$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft File: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft (raw, json) Hash identifier: 6XwQZo78one/Da4JDaP7gSUxYc2SeENq5r7lhh+CB9s= Subject key identifier: D1:75:D7:54:4E:90:0D:79:83:C5:BB:7D:9E:C4:8B:47:BB:07:46:49 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584A75C170A68E88538AD9F5C700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft Manifest number: 010D0C9F4328584073A84E0231FF2DF1C04A3642 Signing time: Wed 09 Jul 2025 10:00:03 +0000 Manifest this update: Wed 09 Jul 2025 10:00:03 +0000 Manifest next update: Fri 11 Jul 2025 10:00:00 +0000 Files and hashes: 1: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl (hash: L1WV4Tn+hn0Kr1hGf7JsqZ5yV6kAHPiveNiVt+LPq9M=) 2: 58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (hash: vjx6X2C/WlIM11LVIrUB2XHCJC1SUu7m0uGQqIIKsmM=) 3: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (hash: 6RKTXVbh+xIczB+HtfzsKejtMzwvDzkrJRlmcZeIFi8=) 4: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (hash: uzS9awUi3LSAWLX5+edgHk/erToCtKWsVpjsbiNJ3Jg=) 5: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (hash: 7C5Ea8s+WTZcki+exq2UmJtMxHfqkE3bEsCZytdTFMg=) 6: d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (hash: ap4cLATdRP+QR1d1fmGJZn3QE+SOe84dMjM2QdFeTzk=) 7: ed6b1126-250f-33f9-a75a-557964e92852.roa (hash: NgdoJmcdrDGfN7IQBxWBE4bzi8C4fMYdJKnAGIGgVR8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:c1:70:a6:8e:88:53:8a:d9:f5:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Jul 9 10:00:03 2025 GMT Not After : Jul 11 10:00:00 2025 GMT Subject: CN=0ca30de3-bb1a-4608-b9b9-bf8f2968492a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:30:75:20:de:a5:09:36:e4:16:a3:1a:e6: 5d:87:8e:73:58:dc:17:04:e9:f1:18:89:17:6f:44: ff:0d:fd:3e:95:4a:ea:3e:4b:16:54:3a:b5:75:88: 82:1e:a0:d2:4e:78:0f:d0:8e:ed:d7:1d:94:29:84: 8e:c3:7d:5c:f0:0e:9a:1c:99:bb:9f:e9:cb:e5:3a: 3d:d0:6e:ee:6b:35:90:62:33:84:c4:b7:4d:63:28: 47:ed:56:4a:96:df:5a:59:2c:42:52:2c:d6:67:f4: 46:9b:33:57:5e:b4:cd:9a:df:0c:ca:0a:64:63:40: 6c:fa:d7:f1:1f:8e:c7:fe:b9:d3:9f:44:48:86:d4: f8:35:a9:16:eb:c8:9a:28:0d:d4:5c:ff:81:de:7f: d1:84:c5:9b:94:ff:99:6e:fa:67:6a:ef:f8:8e:3b: a4:da:0b:9e:e2:a6:84:6c:66:2e:8b:61:d0:39:2f: e4:6e:d4:95:c9:c7:ee:1e:3e:5d:e2:e9:be:41:77: f8:a0:be:42:91:39:a5:da:ba:c1:61:12:07:83:8a: 5b:88:00:4a:ff:9f:a2:a2:4c:6f:1d:3b:89:ed:65: 9e:19:48:6d:d3:04:e9:78:99:74:a2:3d:1b:b3:f9: 7b:2e:0f:48:bf:3c:49:4e:56:38:11:1b:28:cb:2e: ea:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:D7:54:4E:90:0D:79:83:C5:BB:7D:9E:C4:8B:47:BB:07:46:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:72:af:1b:07:4d:90:1e:0d:e6:76:89:40:06:1d:2f:15:62: aa:88:8d:a5:09:74:38:90:fd:a4:c7:24:43:4b:72:15:b8:36: bf:fd:8c:dc:6c:28:55:a9:94:b2:63:2d:bb:26:94:59:1a:6e: ab:6d:6b:02:7b:6c:d3:57:ab:37:16:09:3a:6c:a7:09:7f:69: fe:98:a0:e8:6e:f2:6d:30:65:79:1c:28:ae:59:f9:c9:8f:a0: e1:c0:d4:d5:7b:b8:8d:5e:63:ec:c8:ab:84:35:b5:06:3c:7e: 3b:3a:bf:f4:48:0f:4c:f0:95:24:02:64:b3:ee:43:7f:11:ec: 5d:57:5e:4b:96:64:4d:9d:bc:27:a5:5b:26:10:39:ba:21:79: 03:da:b4:7b:76:ea:ef:f6:69:21:1a:0a:b4:8f:c5:2d:84:94: bc:63:00:1d:bb:27:ef:56:b7:b8:7f:cf:25:d4:55:db:4b:c5: e5:ac:d8:0b:f4:1f:82:54:b7:3a:ba:87:bf:58:72:22:be:bf: e6:0a:22:6e:19:c0:eb:30:18:42:c5:48:d4:1d:4c:86:fb:84: 30:bc:36:90:f6:2b:28:0f:d3:7a:e1:19:66:32:1e:ae:53:09: 86:f0:45:46:3c:67:b2:50:06:b6:8d:54:07:9c:0b:0c:75:65: e7:c8:98:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1wXCmjohTitn1xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MDcwOTEwMDAwM1oXDTI1MDcxMTEwMDAwMFowLzEtMCsGA1UEAxMk MGNhMzBkZTMtYmIxYS00NjA4LWI5YjktYmY4ZjI5Njg0OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuQwdSDepQk25BajGuZdh45zWNwXBOnxGIkX b0T/Df0+lUrqPksWVDq1dYiCHqDSTngP0I7t1x2UKYSOw31c8A6aHJm7n+nL5To9 0G7uazWQYjOExLdNYyhH7VZKlt9aWSxCUizWZ/RGmzNXXrTNmt8MygpkY0Bs+tfx H47H/rnTn0RIhtT4NakW68iaKA3UXP+B3n/RhMWblP+Zbvpnau/4jjuk2gue4qaE bGYui2HQOS/kbtSVycfuHj5d4um+QXf4oL5CkTml2rrBYRIHg4pbiABK/5+iokxv HTuJ7WWeGUht0wTpeJl0oj0bs/l7Lg9IvzxJTlY4ERsoyy7q0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNF111ROkA15g8W7fZ7Ei0e7B0ZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvMGFhOGMyOTktMDNjYS00 YjgxLThiYWUtODNiNmQxYjNkN2Q5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBicq8bB02QHg3mdolABh0v FWKqiI2lCXQ4kP2kxyRDS3IVuDa//YzcbChVqZSyYy27JpRZGm6rbWsCe2zTV6s3 Fgk6bKcJf2n+mKDobvJtMGV5HCiuWfnJj6DhwNTVe7iNXmPsyKuENbUGPH47Or/0 SA9M8JUkAmSz7kN/EexdV15LlmRNnbwnpVsmEDm6IXkD2rR7durv9mkhGgq0j8Ut hJS8YwAduyfvVre4f88l1FXbS8XlrNgL9B+CVLc6uoe/WHIivr/mCiJuGcDrMBhC xUjUHUyG+4QwvDaQ9isoD9N64RlmMh6uUwmG8EVGPGeyUAa2jVQHnAsMdWXnyJjH -----END CERTIFICATE-----Generated at Wed Jul 9 12:19:45 2025 by rpki-client