$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft File: b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft (raw, json) Hash identifier: a87oCKzNdBcfFQdNb9YOeo/gKZD1DgPtD1XFkDpuEG0= Subject key identifier: 20:C4:07:6A:6F:20:33:0A:18:4B:F5:14:01:25:1D:1D:20:60:E0:07 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584A95476C31C046C4775C790F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft Manifest number: 010D0C9F43285841C860503D02ECCF56D2C95B03 Signing time: Sun 20 Jul 2025 17:00:03 +0000 Manifest this update: Sun 20 Jul 2025 17:00:03 +0000 Manifest next update: Tue 22 Jul 2025 17:00:00 +0000 Files and hashes: 1: 6bb3e0fa-da4c-3bb0-8eed-a6f21b814e7d.roa (hash: 7mf7W8BSa8TDpt2cHchvDErX7Mlq+b4bQWgI4tQ8uA0=) 2: 77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa (hash: X4JNO3H8HM4AHFnUIpDBO8wIvwfW1mRQdDzdxaEpFn4=) 3: 9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (hash: aJDNqtExop/IDDu+fqTGa8cxP/6/xSy5YLiHFwVzh2g=) 4: b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl (hash: PESsWVatGJAMPXCPT83uGOEqisJOWPFYFJug+dHCV7M=) 5: be063289-2e69-3acf-ad62-b42a1aa1d80d.roa (hash: IUZhZ1sHs9FUDZRxzDtHfMDfojHkF8DzeuxbfVtxEaY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:95:47:6c:31:c0:46:c4:77:5c:79:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Jul 20 17:00:03 2025 GMT Not After : Jul 22 17:00:00 2025 GMT Subject: CN=5301bc6f-19ff-4025-b919-6fd84df22904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:ee:37:3e:65:d3:74:19:1d:79:27:c3:9d: 94:0a:b5:b5:9d:8f:5a:4e:bb:5a:3a:1f:a8:a0:61: 4e:5e:1c:79:d5:b7:28:71:e6:fd:24:70:62:1a:31: b7:05:24:7a:67:72:cf:fa:be:4b:b5:22:54:ab:cd: 0c:e1:2b:2c:82:30:69:b9:ac:71:ee:5f:79:0a:22: ee:86:a7:da:3c:eb:78:ad:21:bc:5d:40:9c:79:75: ee:43:0a:71:78:9b:c6:84:ac:5d:66:90:96:3f:dd: d0:29:a0:2a:8c:7f:79:72:a3:60:3d:48:b2:c0:38: 0a:6c:74:06:65:6b:d7:9d:a7:f1:97:69:bf:cb:29: e1:d2:97:d4:86:38:26:2f:6c:c9:6f:42:95:a2:7a: e4:1f:d0:92:ed:ee:61:aa:37:bc:f0:d6:62:dc:40: ff:39:a6:c2:27:96:14:a1:68:57:b3:1c:e5:0d:d1: ff:55:0a:a8:21:24:4b:f0:0a:08:ec:06:60:0f:8b: 17:11:97:27:78:16:79:d7:fb:9c:c3:5e:3b:85:93: 83:b2:d7:31:00:03:49:8f:52:90:46:ab:b7:92:1a: ae:4c:df:e4:e7:47:81:a9:eb:10:0a:6e:f6:fd:10: e6:15:1b:80:96:fa:30:46:ae:cd:27:95:0c:f5:69: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:07:6A:6F:20:33:0A:18:4B:F5:14:01:25:1D:1D:20:60:E0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:28:12:f7:6e:61:d3:a7:c1:62:e1:d7:82:f9:b5:36:32:c1: e4:87:ff:09:71:1e:b3:8e:32:31:c5:a2:24:31:5f:c5:e2:2c: cd:25:a0:ae:58:35:c6:d5:ad:ac:81:92:29:95:79:ff:39:dd: 56:5d:ef:73:a5:e3:28:8b:92:b7:5d:8a:75:fe:3c:28:13:a2: fe:d2:30:cf:52:b8:ca:c6:c3:ae:79:25:25:e0:3f:b4:b0:33: bd:a7:20:10:0f:e2:d3:7e:26:72:8a:0e:e2:ed:4f:f7:79:54: 79:35:e3:bc:6b:75:da:61:db:90:8e:c7:79:29:c1:17:45:80: 94:28:02:88:48:fd:12:af:08:d4:37:38:9f:0d:1b:5e:8b:54: 68:f0:a3:fd:45:70:42:f3:5b:0c:ca:17:00:6f:14:6a:17:6a: 55:95:1a:d4:3e:9c:61:1f:a2:ea:b8:26:e1:3b:4b:82:c2:66: cc:82:00:cd:56:db:a1:79:c1:44:69:4d:22:53:10:de:50:41: 3c:51:cd:2d:57:c2:eb:27:c5:f9:52:96:d9:ac:b0:41:a8:40: de:a1:91:25:62:07:0b:99:dd:95:67:43:5c:02:84:2d:af:ac: 57:c4:c5:97:1e:12:a4:cb:89:ef:a2:f9:d9:46:a9:7c:6e:40: 42:84:4f:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqVR2wxwEbEd1x5D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDcyMDE3MDAwM1oXDTI1MDcyMjE3MDAwMFowLzEtMCsGA1UEAxMk NTMwMWJjNmYtMTlmZi00MDI1LWI5MTktNmZkODRkZjIyOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHuNz5l03QZHXknw52UCrW1nY9aTrtaOh+o oGFOXhx51bcoceb9JHBiGjG3BSR6Z3LP+r5LtSJUq80M4SssgjBpuaxx7l95CiLu hqfaPOt4rSG8XUCceXXuQwpxeJvGhKxdZpCWP93QKaAqjH95cqNgPUiywDgKbHQG ZWvXnafxl2m/yynh0pfUhjgmL2zJb0KVonrkH9CS7e5hqje88NZi3ED/OabCJ5YU oWhXsxzlDdH/VQqoISRL8AoI7AZgD4sXEZcneBZ51/ucw147hZODstcxAANJj1KQ Rqu3khquTN/k50eBqesQCm72/RDmFRuAlvowRq7NJ5UM9WnNnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCDEB2pvIDMKGEv1FAElHR0gYOAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYjM1ZmVmZDctZjJlNS00 MTZjLTkzMmEtMGQ1MmQ0MzBjM2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHKBL3bmHTp8Fi4deC+bU2 MsHkh/8JcR6zjjIxxaIkMV/F4izNJaCuWDXG1a2sgZIplXn/Od1WXe9zpeMoi5K3 XYp1/jwoE6L+0jDPUrjKxsOueSUl4D+0sDO9pyAQD+LTfiZyig7i7U/3eVR5NeO8 a3XaYduQjsd5KcEXRYCUKAKISP0SrwjUNzifDRtei1Ro8KP9RXBC81sMyhcAbxRq F2pVlRrUPpxhH6LquCbhO0uCwmbMggDNVtuhecFEaU0iUxDeUEE8Uc0tV8LrJ8X5 UpbZrLBBqEDeoZElYgcLmd2VZ0NcAoQtr6xXxMWXHhKky4nvovnZRql8bkBChE+u -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:08 2025 by rpki-client