$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft File: 08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft (raw, json) Hash identifier: P/MBaxd6z9QVjj1uChgHY+L9Zx+JxwJdR6cFMAshQME= Subject key identifier: 42:E6:D0:77:11:BD:97:82:D9:4B:37:3E:E6:F7:79:3A:CB:A5:D3:72 Authority key identifier: 0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D Certificate issuer: /CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34 Certificate serial: 010D0C9F4328584A1F8F94EBF0535DC878BCE840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft Manifest number: 010D0C9F4328584073A85548D7D25AB7E92B4B9F Signing time: Sun 08 Jun 2025 13:00:03 +0000 Manifest this update: Sun 08 Jun 2025 13:00:03 +0000 Manifest next update: Wed 11 Jun 2025 13:00:00 +0000 Files and hashes: 1: 08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl (hash: QL2PL2s6mOQe44GwQeViQPI6q3SBI8r/ngFYiLEdqUo=) 2: 6737e22e-c37c-3ebf-96f9-054602e781ab.roa (hash: xGboB0Rg5hK0+faoECXxkzP9rALI+Ek0tiFNf0Rlsug=) 3: 67e46d88-8e2e-39ea-8a3c-ce409226fa92.roa (hash: bsFJzV83ViDnlqJTnjuSVw17Jjnk/H04OvDENa9ZWtw=) 4: 7b1f679c-d44b-3608-aa41-a4282203d095.roa (hash: 8isMvO/1jit4Hz4UXqqArWeGcuyYAp3rjJiAIgOQkMQ=) 5: 848dd6de-3510-3f76-a679-a6f8f8aca2de.roa (hash: XpkctcsJUQZeOkz+hGPEShDMCSj3vfsG6GeP7O4EnzM=) 6: 99bef2b0-f932-3b78-a4e0-2a27077560c0.roa (hash: SrrbmAalDTKyxYEcdAja6ZMKevH66toPrYrsueW8c5E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:8f:94:eb:f0:53:5d:c8:78:bc:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08c424ab-20c3-4a52-bba2-1ccddeee2e34 Validity Not Before: Jun 8 13:00:03 2025 GMT Not After : Jun 11 13:00:00 2025 GMT Subject: CN=aca4b42a-ee33-47b6-9420-be23c498fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:e4:d6:30:c7:e6:c9:aa:81:e6:0a:ff:c6: 51:5e:ce:0b:29:ef:17:70:81:0f:58:ea:3b:93:e3: 2b:92:a4:df:c9:a1:ab:22:4d:83:3b:88:ef:15:8a: 3b:43:d0:de:7e:8c:ea:ef:d7:64:08:d0:1f:8b:44: 07:b9:85:d3:c7:d4:66:a1:eb:04:61:f7:9e:0c:5b: 68:b5:46:cb:64:d4:7e:bf:a1:cf:5e:c7:89:82:b0: 1b:4e:0f:7d:d2:44:0a:44:2d:aa:89:c7:ad:4b:c7: 84:a4:6f:70:69:17:33:dc:3a:8a:43:23:f0:02:ac: 93:65:cd:f0:69:07:6b:bb:be:71:ee:c9:89:f5:b0: 76:bf:35:0a:cb:59:d8:dd:54:9e:4f:e4:8a:a9:07: 12:0a:91:30:25:92:4f:46:ad:3a:c3:56:74:68:6a: ad:3e:98:ae:1e:d5:a7:17:df:ba:db:04:aa:74:e2: 66:fb:93:43:6d:39:86:f5:89:c2:2f:0b:03:64:55: 09:30:29:5b:41:75:aa:00:0f:b7:cb:66:8d:7b:a8: 0b:dd:c7:6b:e4:a6:1a:c3:a3:a0:5b:ae:c4:43:1a: d8:a4:e9:ac:b9:e4:11:06:74:bb:02:cc:29:e8:0a: 84:e1:ce:34:68:f9:a8:9a:b4:12:d7:b4:8a:df:ed: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E6:D0:77:11:BD:97:82:D9:4B:37:3E:E6:F7:79:3A:CB:A5:D3:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34/08c424ab-20c3-4a52-bba2-1ccddeee2e34.crl X509v3 Authority Key Identifier: keyid:0C:CA:C2:AC:1B:F8:B7:04:E6:D2:85:37:B7:55:32:4B:E7:DC:E8:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/08c424ab-20c3-4a52-bba2-1ccddeee2e34.