$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: 9vVQcqsxo6XnzqFzIqZOtTvwr774XcBUs8iiFE44n68= Subject key identifier: 31:D2:15:C6:29:2E:F8:CE:82:7E:73:92:92:EF:AA:25:F1:16:96:B5 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584ACA16DB03C06037FCF8F83700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A477A3 Signing time: Fri 08 Aug 2025 15:00:03 +0000 Manifest this update: Fri 08 Aug 2025 15:00:03 +0000 Manifest next update: Sun 10 Aug 2025 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: GTQNMvP5+m3uE8hwXTy9m9vItEc+sBnx/uBniu44/C8=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: IeTlax7PdCWX4ho7izGamiqWdlul4+4T4QCJKDqOpL8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:16:db:03:c0:60:37:fc:f8:f8:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Aug 8 15:00:03 2025 GMT Not After : Aug 10 15:00:00 2025 GMT Subject: CN=b5168e9e-aa49-4c2c-be09-396973c48405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:51:a5:37:5e:c3:9d:69:dd:a3:a9:9f:94: c8:00:33:be:fd:bd:fb:cb:0c:05:ef:fb:08:e6:51: fe:e0:dd:61:49:d3:30:71:2f:af:9a:55:fa:f7:a8: 62:a4:55:6a:d2:9b:ce:90:21:1d:7c:27:72:41:62: 88:c6:c0:e7:9a:59:76:a3:05:c3:3d:4e:73:1c:3f: ae:2d:1c:c3:a0:33:e0:73:1b:10:8d:76:43:42:fa: bf:52:dc:42:f6:61:4c:eb:73:46:95:8c:58:c0:c4: 1f:4c:96:6f:c9:a9:1d:44:3b:04:7e:2c:6b:6d:72: fc:c7:76:7d:64:0f:e6:c0:06:af:a8:23:92:c4:f4: fe:72:f3:09:69:04:15:66:5c:4c:06:5c:89:55:34: f8:09:fc:3c:d7:cd:21:10:ef:a7:ac:bd:73:80:90: 64:60:ed:62:a8:ed:83:38:3e:4b:49:41:f6:59:2f: fc:09:f7:53:11:81:c5:64:58:5c:f7:55:e4:cf:5c: 6d:30:5d:8c:af:f1:3f:0d:a1:b0:1b:2b:50:e2:02: cf:fc:7e:dc:70:7d:4d:22:88:37:af:d7:9a:f5:8e: 50:12:af:a3:58:69:e6:6a:8c:be:1f:0a:da:c3:3c: 1f:8e:5b:1d:25:2c:3c:10:ec:07:8f:8b:60:3f:8b: 4d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:15:C6:29:2E:F8:CE:82:7E:73:92:92:EF:AA:25:F1:16:96:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a9:84:59:e5:7e:d4:88:03:45:8b:19:ee:51:30:6b:8c:ef: ae:57:9c:5e:9e:f3:65:71:4c:1f:a1:08:e0:58:94:f1:8d:05: 19:f0:25:e7:4d:55:af:0e:22:1c:7f:5a:c0:a2:c0:18:43:ad: 17:a6:9e:4d:be:5e:71:9f:22:28:2f:2f:63:b6:4b:46:a4:41: c8:38:da:d6:4e:5d:7a:a8:5c:94:63:0d:85:8d:68:7a:c8:5c: 31:99:fc:85:df:12:3e:18:54:87:21:7f:66:55:e3:c4:f6:b9: e0:86:32:83:99:6e:01:3e:b3:21:5c:f8:21:da:d2:e8:4b:80: 01:2a:9c:b2:df:b9:43:75:fd:d7:ef:04:5d:98:48:7b:4d:57: f6:74:cb:eb:9b:09:0e:6f:69:c1:5c:a8:01:42:f2:d0:56:97: 16:1e:f6:a3:24:32:e0:c7:1f:5f:9e:a5:07:57:2d:94:a6:cb: 6f:77:fd:7e:78:08:9d:f5:5d:5c:05:27:be:bd:c1:c0:62:dc: eb:09:f9:ff:3d:77:d0:b1:08:4a:70:f2:38:c5:22:b1:f8:f1: f4:74:e8:c4:27:d8:23:3a:23:a0:8a:81:dd:50:d0:2a:f9:df: df:7f:21:83:e3:2b:a2:2a:41:4b:b5:0f:32:ba:89:4e:a8:69: f5:b7:f8:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErKFtsDwGA3/Pj4NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI1MDgwODE1MDAwM1oXDTI1MDgxMDE1MDAwMFowLzEtMCsGA1UEAxMk YjUxNjhlOWUtYWE0OS00YzJjLWJlMDktMzk2OTczYzQ4NDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1xRpTdew51p3aOpn5TIADO+/b37ywwF7/sI 5lH+4N1hSdMwcS+vmlX696hipFVq0pvOkCEdfCdyQWKIxsDnmll2owXDPU5zHD+u LRzDoDPgcxsQjXZDQvq/UtxC9mFM63NGlYxYwMQfTJZvyakdRDsEfixrbXL8x3Z9 ZA/mwAavqCOSxPT+cvMJaQQVZlxMBlyJVTT4Cfw8180hEO+nrL1zgJBkYO1iqO2D OD5LSUH2WS/8CfdTEYHFZFhc91Xkz1xtMF2Mr/E/DaGwGytQ4gLP/H7ccH1NIog3 r9ea9Y5QEq+jWGnmaoy+HwrawzwfjlsdJSw8EOwHj4tgP4tN1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDHSFcYpLvjOgn5zkpLvqiXxFpa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzqYRZ5X7UiANFixnuUTBr jO+uV5xenvNlcUwfoQjgWJTxjQUZ8CXnTVWvDiIcf1rAosAYQ60Xpp5Nvl5xnyIo Ly9jtktGpEHIONrWTl16qFyUYw2FjWh6yFwxmfyF3xI+GFSHIX9mVePE9rnghjKD mW4BPrMhXPgh2tLoS4ABKpyy37lDdf3X7wRdmEh7TVf2dMvrmwkOb2nBXKgBQvLQ VpcWHvajJDLgxx9fnqUHVy2Upstvd/1+eAid9V1cBSe+vcHAYtzrCfn/PXfQsQhK cPI4xSKx+PH0dOjEJ9gjOiOgioHdUNAq+d/ffyGD4yuiKkFLtQ8yuolOqGn1t/hJ -----END CERTIFICATE-----Generated at Sat Aug 9 05:36:45 2025 by rpki-client