$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft File: 8c2a8d95-0290-4218-9b08-d157e5f127f9.mft (raw, json) Hash identifier: m1zEnUPO320RcHJ/2oBvhEqBj5kYiZjL2Fk58nvUJyg= Subject key identifier: CD:17:20:79:5E:FF:5C:AE:D3:40:FB:D0:A2:93:A1:18:E2:4C:F7:9F Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584A76AFB4A63EEA8F111766A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft Manifest number: 010D0C9F43285843E5E52DE223730459039AA58E Signing time: Wed 09 Jul 2025 18:00:08 +0000 Manifest this update: Wed 09 Jul 2025 18:00:08 +0000 Manifest next update: Sat 12 Jul 2025 18:00:00 +0000 Files and hashes: 1: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (hash: t+z1U7e5tIO4EyyYhOQSiDr4MRNqLvGwtMG8cgKKRD0=) 2: 4e3ac80f-ec70-375b-829a-2ce166ed5e3b.roa (hash: TvMIUZYp0pfQgH9vW9mH+aQxvfqKmbOQYP0je9P+igk=) 3: 8c2a8d95-0290-4218-9b08-d157e5f127f9.crl (hash: 7yobfGo88y39ZXRaN8ZPTHzbDxAXRXdz5XRw/2TGj/g=) 4: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (hash: CqRqJA628zgbPhrtDuAhXSGq/bsIPP+cQ3oJoHrbOrk=) 5: e6fbc970-6240-37e6-a71a-09105bb5456a.roa (hash: XHqxIN7667AGEOlLzv4hHRTAwrHSuowOUyLCBPJr8dc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:af:b4:a6:3e:ea:8f:11:17:66:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Jul 9 18:00:08 2025 GMT Not After : Jul 12 18:00:00 2025 GMT Subject: CN=56d5cca2-4366-4161-b33a-491b926c33c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:7b:24:e5:66:ca:fc:17:35:da:d1:a0:a1: 73:93:9c:b7:35:67:03:48:45:46:37:3a:18:3d:1b: f2:74:47:bf:dc:24:4c:a7:14:9b:de:e9:39:eb:fe: dd:c1:19:56:c3:08:39:15:bb:4b:81:e6:cd:3a:8f: 28:c2:64:2c:ef:26:6e:47:df:66:94:56:d5:05:09: b7:d9:10:f3:f9:70:8e:c7:6b:66:c6:fb:e8:bb:ba: a9:86:59:76:86:7e:c8:40:f9:08:fc:cf:b0:fd:15: 64:7e:50:37:93:9f:b7:83:bb:73:af:5d:d0:51:0c: 72:fc:11:4c:66:3e:87:ee:52:4c:73:42:2b:dc:43: 34:cc:f8:ae:87:20:86:4f:1a:3e:00:dd:a6:27:fb: af:c3:08:b4:26:10:d0:a7:56:3d:54:39:bb:2d:92: 9f:ee:81:ba:ce:64:9f:4d:b4:5c:62:fc:d7:7e:da: 71:31:37:6d:cc:56:ac:03:10:31:7e:ca:1e:04:be: 5e:71:33:66:e9:94:fc:9e:07:5d:49:5b:a9:1d:18: 0e:94:aa:48:91:b0:0c:3d:2d:d4:39:44:cc:46:86: 71:87:ac:b7:12:fc:61:ea:6d:86:57:ee:c8:63:10: f8:79:2b:c8:f6:b5:42:1a:2d:3b:e0:8d:9f:4e:6d: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:20:79:5E:FF:5C:AE:D3:40:FB:D0:A2:93:A1:18:E2:4C:F7:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:10:f5:04:a9:dd:c4:b7:6b:c8:1d:32:53:0b:4c:b9:d8:5f: cd:0f:c9:ef:24:b4:53:38:43:82:5d:97:bb:9e:06:f7:a5:3f: c2:be:20:05:25:08:1f:25:86:e7:3b:0d:78:57:11:65:98:c7: 7d:88:f9:ef:48:d1:28:47:56:2b:15:b5:61:aa:1e:c6:72:19: ec:f0:ac:a4:6f:b7:ad:12:1c:22:d0:ac:bb:9f:b9:22:14:30: 69:ec:17:d7:b8:22:60:c6:de:25:d5:93:4c:98:6e:e5:23:0d: 79:f7:65:ef:31:c4:49:34:11:36:56:6d:58:86:40:f9:a1:3a: 27:ca:47:a3:5b:b1:f9:7b:aa:a2:35:c6:bb:5b:a9:07:ec:d5: 20:e7:e2:2f:d4:22:ab:f6:e0:d3:06:aa:3d:a4:a9:a7:23:2b: 12:c5:d7:3d:93:12:fe:71:e5:3a:b9:90:b5:ba:02:fc:19:be: 04:c3:62:a6:95:61:d1:9a:49:d9:17:4a:83:f1:2d:b7:ed:3b: 04:fc:56:d9:72:f7:c5:ba:24:eb:a7:b5:6d:c9:7e:16:d8:64: 72:c9:15:26:ab:74:0c:02:4d:d1:93:c3:f6:d4:84:4f:07:8e: 3c:40:3d:43:ce:12:00:d8:5e:7f:9b:dc:2b:3b:4e:ad:41:40: 0b:46:02:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2r7SmPuqPERdmpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI1MDcwOTE4MDAwOFoXDTI1MDcxMjE4MDAwMFowLzEtMCsGA1UEAxMk NTZkNWNjYTItNDM2Ni00MTYxLWIzM2EtNDkxYjkyNmMzM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdV7JOVmyvwXNdrRoKFzk5y3NWcDSEVGNzoY PRvydEe/3CRMpxSb3uk56/7dwRlWwwg5FbtLgebNOo8owmQs7yZuR99mlFbVBQm3 2RDz+XCOx2tmxvvou7qphll2hn7IQPkI/M+w/RVkflA3k5+3g7tzr13QUQxy/BFM Zj6H7lJMc0Ir3EM0zPiuhyCGTxo+AN2mJ/uvwwi0JhDQp1Y9VDm7LZKf7oG6zmSf TbRcYvzXftpxMTdtzFasAxAxfsoeBL5ecTNm6ZT8ngddSVupHRgOlKpIkbAMPS3U OUTMRoZxh6y3Evxh6m2GV+7IYxD4eSvI9rVCGi074I2fTm3x1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM0XIHle/1yu00D70KKToRjiTPefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvOGMyYThkOTUtMDI5MC00 MjE4LTliMDgtZDE1N2U1ZjEyN2Y5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjEPUEqd3Et2vIHTJTC0y5 2F/ND8nvJLRTOEOCXZe7ngb3pT/CviAFJQgfJYbnOw14VxFlmMd9iPnvSNEoR1Yr FbVhqh7Gchns8Kykb7etEhwi0Ky7n7kiFDBp7BfXuCJgxt4l1ZNMmG7lIw1592Xv McRJNBE2Vm1YhkD5oTonykejW7H5e6qiNca7W6kH7NUg5+Iv1CKr9uDTBqo9pKmn IysSxdc9kxL+ceU6uZC1ugL8Gb4Ew2KmlWHRmknZF0qD8S237TsE/FbZcvfFuiTr p7VtyX4W2GRyyRUmq3QMAk3Rk8P21IRPB448QD1DzhIA2F5/m9wrO06tQUALRgLk -----END CERTIFICATE-----Generated at Wed Jul 9 20:03:36 2025 by rpki-client