$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft File: 9a3bcf43-7033-48e8-975e-f90913b5cbab.mft (raw, json) Hash identifier: cUPmHWoCbHGwjzumOYUfT0jUzNH4BUFwsAO3ivXXBxc= Subject key identifier: B7:94:09:35:F0:5A:A7:D2:C9:C4:31:CE:CE:80:E0:0E:5C:67:84:69 Authority key identifier: C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 Certificate issuer: /CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Certificate serial: 010D0C9F4328584AC551FBFB8429036DA4FDC600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft Manifest number: 010D0C9F4328584A7A035488580EA9159B8FAB9C Signing time: Wed 06 Aug 2025 22:00:08 +0000 Manifest this update: Wed 06 Aug 2025 22:00:08 +0000 Manifest next update: Fri 08 Aug 2025 22:00:00 +0000 Files and hashes: 1: 9a3bcf43-7033-48e8-975e-f90913b5cbab.crl (hash: PCVHzMLD/k0fGq246/lmXfJjv/xzE6zpkpb7SWemWeU=) 2: f980f0c8-76ae-31c6-aafd-f441e9465a97.roa (hash: dS4SBFabfmm6taIoHv8hTimJCh+eb3N+i2B9Yedpk3E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:51:fb:fb:84:29:03:6d:a4:fd:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a3bcf43-7033-48e8-975e-f90913b5cbab Validity Not Before: Aug 6 22:00:08 2025 GMT Not After : Aug 8 22:00:00 2025 GMT Subject: CN=0aa5514a-3bc9-44c7-855f-481c5341cef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:ac:ca:4e:cb:4f:c2:b6:7a:24:3f:54:6c: 56:e1:6b:46:79:ea:ac:84:e4:04:d2:33:77:4a:45: c5:c9:eb:12:53:6c:b2:a7:83:eb:a7:0f:c4:7d:69: 01:fd:21:a6:35:db:76:93:2e:99:c2:d4:37:bf:e2: 0e:4b:6d:e5:17:7c:fa:17:30:7e:c7:f2:ee:00:23: 3a:e8:98:74:cf:7c:c1:dd:a0:0b:1a:dc:10:4c:32: c3:db:58:d3:a3:c6:81:7b:f2:c6:a3:aa:bf:2a:22: e0:79:0c:81:21:eb:8b:2b:24:f3:b8:0b:2f:e2:b9: de:e1:0d:b4:38:35:4f:88:9e:7a:08:d4:44:1b:d7: 56:43:7d:8a:8c:8b:9b:b3:3e:d7:d9:4d:12:6f:4f: 0f:20:a8:01:9a:d7:ae:8e:e8:36:33:d0:9d:5e:7f: b2:2a:5a:34:1c:e8:ed:94:0e:2b:c1:ce:c5:34:4d: 77:20:84:3e:d2:10:b1:5b:75:f1:91:1e:bb:4b:b7: 9a:c1:42:94:f1:a9:15:63:b6:c8:1b:1c:cc:f9:66: 5d:0c:0b:40:d4:fe:f9:ab:18:2c:62:e5:98:db:0d: b1:08:ae:33:a4:5a:36:71:40:5b:36:ac:e6:49:3a: 98:91:2d:5c:46:3d:3f:55:be:31:b1:e5:91:c6:44: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:09:35:F0:5A:A7:D2:C9:C4:31:CE:CE:80:E0:0E:5C:67:84:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab/9a3bcf43-7033-48e8-975e-f90913b5cbab.crl X509v3 Authority Key Identifier: keyid:C6:88:1F:92:36:4D:E7:96:D4:A9:40:83:C5:62:56:77:EE:9E:6F:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9a3bcf43-7033-48e8-975e-f90913b5cbab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d1:26:ce:1e:10:40:fe:87:19:1b:e5:de:0d:75:d9:a3:57: