$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: UWn4Fmwoe0ghiWv3/uC48tyZUn6iql+1Q00DZZeWAVw= Subject key identifier: DD:B8:C4:91:DD:1A:59:EB:B9:3D:99:CF:67:01:15:04:59:6F:15:BB Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584ABE3972257C68F6889920097E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B0D Signing time: Mon 04 Aug 2025 09:00:03 +0000 Manifest this update: Mon 04 Aug 2025 09:00:03 +0000 Manifest next update: Wed 06 Aug 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: UtoXe4ugFYSCVmHRn5I5k+tnHMh/3Dwg9SbQ4Q0V3n8=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: OA02WKCiCPeFhY8jGuL2cglDmrskTsDToHEgPSFqr+s=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: A7eyR/ClB4HrHryafnWEWZIYTQECk52dUcRzu1R9kdE=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: 0lF3QjgfoSRwxocKEJvdsw+ufdxVUT3L2iSAPcMI7zw=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: P6EqG+UoVXa/WjhtyPwkEta3G6vyzMCeYwFU9qc8A4Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:39:72:25:7c:68:f6:88:99:20:09:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Aug 4 09:00:03 2025 GMT Not After : Aug 6 09:00:00 2025 GMT Subject: CN=ddd6c850-bb03-4473-9c9c-33b7012eda3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2d:e9:40:92:7f:33:81:d9:58:95:87:33:95: 1c:10:15:64:c6:5f:ad:97:b9:64:9d:6c:cc:44:eb: 17:db:6a:11:49:c2:d5:9d:20:06:5c:e1:d4:b4:ef: f6:8c:ea:ce:17:01:10:1b:4d:7b:f8:57:e0:60:33: d9:7b:be:df:ff:4f:16:eb:09:4f:eb:25:c6:b6:42: c4:17:10:45:fa:84:c0:28:41:7e:ba:aa:59:a0:1a: b2:35:aa:2a:70:64:fc:f1:ee:f4:50:f0:44:88:ee: 34:0b:18:10:c9:8e:1f:b6:6e:2d:09:96:c3:bf:12: 26:fa:db:40:8c:c9:de:ce:98:f8:72:bc:da:63:9b: 85:45:a9:54:81:43:76:f5:42:d5:38:1f:93:9d:98: cc:2f:e0:11:8f:a9:5f:73:9f:a1:a4:df:21:4a:d5: ee:b6:05:58:6c:04:69:c9:fb:99:9a:c9:9a:50:c7: de:67:76:60:99:ff:d7:ed:13:fb:44:55:ed:69:53: e0:ab:af:1a:84:57:38:06:8e:45:eb:ed:6b:2a:21: 7b:a3:e7:25:67:e7:0c:b2:9d:09:9d:c2:67:78:88: 65:79:6d:e2:34:67:63:69:da:1e:fe:06:dc:7f:73: 0a:09:37:ed:40:0a:23:12:c8:cf:dd:a1:a3:8e:70: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B8:C4:91:DD:1A:59:EB:B9:3D:99:CF:67:01:15:04:59:6F:15:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:64:39:88:ae:8f:71:2c:70:86:3c:12:66:a3:da:61:c6:fb: a5:97:91:c5:2c:90:cf:c9:23:c1:50:77:d5:e7:03:59:9f:5f: 75:33:08:b6:e5:d3:a8:35:ab:3b:80:6b:ef:ef:44:95:de:4d: 1b:f8:eb:a5:ca:32:d7:c1:67:95:78:bd:6c:7b:13:81:07:43: 17:52:07:99:e7:4b:82:6d:91:a1:ed:ac:23:71:70:23:65:31: 62:ce:1c:81:c6:62:7c:29:4a:ce:e2:75:55:23:22:26:b2:fe: 3c:79:f5:fa:ec:b8:5b:d2:06:82:af:bd:ae:25:bb:5d:f5:00: 77:41:ff:d4:cc:7d:d2:32:26:66:95:a1:06:17:b3:a7:de:ee: 3d:82:79:05:22:80:2b:f8:d9:5c:aa:49:24:0b:21:f2:ae:af: c3:6f:d5:64:3f:da:55:ac:d3:9c:fd:4b:28:af:a4:a6:3d:e3: 4b:ba:d0:c0:a8:62:95:f4:37:11:80:10:85:fe:98:1a:e9:d5: bd:c9:47:4f:33:c6:5a:93:2a:97:c2:94:86:75:09:64:11:f6: 91:e3:b4:07:fb:22:ea:c4:00:bd:18:8d:8f:78:ce:09:65:db: c2:dd:2e:a2:f5:22:b6:5d:eb:da:58:89:cb:f7:27:a8:e9:91: e9:0a:96:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+OXIlfGj2iJkgCX4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDgwNDA5MDAwM1oXDTI1MDgwNjA5MDAwMFowLzEtMCsGA1UEAxMk ZGRkNmM4NTAtYmIwMy00NDczLTljOWMtMzNiNzAxMmVkYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C3pQJJ/M4HZWJWHM5UcEBVkxl+tl7lknWzM ROsX22oRScLVnSAGXOHUtO/2jOrOFwEQG017+FfgYDPZe77f/08W6wlP6yXGtkLE FxBF+oTAKEF+uqpZoBqyNaoqcGT88e70UPBEiO40CxgQyY4ftm4tCZbDvxIm+ttA jMnezpj4crzaY5uFRalUgUN29ULVOB+TnZjML+ARj6lfc5+hpN8hStXutgVYbARp yfuZmsmaUMfeZ3Zgmf/X7RP7RFXtaVPgq68ahFc4Bo5F6+1rKiF7o+clZ+cMsp0J ncJneIhleW3iNGdjadoe/gbcf3MKCTftQAojEsjP3aGjjnB44QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN24xJHdGlnruT2Zz2cBFQRZbxW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTZDmIro9xLHCGPBJmo9ph xvull5HFLJDPySPBUHfV5wNZn191Mwi25dOoNas7gGvv70SV3k0b+OulyjLXwWeV eL1sexOBB0MXUgeZ50uCbZGh7awjcXAjZTFizhyBxmJ8KUrO4nVVIyImsv48efX6 7Lhb0gaCr72uJbtd9QB3Qf/UzH3SMiZmlaEGF7On3u49gnkFIoAr+NlcqkkkCyHy rq/Db9VkP9pVrNOc/Usor6SmPeNLutDAqGKV9DcRgBCF/pga6dW9yUdPM8ZakyqX wpSGdQlkEfaR47QH+yLqxAC9GI2PeM4JZdvC3S6i9SK2XevaWInL9yeo6ZHpCpZC -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:12 2025 by rpki-client