$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft File: fd61a214-d867-444e-b2f4-ca291d4c4419.mft (raw, json) Hash identifier: EkK29MCuPxudbf/1ip2ACSsX45P99+jZhGm1Vn2k7l8= Subject key identifier: 2A:16:DB:3E:4C:36:8E:FA:28:0B:AF:88:8F:F1:6E:6E:D6:04:88:E6 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F4328584AC2697CA3271C00BAE85E8F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft Manifest number: 010D0C9F4328584073A828C80957C4AEF0069BBF Signing time: Tue 05 Aug 2025 21:00:03 +0000 Manifest this update: Tue 05 Aug 2025 21:00:03 +0000 Manifest next update: Thu 07 Aug 2025 21:00:00 +0000 Files and hashes: 1: 88824dc8-612f-344f-98c5-1b7608353512.roa (hash: MTX6NET4CjaIUEUhKjptWV3oNy0NWJq0TaGAwHZl4ks=) 2: fd61a214-d867-444e-b2f4-ca291d4c4419.crl (hash: HIEa56c2VPEUwIPz1M2NqMR7+dY9cE0f2ZV3BS7QkdQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:69:7c:a3:27:1c:00:ba:e8:5e:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Aug 5 21:00:03 2025 GMT Not After : Aug 7 21:00:00 2025 GMT Subject: CN=207484c3-afd1-4bd1-9d69-fc9394e55bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:93:7b:f6:7d:fe:e4:5c:5c:1c:7e:db:5b: 14:7d:ef:11:44:0d:76:83:9f:d2:a5:87:10:fa:69: 13:6b:3b:0f:a5:db:78:04:29:ae:3e:b0:d1:93:53: 55:d6:d5:27:6e:25:1d:70:bf:13:f7:07:3e:89:55: eb:42:c8:da:fc:c9:de:2e:6a:5a:02:63:a4:ac:92: ef:7a:de:33:b8:f4:0e:7b:f2:73:b1:51:16:e0:75: 36:ae:55:6d:45:ce:4f:be:9b:1c:2e:c7:7d:dd:52: 59:be:95:a8:46:eb:d3:9a:b1:e7:16:17:20:85:4a: 42:f3:a1:46:dd:2a:b5:fb:db:ef:fc:0d:6d:9e:cf: a8:f4:29:91:cf:3a:af:28:35:ed:70:48:db:02:bd: c2:6f:29:50:29:87:42:16:00:e3:59:39:9a:b6:7e: 89:b2:4c:7d:e0:ea:70:43:6a:70:d5:47:df:38:87: a8:a2:70:15:fd:55:71:3f:e0:87:7d:ab:42:96:63: ad:77:65:55:2a:ed:55:42:5d:80:17:da:27:ed:f3: c9:bd:7c:57:8d:e8:68:a5:c2:be:b0:d2:09:80:65: 06:ef:4e:07:04:d6:17:09:37:e0:bf:f6:0e:5c:2f: 71:31:e2:90:88:b5:46:95:f7:a4:99:9e:f6:36:7c: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:16:DB:3E:4C:36:8E:FA:28:0B:AF:88:8F:F1:6E:6E:D6:04:88:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:07:17:4d:7a:f2:a4:d7:88:50:14:68:3b:97:06:22:40:f4: 38:69:fa:13:9e:c6:99:da:7d:8f:75:35:d0:38:af:6e:d7:8f: f4:a3:bf:4d:2b:63:29:ab:38:fd:70:4c:12:b2:73:27:33:d4: 82:0a:66:9b:40:81:67:ea:f8:25:42:5a:16:5c:df:84:14:c3: 7b:24:68:dc:70:f8:fd:2b:a9:29:c8:76:84:2f:ef:41:bd:98: d9:b4:5a:50:31:16:1d:39:fc:26:32:42:f4:42:21:a0:54:30: 2c:16:be:bd:72:63:71:4e:45:32:7a:15:ee:ac:70:4b:97:f4: 1e:c0:f1:8c:59:d8:b9:77:74:17:70:f7:5d:ef:2e:16:35:24: e5:17:f9:94:29:07:47:ce:38:31:43:08:aa:8a:20:a5:db:b3: 9a:17:3a:4f:8e:fd:bd:6a:7b:05:61:58:0c:13:64:5e:90:8f: a0:09:7e:c8:40:89:7f:f6:42:2d:e6:d0:d6:b4:d1:23:b1:e2: 10:06:72:41:c7:fa:16:55:0f:1a:62:8f:e9:96:ae:00:46:49: 9a:f5:68:b3:89:7d:1c:43:79:59:53:b1:bd:4b:de:27:a6:f8: d1:45:fa:73:ab:d4:97:34:dc:12:ae:02:f9:97:c8:c4:89:81: 65:92:6d:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErCaXyjJxwAuuhejwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI1MDgwNTIxMDAwM1oXDTI1MDgwNzIxMDAwMFowLzEtMCsGA1UEAxMk MjA3NDg0YzMtYWZkMS00YmQxLTlkNjktZmM5Mzk0ZTU1YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4mTe/Z9/uRcXBx+21sUfe8RRA12g5/SpYcQ +mkTazsPpdt4BCmuPrDRk1NV1tUnbiUdcL8T9wc+iVXrQsja/MneLmpaAmOkrJLv et4zuPQOe/JzsVEW4HU2rlVtRc5PvpscLsd93VJZvpWoRuvTmrHnFhcghUpC86FG 3Sq1+9vv/A1tns+o9CmRzzqvKDXtcEjbAr3CbylQKYdCFgDjWTmatn6Jskx94Opw Q2pw1UffOIeoonAV/VVxP+CHfatClmOtd2VVKu1VQl2AF9on7fPJvXxXjehopcK+ sNIJgGUG704HBNYXCTfgv/YOXC9xMeKQiLVGlfekmZ72NnxeOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCoW2z5MNo76KAuviI/xbm7WBIjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvZmQ2MWEyMTQtZDg2Ny00 NDRlLWIyZjQtY2EyOTFkNGM0NDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzBxdNevKk14hQFGg7lwYi QPQ4afoTnsaZ2n2PdTXQOK9u14/0o79NK2Mpqzj9cEwSsnMnM9SCCmabQIFn6vgl QloWXN+EFMN7JGjccPj9K6kpyHaEL+9BvZjZtFpQMRYdOfwmMkL0QiGgVDAsFr69 cmNxTkUyehXurHBLl/QewPGMWdi5d3QXcPdd7y4WNSTlF/mUKQdHzjgxQwiqiiCl 27OaFzpPjv29ansFYVgME2RekI+gCX7IQIl/9kIt5tDWtNEjseIQBnJBx/oWVQ8a Yo/plq4ARkma9WiziX0cQ3lZU7G9S94npvjRRfpzq9SXNNwSrgL5l8jEiYFlkm3K -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:49 2025 by rpki-client