$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft File: 52a20e5a-3a5d-4417-92d7-250e134c6d09.mft (raw, json) Hash identifier: 6bE31ty4pipr1/ZPJY6ELmSvPvOFCb9Jn3ZkYbzLDUo= Subject key identifier: 8B:B1:AC:8A:CA:67:9B:51:66:19:1E:DA:00:BE:55:8F:14:C2:43:41 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584A76AFB7FFD798EFBDB98BBA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft Manifest number: 010D0C9F4328584073A82194633A7F2D5BDD0EF2 Signing time: Wed 09 Jul 2025 18:00:08 +0000 Manifest this update: Wed 09 Jul 2025 18:00:08 +0000 Manifest next update: Sat 12 Jul 2025 18:00:00 +0000 Files and hashes: 1: 1ed11bba-2055-382e-ae61-183dfc3956d0.roa (hash: CPTNydFZRv55zsJvokVcAjei4+QXiWP0aBZRlxu/rdI=) 2: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (hash: uCc3uq0rAE7AcH3/6QbvRO6ErCHTGxo4K0vSf9Q16zI=) 3: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (hash: BpsLGgkHbnj9CrB1r8SNIPTeIoQvne7bb9IsXoN9FII=) 4: 52a20e5a-3a5d-4417-92d7-250e134c6d09.crl (hash: yAWsLchs/IhvH8y9ToxhcyqgagxHnRKbiPhCfEb7r/o=) 5: b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa (hash: 1XPiq6jTp2ugxFTePWPckrPkrMVx8id1rGqEs4WoBv0=) 6: d71bc207-ec65-3381-a9cd-02c1fbbed0b1.roa (hash: Uv01++AeIllk05V+eRPOZe/GE8TxEwgW6mbF/ANoJ/o=) 7: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (hash: UkBGSm6gTEWeeeJlmGMJnaeHmLHW8qonTv2deTj2HI0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:af:b7:ff:d7:98:ef:bd:b9:8b:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Jul 9 18:00:08 2025 GMT Not After : Jul 12 18:00:00 2025 GMT Subject: CN=71645647-04c7-4fbb-b5ab-f95159add642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:0e:57:ae:a9:3e:9e:38:56:74:d9:d3:d1: 53:24:ac:d6:ca:34:02:da:40:ee:43:f6:09:fd:5e: 11:18:a2:23:b3:d8:82:a4:4c:09:8f:f6:56:bb:a9: 88:f0:d1:2b:9d:98:c8:4d:de:8a:5d:c0:2b:8a:25: 2a:22:82:cf:0e:b6:3e:23:04:98:80:b8:57:3e:c2: c6:39:aa:11:44:17:00:fd:f6:35:8c:23:82:00:90: cd:0c:be:95:7d:70:28:32:13:63:e8:30:c7:a3:f9: 38:c1:53:82:59:01:e5:19:49:68:f5:0f:31:d8:76: 86:98:c3:95:ab:76:e8:b7:23:07:74:02:0d:14:c8: 61:3d:e4:ba:e0:22:98:2d:97:ae:d5:3c:b6:f3:24: f4:a3:9f:ca:fc:6d:ce:1c:2d:5a:a5:4b:6c:8a:a5: cd:32:1d:15:ab:95:fa:ab:40:34:ff:84:2c:71:ee: 9d:7f:d8:5b:11:02:69:04:4b:ad:ec:d5:57:b8:d3: cb:33:a7:d1:c7:60:8a:9b:56:b7:7a:29:cd:ba:25: 9c:10:18:b6:41:b9:d5:52:78:b0:49:cb:41:6d:0c: 