$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft File: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft (raw, json) Hash identifier: kKkHv9GxBF3KOFOMKZvDJ6sQ1xj3wEBrK0LabtRE8yA= Subject key identifier: 96:04:76:88:FA:B6:40:B0:72:E2:69:FE:35:7F:00:F0:BF:62:EB:A8 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584A7585ECE530D57ED3303E5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft Manifest number: 010D0C9F432858440EC852E77A7AC987AC86ECF7 Signing time: Wed 09 Jul 2025 08:00:08 +0000 Manifest this update: Wed 09 Jul 2025 08:00:08 +0000 Manifest next update: Fri 11 Jul 2025 08:00:00 +0000 Files and hashes: 1: 04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (hash: KqMXE5ZSybZrTTp0D+JB5jDYGv8WtuQzNQPDEGAkapE=) 2: 1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl (hash: xBh2gqxjD2CXdZVyuU43LzRicw6nQBnIiHSacduxyNI=) 3: c084590b-3ab2-32dd-af28-d65751098d7b.roa (hash: M3B14foCOtJxyd8T33jcSk88eWjmB37mzHHBJZS0wzU=) 4: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (hash: spfVAu/0PLO5I62zR3QH+XM04bQBv39AxRZXumXAJuk=) 5: cb4b5ee6-bc08-3d60-919a-88f792c7b5e7.roa (hash: yd9o8HwafYIblgdtqlrOqfNS3PwSifqiELmajYdpObk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:85:ec:e5:30:d5:7e:d3:30:3e:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Jul 9 08:00:08 2025 GMT Not After : Jul 11 08:00:00 2025 GMT Subject: CN=1c51abf1-ad01-4a68-a83f-94b17c6b351d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:e6:8e:9c:94:3e:50:26:14:e8:3a:2f:7f: 5a:37:99:04:58:bc:2e:4e:25:64:71:df:09:2f:39: 27:b6:e5:26:6d:f4:6e:9f:f2:18:ce:f3:1c:fc:39: 35:bf:8d:e8:b8:7f:8a:a5:68:88:fd:e3:19:66:12: 9f:6c:39:b3:d1:27:da:a3:4e:d2:c2:09:c1:9b:af: 7a:63:87:cd:00:b8:e6:70:59:3a:e8:a1:ef:86:b4: 96:d2:ce:59:27:b6:f9:ab:21:1c:b5:a0:b9:be:f9: 8a:78:37:bd:84:64:75:18:22:ff:8c:0c:99:e4:c8: 5a:fa:cd:db:e1:19:a1:4b:3e:7a:43:19:31:49:7f: 0d:4e:62:36:42:a9:02:02:9e:5e:8e:75:c3:db:9a: 71:2d:bd:30:8f:0e:33:d1:5c:36:68:e2:86:57:7a: 6b:06:36:ca:17:76:2d:f3:d5:d3:7f:36:3b:89:fe: 78:c5:87:ac:90:2c:98:f6:00:8d:e0:e8:19:aa:19: 7b:f9:54:7f:61:b7:10:fb:6a:c2:1e:ad:54:a6:5e: ab:ac:d5:73:97:8d:7a:cc:4b:8b:db:a0:21:4c:56: b8:89:8a:a3:8c:f1:6b:16:19:ea:4e:9c:d1:ec:37: 5a:74:4b:9c:95:e3:5f:42:90:75:d7:f0:cc:e9:8b: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:76:88:FA:B6:40:B0:72:E2:69:FE:35:7F:00:F0:BF:62:EB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ba:47:4c:51:b1:00:3b:ec:06:0a:41:c1:d7:e6:c8:b6:09: 10:e3:31:9a:3e:9b:1a:7c:d6:3b:25:05:c4:b5:4e:7c:4a:a3: 1a:e1:af:a6:e7:33:31:05:ec:06:61:16:89:ad:d8:1e:03:57: 3d:cd:45:f9:99:6d:fc:f7:3a:60:49:1a:87:52:c1:eb:36:6a: 9c:39:07:04:fa:f8:3e:e5:c1:c1:49:8b:16:12:8c:c6:9b:95: c3:4f:ed:ec:e0:68:25:41:da:46:25:00:c8:be:6b:92:67:70: ec:aa:10:62:bc:40:9d:a1:48:7e:75:a9:a5:bb:a1:ac:ac:30: f0:9b:9f:48:bc:72:d2:d3:44:56:9e:81:97:11:cf:8d:e6:14: 79:b8:48:08:38:47:c5:d7:56:8b:d9:10:53:e0:63:9a:f8:35: fe:3e:63:33:6e:4a:2e:60:83:9c:89:da:d5:ba:c4:a9:de:e2: aa:cd:16:29:0e:c9:91:47:ff:1a:dd:44:63:25:cd:70:3c:26: 0c:d7:40:d4:81:df:af:7d:9f:63:9c:f1:a6:50:57:2e:a3:a5: fe:94:23:8b:1d:e3:2e:e3:60:32:89:63:e6:04:f0:7b:99:5a: da:36:00:76:50:d1:2b:36:05:00:fc:dc:b8:76:cc:5c:1e:0c: 3b:b6:d4:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1hezlMNV+0zA+W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDcwOTA4MDAwOFoXDTI1MDcxMTA4MDAwMFowLzEtMCsGA1UEAxMk MWM1MWFiZjEtYWQwMS00YTY4LWE4M2YtOTRiMTdjNmIzNTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieTmjpyUPlAmFOg6L39aN5kEWLwuTiVkcd8J LzkntuUmbfRun/IYzvMc/Dk1v43ouH+KpWiI/eMZZhKfbDmz0Sfao07SwgnBm696 Y4fNALjmcFk66KHvhrSW0s5ZJ7b5qyEctaC5vvmKeDe9hGR1GCL/jAyZ5Mha+s3b 4RmhSz56QxkxSX8NTmI2QqkCAp5ejnXD25pxLb0wjw4z0Vw2aOKGV3prBjbKF3Yt 89XTfzY7if54xYeskCyY9gCN4OgZqhl7+VR/YbcQ+2rCHq1Upl6rrNVzl416zEuL 26AhTFa4iYqjjPFrFhnqTpzR7DdadEucleNfQpB11/DM6YvizwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJYEdoj6tkCwcuJp/jV/APC/YuuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMWI5YmYyZjQtYzgzMS00 ZjFlLWEyZDUtZDdmYzQwNTM1YzhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArukdMUbEAO+wGCkHB1+bI tgkQ4zGaPpsafNY7JQXEtU58SqMa4a+m5zMxBewGYRaJrdgeA1c9zUX5mW389zpg SRqHUsHrNmqcOQcE+vg+5cHBSYsWEozGm5XDT+3s4GglQdpGJQDIvmuSZ3DsqhBi vECdoUh+damlu6GsrDDwm59IvHLS00RWnoGXEc+N5hR5uEgIOEfF11aL2RBT4GOa +DX+PmMzbkouYIOcidrVusSp3uKqzRYpDsmRR/8a3URjJc1wPCYM10DUgd+vfZ9j nPGmUFcuo6X+lCOLHeMu42AyiWPmBPB7mVraNgB2UNErNgUA/Ny4dsxcHgw7ttTx -----END CERTIFICATE-----Generated at Wed Jul 9 19:44:10 2025 by rpki-client