$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft File: a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft (raw, json) Hash identifier: 8QVU4Sim+L/1AjRQgkUm/F8Ki9PZwFvepc41WA1OZTU= Subject key identifier: 2E:00:06:E8:38:89:04:E0:D2:8C:C7:06:AC:7C:DF:4E:65:43:31:90 Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74 Certificate issuer: /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b Certificate serial: 010D0C9F4328584A79D3BC66E659072618C9FB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft Manifest number: 010D0C9F4328584073A827F63E3692B3DA54A096 Signing time: Thu 10 Jul 2025 21:00:08 +0000 Manifest this update: Thu 10 Jul 2025 21:00:08 +0000 Manifest next update: Sat 12 Jul 2025 21:00:00 +0000 Files and hashes: 1: 2d1e3726-f4c0-3e94-9e01-9888bea82c8e.roa (hash: 7H5oKUDd+vaNfXwKeyUcOGMK7d3Vr4rYuN/DydXkgh8=) 2: a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl (hash: hWn2rwwCFMcCEJyHHYheHmotsFu0FRY5V6U4UySwB98=) 3: aaa18235-f4db-3113-8f20-a355b15fd54f.roa (hash: TR17vEUjzj1iHyi86KNuTqXOO6SwBRfTSW7rd+DWssk=) 4: c383a3db-ebff-3281-a9f6-56f395f69948.roa (hash: lraoMBZ8f55eFyu0PIv+oQtFGAXTDWN2L0AoPGx1DhA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:d3:bc:66:e6:59:07:26:18:c9:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b Validity Not Before: Jul 10 21:00:08 2025 GMT Not After : Jul 12 21:00:00 2025 GMT Subject: CN=ede38f80-3a61-4b58-8f91-3bb06a356915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:01:04:81:73:e1:57:d6:9c:74:21:d8:74:38: 9a:7b:2f:bd:d1:98:83:90:4f:53:8f:9b:81:43:89: 89:03:62:3a:9a:7d:14:07:3f:2b:3a:82:97:a0:24: e0:4b:86:31:9f:01:a5:fd:a6:a3:6e:eb:d2:9b:4c: ed:09:ff:f8:f0:76:e4:0f:6a:73:bc:af:9a:a1:70: 7c:3c:a9:9e:4d:70:15:85:61:a6:47:cb:7f:f1:4f: 3b:9d:18:d2:b5:2e:28:15:3a:a8:3e:04:d5:51:c2: 08:6a:e9:7a:56:8a:a4:ab:05:cc:d0:8c:d9:e4:d1: ca:9c:ca:24:53:41:48:82:bd:5d:15:06:18:36:bb: c5:51:41:e0:fe:2e:be:fa:e7:de:e2:18:93:de:3e: 0c:21:63:94:b9:10:8a:12:2b:fe:ad:65:3f:14:42: 89:8a:8e:16:7d:a1:a4:23:cc:ec:7f:e4:b4:a8:70: a1:d0:ae:c3:8a:19:1b:8d:d3:ec:4b:0e:83:2a:8f: d9:c2:45:67:19:91:b0:80:dc:04:93:93:1c:34:70: 8c:9a:a9:88:b6:cb:54:91:65:ea:93:c0:80:58:73: 79:7c:b7:37:bf:15:1d:0a:79:d6:b7:e3:ba:55:dd: 01:92:12:91:0b:cd:f4:d9:79:d4:0c:04:2a:de:2f: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:06:E8:38:89:04:E0:D2:8C:C7:06:AC:7C:DF:4E:65:43:31:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl X509v3 Authority Key Identifier: keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c4:29:d1:b6:1e:32:86:f2:ae:aa:ff:73:d3:61:94:b0:7e: 