$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft File: f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft (raw, json) Hash identifier: s4mcM+kJh2rXFsrcl239c83krz1lGfaDF76+mAnmLJc= Subject key identifier: 66:21:4C:0A:95:D6:72:C5:66:93:4E:5F:29:CB:5D:CB:B0:02:BE:C8 Authority key identifier: 7D:B5:95:E5:B4:3D:8E:29:0A:60:51:6C:DA:78:76:1F:1D:FB:E7:E5 Certificate issuer: /CN=f04514a7-6d72-4ac6-8532-7a5f84d76f24 Certificate serial: 010D0C9F4328584ABC988E55CE3F74E7801EBA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft Manifest number: 010D0C9F43285843F43EDA101087BDE96334EF03 Signing time: Sun 03 Aug 2025 19:00:03 +0000 Manifest this update: Sun 03 Aug 2025 19:00:03 +0000 Manifest next update: Wed 06 Aug 2025 19:00:00 +0000 Files and hashes: 1: 76486e25-650a-3bbc-a822-ec7be700b9dc.roa (hash: Twd9dtlpvYgrvYoK7ve4rG7EgM+xRjwKa9+P3Fuopzo=) 2: f04514a7-6d72-4ac6-8532-7a5f84d76f24.crl (hash: GuFg+UuXRP3PjwPr2r2jCkv3TDFla6qrDBfi2y2eEVA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:98:8e:55:ce:3f:74:e7:80:1e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04514a7-6d72-4ac6-8532-7a5f84d76f24 Validity Not Before: Aug 3 19:00:03 2025 GMT Not After : Aug 6 19:00:00 2025 GMT Subject: CN=91dfef7b-ac9f-485a-9fb1-971bdb537f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:46:fc:a7:ad:36:c0:fe:bc:f8:89:b9:ca:1a: 8d:af:e9:98:2d:f2:43:3f:f4:bc:7a:7b:e7:8e:26: d4:d9:27:38:b7:9b:66:f9:92:d0:09:7e:fc:9e:ad: 16:c4:18:03:e1:2e:20:66:f6:7f:2a:cb:51:d9:83: 63:ef:34:28:6a:87:06:03:5b:86:d6:25:c1:ce:8f: 6a:d3:43:09:d9:e4:10:b5:7e:f1:03:8d:22:f2:d7: 7c:1c:44:69:bf:92:82:e0:e6:4b:a4:69:ce:b0:5c: b0:a5:e2:4a:1a:b8:d7:3f:8e:85:6e:49:8d:fe:b1: 3e:18:32:f6:40:12:75:73:93:fa:aa:da:63:18:4e: 86:5f:9b:d6:63:d1:99:cb:cb:8e:d7:ea:38:aa:dc: a0:45:51:d0:91:d3:0d:30:55:f4:b5:23:5a:fc:c5: bb:64:11:99:14:d7:46:56:9d:4b:87:29:0a:20:c3: 4a:50:92:67:1f:1d:b1:42:4b:01:2a:61:d9:10:95: 9f:72:84:b5:f1:ed:c3:84:59:f7:9d:48:e0:4c:9f: 05:ec:03:50:42:68:0a:ba:75:6f:6a:07:2d:b6:b3: 18:e9:06:e9:1d:f5:e1:ef:52:8c:66:04:13:1f:57: eb:2f:1c:00:d6:ed:2d:4a:c0:61:88:73:05:42:83: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:4C:0A:95:D6:72:C5:66:93:4E:5F:29:CB:5D:CB:B0:02:BE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24/f04514a7-6d72-4ac6-8532-7a5f84d76f24.crl X509v3 Authority Key Identifier: keyid:7D:B5:95:E5:B4:3D:8E:29:0A:60:51:6C:DA:78:76:1F:1D:FB:E7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f04514a7-6d72-4ac6-8532-7a5f84d76f24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a6:c8:da:23:b8:c7:bb:5d:c3:48:4d:7f:dd:bb:f4:c6:01: 