0b:38:ae:e6:3e:00:2f:18:80:6a:ee:03:98:ff:1e: 37:a1:94:c7:e8:94:de:fd:53:1d:66:32:9e:c9:44: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:AC:8A:CA:67:9B:51:66:19:1E:DA:00:BE:55:8F:14:C2:43:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:04:72:19:b9:06:87:7f:89:d8:61:1b:b6:46:25:6b:c0:b3: d9:59:77:17:da:9f:96:26:e3:9c:f8:21:6e:43:01:bf:43:f9: 2e:b2:b7:20:17:41:bc:8b:e1:b9:7b:9c:a3:93:6d:68:6e:07: cd:73:6a:5f:db:4a:b2:bd:b6:29:b1:a2:d0:a4:4f:30:24:4d: 9e:67:31:3a:f1:d2:1d:90:37:18:58:d3:d1:e3:c3:38:ba:5d: d0:3e:be:f6:c9:6c:87:b5:68:b6:ef:9a:16:97:0e:d0:63:f6: be:22:d4:28:18:f5:28:4e:25:6b:b7:19:3f:32:96:81:f3:6a: eb:f0:7e:20:75:f5:20:79:6b:31:54:1e:1f:bf:38:b9:19:12: 55:48:fe:da:67:e4:72:f5:2a:bc:28:1b:a7:f3:c4:b8:cf:11: f7:ff:9b:e6:23:72:89:cc:51:b2:35:9e:5f:dd:44:c8:e0:10: da:87:fd:75:89:5c:f1:94:43:b8:c1:da:bf:d0:8e:8f:5d:12: 82:d4:15:1c:97:08:de:60:f9:4d:21:94:d9:08:61:ce:54:64: 74:a8:5d:27:9a:48:86:2d:b4:78:73:12:cb:88:7c:39:be:7e: cf:ce:55:31:59:b8:95:b8:08:0f:97:7b:92:ce:2e:17:16:6b: b0:ef:e5:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2r7f/15jvvbmLuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDcwOTE4MDAwOFoXDTI1MDcxMjE4MDAwMFowLzEtMCsGA1UEAxMk NzE2NDU2NDctMDRjNy00ZmJiLWI1YWItZjk1MTU5YWRkNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+gOV66pPp44VnTZ09FTJKzWyjQC2kDuQ/YJ /V4RGKIjs9iCpEwJj/ZWu6mI8NErnZjITd6KXcAriiUqIoLPDrY+IwSYgLhXPsLG OaoRRBcA/fY1jCOCAJDNDL6VfXAoMhNj6DDHo/k4wVOCWQHlGUlo9Q8x2HaGmMOV q3botyMHdAINFMhhPeS64CKYLZeu1Ty28yT0o5/K/G3OHC1apUtsiqXNMh0Vq5X6 q0A0/4Qsce6df9hbEQJpBEut7NVXuNPLM6fRx2CKm1a3einNuiWcEBi2QbnVUniw SctBbQwLOK7mPgAvGIBq7gOY/x43oZTH6JTe/VMdZjKeyUR0/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIuxrIrKZ5tRZhke2gC+VY8UwkNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNTJhMjBlNWEtM2E1ZC00 NDE3LTkyZDctMjUwZTEzNGM2ZDA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKBHIZuQaHf4nYYRu2RiVr wLPZWXcX2p+WJuOc+CFuQwG/Q/kusrcgF0G8i+G5e5yjk21obgfNc2pf20qyvbYp saLQpE8wJE2eZzE68dIdkDcYWNPR48M4ul3QPr72yWyHtWi275oWlw7QY/a+ItQo GPUoTiVrtxk/MpaB82rr8H4gdfUgeWsxVB4fvzi5GRJVSP7aZ+Ry9Sq8KBun88S4 zxH3/5vmI3KJzFGyNZ5f3UTI4BDah/11iVzxlEO4wdq/0I6PXRKC1BUclwjeYPlN IZTZCGHOVGR0qF0nmkiGLbR4cxLLiHw5vn7PzlUxWbiVuAgPl3uSzi4XFmuw7+XE -----END CERTIFICATE-----Generated at Wed Jul 9 22:49:01 2025 by rpki-client