b3:5d:8b:ae:c2:e8:d5:21:50:f8:6c:7b:ec:e9:59:16:f9:f2: 76:bc:d8:e2:9c:cd:72:c6:17:c6:79:e1:5b:d1:e2:61:e7:00: d8:72:2d:75:fd:06:3b:46:a2:4c:1c:ed:f5:9e:2a:da:ec:d5: 10:e7:35:7b:45:bc:8c:81:c9:d7:9e:18:1c:50:61:a8:10:ff: 3a:38:ed:ad:3b:50:5d:a2:ca:d4:15:0b:7e:e0:6f:f4:c3:2a: 1a:d4:f0:de:4e:05:68:01:2c:1a:87:25:23:1c:32:db:03:35: e3:6a:ba:d0:75:90:67:e1:6e:2f:66:90:c1:ef:2c:7d:53:ea: 97:f5:5b:c0:94:85:86:8a:49:01:8c:7e:2d:b5:d4:fd:cc:2e: ba:60:cf:30:66:8d:fd:00:48:85:94:0c:a9:59:2b:ac:c2:5c: 67:3a:53:7e:f9:8a:8f:2e:93:34:35:98:7c:73:ef:30:de:3f: 08:60:71:6c:67:91:80:ce:68:89:1a:8e:b1:c1:df:05:a1:7f: 25:01:d1:03:82:67:fc:a0:fc:08:d3:ff:09:38:3a:02:89:ac: 7c:9b:73:3b:2c:6c:24:fa:95:84:5c:6d:5e:ea:6a:c8:87:c8: a6:15:20:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErFUfv7hCkDbaT9xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWEzYmNmNDMtNzAzMy00OGU4LTk3NWUtZjkwOTEzYjVj YmFiMB4XDTI1MDgwNjIyMDAwOFoXDTI1MDgwODIyMDAwMFowLzEtMCsGA1UEAxMk MGFhNTUxNGEtM2JjOS00NGM3LTg1NWYtNDgxYzUzNDFjZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVasyk7LT8K2eiQ/VGxW4WtGeeqshOQE0jN3 SkXFyesSU2yyp4Prpw/EfWkB/SGmNdt2ky6ZwtQ3v+IOS23lF3z6FzB+x/LuACM6 6Jh0z3zB3aALGtwQTDLD21jTo8aBe/LGo6q/KiLgeQyBIeuLKyTzuAsv4rne4Q20 ODVPiJ56CNREG9dWQ32KjIubsz7X2U0Sb08PIKgBmteujug2M9CdXn+yKlo0HOjt lA4rwc7FNE13IIQ+0hCxW3XxkR67S7eawUKU8akVY7bIGxzM+WZdDAtA1P75qxgs YuWY2w2xCK4zpFo2cUBbNqzmSTqYkS1cRj0/Vb4xseWRxkTJAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLeUCTXwWqfSycQxzs6A4A5cZ4RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85YTNi Y2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5MTNiNWNiYWIvOWEzYmNmNDMtNzAzMy00 OGU4LTk3NWUtZjkwOTEzYjVjYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWEzYmNmNDMtNzAzMy00OGU4LTk3 NWUtZjkwOTEzYjVjYmFiLzlhM2JjZjQzLTcwMzMtNDhlOC05NzVlLWY5MDkxM2I1 Y2JhYi5jcmwwHwYDVR0jBBgwFoAUxogfkjZN55bUqUCDxWJWd+6ebyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85YTNiY2Y0My03MDMzLTQ4ZTgtOTc1ZS1mOTA5 MTNiNWNiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj0SbOHhBA/ocZG+XeDXXZ o1ezXYuuwujVIVD4bHvs6VkW+fJ2vNjinM1yxhfGeeFb0eJh5wDYci11/QY7RqJM HO31nira7NUQ5zV7RbyMgcnXnhgcUGGoEP86OO2tO1BdosrUFQt+4G/0wyoa1PDe TgVoASwahyUjHDLbAzXjarrQdZBn4W4vZpDB7yx9U+qX9VvAlIWGikkBjH4ttdT9 zC66YM8wZo39AEiFlAypWSuswlxnOlN++YqPLpM0NZh8c+8w3j8IYHFsZ5GAzmiJ Go6xwd8FoX8lAdEDgmf8oPwI0/8JODoCiax8m3M7LGwk+pWEXG1e6mrIh8imFSA/ -----END CERTIFICATE-----Generated at Thu Aug 7 12:56:47 2025 by rpki-client