9c:16:04:69:c8:1d:d8:1f:d5:5e:50:4a:b2:55:dc:44:d6:96: fd:5d:0d:00:f5:64:7c:d3:f4:b1:4c:b4:40:e5:df:97:f1:13: ba:32:94:9e:16:0b:4d:83:6a:1f:29:f8:a1:e0:fc:66:8e:04: 02:c1:0b:91:00:f7:bd:f3:ca:d3:cf:92:7c:f0:22:b9:d7:dd: f7:7b:e1:af:dd:8c:26:0f:90:90:b5:44:a1:b0:38:ba:3e:58: 8e:d3:f5:e2:95:e1:63:95:35:8f:45:8a:34:30:39:c2:75:95: f5:32:12:5c:7a:b2:2a:27:15:39:22:6c:ae:7a:da:42:a3:80: 2b:49:8f:f0:1a:40:68:54:b4:7a:2f:ab:d6:20:c5:78:ea:fd: a0:20:8e:db:ba:d0:ce:30:ca:d2:89:ef:ad:30:e6:3c:8f:99: 8f:c5:94:65:e2:22:f3:b5:bb:fc:ba:d5:3d:fc:12:fb:2c:e6: cf:17:3a:f8:2f:f9:82:4e:c4:59:eb:2e:4e:36:5f:3f:ab:ca: b0:19:72:0c:a4:58:09:05:55:fa:c2:f5:39:1c:b6:e8:89:46: a4:be:60:df:c6:7b:17:be:2d:b1:cf:13:1e:e0:1a:eb:d7:7f: 59:a3:4b:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp507xm5lkHJhjJ+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZiMzMwNTItZTVhOC00ZjYzLWIyNjQtYjU1YzFhZTFl ZDViMB4XDTI1MDcxMDIxMDAwOFoXDTI1MDcxMjIxMDAwMFowLzEtMCsGA1UEAxMk ZWRlMzhmODAtM2E2MS00YjU4LThmOTEtM2JiMDZhMzU2OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygEEgXPhV9acdCHYdDiaey+90ZiDkE9Tj5uB Q4mJA2I6mn0UBz8rOoKXoCTgS4YxnwGl/aajbuvSm0ztCf/48HbkD2pzvK+aoXB8 PKmeTXAVhWGmR8t/8U87nRjStS4oFTqoPgTVUcIIaul6VoqkqwXM0IzZ5NHKnMok U0FIgr1dFQYYNrvFUUHg/i6++ufe4hiT3j4MIWOUuRCKEiv+rWU/FEKJio4WfaGk I8zsf+S0qHCh0K7DihkbjdPsSw6DKo/ZwkVnGZGwgNwEk5McNHCMmqmItstUkWXq k8CAWHN5fLc3vxUdCnnWt+O6Vd0BkhKRC8302XnUDAQq3i9ITQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC4ABug4iQTg0ozHBqx8305lQzGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNmIz MzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVjMWFlMWVkNWIvYTZiMzMwNTItZTVhOC00 ZjYzLWIyNjQtYjU1YzFhZTFlZDViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTZiMzMwNTItZTVhOC00ZjYzLWIy NjQtYjU1YzFhZTFlZDViL2E2YjMzMDUyLWU1YTgtNGY2My1iMjY0LWI1NWMxYWUx ZWQ1Yi5jcmwwHwYDVR0jBBgwFoAUmNFnM/i3BuH79/fAB0RFgYBx3HQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNmIzMzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVj MWFlMWVkNWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDxCnRth4yhvKuqv9z02GU sH6cFgRpyB3YH9VeUEqyVdxE1pb9XQ0A9WR80/SxTLRA5d+X8RO6MpSeFgtNg2of Kfih4PxmjgQCwQuRAPe988rTz5J88CK51933e+Gv3YwmD5CQtUShsDi6PliO0/Xi leFjlTWPRYo0MDnCdZX1MhJcerIqJxU5ImyuetpCo4ArSY/wGkBoVLR6L6vWIMV4 6v2gII7butDOMMrSie+tMOY8j5mPxZRl4iLztbv8utU9/BL7LObPFzr4L/mCTsRZ 6y5ONl8/q8qwGXIMpFgJBVX6wvU5HLboiUakvmDfxnsXvi2xzxMe4Brr139Zo0sQ -----END CERTIFICATE-----Generated at Fri Jul 11 05:27:19 2025 by rpki-client