$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft File: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft (raw, json) Hash identifier: eWsMF2iH4UpFz90juC2PDe8xBAM40+jp2mJKYzwlAIs= Subject key identifier: AE:8A:54:DD:A1:19:FD:37:53:7E:B2:17:5B:E8:B0:E2:89:A6:20:5B Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584A75C1707B281B0966C6C8CA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft Manifest number: 010D0C9F4328584073A84EB6BC7F2571415E203F Signing time: Wed 09 Jul 2025 10:00:03 +0000 Manifest this update: Wed 09 Jul 2025 10:00:03 +0000 Manifest next update: Fri 11 Jul 2025 10:00:00 +0000 Files and hashes: 1: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (hash: bkiYnoOqhcayItxqIMqmToTEmjpCrdnwKfTIphL8Rs4=) 2: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl (hash: IV4Kkf096P5O7iIyaC2D2yT9qqzItLdNGmFC9B2ZZ54=) 3: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (hash: f4o8EMDAUN0zE5N7+Z3n7nvQF7dH1xLVe+73jgxNSnQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:c1:70:7b:28:1b:09:66:c6:c8:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Jul 9 10:00:03 2025 GMT Not After : Jul 11 10:00:00 2025 GMT Subject: CN=29db1537-3079-4e43-b5f4-fe9a58195aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:86:c0:a7:e6:06:f0:92:1f:71:83:d3:34:01: 08:14:ab:1d:b7:36:f0:75:0d:b1:1c:2c:dc:50:70: 60:97:be:be:3c:c3:a9:42:a3:a5:95:f2:92:f1:6a: cd:28:3e:43:00:a5:65:61:ae:af:ae:41:6b:b2:40: be:cf:e3:92:8b:b9:7e:40:b9:8d:c9:e3:26:85:89: 8f:18:dc:78:68:3f:b6:a7:eb:aa:7e:de:0d:47:f0: 07:c0:18:4a:e3:25:4a:4e:cd:18:f1:6c:0e:dd:a3: fa:57:97:81:bf:d6:43:de:80:d6:c0:6d:a7:f1:72: 5d:c5:81:0b:47:2a:fe:d9:fa:41:52:04:6c:ab:15: d9:4f:22:df:ed:07:38:7d:0c:ad:56:68:54:eb:7c: d5:85:4e:0d:a4:61:80:51:34:f1:ba:f1:30:95:1e: 20:33:a0:6e:6a:de:80:ca:66:e6:9d:6f:1e:2f:f5: d3:62:29:d8:93:fd:63:22:18:be:bb:f8:ed:cc:53: 72:eb:01:81:84:c9:c7:72:ab:4c:da:d2:3a:55:50: 88:c6:6a:89:57:a4:bc:28:da:f1:d7:3f:4e:ee:5c: a2:0c:95:ed:87:ba:c5:fb:41:a5:e9:2e:74:99:07: 8a:86:fe:0a:34:b3:42:aa:f2:1f:bf:4d:01:1c:67: ff:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8A:54:DD:A1:19:FD:37:53:7E:B2:17:5B:E8:B0:E2:89:A6:20:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:88:20:f2:34:8e:52:a8:12:4d:f6:4f:2a:ef:d6:c7:ef:c3: 43:94:62:31:3b:34:8c:bc:26:6e:b4:63:34:2b:69:c3:38:24: bd:bc:38:5d:34:09:7e:01:16:05:1f:05:27:3c:c7:bf:60:07: 57:e7:53:1a:d3:d5:0f:44:b6:9a:88:8e:d9:eb:42:9d:16:4c: 75:f6:f5:3d:41:57:d5:bd:85:05:76:89:be:23:fd:18:07:48: 0a:77:61:71:0b:51:96:4e:d9:32:4a:81:05:64:68:84:54:17: 76:4c:e6:ef:28:9d:1f:a8:31:d8:43:5a:e9:48:43:b4:43:b6: d6:61:87:3f:2c:c9:f7:53:76:89:41:75:07:cd:34:0e:52:1e: 37:cd:d1:8d:f8:9f:79:b9:83:0b:da:22:76:fd:cb:ea:d5:05: a2:87:cc:4c:1c:18:b3:44:40:94:d0:d5:b3:51:e5:30:d4:76: 84:d4:ee:3e:47:1d:d6:38:1b:4b:d9:94:af:12:13:09:fe:b7: 4a:b7:3d:2a:90:d7:bf:7d:40:e5:cd:88:3b:22:ea:2a:c5:6c: 7d:bb:3c:dd:cc:32:81:e9:ed:e1:be:1a:d8:5d:9f:01:61:fc: 04:d7:a4:ff:0a:a9:bf:77:36:4f:60:20:15:4a:62:4d:53:cb: a7:e8:62:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1wXB7KBsJZsbIygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MDcwOTEwMDAwM1oXDTI1MDcxMTEwMDAwMFowLzEtMCsGA1UEAxMk MjlkYjE1MzctMzA3OS00ZTQzLWI1ZjQtZmU5YTU4MTk1YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIbAp+YG8JIfcYPTNAEIFKsdtzbwdQ2xHCzc UHBgl76+PMOpQqOllfKS8WrNKD5DAKVlYa6vrkFrskC+z+OSi7l+QLmNyeMmhYmP GNx4aD+2p+uqft4NR/AHwBhK4yVKTs0Y8WwO3aP6V5eBv9ZD3oDWwG2n8XJdxYEL Ryr+2fpBUgRsqxXZTyLf7Qc4fQytVmhU63zVhU4NpGGAUTTxuvEwlR4gM6Buat6A ymbmnW8eL/XTYinYk/1jIhi+u/jtzFNy6wGBhMnHcqtM2tI6VVCIxmqJV6S8KNrx 1z9O7lyiDJXth7rF+0Gl6S50mQeKhv4KNLNCqvIfv00BHGf/iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK6KVN2hGf03U36yF1vosOKJpiBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWEwNDNlNTUtZTVkMi00 ZDcwLWJmZTgtN2Y0MTE0ZDNmYzJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4iCDyNI5SqBJN9k8q79bH 78NDlGIxOzSMvCZutGM0K2nDOCS9vDhdNAl+ARYFHwUnPMe/YAdX51Ma09UPRLaa iI7Z60KdFkx19vU9QVfVvYUFdom+I/0YB0gKd2FxC1GWTtkySoEFZGiEVBd2TObv KJ0fqDHYQ1rpSEO0Q7bWYYc/LMn3U3aJQXUHzTQOUh43zdGN+J95uYML2iJ2/cvq 1QWih8xMHBizRECU0NWzUeUw1HaE1O4+Rx3WOBtL2ZSvEhMJ/rdKtz0qkNe/fUDl zYg7IuoqxWx9uzzdzDKB6e3hvhrYXZ8BYfwE16T/Cqm/dzZPYCAVSmJNU8un6GLP -----END CERTIFICATE-----Generated at Thu Jul 10 04:14:24 2025 by rpki-client