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b6:54:c1:4c:85:0a:b9:16:fd:1b:b0:74:00:5a:67:50:bb: df:85:e1:33:36:2f:0a:66:91:50:1e:fe:37:7a:ad:9b:56:46: 18:cf:fa:7b:f1:0b:e2:ac:1f:be:76:7f:34:c6:a7:4d:cd:87: f9:eb:84:6a:7b:9a:bd:aa:37:1a:72:7d:67:22:1e:72:06:1c: d8:9c:9f:24:23:53:b4:97:1b:2e:ee:2f:81:2f:a5:5f:7b:43: ca:5a:6a:db:51:2a:7d:27:38:79:e2:c5:b0:b0:ca:e5:5e:38: c5:38:69:5c:26:e1:75:ca:13:62:81:72:80:c1:03:5e:9b:20: 62:e3:26:d4:0e:87:68:cd:8a:d2:01:af:f8:a0:fa:c9:f0:33: 0d:0a:77:6f:c9:8a:34:8a:e6:26:02:2d:c0:3d:34:85:1e:c2: 16:2a:2f:bc:fc:24:04:97:d1:b7:b3:db:b9:d5:0a:21:d8:99: 9e:e6:47:23:b7:74:67:b7:1b:82:5e:4b:d4:65:19:19:40:07: 9f:8a:48:e7:50:25:92:c1:5d:1b:02:48:0e:50:c2:49:30:4c: 23:aa:05:f2:39:5e:be:2d:0e:3e:54:24:24:0f:0f:e6:39:85: d5:ed:c9:36:6f:20:15:84:20:44:e1:17:b2:8d:00:0b:b5:96: 23:39:b1:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEofj5Tr8FNdyHi86EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhjNDI0YWItMjBjMy00YTUyLWJiYTItMWNjZGRlZWUy ZTM0MB4XDTI1MDYwODEzMDAwM1oXDTI1MDYxMTEzMDAwMFowLzEtMCsGA1UEAxMk YWNhNGI0MmEtZWUzMy00N2I2LTk0MjAtYmUyM2M0OThmYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsXk1jDH5smqgeYK/8ZRXs4LKe8XcIEPWOo7 k+MrkqTfyaGrIk2DO4jvFYo7Q9Defozq79dkCNAfi0QHuYXTx9RmoesEYfeeDFto tUbLZNR+v6HPXseJgrAbTg990kQKRC2qicetS8eEpG9waRcz3DqKQyPwAqyTZc3w aQdru75x7smJ9bB2vzUKy1nY3VSeT+SKqQcSCpEwJZJPRq06w1Z0aGqtPpiuHtWn F9+62wSqdOJm+5NDbTmG9YnCLwsDZFUJMClbQXWqAA+3y2aNe6gL3cdr5KYaw6Og W67EQxrYpOmsueQRBnS7Aswp6AqE4c40aPmomrQS17SK3+2PIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFELm0HcRvZeC2Us3Pub3eTrLpdNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOGM0 MjRhYi0yMGMzLTRhNTItYmJhMi0xY2NkZGVlZTJlMzQvMDhjNDI0YWItMjBjMy00 YTUyLWJiYTItMWNjZGRlZWUyZTM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDhjNDI0YWItMjBjMy00YTUyLWJi YTItMWNjZGRlZWUyZTM0LzA4YzQyNGFiLTIwYzMtNGE1Mi1iYmEyLTFjY2RkZWVl MmUzNC5jcmwwHwYDVR0jBBgwFoAUDMrCrBv4twTm0oU3t1UyS+fc6A0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOGM0MjRhYi0yMGMzLTRhNTItYmJhMi0xY2Nk ZGVlZTJlMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBftlTBTIUKuRb9G7B0AFpn ULvfheEzNi8KZpFQHv43eq2bVkYYz/p78QvirB++dn80xqdNzYf564Rqe5q9qjca cn1nIh5yBhzYnJ8kI1O0lxsu7i+BL6Vfe0PKWmrbUSp9Jzh54sWwsMrlXjjFOGlc JuF1yhNigXKAwQNemyBi4ybUDodozYrSAa/4oPrJ8DMNCndvyYo0iuYmAi3APTSF HsIWKi+8/CQEl9G3s9u51Qoh2Jme5kcjt3RntxuCXkvUZRkZQAefikjnUCWSwV0b AkgOUMJJMEwjqgXyOV6+LQ4+VCQkDw/mOYXV7ck2byAVhCBE4ReyjQALtZYjObEg -----END CERTIFICATE-----Generated at Mon Jun 9 10:45:52 2025 by rpki-client