$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft File: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft (raw, json) Hash identifier: MMhfx8iNTneVuDueCoLww8SMN+EoZB5bhVkUNeWJhhQ= Subject key identifier: 49:09:DC:A5:02:E1:8D:73:74:D9:D3:E8:E0:51:C4:84:20:16:9E:A3 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584AD1C43D37662747BE00B9A0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft Manifest number: 010D0C9F4328584073A84C39376BC697A05F2F65 Signing time: Mon 11 Aug 2025 09:00:03 +0000 Manifest this update: Mon 11 Aug 2025 09:00:03 +0000 Manifest next update: Thu 14 Aug 2025 09:00:00 +0000 Files and hashes: 1: 350e638e-f9b0-39e9-b359-52ea50ce6dd4.roa (hash: YSiDcSWJpSbb8COrWbfS5pgrjRtPI4UOq8Sm1x0fuZA=) 2: 693b043c-7dd0-3e66-9b30-96dc0a32abd1.roa (hash: BOFdVs8CKVl/kH5zSAzlF4tUH9yBWg7lKUhg8ilnxsk=) 3: 69c85a7e-5c7c-3cbc-8360-f4b315370081.roa (hash: gv/HbiynMNZE1bnSAQMUwn+/L6HB+mXjWGAeWwa48cU=) 4: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl (hash: g4pDCHXuJO7OWD22MenMdM0ZeWZd/omZ9/v68PSMMc4=) 5: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (hash: Ml2ymF0ZLO8tImjL2z3TafJdnZAt8yTkiPJBihb1bF0=) 6: d3d52428-3366-3940-ba48-6c79fec227e0.roa (hash: NED5R2FLpIhqjzRyD+hgC0JTKoBVqYJ7TP0ciHEKxMo=) 7: e7103f53-8715-3d60-9b51-c7bb1d74637b.roa (hash: e9Vck211fZO9CZIhrnOkbZgv2y4D7pwOkte7ke/UdQ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d1:c4:3d:37:66:27:47:be:00:b9:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Aug 11 09:00:03 2025 GMT Not After : Aug 14 09:00:00 2025 GMT Subject: CN=3d29fd96-298b-45f6-9bb1-af537f269900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:42:06:53:71:de:71:80:ea:1f:af:23:c4: 86:52:25:e2:e5:7f:95:78:d1:84:3c:ee:73:33:4b: 37:66:3a:69:92:7b:a7:e7:ae:d9:52:03:61:33:26: 3e:23:03:6c:c8:b2:c2:ba:a3:8b:f3:6b:7b:58:84: 23:8b:e6:3e:88:21:a2:34:01:a0:60:7e:ff:a3:b7: 3b:57:f1:ae:a5:92:94:b0:6b:e8:92:bb:cd:9e:b7: 7a:0b:8b:8b:32:67:50:be:64:c2:bf:76:62:db:74: be:41:be:87:83:7c:06:29:47:8f:e6:94:0b:93:aa: 12:75:98:35:4a:6a:12:f4:f7:43:6c:fd:d7:63:f6: 72:25:41:9e:5f:61:ba:9d:29:bc:88:45:af:32:a1: 69:d5:73:4a:d0:fa:4e:99:dd:71:ca:1a:4f:55:58: bb:45:ce:40:e1:71:d1:30:97:d3:d5:4c:51:b3:15: fd:73:7d:45:e6:a1:d4:67:c6:bd:19:af:ac:fa:e8: c6:af:1a:18:43:0a:fd:00:d5:fc:7b:cf:fb:72:24: 7c:0e:a7:d3:7f:1f:94:50:c2:b1:21:4b:d4:4c:38: 