$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft File: 25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft (raw, json) Hash identifier: bo6C4d5DxbVRaJQX6sTDbEXEa4eBcnOr2lEgBVLTLMI= Subject key identifier: 96:19:66:50:03:C7:DF:1B:CE:DB:01:EE:4F:38:43:3E:8C:B6:89:A3 Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F4328584A610CE96F691FCA7DBEDEA698 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft Manifest number: 010D0C9F4328584073A83163B1533E4B8D3564E8 Signing time: Wed 02 Jul 2025 00:00:08 +0000 Manifest this update: Wed 02 Jul 2025 00:00:08 +0000 Manifest next update: Sat 05 Jul 2025 00:00:00 +0000 Files and hashes: 1: 22b878a0-4ced-3a26-a8b2-ce7e7d25c056.roa (hash: sfJxsUTBFIrUyE9bcqkuo7tGBiB47G64Ds8YWpUWlsg=) 2: 25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl (hash: XFv2zCMs4vtyPOQ8MZDehqBIa8/N6c+q6x8bDzcAP4U=) 3: 2c8c1985-c38d-3eaa-9e08-51dbdc534e7c.roa (hash: vMCsGlc8wqJJc5A7aanuDfI3P+RRtqHXVqq0/RintQ0=) 4: 62ce336c-5ac6-3ec9-a29b-4e733b44811e.roa (hash: HTQvH1J/P4631yJYpugxW1sk2cFMZifS/DoPxZw/Eno=) 5: b53ac133-8c37-36a8-a00a-6e1693d86389.roa (hash: h9DpeZar5C6wphEQ9V3mBe2HfdmbDsSfhHaz47t9j8I=) 6: e4f21359-fbdd-3835-adf4-0aa226c665da.roa (hash: 39+dS3EVxf3uMeWse6R4epFX1SNVhwtzV/dKEv25LqI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:0c:e9:6f:69:1f:ca:7d:be:de:a6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: Jul 2 00:00:08 2025 GMT Not After : Jul 5 00:00:00 2025 GMT Subject: CN=ef65c0b6-a292-4dff-bdac-054e66f4564b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:31:83:c2:ca:e6:ab:a5:59:3e:74:3e:ad: 0c:8c:3a:eb:44:b2:e7:3a:3c:85:e1:62:a2:35:ef: 0f:6c:fb:39:45:d7:92:28:cf:59:55:0c:5b:b2:71: 45:fa:4d:f3:d5:c5:12:b1:dd:92:61:93:8b:04:f3: a0:77:ae:86:a8:3e:53:d2:60:84:60:df:41:f2:7d: 2f:08:d0:5e:1e:16:37:01:84:30:aa:20:4f:e8:80: c6:79:99:0d:26:44:51:47:da:2f:50:2d:cc:f2:e8: 43:33:ce:29:2c:11:3a:97:c4:d1:a3:6d:94:20:2c: 65:07:b4:eb:18:e0:9e:c2:06:17:a4:40:06:72:f0: 6c:74:02:80:d4:a3:55:13:50:1b:a2:74:da:a6:8a: 6c:a7:97:d1:39:7a:fb:4e:a2:35:46:5c:1e:aa:26: 34:d3:4d:fa:e2:c4:ce:d3:fe:1c:f0:23:c8:95:ce: 0e:26:8c:02:31:ae:65:e3:b9:9b:54:5a:d8:35:9b: b0:07:e1:bc:36:9d:f5:de:b8:71:42:d4:f0:8d:76: fa:8d:95:4f:42:3e:ff:15:87:fd:d2:9e:c1:23:9d: 08:38:0a:91:a5:08:79:04:2a:17:be:6e:c4:63:cb: 