$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft File: 8b3000e8-1e0f-482a-991d-e2358c249593.mft (raw, json) Hash identifier: GmrQPu/j5DzZcdkqlT7KfxpPF/EjK27ipvM2LZM/90w= Subject key identifier: 8D:A4:28:EA:19:B2:8C:E0:7E:89:66:09:53:98:38:E8:74:B1:8F:FF Authority key identifier: 78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32 Certificate issuer: /CN=8b3000e8-1e0f-482a-991d-e2358c249593 Certificate serial: 010D0C9F4328584ABC216E8709DE5058E2F06880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft Manifest number: 010D0C9F43285848DE96CBE84505FFB31C5400B5 Signing time: Sun 03 Aug 2025 15:00:03 +0000 Manifest this update: Sun 03 Aug 2025 15:00:03 +0000 Manifest next update: Tue 05 Aug 2025 15:00:00 +0000 Files and hashes: 1: 3a1ad506-6ee7-3e19-9834-505baf7c0f5e.roa (hash: VQXoQGLrROF+8f5qNeK/x4HSGRnMlDN0W47B7eT2+h4=) 2: 3c8dc3fa-b3c4-3a8e-ab71-7e6a16d841d3.roa (hash: KrAiDvhg8jBHz4Mo7TNpdIL2/Wo6tDmrKKMaXEOE3sI=) 3: 8b3000e8-1e0f-482a-991d-e2358c249593.crl (hash: fo9Pgr9X5zvHifbaTEekyrdR+hGQuBgh9jmVOqPLoJ8=) 4: fe48d179-20bb-3d30-832e-7330c1cac918.roa (hash: wIag0dEvmJjkG99lpzZnGGZP1dwdpLs8S9X52So7UGY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:21:6e:87:09:de:50:58:e2:f0:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3000e8-1e0f-482a-991d-e2358c249593 Validity Not Before: Aug 3 15:00:03 2025 GMT Not After : Aug 5 15:00:00 2025 GMT Subject: CN=626e2f19-0a50-456d-b178-04bb0a25bdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c1:46:c6:d5:43:ff:d0:c7:a5:c7:8c:13:d9: 2e:5b:de:69:27:67:1f:c8:91:1d:df:58:5a:0a:bd: 7a:ec:e7:61:99:12:5e:ac:0c:23:ad:13:50:99:d5: 98:d7:72:f2:83:68:00:51:4f:b5:68:c0:6e:3b:db: f0:38:cd:a1:d0:ba:67:cc:7b:d9:b0:e8:15:b7:98: d7:7d:ca:42:f8:a3:65:c3:8b:de:66:7a:5d:de:44: 95:a8:c3:7e:67:17:63:b5:f4:f8:d9:78:d0:a8:73: da:e5:e3:e0:eb:38:03:90:49:96:e0:07:d8:f0:ce: 12:4f:0b:7f:b9:2b:f8:9c:22:07:db:30:d5:2c:c4: 2a:73:81:8f:a4:ff:e4:05:f5:e5:1d:ba:aa:0c:6f: 26:ff:02:9d:a5:1d:9d:0f:8f:07:76:e5:ac:36:51: ab:3f:16:f5:52:68:47:e5:9d:5a:8e:36:a6:fa:6e: f5:f0:4a:c9:1f:eb:d0:cb:e7:f5:4d:2b:3a:54:b7: cd:c2:be:6a:81:c1:f5:36:f6:a1:95:75:b4:ba:40: 70:5b:ec:6e:dc:b7:07:a0:e0:00:27:24:de:15:b0: 8d:5a:27:c7:99:d9:e4:ec:b1:90:49:71:a5:c5:8d: 0e:14:fa:43:3c:2d:2c:81:d3:7a:f2:65:90:81:0c: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A4:28:EA:19:B2:8C:E0:7E:89:66:09:53:98:38:E8:74:B1:8F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl X509v3 Authority Key Identifier: keyid:78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:96:54:01:60:21:68:8d:bf:41:2a:5c:c5:12:cf:00:f4:87: df:63:6d:af:fc:16:af:39:f7:5e:d9:e2:ae:cc:4e:36:22:e4: d4:41:6c:84:f7:e8:7a:a4:05:9c:af:a7:74:1a:15:f8:6d:7f: ba:82:ac:06:25:21:cd:68:38:c6:79:71:3b:f0:c4:26:f8:3d: 90:a1:69:9d:4f:2c:ad:19:f2:17:b6:c9:1d:8c:d1:3b:1e:08: 9a:59:d7:f8:be:9f:23:6e:20:34:19:b8:66:1d:3d:c6:2c:20: 5b:a7:72:d1:2e:d6:3e:93:dd:e4:d4:1c:3b:0c:0c:2b:db:d9: 56:bf:89:4c:e9:af:3c:4f:5d:ec:a4:92:96:d4:37:a3:79:af: 74:bd:e5:f1:d1:86:0f:8b:7b:d5:f0:93:f4:5d:36:77:e2:04: 2d:bf:85:9d:26:6a:55:61:fd:c0:3a:1a:35:b1:9d:82:80:13: e6:a7:1e:df:1e:89:bb:fe:6a:c1:9c:f5:e6:65:d2:b6:2d:c1: f2:f4:79:84:40:8b:16:a4:b5:4c:ef:f4:5e:06:3d:62:67:b8: 84:64:eb:72:05:9d:19:4c:b8:de:4c:24:ee:60:b2:02:8f:7b: a5:90:84:52:55:af:b1:49:25:d5:b0:06:5d:b3:0e:c8:ad:92: 7a:fc:ea:c2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8IW6HCd5QWOLwaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzMDAwZTgtMWUwZi00ODJhLTk5MWQtZTIzNThjMjQ5 NTkzMB4XDTI1MDgwMzE1MDAwM1oXDTI1MDgwNTE1MDAwMFowLzEtMCsGA1UEAxMk NjI2ZTJmMTktMGE1MC00NTZkLWIxNzgtMDRiYjBhMjViZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcFGxtVD/9DHpceME9kuW95pJ2cfyJEd31ha Cr167OdhmRJerAwjrRNQmdWY13Lyg2gAUU+1aMBuO9vwOM2h0LpnzHvZsOgVt5jX fcpC+KNlw4veZnpd3kSVqMN+ZxdjtfT42XjQqHPa5ePg6zgDkEmW4AfY8M4STwt/ uSv4nCIH2zDVLMQqc4GPpP/kBfXlHbqqDG8m/wKdpR2dD48HduWsNlGrPxb1UmhH 5Z1ajjam+m718ErJH+vQy+f1TSs6VLfNwr5qgcH1NvahlXW0ukBwW+xu3LcHoOAA JyTeFbCNWifHmdnk7LGQSXGlxY0OFPpDPC0sgdN68mWQgQwmmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI2kKOoZsozgfolmCVOYOOh0sY//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjMw MDBlOC0xZTBmLTQ4MmEtOTkxZC1lMjM1OGMyNDk1OTMvOGIzMDAwZTgtMWUwZi00 ODJhLTk5MWQtZTIzNThjMjQ5NTkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGIzMDAwZTgtMWUwZi00ODJhLTk5 MWQtZTIzNThjMjQ5NTkzLzhiMzAwMGU4LTFlMGYtNDgyYS05OTFkLWUyMzU4YzI0 OTU5My5jcmwwHwYDVR0jBBgwFoAUeNOkGfpC7w/aWciP70/EKNl/dzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjMwMDBlOC0xZTBmLTQ4MmEtOTkxZC1lMjM1 OGMyNDk1OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZllQBYCFojb9BKlzFEs8A 9IffY22v/BavOfde2eKuzE42IuTUQWyE9+h6pAWcr6d0GhX4bX+6gqwGJSHNaDjG eXE78MQm+D2QoWmdTyytGfIXtskdjNE7HgiaWdf4vp8jbiA0GbhmHT3GLCBbp3LR LtY+k93k1Bw7DAwr29lWv4lM6a88T13spJKW1Dejea90veXx0YYPi3vV8JP0XTZ3 4gQtv4WdJmpVYf3AOho1sZ2CgBPmpx7fHom7/mrBnPXmZdK2LcHy9HmEQIsWpLVM 7/ReBj1iZ7iEZOtyBZ0ZTLjeTCTuYLICj3ulkIRSVa+xSSXVsAZdsw7IrZJ6/OrC -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:16 2025 by rpki-client