$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft File: 0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft (raw, json) Hash identifier: 4DvfiDgmWoxh6gIqSLzHu5NeZOLiRaxO56wTKBsyqsY= Subject key identifier: 14:BC:2C:0F:A0:1E:6E:25:6E:6B:3E:D4:C2:17:D6:DB:5E:B1:CF:80 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584ABCB65404A465AA11F2CCD080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft Manifest number: 010D0C9F4328584126BB1D35055B9C9CB0635F45 Signing time: Sun 03 Aug 2025 20:00:03 +0000 Manifest this update: Sun 03 Aug 2025 20:00:03 +0000 Manifest next update: Tue 05 Aug 2025 20:00:00 +0000 Files and hashes: 1: 0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl (hash: noWWozKzmGwU/wSPn0QgVSo7lDdLlTB+e31M4h1kqgI=) 2: 1334152e-2583-37bf-87f6-7f569ffa4d42.roa (hash: IPeeIL9Xb4pvmLcSeXfh6gcINnwY/8tqxW+VbMWfW/g=) 3: 19f94a23-4ca9-31c0-b89d-a7ef3c1bb051.roa (hash: XHaEqGVGPrbpBzlQxvxGY8lavAmSqvgYjabapbxtGcM=) 4: 1b31f61a-098e-37a7-8531-9a5ab36e5749.roa (hash: a9TmZCiwv1aayHpy/6xIYBXWk3wIEOtV+D8zVu+iK3g=) 5: 7a124059-8167-385d-841b-71708d4474a3.roa (hash: cc5nXQD3YB3+Y6YgUq6kIJZj4DZYc/H7AIh/ZD25rX8=) 6: b476ac5e-7723-3622-90dc-0534aba778c4.roa (hash: Y1Hc2gvFep/Qt6lKLqeeKX6TMxCf5DT7fWlfAGtFY00=) 7: c8643991-520c-3a83-820e-df5dfd8121e9.roa (hash: PjdVm8CnjNu8GsZlbDZOuKYgjDlzpXFybpDXp9PYUQs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:b6:54:04:a4:65:aa:11:f2:cc:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Aug 3 20:00:03 2025 GMT Not After : Aug 5 20:00:00 2025 GMT Subject: CN=f51b008c-ff81-4d08-adbc-8d9459883f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:35:0e:b7:14:d9:3b:38:80:24:db:af:21: 23:af:ed:ea:5c:d8:aa:54:0b:f0:89:1d:03:48:f4: 24:90:af:65:48:b4:ad:b6:c7:b0:9c:e8:5f:01:81: eb:38:b1:c8:22:94:86:68:8d:5c:40:76:54:6a:b8: b4:7c:31:ad:ab:12:76:3c:97:57:e8:87:4e:3b:73: 8c:2d:b5:64:02:c4:a3:28:05:85:74:46:90:60:7c: 25:b6:9d:2c:d7:e9:0d:10:0b:d8:5d:2c:37:b2:e2: fa:c9:32:34:69:6e:46:d9:45:01:24:4e:12:f9:c6: c0:dc:a6:27:a2:4c:2e:d5:ad:80:6a:2b:66:a0:3e: e9:3e:09:ae:65:25:82:43:5f:94:4a:b6:a3:0b:03: 51:92:fd:08:cc:6f:56:d5:b8:02:73:05:7d:d3:11: 94:e2:f7:9c:a1:95:0e:d9:7c:8f:c8:f8:3f:f8:aa: d6:19:44:c9:5c:f8:40:1c:62:ed:4e:56:df:8a:2b: a3:28:12:a2:dd:ca:31:36:69:85:3d:e5:09:bc:77: ac:dc:db:d0:30:0e:69:8e:ee:75:32:cc:d5:7e:1b: 