$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft File: 99cd086f-b993-42d9-8f47-c65df74d693b.mft (raw, json) Hash identifier: 9FweHSt36AWQq5Wh5iNb0jxc4oMcmqyOsdvMLfqwjSQ= Subject key identifier: 05:14:6F:3B:49:0A:B2:0A:99:30:09:25:CC:F2:D2:F0:4C:A6:F7:4A Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584A929A84979ACFC52D31B9B870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft Manifest number: 010D0C9F4328584073A821EFFDC032F582708BF3 Signing time: Sat 19 Jul 2025 18:00:03 +0000 Manifest this update: Sat 19 Jul 2025 18:00:03 +0000 Manifest next update: Tue 22 Jul 2025 18:00:00 +0000 Files and hashes: 1: 008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa (hash: hLbec2cdCbaYJ/OHSL5D6UelY4XeT4Sd/3Rz4lsLIRQ=) 2: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (hash: 0NVOEP9+VjvGZWwYq3pZWdFF4trbPhf5t29+5q/ILHk=) 3: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (hash: lj/+IkJwtSjf4oOsluyVjIUqeE1PtGKo8RKLvHAlWcM=) 4: 99cd086f-b993-42d9-8f47-c65df74d693b.crl (hash: TavtSEkKOn/K1fxdXDZUsHtFXT90FQr3/mpplJo5Ogs=) 5: 9deb75fd-d40d-3461-bd99-01696f038720.roa (hash: w4vCHYt2/qTYlRX9HKM1RtMeOj9HWA8/KgK32328Lv8=) 6: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (hash: OoLbL9fgygdLC+jTYqqjT+wRzPM6nvfDbhsBgvNwZW4=) 7: e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (hash: 45o2PlxqfUkHEqB7A0uDjhTXRbPT8Ubzt9BRaZJQciE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:9a:84:97:9a:cf:c5:2d:31:b9:b8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jul 19 18:00:03 2025 GMT Not After : Jul 22 18:00:00 2025 GMT Subject: CN=edaf1ecb-8e37-4966-9cea-1820639fc978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:9b:b8:f4:49:fb:96:8c:ee:fc:64:35:3f: 9f:2d:06:5d:92:0f:bd:3b:45:66:f3:3a:d1:25:6d: 87:a5:e3:25:a4:3e:8f:0c:ca:ad:5b:5c:2c:12:cb: ae:af:63:20:fe:e4:78:8d:c4:8d:40:70:ff:d5:13: 94:8c:cb:c0:39:a9:f0:d0:9c:65:0f:d3:e9:19:79: 33:b6:8e:1b:76:0b:7e:1b:6c:66:84:bd:df:80:a6: 5d:92:e4:ba:37:57:99:45:27:b8:e2:23:6d:5e:83: ed:13:6f:57:17:c8:e3:46:08:5c:d5:fb:ae:50:a7: 26:fa:f3:62:20:ef:85:35:1a:e9:06:c2:76:28:52: 0c:40:ce:04:10:8e:98:e2:8d:40:97:8a:e5:ea:1c: 05:38:54:b9:b8:7c:44:06:fc:c0:7b:4e:05:83:0c: b1:bf:73:76:07:24:83:14:d9:28:4a:64:f9:f9:c6: ee:e8:57:f6:1e:23:4b:8b:6c:30:db:18:13:c1:9f: d0:9e:fa:23:12:12:97:85:a9:39:f4:fe:08:83:27: bd:30:5d:d7:20:fb:0d:ff:ef:52:98:2d:d6:a3:f2: 7f:fe:4e:60:1b:f0:c1:04:12:aa:e1:17:d2:67:47: 3a:3f:02:42:ba:30:50:4a:39:6f:12:78:76:dd:c2: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:6F:3B:49:0A:B2:0A:99:30:09:25:CC:F2:D2:F0:4C:A6:F7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3b:5c:65:43:c6:50:fb:2c:f8:c3:21:9e:0f:64:1a:21:27: 3b:5b:70:ee:16:db:83:d1:f2:e9:14:44:08:da:1a:71:91:66: 0b:02:50:d6:f0:a0:05:ad:fc:93:fd:ad:bc:46:48:99:21:cb: a2:0c:75:be:33:c5:d8:3f:46:8f:ff:2e:db:0c:af:a9:da:72: a4:d9:00:c7:fd:18:c8:bd:4a:aa:fa:57:08:82:b3:3c:5a:dc: ad:2d:b7:7e:00:da:fd:1f:d4:5c:a5:cd:f0:2b:6e:b7:11:e2: 5f:6d:71:04:eb:ee:04:a1:06:08:86:1b:64:f2:46:e0:3e:f1: 60:47:2a:cf:23:0e:a4:b2:39:b0:9c:cc:6d:59:6a:d8:11:b7: 9e:02:c8:c5:74:7a:b0:97:56:d6:d7:ec:4e:b1:01:09:2a:2e: 4f:83:a3:b8:93:81:27:b7:f1:59:fe:2d:2c:d4:22:11:56:53: db:49:53:f9:24:a8:b1:d4:6a:2b:9c:09:d2:13:ca:bb:94:13: 2c:32:db:2f:f8:04:cb:7e:ca:ea:10:b6:95:b7:9f:f1:a4:f9: e9:23:6f:6d:27:8f:28:79:59:93:b5:9d:7b:2e:29:ef:9c:d0: 30:d8:c5:bd:55:d4:9d:a9:64:a6:83:9b:39:b1:da:c7:bc:89: 38:0b:c7:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqSmoSXms/FLTG5uHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDcxOTE4MDAwM1oXDTI1MDcyMjE4MDAwMFowLzEtMCsGA1UEAxMk ZWRhZjFlY2ItOGUzNy00OTY2LTljZWEtMTgyMDYzOWZjOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2+buPRJ+5aM7vxkNT+fLQZdkg+9O0Vm8zrR JW2HpeMlpD6PDMqtW1wsEsuur2Mg/uR4jcSNQHD/1ROUjMvAOanw0JxlD9PpGXkz to4bdgt+G2xmhL3fgKZdkuS6N1eZRSe44iNtXoPtE29XF8jjRghc1fuuUKcm+vNi IO+FNRrpBsJ2KFIMQM4EEI6Y4o1Al4rl6hwFOFS5uHxEBvzAe04Fgwyxv3N2BySD FNkoSmT5+cbu6Ff2HiNLi2ww2xgTwZ/QnvojEhKXhak59P4Igye9MF3XIPsN/+9S mC3Wo/J//k5gG/DBBBKq4RfSZ0c6PwJCujBQSjlvEnh23cKMSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAUUbztJCrIKmTAJJczy0vBMpvdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTljZDA4NmYtYjk5My00 MmQ5LThmNDctYzY1ZGY3NGQ2OTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADO1xlQ8ZQ+yz4wyGeD2Qa ISc7W3DuFtuD0fLpFEQI2hpxkWYLAlDW8KAFrfyT/a28RkiZIcuiDHW+M8XYP0aP /y7bDK+p2nKk2QDH/RjIvUqq+lcIgrM8WtytLbd+ANr9H9Rcpc3wK263EeJfbXEE 6+4EoQYIhhtk8kbgPvFgRyrPIw6ksjmwnMxtWWrYEbeeAsjFdHqwl1bW1+xOsQEJ Ki5Pg6O4k4Ent/FZ/i0s1CIRVlPbSVP5JKix1GornAnSE8q7lBMsMtsv+ATLfsrq ELaVt5/xpPnpI29tJ48oeVmTtZ17LinvnNAw2MW9VdSdqWSmg5s5sdrHvIk4C8f1 -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:47 2025 by rpki-client