$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft File: 2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft (raw, json) Hash identifier: xKJUY68X4lYSplCYTDCQEn/4EHnbCnKfUIS5OYq1qf8= Subject key identifier: 0D:56:B8:8D:C8:93:82:7D:23:83:18:DF:8E:74:63:A3:5D:46:F7:36 Authority key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Certificate issuer: /CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Certificate serial: 010D0C9F4328584A595F7C1ED61AD2F2106458C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft Manifest number: 010D0C9F4328584073A841D9FA90F01D55E5F9A0 Signing time: Sun 29 Jun 2025 06:00:03 +0000 Manifest this update: Sun 29 Jun 2025 06:00:03 +0000 Manifest next update: Tue 01 Jul 2025 06:00:00 +0000 Files and hashes: 1: 01339414-921c-3a2c-8206-d657d9438e63.roa (hash: CrO/y5SW7WgnBGTPfujmLEXYbwRHH5gGiChq07m++Xc=) 2: 1e3d4f97-753b-354c-81de-02471daecfb2.roa (hash: MJ7tm5SbVlej9unYSDsgxGhRTSoeq3TSQk+Rm6V//oM=) 3: 2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl (hash: BySgWbpz1C7JQmWKYyfvgKZYYWuQq60IdD8Xrc8bjWw=) 4: 50c11a52-5910-3589-ac82-55cb9bc214ce.roa (hash: DSukvxfrhWpEBCvbnpSxFC+IuHvDfVIBmwOSGwkJAmY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:5f:7c:1e:d6:1a:d2:f2:10:64:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Validity Not Before: Jun 29 06:00:03 2025 GMT Not After : Jul 1 06:00:00 2025 GMT Subject: CN=fa084e24-4204-43c3-a812-954c9dce950f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:35:38:28:2c:b0:5c:01:5c:f7:ac:86:5f:6c: df:c2:93:ce:bb:7c:ce:8a:de:37:74:b3:6b:0c:fa: 02:93:71:0d:82:a9:b2:44:3b:73:4a:34:4d:e2:5f: 03:ba:6c:f0:a8:2d:b0:2b:02:fe:02:35:5e:ec:59: 1d:29:4d:ee:fa:9f:2e:73:8c:f0:ba:c7:dd:d2:84: 8c:14:6d:cc:04:04:7a:1d:50:93:ed:28:69:13:5c: 17:3f:ea:a1:aa:53:12:de:0d:c0:11:7b:f2:dd:ac: 8f:bf:3e:8e:24:63:18:08:62:c7:a9:0a:d0:5e:df: b6:2e:7a:97:8d:1c:80:d3:40:22:cf:ea:34:fa:d1: 0b:10:fa:8a:48:5e:1b:b2:6a:3b:61:3a:1f:e4:9c: 63:31:4e:60:65:0e:ee:1b:dc:5f:fd:d9:6d:c4:d5: c4:79:33:84:40:02:09:9d:45:ec:4c:1e:93:f2:a6: 3d:d1:3d:c2:84:8e:59:25:c8:73:23:6a:3d:19:d9: 60:ca:d5:27:e1:36:6f:07:54:c8:92:56:7d:96:c9: 45:f6:81:26:94:52:84:2d:4b:b4:85:b0:6f:69:9b: 29:7c:e2:9c:61:d1:c9:34:53:4a:a5:dd:c3:d1:00: 66:a3:ac:61:eb:ea:bf:47:e9:dd:ec:7f:14:55:99: 2e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:56:B8:8D:C8:93:82:7D:23:83:18:DF:8E:74:63:A3:5D:46:F7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.crl X509v3 Authority Key Identifier: keyid:B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:30:42:cc:a2:73:cc:37:54:40:3d:d7:34:58:a0:ad:85:bd: f2:c7:e9:8b:c9:cf:af:b3:7b:78:6f:37:8a:e9:3b:e4:69:24: 7b:2a:ef:89:34:cd:22:60:c5:e3:6e:ce:b2:a4:81:a4:30:d6: 09:54:ef:48:5c:34:ad:46:1d:05:4a:c5:c7:aa:d5:bd:49:76: b0:5a:0c:62:88:29:6b:26:e5:a6:7f:87:ce:10:30:78:e3:2b: a0:d0:0c:3f:2f:3e:67:99:4e:b0:2f:5e:d1:79:44:dd:4d:e7: dd:b9:4e:8e:ec:1e:e1:e3:7d:d5:61:d5:fc:79:a4:40:25:39: 81:66:70:db:53:a4:c6:76:26:48:00:38:d0:ea:c0:4c:5d:fa: ad:e7:8c:0c:29:11:be:9f:cb:37:78:4b:9f:21:ab:74:8c:7b: 60:b3:14:8c:1f:d2:63:6b:15:97:85:2d:73:f7:b7:2d:1a:9c: f8:fb:3b:97:ba:b6:68:34:02:ed:4a:8b:f9:a4:7c:8d:3e:d2: aa:70:1c:bc:a6:0b:a1:3f:d4:24:ac:f6:7d:57:3d:38:25:00: 70:d4:5f:ec:46:68:c0:f2:b0:09:86:5f:07:b5:4b:e6:a2:d3: 4e:4d:9d:b1:ba:8d:be:02:67:60:65:69:3a:6b:63:ec:1f:0e: 41:c3:bf:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZX3we1hrS8hBkWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4ZDhkMWMtYTNlZi00MGUyLTk5MWEtOTc2NDJkZGRk NmFjMB4XDTI1MDYyOTA2MDAwM1oXDTI1MDcwMTA2MDAwMFowLzEtMCsGA1UEAxMk ZmEwODRlMjQtNDIwNC00M2MzLWE4MTItOTU0YzlkY2U5NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zU4KCywXAFc96yGX2zfwpPOu3zOit43dLNr DPoCk3ENgqmyRDtzSjRN4l8DumzwqC2wKwL+AjVe7FkdKU3u+p8uc4zwusfd0oSM FG3MBAR6HVCT7ShpE1wXP+qhqlMS3g3AEXvy3ayPvz6OJGMYCGLHqQrQXt+2LnqX jRyA00Aiz+o0+tELEPqKSF4bsmo7YTof5JxjMU5gZQ7uG9xf/dltxNXEeTOEQAIJ nUXsTB6T8qY90T3ChI5ZJchzI2o9GdlgytUn4TZvB1TIklZ9lslF9oEmlFKELUu0 hbBvaZspfOKcYdHJNFNKpd3D0QBmo6xh6+q/R+nd7H8UVZkuxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA1WuI3Ik4J9I4MY3450Y6NdRvc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZThk OGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRkZGQ2YWMvMmU4ZDhkMWMtYTNlZi00 MGUyLTk5MWEtOTc2NDJkZGRkNmFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU4ZDhkMWMtYTNlZi00MGUyLTk5 MWEtOTc2NDJkZGRkNmFjLzJlOGQ4ZDFjLWEzZWYtNDBlMi05OTFhLTk3NjQyZGRk ZDZhYy5jcmwwHwYDVR0jBBgwFoAUsN1lnzvrigW9nzMaUiU6k/I7EvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0 MmRkZGQ2YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAMELMonPMN1RAPdc0WKCt hb3yx+mLyc+vs3t4bzeK6TvkaSR7Ku+JNM0iYMXjbs6ypIGkMNYJVO9IXDStRh0F SsXHqtW9SXawWgxiiClrJuWmf4fOEDB44yug0Aw/Lz5nmU6wL17ReUTdTefduU6O 7B7h433VYdX8eaRAJTmBZnDbU6TGdiZIADjQ6sBMXfqt54wMKRG+n8s3eEufIat0 jHtgsxSMH9JjaxWXhS1z97ctGpz4+zuXurZoNALtSov5pHyNPtKqcBy8pguhP9Qk rPZ9Vz04JQBw1F/sRmjA8rAJhl8HtUvmotNOTZ2xuo2+AmdgZWk6a2PsHw5Bw7+8 -----END CERTIFICATE-----Generated at Sun Jun 29 22:25:05 2025 by rpki-client