ca:9f:d1:98:92:1c:87:56:12:b7:2c:f9:91:5b: c2:30:e3:ff:a6:96:23:a9:ee:0b:36:57:81:89:bd: 02:98:ce:66:a0:4b:7e:62:8e:7c:4c:05:0f:09:b5: 0c:57:eb:f5:89:2b:1e:be:97:72:ce:fb:1b:5d:af: d3:2d:48:aa:f6:20:05:2b:48:3c:15:4f:18:2e:99: 3b:62:61:38:e4:a6:5e:9d:ed:1d:a7:7a:2e:5f:ca: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2F:BD:36:A0:DA:4C:70:8D:D0:F1:33:A5:C8:00:73:A0:5E:94:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl X509v3 Authority Key Identifier: keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:39:ad:de:ce:de:7a:f9:42:37:df:98:1f:d4:94:73:36:78: a2:e8:15:09:dd:05:f4:c9:e9:50:1a:06:70:00:ef:89:0f:e0: 9e:17:40:b4:e1:f5:e8:40:31:72:1f:cc:b4:64:1b:5c:b7:bd: d2:29:fd:2d:dc:4f:f8:e8:89:74:b4:46:b2:75:68:df:4b:90: ab:92:db:15:ea:1e:4c:d1:b5:32:8a:3f:c9:e9:78:ec:04:f8: 83:a1:9d:bf:d2:d4:82:e7:f8:92:91:c0:f5:68:9e:b9:2e:20: 85:9a:08:55:df:dc:1b:28:3d:aa:c6:c4:ac:f8:d1:01:f3:cc: 0f:56:82:dc:71:55:84:bd:25:b2:8e:6f:d6:71:8b:4f:f8:1a: da:f9:d5:45:7c:27:6c:43:85:49:b7:a7:d5:7c:86:4d:e6:b7: 34:dc:83:a8:a4:78:18:12:e7:05:dc:2d:32:7d:61:ba:bd:39: 95:b9:e6:b9:4f:3e:14:51:35:f9:53:d8:42:fd:5d:14:c0:f2: f5:6a:e2:7b:7e:4a:20:5b:a0:fc:5f:cd:af:ca:40:ec:eb:e7: cf:7c:b4:16:37:4e:19:c7:aa:65:a1:16:35:b1:c2:53:0b:87: a9:d7:94:eb:70:a1:1b:c9:cc:01:4b:18:50:20:2d:67:ff:b7: f1:86:63:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8esYYpTgHQ3nDlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAw OWY0MB4XDTI1MDgwMzE4MDAwM1oXDTI1MDgwNTE4MDAwMFowLzEtMCsGA1UEAxMk OTY1MDU0YjctNjk2Yy00NTdjLTg2NDUtZmQ3ODJmYTJkZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDcq2f9O75AMRId4ZJ/CypcpkiXxuPe9YFB3 AoVUnbig0ETgd6Ld6/peTnNv3Smh3pftC8a2FOPfPlUtMu1Qx4plFnZ38aO/3Ouq eZLnPJFSYLRlclZSsURVdVISWLdyvG54Elc5xTf9idmQb6+JdCoxtwx1Jq89Er8L PRGuB17RuT4L6k7A5EiH2l1UEIWSEosSjyXCg+9jvMN+Sq8DgQQB7QSnyp/RmJIc h1YStyz5kVvCMOP/ppYjqe4LNleBib0CmM5moEt+Yo58TAUPCbUMV+v1iSsevpdy zvsbXa/TLUiq9iAFK0g8FU8YLpk7YmE45KZene0dp3ouX8op2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHQvvTag2kxwjdDxM6XIAHOgXpQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmI4 M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvYTJiODNhZTctNTJiNi00 NWI0LTkyYzktYzEyZjdiYjAwOWY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJiODNhZTctNTJiNi00NWI0LTky YzktYzEyZjdiYjAwOWY0L2EyYjgzYWU3LTUyYjYtNDViNC05MmM5LWMxMmY3YmIw MDlmNC5jcmwwHwYDVR0jBBgwFoAUGQyTcZ0vFU2+EnGstbx1yAMoDiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJm N2JiMDA5ZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/Oa3ezt56+UI335gf1JRz Nnii6BUJ3QX0yelQGgZwAO+JD+CeF0C04fXoQDFyH8y0ZBtct73SKf0t3E/46Il0 tEaydWjfS5CrktsV6h5M0bUyij/J6XjsBPiDoZ2/0tSC5/iSkcD1aJ65LiCFmghV 39wbKD2qxsSs+NEB88wPVoLccVWEvSWyjm/WcYtP+Bra+dVFfCdsQ4VJt6fVfIZN 5rc03IOopHgYEucF3C0yfWG6vTmVuea5Tz4UUTX5U9hC/V0UwPL1auJ7fkogW6D8 X82vykDs6+fPfLQWN04Zx6ploRY1scJTC4ep15TrcKEbycwBSxhQIC1n/7fxhmMV -----END CERTIFICATE-----Generated at Mon Aug 4 11:06:45 2025 by rpki-client