$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft File: 604a49f2-58d6-4709-bdaf-e7181b613801.mft (raw, json) Hash identifier: n8e8uw5rp9y9buoWliHpyYKiAmlFj1wuW9rbLA5MnVM= Subject key identifier: 85:8A:0F:0C:B8:9C:A5:5D:45:DD:FB:8D:47:1C:79:05:83:5B:06:BE Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584A9CB93CF4F71BA6AC32AD3AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft Manifest number: 010D0C9F4328584073A84B40EFAB577973049064 Signing time: Wed 23 Jul 2025 09:00:03 +0000 Manifest this update: Wed 23 Jul 2025 09:00:03 +0000 Manifest next update: Fri 25 Jul 2025 09:00:00 +0000 Files and hashes: 1: 0ec50588-0bd7-30b6-a0b6-9e7a8f3e386d.roa (hash: TdJUHLdOi1b3uAW57rgcU3RvjQ1iMoejGF82eRNGvg0=) 2: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (hash: ehU71ZCJSKk4FNNvouNdv1EPQ7Hg94QMD8n/f51Jbzo=) 3: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (hash: UdwnwDw3+CV6S+hahAaCCxt8iFQanWZt7ya+aI/+s78=) 4: 604a49f2-58d6-4709-bdaf-e7181b613801.crl (hash: Qky+POlNlni8pQSSmOPWVv8ZZBEPJZegXw2RVDz17cI=) 5: c56c342d-12d7-376f-9120-568a7b965d35.roa (hash: oZXkN77ni8sfkI4w+24mNDUO9oBSVtxPMxUaJcmBfy8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9c:b9:3c:f4:f7:1b:a6:ac:32:ad:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Jul 23 09:00:03 2025 GMT Not After : Jul 25 09:00:00 2025 GMT Subject: CN=eef70766-cd73-4dbf-bf09-211e16015ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:54:bd:9c:95:e8:b9:f8:79:ad:32:1f:c3: 22:5c:9d:1c:e8:5f:bf:5d:89:4e:e2:18:ec:ce:50: 59:ed:22:4e:a2:53:32:97:c8:f9:6a:12:55:45:b2: 61:19:a1:d2:8f:9f:60:ae:be:07:67:fc:4d:95:05: 7d:cc:a3:1a:f7:1d:90:ef:f7:01:b6:96:c1:39:d6: b8:f6:86:04:8b:92:32:85:c2:df:ad:24:3c:9e:88: 50:26:b3:b1:6a:d8:3c:2e:38:22:bd:de:41:bf:e7: 17:f8:e3:a1:dd:52:8a:e2:88:8c:f2:c8:da:6a:b1: 93:86:f9:ba:56:c3:9c:ef:b9:76:c4:66:1b:09:85: 0c:b6:0a:5a:ca:7e:12:b3:29:7f:e0:82:f5:6f:dc: e0:9d:c6:47:91:d6:25:c5:cb:94:43:a3:9c:da:01: 77:b7:c4:45:b6:db:93:18:7c:c1:04:79:9b:a2:0f: 90:00:3d:4f:ae:e0:82:b9:fe:54:0d:64:31:bf:ba: 72:63:0c:99:c7:16:6e:80:bc:d8:b6:a5:c2:44:78: f3:64:09:d6:59:27:ab:07:e3:ee:36:fe:3c:2a:ae: 1a:82:e3:d9:83:cc:9d:db:df:a6:79:c6:1f:1c:25: 42:12:3a:2b:2a:14:c0:d3:ab:0d:b0:b1:89:06:a4: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:0F:0C:B8:9C:A5:5D:45:DD:FB:8D:47:1C:79:05:83:5B:06:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8e:f7:ee:ca:79:fd:d3:b7:7c:b8:f5:6c:b9:bb:dd:92:bb: 70:62:06:19:6c:81:3a:5a:7e:92:b7:ed:92:51:e5:e9:23:24: 26:e3:97:7f:4b:a3:68:7f:a7:3f:3b:d3:8d:ff:ac:aa:2c:0c: a8:23:ba:55:71:dd:86:9e:f4:36:3e:78:be:7c:7e:33:fb:fc: 60:45:21:cc:45:9c:c8:18:d2:d7:ed:23:c0:3e:70:3b:e6:d4: ee:2d:db:42:72:25:2f:c7:65:4a:41:48:61:43:6e:d6:7a:7a: 08:ac:f2:01:9d:ba:3d:ac:f3:65:71:6d:ed:5f:0f:4c:5f:5f: 2e:c4:ff:99:92:08:f9:6b:fe:92:4b:80:a0:aa:70:61:21:0f: 0e:7a:d1:d5:9b:bc:a1:a9:c7:b3:cb:ff:b9:03:bb:7b:d6:85: c2:9f:51:34:61:a2:d5:78:96:45:d9:ae:da:2d:9e:84:f3:00: 0a:94:fa:39:2c:40:0c:73:1e:2e:17:5d:b5:24:ee:94:c6:3c: 8a:f4:93:37:11:e6:b8:aa:cf:bc:fd:ae:cb:09:b0:5d:70:08: 19:88:fa:dc:36:d9:19:ee:da:40:90:57:ff:d8:58:7d:41:cc: fe:f3:75:cd:b1:03:1e:d5:ce:97:2a:5a:79:a6:cb:d7:03:7a: e4:39:66:d3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqcuTz09xumrDKtOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDcyMzA5MDAwM1oXDTI1MDcyNTA5MDAwMFowLzEtMCsGA1UEAxMk ZWVmNzA3NjYtY2Q3My00ZGJmLWJmMDktMjExZTE2MDE1YmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB1UvZyV6Ln4ea0yH8MiXJ0c6F+/XYlO4hjs zlBZ7SJOolMyl8j5ahJVRbJhGaHSj59grr4HZ/xNlQV9zKMa9x2Q7/cBtpbBOda4 9oYEi5IyhcLfrSQ8nohQJrOxatg8Ljgivd5Bv+cX+OOh3VKK4oiM8sjaarGThvm6 VsOc77l2xGYbCYUMtgpayn4Ssyl/4IL1b9zgncZHkdYlxcuUQ6Oc2gF3t8RFttuT GHzBBHmbog+QAD1PruCCuf5UDWQxv7pyYwyZxxZugLzYtqXCRHjzZAnWWSerB+Pu Nv48Kq4aguPZg8yd29+mecYfHCVCEjorKhTA06sNsLGJBqSmzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIWKDwy4nKVdRd37jUcceQWDWwa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvNjA0YTQ5ZjItNThkNi00 NzA5LWJkYWYtZTcxODFiNjEzODAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmjvfuynn907d8uPVsubvd krtwYgYZbIE6Wn6St+2SUeXpIyQm45d/S6Nof6c/O9ON/6yqLAyoI7pVcd2GnvQ2 Pni+fH4z+/xgRSHMRZzIGNLX7SPAPnA75tTuLdtCciUvx2VKQUhhQ27WenoIrPIB nbo9rPNlcW3tXw9MX18uxP+Zkgj5a/6SS4CgqnBhIQ8OetHVm7yhqcezy/+5A7t7 1oXCn1E0YaLVeJZF2a7aLZ6E8wAKlPo5LEAMcx4uF121JO6UxjyK9JM3Eea4qs+8 /a7LCbBdcAgZiPrcNtkZ7tpAkFf/2Fh9Qcz+83XNsQMe1c6XKlp5psvXA3rkOWbT -----END CERTIFICATE-----Generated at Wed Jul 23 22:48:03 2025 by rpki-client