$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft File: 28aae7db-2f51-4656-bba0-64f1d3ee3256.mft (raw, json) Hash identifier: FzMM2+rGrjzmyGviKcGRUxGQVVeZHzwxqywhgbDuV5k= Subject key identifier: 6A:1C:83:D5:86:C8:B9:60:33:29:EB:14:1A:95:11:44:B1:B4:90:39 Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Certificate issuer: /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Certificate serial: 010D0C9F4328584A7420972173FF8F587718AB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft Manifest number: 010D0C9F43285844BA8B4395ABA4BC7BE315399B Signing time: Tue 08 Jul 2025 20:00:08 +0000 Manifest this update: Tue 08 Jul 2025 20:00:08 +0000 Manifest next update: Thu 10 Jul 2025 20:00:00 +0000 Files and hashes: 1: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (hash: iTXHhTCLUSUknv7GcOV0kiNkzXEyf+7T79Dpzp4h45M=) 2: 28aae7db-2f51-4656-bba0-64f1d3ee3256.crl (hash: Ie6XerBnKefZt7JkxkVKP5XhYr1vrMbIUudwFUTlHDI=) 3: 8b8a85b0-e152-340d-9552-d571b618a288.roa (hash: DP/bXA0gOQrDOiI2sz3AOc2eBW2Sivi/s/cZvG6RdCw=) 4: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (hash: m2VJK96T0RLoGm6fllb0ox3Z4WAott7tYrsjXPZLrQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:20:97:21:73:ff:8f:58:77:18:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Validity Not Before: Jul 8 20:00:08 2025 GMT Not After : Jul 10 20:00:00 2025 GMT Subject: CN=574ecfee-b11a-4ace-8044-e29a8558c06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:20:9a:4f:50:10:d4:9d:ca:07:85:ae:bc: 40:d4:33:76:84:b8:0d:65:41:bf:93:d6:f0:b3:c7: c2:a9:6b:81:5f:86:68:2f:45:36:b8:4a:95:f4:8f: 11:61:a3:e5:c5:84:4a:b3:c0:28:1c:5a:49:91:8b: c6:1d:aa:a1:61:29:3b:12:7e:c9:05:9a:13:48:25: c2:e0:22:69:6d:3c:89:96:cd:d7:f7:4f:f5:f4:95: 09:9b:5a:45:d7:49:3d:8e:d8:89:21:70:78:be:ef: 00:c4:1d:71:d7:4c:19:15:50:ea:3e:ed:5f:de:46: 07:f0:9a:bb:1c:39:be:67:88:4a:fb:23:3a:d8:e7: c8:6a:e2:ac:49:79:d2:e3:94:27:17:bb:bf:0b:b0: d1:5d:f4:eb:e6:57:2c:ca:12:9a:7f:42:5b:8b:ab: d9:02:33:4c:94:ac:47:60:bb:91:d3:e2:62:e9:f9: 73:79:a7:c7:04:c6:46:ce:a8:0e:9a:0a:8c:2c:3a: 66:41:ec:7c:8a:78:41:d1:95:29:43:9f:1b:35:0c: da:60:3e:8a:3a:e1:52:13:71:89:9b:76:c1:af:b2: 65:c2:f1:4c:06:df:ae:0a:4a:44:a7:84:20:bc:b0: 7b:3f:15:5d:a6:67:1e:51:12:46:56:d0:78:ef:7c: 61:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1C:83:D5:86:C8:B9:60:33:29:EB:14:1A:95:11:44:B1:B4:90:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl X509v3 Authority Key Identifier: keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:bc:45:1f:e1:a2:f5:b2:60:22:0b:3d:89:c5:c4:d9:d4: 6b:ca:42:06:7a:f3:20:5a:23:93:b9:62:9a:ff:e4:dd:ef:aa: 4e:1a:93:13:47:54:a7:44:a7:b3:35:68:be:5c:b4:93:b1:7d: c0:c2:d9:1c:f3:cd:11:9c:6e:7f:c9:6c:87:4f:e9:bb:e1:35: 3f:98:87:a5:f4:a1:40:81:ea:9c:2e:67:66:84:63:e6:3c:a1: 30:39:a9:8a:6e:82:e0:e1:54:5a:3b:42:14:fb:54:2c:a0:c9: 4f:18:cc:01:7e:9e:40:3a:60:d5:7c:32:75:f0:a0:44:e2:3f: 93:a5:4a:6f:15:9a:b3:0a:65:e4:bf:da:10:31:3b:0b:19:e3: f4:80:ff:c5:5c:43:38:f0:5d:06:d8:44:e8:85:9b:01:b0:72: 02:42:ab:0e:63:fb:9f:05:00:48:6b:92:29:c9:aa:0e:d0:dd: 73:48:5d:bc:ec:0c:ce:86:04:b3:be:bd:bb:c5:ec:a5:e0:27: be:77:64:bb:b8:12:08:b9:1d:22:4d:f3:cb:41:04:80:be:0a: 80:d4:f9:9c:dd:80:00:05:86:1f:f5:87:11:d7:43:e7:fa:be: ac:7c:42:a2:71:08:22:9a:0c:c1:fd:f1:5b:9f:fe:4d:37:be: b2:21:5b:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0IJchc/+PWHcYq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUz MjU2MB4XDTI1MDcwODIwMDAwOFoXDTI1MDcxMDIwMDAwMFowLzEtMCsGA1UEAxMk NTc0ZWNmZWUtYjExYS00YWNlLTgwNDQtZTI5YTg1NThjMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+kgmk9QENSdygeFrrxA1DN2hLgNZUG/k9bw s8fCqWuBX4ZoL0U2uEqV9I8RYaPlxYRKs8AoHFpJkYvGHaqhYSk7En7JBZoTSCXC 4CJpbTyJls3X90/19JUJm1pF10k9jtiJIXB4vu8AxB1x10wZFVDqPu1f3kYH8Jq7 HDm+Z4hK+yM62OfIauKsSXnS45QnF7u/C7DRXfTr5lcsyhKaf0Jbi6vZAjNMlKxH YLuR0+Ji6flzeafHBMZGzqgOmgqMLDpmQex8inhB0ZUpQ58bNQzaYD6KOuFSE3GJ m3bBr7JlwvFMBt+uCkpEp4QgvLB7PxVdpmceURJGVtB473xhHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGocg9WGyLlgMynrFBqVEUSxtJA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFh ZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMjhhYWU3ZGItMmY1MS00 NjU2LWJiYTAtNjRmMWQzZWUzMjU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYWU3ZGItMmY1MS00NjU2LWJi YTAtNjRmMWQzZWUzMjU2LzI4YWFlN2RiLTJmNTEtNDY1Ni1iYmEwLTY0ZjFkM2Vl MzI1Ni5jcmwwHwYDVR0jBBgwFoAUjODPFqyPb8zkYyft39+h+edvk48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYx ZDNlZTMyNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA69bxFH+Gi9bJgIgs9icXE 2dRrykIGevMgWiOTuWKa/+Td76pOGpMTR1SnRKezNWi+XLSTsX3Awtkc880RnG5/ yWyHT+m74TU/mIel9KFAgeqcLmdmhGPmPKEwOamKboLg4VRaO0IU+1QsoMlPGMwB fp5AOmDVfDJ18KBE4j+TpUpvFZqzCmXkv9oQMTsLGeP0gP/FXEM48F0G2ETohZsB sHICQqsOY/ufBQBIa5IpyaoO0N1zSF287AzOhgSzvr27xeyl4Ce+d2S7uBIIuR0i TfPLQQSAvgqA1Pmc3YAABYYf9YcR10Pn+r6sfEKicQgimgzB/fFbn/5NN76yIVsM -----END CERTIFICATE-----Generated at Tue Jul 8 23:37:54 2025 by rpki-client