41:11:2e:ef:66:51:f1:ed:a9:61:8f:87:77:5e:f6: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:19:66:50:03:C7:DF:1B:CE:DB:01:EE:4F:38:43:3E:8C:B6:89:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7f:49:8d:0f:74:8d:95:c5:9c:b3:95:7d:b6:62:9a:b7:36: 57:a1:ca:12:39:2a:67:a3:f3:69:73:ee:91:6b:7a:4c:af:ae: 2e:fc:40:2f:64:8c:93:27:d2:b5:3f:62:0c:9f:37:be:03:15: 56:66:33:ef:21:f5:43:89:a9:2d:54:a9:e3:d8:a0:35:2f:85: f7:b8:b1:66:3f:7d:bd:45:26:1d:28:54:5d:72:1f:58:10:e2: ed:4f:39:52:f9:62:2a:1f:14:b7:cd:f1:3c:cd:ed:3d:36:87: 3f:ca:cd:a8:4e:2d:01:e4:ef:aa:40:b0:47:c9:72:98:c3:91: 98:af:5f:8c:b8:ba:c1:aa:d0:26:8e:07:48:be:25:fd:11:d1: e4:52:06:34:53:fc:b2:2b:f7:2c:92:0c:f1:dd:6c:49:a7:40: 32:4b:c3:cf:80:3f:51:d3:62:1a:7b:97:ed:53:c6:0a:ea:c8: 63:e3:24:2b:60:6d:be:60:54:6c:89:13:37:06:c0:78:1b:51: 02:f7:bc:11:60:76:56:bc:30:2a:b4:c3:98:a8:5d:c9:0b:7e: 5a:a0:d2:0d:2f:88:4e:a9:98:0d:fc:f9:ce:10:12:b8:8c:c9: c6:f4:51:3c:3a:1b:5e:a1:7f:95:54:d5:d4:ed:6d:4c:a1:db: 00:b5:dd:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEphDOlvaR/Kfb7eppgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI1MDcwMjAwMDAwOFoXDTI1MDcwNTAwMDAwMFowLzEtMCsGA1UEAxMk ZWY2NWMwYjYtYTI5Mi00ZGZmLWJkYWMtMDU0ZTY2ZjQ1NjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhgxg8LK5qulWT50Pq0MjDrrRLLnOjyF4WKi Ne8PbPs5RdeSKM9ZVQxbsnFF+k3z1cUSsd2SYZOLBPOgd66GqD5T0mCEYN9B8n0v CNBeHhY3AYQwqiBP6IDGeZkNJkRRR9ovUC3M8uhDM84pLBE6l8TRo22UICxlB7Tr GOCewgYXpEAGcvBsdAKA1KNVE1AbonTapopsp5fROXr7TqI1RlweqiY000364sTO 0/4c8CPIlc4OJowCMa5l47mbVFrYNZuwB+G8Np313rhxQtTwjXb6jZVPQj7/FYf9 0p7BI50IOAqRpQh5BCoXvm7EY8tBES7vZlHx7alhj4d3XvazHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJYZZlADx98bztsB7k84Qz6MtomjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvMjVhMDg0OTItYjNiMS00 YWExLWI1NmQtMDFhOThmN2QwOTE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASf0mND3SNlcWcs5V9tmKa tzZXocoSOSpno/Npc+6Ra3pMr64u/EAvZIyTJ9K1P2IMnze+AxVWZjPvIfVDiakt VKnj2KA1L4X3uLFmP329RSYdKFRdch9YEOLtTzlS+WIqHxS3zfE8ze09Noc/ys2o Ti0B5O+qQLBHyXKYw5GYr1+MuLrBqtAmjgdIviX9EdHkUgY0U/yyK/cskgzx3WxJ p0AyS8PPgD9R02Iae5ftU8YK6shj4yQrYG2+YFRsiRM3BsB4G1EC97wRYHZWvDAq tMOYqF3JC35aoNINL4hOqZgN/PnOEBK4jMnG9FE8OhteoX+VVNXU7W1ModsAtd2I -----END CERTIFICATE-----Generated at Thu Jul 3 00:51:29 2025 by rpki-client