$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft File: 433ef7a7-1e53-4401-9dec-0da336641458.mft (raw, json) Hash identifier: BlaHJ9DjQZ1tOUDlG38d+XB7ckUBOD5GjpCUMXw9cWE= Subject key identifier: D9:1C:DD:F6:F5:65:16:C4:6E:5A:07:C4:4B:05:F0:E1:64:51:06:02 Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458 Certificate serial: 010D0C9F4328584AC22DF6444C4D203AE697CBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft Manifest number: 010D0C9F4328584646AAFC67B35FD9718D3311E8 Signing time: Tue 05 Aug 2025 19:00:08 +0000 Manifest this update: Tue 05 Aug 2025 19:00:08 +0000 Manifest next update: Thu 07 Aug 2025 19:00:00 +0000 Files and hashes: 1: 2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa (hash: 3B+9LZjwLFcVOPx+DzALFFfekck/M7aZ102ihITNjA4=) 2: 433ef7a7-1e53-4401-9dec-0da336641458.crl (hash: oncJBnXw4JGuzupiLYiq6+QBbmwYrPgH22a95LG5UjI=) 3: 554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (hash: fjCXijfJd5K4Xm5H9plaRP1Zjw6hifYjLSdxlY8XQr0=) 4: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (hash: Xlpg0TBWRNNio3v5ZQPZgWKOLR8cC/qEo2ctehr46lQ=) 5: bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (hash: zXr1AgUpaDS2VFyaiRy6rN+qauV9j6qVRVR5Q34CyvE=) 6: bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa (hash: VaxkRO2HfbyeReMsKnQl3lkmul7j7s4cJ70kJ+rZGtw=) 7: e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (hash: JB2suKR8Fvr7pIj/E2jh8tso1haROJN08heymNH1fKw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:2d:f6:44:4c:4d:20:3a:e6:97:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458 Validity Not Before: Aug 5 19:00:08 2025 GMT Not After : Aug 7 19:00:00 2025 GMT Subject: CN=626f5feb-1124-4695-9724-0137a750988a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:d1:6d:d5:58:4a:c1:96:c3:6d:45:95:7f: f0:af:de:1b:51:00:83:ab:be:b1:a3:23:c4:a1:d2: 01:82:c9:67:94:58:78:65:6d:a7:4a:20:4b:eb:17: 50:e1:69:32:cc:00:a2:46:da:85:bd:b4:db:ab:bd: 17:bd:0a:b0:d9:ae:0c:ff:b2:cb:98:89:b4:a0:e5: d9:b5:76:ec:6d:b0:64:41:16:67:2e:2d:84:af:23: 53:30:6e:26:1d:eb:b3:77:88:8c:b8:29:3d:62:40: 7c:7c:93:bd:56:88:eb:b6:94:7d:3e:91:0f:bd:6f: 0b:bb:3c:14:a6:ca:42:db:25:4b:1b:d1:75:7d:d8: 90:7d:c6:b7:ac:ec:99:28:7b:0a:86:79:f8:c3:da: e5:3e:94:05:46:98:e4:e0:a6:c9:ab:0e:1a:35:d4: 47:69:72:cb:6c:85:99:6d:de:cc:98:3e:ed:41:56: 4e:67:e0:54:94:84:63:7c:61:56:ab:64:28:cc:bd: 33:e8:45:da:be:f1:8c:f0:fc:94:0b:2e:b2:05:58: 06:22:07:ea:de:e8:81:86:55:ba:aa:c9:30:9d:69: 95:d1:e8:67:3b:7c:29:5d:b4:f2:32:2b:ef:06:59: cc:46:ae:96:7d:75:58:b9:da:63:d7:40:64:d8:36: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1C:DD:F6:F5:65:16:C4:6E:5A:07:C4:4B:05:F0:E1:64:51:06:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl X509v3 Authority Key Identifier: keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:93:3e:1b:01:ae:18:ab:d8:2d:9c:50:43:15:14:21:94:ba: 52:35:49:aa:72:69:b1:af:fe:de:0c:e6:7f:fb:b4:79:5c:ab: b6:66:3b:25:d1:90:37:30:e0:35:30:fc:09:53:a4:0c:63:d7: f9:0f:99:55:15:d0:06:b6:49:d7:cc:e8:45:19:df:c0:bc:e3: e7:09:83:6a:39:dc:b1:e2:bf:0f:de:89:10:91:1c:64:be:e7: 31:81:e3:7e:7e:5e:7e:00:14:a6:86:2c:b5:f8:e6:38:b5:c3: f4:9d:53:fd:fa:b0:b5:af:d4:8a:e0:ff:bf:74:4a:e3:ed:39: 2d:01:c5:23:2d:c9:74:88:11:29:e6:24:1d:2d:eb:b2:4b:69: e9:dc:14:d9:39:c9:f7:02:b9:ba:d7:56:6d:13:82:7d:74:93: 7a:c7:60:f1:03:ba:98:a1:f3:89:24:b2:96:6e:0e:a3:ab:6b: 6c:61:42:65:a7:e1:43:1c:a2:75:7b:45:ef:7b:ee:b4:5c:1d: 81:ff:18:60:f0:f2:41:23:a3:99:16:6c:2c:60:48:d1:c5:38: ac:22:af:bd:7c:b9:ef:11:2e:e7:89:a4:08:9a:cb:4b:7c:77: 58:40:e1:86:07:62:87:da:1a:c0:e0:dd:f3:15:ea:07:5b:70: cc:4a:b9:89 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErCLfZETE0gOuaXy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMzZWY3YTctMWU1My00NDAxLTlkZWMtMGRhMzM2NjQx NDU4MB4XDTI1MDgwNTE5MDAwOFoXDTI1MDgwNzE5MDAwMFowLzEtMCsGA1UEAxMk NjI2ZjVmZWItMTEyNC00Njk1LTk3MjQtMDEzN2E3NTA5ODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQzRbdVYSsGWw21FlX/wr94bUQCDq76xoyPE odIBgslnlFh4ZW2nSiBL6xdQ4WkyzACiRtqFvbTbq70XvQqw2a4M/7LLmIm0oOXZ tXbsbbBkQRZnLi2EryNTMG4mHeuzd4iMuCk9YkB8fJO9VojrtpR9PpEPvW8LuzwU pspC2yVLG9F1fdiQfca3rOyZKHsKhnn4w9rlPpQFRpjk4KbJqw4aNdRHaXLLbIWZ bd7MmD7tQVZOZ+BUlIRjfGFWq2QozL0z6EXavvGM8PyUCy6yBVgGIgfq3uiBhlW6 qskwnWmV0ehnO3wpXbTyMivvBlnMRq6WfXVYudpj10Bk2DZpHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNkc3fb1ZRbEbloHxEsF8OFkUQYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MzNl ZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEzMzY2NDE0NTgvNDMzZWY3YTctMWU1My00 NDAxLTlkZWMtMGRhMzM2NjQxNDU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDMzZWY3YTctMWU1My00NDAxLTlk ZWMtMGRhMzM2NjQxNDU4LzQzM2VmN2E3LTFlNTMtNDQwMS05ZGVjLTBkYTMzNjY0 MTQ1OC5jcmwwHwYDVR0jBBgwFoAUFTCIyvk9B4N8aQIO08npMxuWMBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MzNlZjdhNy0xZTUzLTQ0MDEtOWRlYy0wZGEz MzY2NDE0NTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6kz4bAa4Yq9gtnFBDFRQh lLpSNUmqcmmxr/7eDOZ/+7R5XKu2Zjsl0ZA3MOA1MPwJU6QMY9f5D5lVFdAGtknX zOhFGd/AvOPnCYNqOdyx4r8P3okQkRxkvucxgeN+fl5+ABSmhiy1+OY4tcP0nVP9 +rC1r9SK4P+/dErj7TktAcUjLcl0iBEp5iQdLeuyS2np3BTZOcn3Arm611ZtE4J9 dJN6x2DxA7qYofOJJLKWbg6jq2tsYUJlp+FDHKJ1e0Xve+60XB2B/xhg8PJBI6OZ FmwsYEjRxTisIq+9fLnvES7niaQImstLfHdYQOGGB2KH2hrA4N3zFeoHW3DMSrmJ -----END CERTIFICATE-----Generated at Wed Aug 6 10:14:22 2025 by rpki-client