6d:fc:77:81:27:ab:26:50:1a:15:4e:12:46:a2:60: 67:28:9e:82:ad:38:6e:44:9d:cd:a9:99:f5:0d:b9: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:DC:A5:02:E1:8D:73:74:D9:D3:E8:E0:51:C4:84:20:16:9E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:19:9b:96:db:ba:39:91:22:23:ed:af:13:bb:da:35:65:ea: 6f:7e:88:d6:10:b6:94:ea:4f:ad:ca:80:61:e6:08:db:e9:3b: 23:81:90:7d:04:46:65:10:72:d4:1b:9a:e1:ee:33:5f:2b:a7: 45:d9:ab:4a:a1:7e:bf:75:65:dc:18:a6:72:3e:e0:71:f9:cf: 62:35:0e:82:44:ad:c5:10:1b:b1:55:b5:82:43:11:33:65:b3: 91:aa:cb:85:be:9a:15:e7:ec:a6:ff:d4:14:21:52:c9:fb:4f: ac:7b:82:31:db:0f:69:d3:af:e8:a0:0d:19:a7:af:03:e0:9d: 0c:0f:7e:72:54:53:c4:1e:2c:a1:83:ac:9d:28:59:b1:37:67: 13:6f:71:8d:63:2f:b7:9d:22:89:32:e9:a5:59:a7:09:03:4c: 68:b3:46:94:a7:f1:de:c4:82:ce:1b:54:e1:69:ad:cb:3f:dc: f1:4b:2f:12:9f:7b:e1:bc:c4:1f:51:d4:4e:65:c6:34:0a:82: 57:fb:95:39:5e:30:ec:36:2b:b0:75:ae:4d:80:eb:7d:d3:94: 0f:33:82:61:6f:e8:58:70:bd:ee:3c:92:f4:bc:cb:cf:4f:a9: be:ea:78:0b:8d:45:27:bc:73:60:d5:d5:28:09:94:83:b5:1e: 50:25:e1:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErRxD03ZidHvgC5oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDgxMTA5MDAwM1oXDTI1MDgxNDA5MDAwMFowLzEtMCsGA1UEAxMk M2QyOWZkOTYtMjk4Yi00NWY2LTliYjEtYWY1MzdmMjY5OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCZCBlNx3nGA6h+vI8SGUiXi5X+VeNGEPO5z M0s3Zjppknun567ZUgNhMyY+IwNsyLLCuqOL82t7WIQji+Y+iCGiNAGgYH7/o7c7 V/GupZKUsGvokrvNnrd6C4uLMmdQvmTCv3Zi23S+Qb6Hg3wGKUeP5pQLk6oSdZg1 SmoS9PdDbP3XY/ZyJUGeX2G6nSm8iEWvMqFp1XNK0PpOmd1xyhpPVVi7Rc5A4XHR MJfT1UxRsxX9c31F5qHUZ8a9Ga+s+ujGrxoYQwr9ANX8e8/7ciR8DqfTfx+UUMKx IUvUTDht/HeBJ6smUBoVThJGomBnKJ6CrThuRJ3NqZn1DbkwoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEkJ3KUC4Y1zdNnT6OBRxIQgFp6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvN2Y5MDBlNGUtNWYwYS00 YjE0LTk4YzAtNjY0N2JmZjVlNjRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwGZuW27o5kSIj7a8Tu9o1 ZepvfojWELaU6k+tyoBh5gjb6TsjgZB9BEZlEHLUG5rh7jNfK6dF2atKoX6/dWXc GKZyPuBx+c9iNQ6CRK3FEBuxVbWCQxEzZbORqsuFvpoV5+ym/9QUIVLJ+0+se4Ix 2w9p06/ooA0Zp68D4J0MD35yVFPEHiyhg6ydKFmxN2cTb3GNYy+3nSKJMumlWacJ A0xos0aUp/HexILOG1Thaa3LP9zxSy8Sn3vhvMQfUdROZcY0CoJX+5U5XjDsNiuw da5NgOt905QPM4Jhb+hYcL3uPJL0vMvPT6m+6ngLjUUnvHNg1dUoCZSDtR5QJeHJ -----END CERTIFICATE-----Generated at Mon Aug 11 10:51:04 2025 by rpki-client