$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft File: dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft (raw, json) Hash identifier: vm63xKJQUGu5doJnzveRIAD0GMMhktmN5xMyWKQLMJc= Subject key identifier: B9:96:68:E9:F0:5F:05:EF:4F:86:38:BC:65:BD:DD:43:BA:DA:95:19 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584A7479EC572BFA6F3D0A602A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft Manifest number: 010D0C9F4328584073A8302DA37A113187F55833 Signing time: Tue 08 Jul 2025 23:00:08 +0000 Manifest this update: Tue 08 Jul 2025 23:00:08 +0000 Manifest next update: Thu 10 Jul 2025 23:00:00 +0000 Files and hashes: 1: 3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa (hash: vcabH1+iAgw3GNNwhfj5Nbc6GpUMofEDL/Y11xNpW48=) 2: 6f20c9d8-107e-3161-8366-714092e5749f.roa (hash: 1f05AajqRD2/Uq8GF6PwCZ5G94A49e8S6rkns3LJiY4=) 3: 97bd35f0-5fa4-33c5-9b80-c056b4d88f91.roa (hash: Yfd82avk2D6BcJ5GJP3wigrxCgZRKbsvl/pNpNFpFHQ=) 4: 9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa (hash: b4op0HqA6T9yZ0BMZiqntyLHgHFI2Tx7z3xnkXuRffY=) 5: a63530f0-6154-3c2a-80c7-10e826431502.roa (hash: wbrEZU/7xtvfFaaTgV5CunF25BKiKeV3rQmDRJrV3MQ=) 6: dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl (hash: i2z03i8vXdHGtpsdXEOrNUBFuwt7Wu3X1lrxWha0y6U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:79:ec:57:2b:fa:6f:3d:0a:60:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Jul 8 23:00:08 2025 GMT Not After : Jul 10 23:00:00 2025 GMT Subject: CN=07d0a7c2-0d45-4ad1-9049-d91c16999303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:b9:b4:af:95:bc:83:cd:e3:06:b2:73:bf: 0e:98:32:78:08:f6:ee:1b:d0:e3:ee:4c:b4:ef:15: 8f:0a:c3:2c:e9:b9:ae:6d:30:90:2f:b3:fc:fc:ef: 4b:55:2f:da:d1:a2:41:dd:d7:47:a9:53:e4:a5:92: 47:e6:ae:22:7c:3f:29:59:64:a8:a0:20:c7:ad:ca: 76:c4:ba:e7:cc:c0:da:cf:df:7a:d3:f8:01:67:1e: c3:8e:09:fb:bf:50:1f:cf:3e:30:2f:ca:dc:0b:38: 13:5e:d1:d3:95:cf:e4:87:0e:be:a7:cb:2f:e3:0c: de:3d:6d:09:3f:65:92:5c:f9:1d:9a:f3:07:57:73: 9d:21:17:fa:5c:f7:20:af:22:df:90:c5:22:4b:32: 35:ce:07:db:f8:73:83:ee:06:6c:bf:fd:55:e2:26: 95:45:a1:63:0f:7d:93:67:dc:44:85:d8:5b:c8:ac: 92:2c:58:dd:73:0f:28:7b:4a:91:e2:75:72:b2:fb: 27:0a:fd:41:98:5c:2e:f2:7b:83:f3:ca:bb:57:9a: 76:68:ef:77:f7:72:67:cf:4b:61:6b:e8:69:66:c8: 84:4b:8f:a5:57:62:e2:2c:3a:0e:51:c5:b6:70:76: a0:77:cc:2a:ae:c3:9f:ad:d7:73:b2:89:5f:e4:75: f4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:68:E9:F0:5F:05:EF:4F:86:38:BC:65:BD:DD:43:BA:DA:95:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:90:43:02:3e:7d:85:7e:ee:d7:83:36:20:99:e4:e6:64:ab: 8e:60:db:d5:ac:16:32:82:23:44:d1:12:f2:8e:d4:05:c7:91: 5b:1b:26:53:b5:4a:62:de:a8:3a:39:ed:b6:22:0c:2e:be:6e: 75:a4:86:99:d5:c0:fb:49:82:84:cf:f5:14:a4:ec:95:2b:63: 08:3d:6e:e1:eb:b2:9c:b0:0f:22:dc:30:bf:1e:c4:00:a3:9a: e8:68:2b:2f:c9:ef:88:e4:d0:2f:9d:82:82:d3:80:a4:ee:d6: 4c:64:97:e3:ef:16:69:c4:13:ef:12:fd:02:fd:c0:1b:a3:5c: 84:da:35:0e:71:f2:8a:eb:cf:8e:c3:56:92:8e:d0:12:ee:8b: 08:98:73:85:f7:75:69:aa:0c:2f:69:a4:66:2b:cf:a3:0d:bf: 25:9e:d2:1a:90:2f:00:11:46:99:d8:ad:69:42:87:db:9a:08: 9f:05:f6:9c:b6:ad:02:f7:ea:cd:10:83:f5:fb:94:f2:a5:60: a0:00:8d:6f:78:0b:5b:a3:9d:cd:ec:7b:68:c0:e6:89:a0:93: 44:ba:f1:8f:38:d5:2d:36:08:fa:89:b7:55:5d:f3:6c:16:44: 60:84:d7:98:d9:7a:0c:e1:3e:ef:ed:83:55:93:ce:cd:44:a8: 94:44:31:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0eexXK/pvPQpgKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MDcwODIzMDAwOFoXDTI1MDcxMDIzMDAwMFowLzEtMCsGA1UEAxMk MDdkMGE3YzItMGQ0NS00YWQxLTkwNDktZDkxYzE2OTk5MzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbG5tK+VvIPN4wayc78OmDJ4CPbuG9Dj7ky0 7xWPCsMs6bmubTCQL7P8/O9LVS/a0aJB3ddHqVPkpZJH5q4ifD8pWWSooCDHrcp2 xLrnzMDaz9960/gBZx7Djgn7v1Afzz4wL8rcCzgTXtHTlc/khw6+p8sv4wzePW0J P2WSXPkdmvMHV3OdIRf6XPcgryLfkMUiSzI1zgfb+HOD7gZsv/1V4iaVRaFjD32T Z9xEhdhbyKySLFjdcw8oe0qR4nVysvsnCv1BmFwu8nuD88q7V5p2aO9393Jnz0th a+hpZsiES4+lV2LiLDoOUcW2cHagd8wqrsOfrddzsolf5HX0uQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLmWaOnwXwXvT4Y4vGW93UO62pUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvZGQ3MGMzYTEtNmFkMC00 Y2RkLWFhZDctNjEzMzgxZjBlNjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+kEMCPn2Ffu7XgzYgmeTm ZKuOYNvVrBYygiNE0RLyjtQFx5FbGyZTtUpi3qg6Oe22Igwuvm51pIaZ1cD7SYKE z/UUpOyVK2MIPW7h67KcsA8i3DC/HsQAo5roaCsvye+I5NAvnYKC04Ck7tZMZJfj 7xZpxBPvEv0C/cAbo1yE2jUOcfKK68+Ow1aSjtAS7osImHOF93VpqgwvaaRmK8+j Db8lntIakC8AEUaZ2K1pQofbmgifBfactq0C9+rNEIP1+5TypWCgAI1veAtbo53N 7HtowOaJoJNEuvGPONUtNgj6ibdVXfNsFkRghNeY2XoM4T7v7YNVk87NRKiURDG1 -----END CERTIFICATE-----Generated at Wed Jul 9 19:54:05 2025 by rpki-client