8b:c0:3c:1f:95:1f:59:f8:2c:3b:ba:a8:d4:95:1b: 33:97:73:d9:4b:95:db:9d:d3:15:ee:d9:98:cb:a6: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BC:2C:0F:A0:1E:6E:25:6E:6B:3E:D4:C2:17:D6:DB:5E:B1:CF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0a:17:dc:ba:f9:83:75:d4:4a:f5:eb:5d:d6:28:4e:17:0b: 66:fa:4d:c2:63:4e:21:74:6b:1e:48:8b:81:ba:7b:9f:b4:bb: 5a:77:96:a9:de:ba:77:1c:70:69:59:aa:37:67:d2:75:d8:b4: 2f:ac:d0:94:86:43:a3:58:18:5d:09:0b:12:5f:03:bd:d9:3d: 0f:dd:df:ff:61:e7:0c:17:24:c1:0a:c1:78:c0:5e:97:93:3a: 87:5f:be:e2:0c:8d:ff:2e:eb:98:25:61:a8:dc:5d:b5:37:86: d4:af:fb:67:ca:77:f4:8b:2a:7b:e2:22:2b:08:80:48:b4:e5: 04:20:37:55:58:b4:17:6b:3f:65:7f:85:f1:76:80:e0:1d:f6: c8:39:ec:13:aa:18:42:9a:64:fb:b8:f3:8e:9a:e3:e3:50:cb: be:7f:49:9d:9b:da:da:c9:d7:a0:26:a5:2a:ef:39:3f:3b:b0: 0b:eb:f2:05:91:ad:d5:3e:c9:25:04:af:94:11:81:96:c7:8f: 41:b0:fc:4c:77:fb:73:40:9c:71:30:5b:0b:6c:03:3e:5a:75: 8e:28:1b:fa:cf:16:80:bb:87:cc:d1:bb:13:bd:dd:54:30:21: bb:56:84:9d:81:e1:27:77:e6:7d:e4:c4:47:ca:de:77:68:f4: 40:c4:80:76 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8tlQEpGWqEfLM0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDgwMzIwMDAwM1oXDTI1MDgwNTIwMDAwMFowLzEtMCsGA1UEAxMk ZjUxYjAwOGMtZmY4MS00ZDA4LWFkYmMtOGQ5NDU5ODgzZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKc1DrcU2Ts4gCTbryEjr+3qXNiqVAvwiR0D SPQkkK9lSLSttsewnOhfAYHrOLHIIpSGaI1cQHZUari0fDGtqxJ2PJdX6IdOO3OM LbVkAsSjKAWFdEaQYHwltp0s1+kNEAvYXSw3suL6yTI0aW5G2UUBJE4S+cbA3KYn okwu1a2AaitmoD7pPgmuZSWCQ1+USrajCwNRkv0IzG9W1bgCcwV90xGU4vecoZUO 2XyPyPg/+KrWGUTJXPhAHGLtTlbfiiujKBKi3coxNmmFPeUJvHes3NvQMA5pju51 MszVfhuLwDwflR9Z+Cw7uqjUlRszl3PZS5XbndMV7tmYy6aVFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBS8LA+gHm4lbms+1MIX1ttesc+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMDM4OGQ1MmEtZjhkZC00 YzAyLThjM2UtZTEyODA5ZjkzY2ZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAeChfcuvmDddRK9etd1ihO Fwtm+k3CY04hdGseSIuBunuftLtad5ap3rp3HHBpWao3Z9J12LQvrNCUhkOjWBhd CQsSXwO92T0P3d//YecMFyTBCsF4wF6XkzqHX77iDI3/LuuYJWGo3F21N4bUr/tn ynf0iyp74iIrCIBItOUEIDdVWLQXaz9lf4XxdoDgHfbIOewTqhhCmmT7uPOOmuPj UMu+f0mdm9raydegJqUq7zk/O7AL6/IFka3VPsklBK+UEYGWx49BsPxMd/tzQJxx MFsLbAM+WnWOKBv6zxaAu4fM0bsTvd1UMCG7VoSdgeEnd+Z95MRHyt53aPRAxIB2 -----END CERTIFICATE-----Generated at Mon Aug 4 11:05:18 2025 by rpki-client