6c:7d:61:25:2e:c3:b8:a1:d8:56:5f:31:b3:0d:8f:6d:57:6d: d2:54:ae:25:69:62:53:16:96:42:d3:66:ee:3f:df:60:ea:f8: 2c:d0:19:ae:ee:ca:a1:6b:d1:3f:af:86:02:26:cc:04:35:03: ab:53:1f:85:37:f1:91:01:dc:99:ab:fe:c1:9e:22:a9:69:d6: 0f:dc:c8:8c:08:84:95:91:85:60:b9:7f:ea:f8:db:6a:6c:4c: 58:d9:e4:b7:50:c5:62:ca:9d:e1:5e:36:c5:02:fa:4f:c3:cb: 27:65:09:d1:a5:79:db:ce:24:92:a1:5c:dc:ce:3a:47:d7:da: 5d:b1:2a:d7:ed:f0:80:08:20:d0:91:d3:4f:ce:3a:d7:15:b8: 1e:92:80:33:88:b8:1d:7f:d6:61:a0:2c:16:d1:29:13:2a:87: ae:58:ec:0d:6c:64:9e:a4:b3:e0:0c:b8:3b:0b:57:54:78:1f: d3:bd:23:4b:ed:9d:71:fc:01:cc:5d:0d:cd:01:5f:e3:72:d0: cf:e3:09:01:87:f7:51:88:0b:50:88:37:df:8a:9e:7e:56:78: a1:5e:fc:07:fb:d9:ac:47:ea:5f:10:6c:ba:86:d9:c4:55:04: 56:34:15:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8mI5Vzj9054AeuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0NTE0YTctNmQ3Mi00YWM2LTg1MzItN2E1Zjg0ZDc2 ZjI0MB4XDTI1MDgwMzE5MDAwM1oXDTI1MDgwNjE5MDAwMFowLzEtMCsGA1UEAxMk OTFkZmVmN2ItYWM5Zi00ODVhLTlmYjEtOTcxYmRiNTM3ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkb8p602wP68+Im5yhqNr+mYLfJDP/S8envn jibU2Sc4t5tm+ZLQCX78nq0WxBgD4S4gZvZ/KstR2YNj7zQoaocGA1uG1iXBzo9q 00MJ2eQQtX7xA40i8td8HERpv5KC4OZLpGnOsFywpeJKGrjXP46FbkmN/rE+GDL2 QBJ1c5P6qtpjGE6GX5vWY9GZy8uO1+o4qtygRVHQkdMNMFX0tSNa/MW7ZBGZFNdG Vp1LhykKIMNKUJJnHx2xQksBKmHZEJWfcoS18e3DhFn3nUjgTJ8F7ANQQmgKunVv agcttrMY6QbpHfXh71KMZgQTH1frLxwA1u0tSsBhiHMFQoNtXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGYhTAqV1nLFZpNOXynLXcuwAr7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDQ1 MTRhNy02ZDcyLTRhYzYtODUzMi03YTVmODRkNzZmMjQvZjA0NTE0YTctNmQ3Mi00 YWM2LTg1MzItN2E1Zjg0ZDc2ZjI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjA0NTE0YTctNmQ3Mi00YWM2LTg1 MzItN2E1Zjg0ZDc2ZjI0L2YwNDUxNGE3LTZkNzItNGFjNi04NTMyLTdhNWY4NGQ3 NmYyNC5jcmwwHwYDVR0jBBgwFoAUfbWV5bQ9jikKYFFs2nh2Hx375+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDQ1MTRhNy02ZDcyLTRhYzYtODUzMi03YTVm ODRkNzZmMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfpsjaI7jHu13DSE1/3bv0 xgFsfWElLsO4odhWXzGzDY9tV23SVK4laWJTFpZC02buP99g6vgs0Bmu7sqha9E/ r4YCJswENQOrUx+FN/GRAdyZq/7BniKpadYP3MiMCISVkYVguX/q+NtqbExY2eS3 UMViyp3hXjbFAvpPw8snZQnRpXnbziSSoVzczjpH19pdsSrX7fCACCDQkdNPzjrX FbgekoAziLgdf9ZhoCwW0SkTKoeuWOwNbGSepLPgDLg7C1dUeB/TvSNL7Z1x/AHM XQ3NAV/jctDP4wkBh/dRiAtQiDffip5+VnihXvwH+9msR+pfEGy6htnEVQRWNBVi -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:19 2025 by rpki-client