$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft File: b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft (raw, json) Hash identifier: J+mSwozv1H9JZCWfQ/WNueacIwG48J4VFgMLtXcxf/A= Subject key identifier: 32:E1:BD:19:46:4D:72:F8:BA:44:19:0C:C7:6A:4A:67:50:7D:D5:F7 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584A5FA7919C3983C9C7F9E9CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft Manifest number: 010D0C9F4328584073A852681CE382326F634E0E Signing time: Tue 01 Jul 2025 12:00:08 +0000 Manifest this update: Tue 01 Jul 2025 12:00:08 +0000 Manifest next update: Thu 03 Jul 2025 12:00:00 +0000 Files and hashes: 1: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (hash: tTafrkFleuZq9ZXlDovGtx7FaVBvOc64ezchdP5FFO8=) 2: 6d329d86-ae5c-3e97-b60e-380b387c9d19.roa (hash: BR86E6CJhl4zRaGV4BxzrO9k37PWylhZZfh5AJ3wX6Y=) 3: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (hash: f2f8UzTUdTvKDMRFgvYt38HWSLuUIwXz9F5zUmJF2Fk=) 4: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (hash: tzk8DoblimT1gRch0hJNMTsrf+74D87au7ntAibQKRs=) 5: b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl (hash: yNmYIrl0Io/B5IeHQrAZgyZpdx2Jdl/YZejktdnFAFM=) 6: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (hash: W+2qik9web3B1P37xpxhkfpYuA8c16FHGZ4QU/J8ins=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:a7:91:9c:39:83:c9:c7:f9:e9:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Jul 1 12:00:08 2025 GMT Not After : Jul 3 12:00:00 2025 GMT Subject: CN=8253aab2-3d08-4de7-93fb-003eda818b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:b2:3a:e9:69:60:14:45:ce:82:f7:b5:cd: 1d:bc:1c:99:54:ae:de:31:79:2f:a1:c7:36:ee:ad: 37:03:fb:c9:83:52:3b:3b:98:90:ea:3e:eb:d9:fc: c1:1a:c9:d5:7a:24:23:9b:85:8f:19:b7:37:02:17: c1:e6:a9:84:d1:b1:fc:2d:f6:3e:58:3a:82:64:19: 9b:cd:63:66:77:33:c7:32:23:cb:f4:59:80:fe:8f: fb:c6:76:22:bd:49:9a:79:68:a3:07:85:0c:b9:be: 4b:c2:8a:37:0e:b4:a9:28:bc:6a:59:70:3c:76:ae: 2c:88:19:3f:88:ff:a3:bd:ee:e3:76:8c:d4:5b:68: b5:7a:32:f8:0d:9a:a6:ae:7c:06:a9:30:e6:20:8b: 7a:b8:57:3a:03:f7:b5:80:0a:fb:5b:dc:a4:26:02: 68:00:d0:51:34:0d:f5:9b:9b:59:0c:97:7f:6c:a0: 3b:2b:25:37:77:72:97:5d:90:96:00:89:b6:cf:10: 39:ad:bb:59:6f:fc:2e:7b:5c:8d:18:12:43:23:13: 85:1c:30:e6:a9:53:70:45:a4:86:20:bd:b7:81:bc: c0:6d:0d:7b:d5:15:23:55:e4:df:6c:67:74:3c:b1: 55:37:a7:96:b0:58:06:9e:6c:11:ad:bd:58:22:33: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E1:BD:19:46:4D:72:F8:BA:44:19:0C:C7:6A:4A:67:50:7D:D5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f9:c1:6a:e8:f3:bf:27:7a:45:83:2b:a8:d1:44:6c:de:1e: 3c:db:52:c7:38:9f:a0:d2:50:b4:e9:02:6a:87:e2:eb:ad:d0: 78:0f:91:a4:a8:66:20:69:55:f5:4a:32:e6:cf:61:dc:03:09: 75:58:e0:be:42:a2:b5:c6:86:af:61:16:e6:94:dd:e7:b3:62: 04:de:9a:05:8c:56:26:74:7d:e3:bd:a6:d4:3c:5b:67:4a:d9: 8b:f3:f4:51:ad:d3:b4:01:5d:1f:c2:eb:a9:33:1d:40:9e:e1: ce:62:d5:81:70:9d:29:13:2c:d8:16:9f:6d:25:6a:17:67:a4: 2d:9f:f8:0f:b0:a2:6d:3d:b8:38:ff:5f:3b:4b:61:7b:06:53: f4:f5:f8:ed:5b:26:2e:68:74:fe:d8:db:cc:3e:53:1e:0d:bd: f5:e0:50:23:3a:b3:66:08:76:05:00:ed:1b:a5:ac:76:c5:cd: 86:de:71:13:a4:17:25:e9:79:9d:96:a7:5a:cb:20:72:66:0b: 19:33:31:14:d3:50:c4:9f:20:a6:3a:b0:d4:5b:53:56:c6:7c: 39:dc:32:1e:ee:f7:cb:65:a6:6b:22:08:d4:15:b0:a4:7d:d3: 6c:da:8a:47:c4:0f:13:6a:b3:6b:06:f8:20:61:65:fd:be:75: f6:4c:78:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfp5GcOYPJx/npzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDcwMTEyMDAwOFoXDTI1MDcwMzEyMDAwMFowLzEtMCsGA1UEAxMk ODI1M2FhYjItM2QwOC00ZGU3LTkzZmItMDAzZWRhODE4YjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjqyOulpYBRFzoL3tc0dvByZVK7eMXkvocc2 7q03A/vJg1I7O5iQ6j7r2fzBGsnVeiQjm4WPGbc3AhfB5qmE0bH8LfY+WDqCZBmb zWNmdzPHMiPL9FmA/o/7xnYivUmaeWijB4UMub5Lwoo3DrSpKLxqWXA8dq4siBk/ iP+jve7jdozUW2i1ejL4DZqmrnwGqTDmIIt6uFc6A/e1gAr7W9ykJgJoANBRNA31 m5tZDJd/bKA7KyU3d3KXXZCWAIm2zxA5rbtZb/wue1yNGBJDIxOFHDDmqVNwRaSG IL23gbzAbQ171RUjVeTfbGd0PLFVN6eWsFgGnmwRrb1YIjMY3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDLhvRlGTXL4ukQZDMdqSmdQfdX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYjg2YTRlYzMtYTNiNS00 ZDcyLWJlZTItZjU4YzNjZGUwMWExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8+cFq6PO/J3pFgyuo0URs 3h4821LHOJ+g0lC06QJqh+LrrdB4D5GkqGYgaVX1SjLmz2HcAwl1WOC+QqK1xoav YRbmlN3ns2IE3poFjFYmdH3jvabUPFtnStmL8/RRrdO0AV0fwuupMx1AnuHOYtWB cJ0pEyzYFp9tJWoXZ6Qtn/gPsKJtPbg4/187S2F7BlP09fjtWyYuaHT+2NvMPlMe Db314FAjOrNmCHYFAO0bpax2xc2G3nETpBcl6XmdlqdayyByZgsZMzEU01DEnyCm OrDUW1NWxnw53DIe7vfLZaZrIgjUFbCkfdNs2opHxA8TarNrBvggYWX9vnX2THj9 -----END CERTIFICATE-----Generated at Wed Jul 2 10:44:18 2025 by rpki-client