$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft (raw, json) Hash identifier: j449x2Wq0VNgmz4HCOf4kTU+AeWvlG9zUmzRn1yctp8= Subject key identifier: 47:35:4B:D4:1E:18:F9:09:A4:89:5E:60:B4:8E:13:02:95:21:B3:B0 Authority key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Certificate issuer: /CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Certificate serial: 010D0C9F4328584A58E8621D6DA515BBE3BBA5A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft Manifest number: 010D0C9F4328584073A836239D3A75822B170522 Signing time: Sun 29 Jun 2025 02:00:03 +0000 Manifest this update: Sun 29 Jun 2025 02:00:03 +0000 Manifest next update: Tue 01 Jul 2025 02:00:00 +0000 Files and hashes: 1: 454c9603-4dfb-34e7-9bc2-02242c547e78.roa (hash: hZ0gQTVvpTYzI5k/vs340Qn2lnsYV+XSIyCRYa2tHL8=) 2: 7c69f6d0-f92d-3ea9-91d2-5d8a53da8b6b.roa (hash: W3liIKH6fxOP8tD8UyTwrTMj43C2QzPtni8PEtuzGjs=) 3: d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl (hash: WR7bcLeuZF1dAgaGVhr0pPlT7mW4o2SjuLdwVOM7rv4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:e8:62:1d:6d:a5:15:bb:e3:bb:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Validity Not Before: Jun 29 02:00:03 2025 GMT Not After : Jul 1 02:00:00 2025 GMT Subject: CN=2d84f028-15f1-47de-8f1e-f530807353c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:cf:5c:52:ad:ea:b3:7e:cd:7a:55:00:c4: 48:e2:1e:eb:b3:74:85:60:68:82:40:0d:80:ce:43: e8:3a:df:49:8a:37:a1:57:f9:aa:a4:9d:8f:cc:a8: 45:dc:d3:9f:cb:71:43:3f:5c:74:64:30:f3:01:a9: c8:8b:fc:6f:90:ca:05:54:a1:81:6d:0a:44:a9:d3: 71:25:56:a2:d5:b9:cf:35:38:a2:8e:a4:c9:b3:a6: 70:4e:23:0a:59:89:35:9a:ee:9d:d1:26:c9:19:17: df:b5:30:59:cc:0a:2c:5f:34:37:30:d4:6d:70:3e: 80:4b:dc:ef:92:70:ad:aa:7a:cf:7f:2c:8e:2d:78: 8e:47:e3:e7:a9:97:b4:22:87:18:9d:b1:24:83:8b: fd:d0:a6:32:30:1e:59:a0:ad:05:34:43:46:ef:c2: ea:9f:65:8f:ff:a6:f0:dc:1e:cc:92:ea:80:f3:45: 80:0f:16:b1:70:51:c5:e2:25:4e:1a:da:77:16:65: 4a:9e:a4:b0:b3:4e:5a:e8:a1:6f:92:a9:90:5a:ff: 3d:d9:1b:85:55:3a:e9:c3:7d:a4:37:51:b5:41:2d: 14:4e:30:e3:88:92:06:05:66:24:60:ee:3a:f5:17: 21:4d:9a:a9:7d:17:46:96:26:10:9a:a8:63:99:0b: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:4B:D4:1E:18:F9:09:A4:89:5E:60:B4:8E:13:02:95:21:B3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl X509v3 Authority Key Identifier: keyid:47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bd:1a:b6:d3:ad:9d:b0:30:df:87:0d:9f:84:0d:30:47:38: 00:42:f1:d6:a7:92:e5:08:ca:33:cc:fd:f4:fb:f6:7c:ae:60: be:35:97:1a:fb:e5:1a:8e:42:14:43:d0:e2:ca:3f:77:66:95: bc:eb:3f:73:b1:78:43:fd:88:4e:80:95:bd:a8:5e:49:d6:c5: bd:32:73:1c:a3:d1:01:00:39:a6:fa:bc:80:4d:df:fd:92:d7: 2b:c9:e0:3b:b4:6a:7b:0c:09:7e:5a:54:9d:c1:1d:ed:35:ce: db:75:c6:0d:34:a7:cf:4b:a2:ff:4a:da:6b:47:62:48:f0:e6: d7:eb:70:cc:f1:27:80:26:c0:43:e4:e9:22:57:f0:bb:47:b7: b7:fe:6a:f6:5b:48:42:8b:38:6c:03:d1:ad:53:e8:70:fb:6b: 81:98:89:1d:6c:aa:89:71:77:52:f9:ee:ec:c1:0f:5c:56:b6: e3:b5:cb:6b:06:f4:e6:e5:3a:46:62:e0:8d:0e:ff:91:a4:bb: 3d:87:db:9f:a8:0e:f3:fb:c1:be:e9:14:76:74:4b:57:b1:0a: dd:6c:8d:f1:ce:10:69:ca:49:d4:73:e7:ba:11:f9:bf:12:17: 71:98:44:56:6b:f9:7a:6d:eb:fd:80:75:d8:21:b5:01:bf:2e: f5:8a:9d:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpY6GIdbaUVu+O7paAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFh MmE2MB4XDTI1MDYyOTAyMDAwM1oXDTI1MDcwMTAyMDAwMFowLzEtMCsGA1UEAxMk MmQ4NGYwMjgtMTVmMS00N2RlLThmMWUtZjUzMDgwNzM1M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46nPXFKt6rN+zXpVAMRI4h7rs3SFYGiCQA2A zkPoOt9JijehV/mqpJ2PzKhF3NOfy3FDP1x0ZDDzAanIi/xvkMoFVKGBbQpEqdNx JVai1bnPNTiijqTJs6ZwTiMKWYk1mu6d0SbJGRfftTBZzAosXzQ3MNRtcD6AS9zv knCtqnrPfyyOLXiOR+PnqZe0IocYnbEkg4v90KYyMB5ZoK0FNENG78Lqn2WP/6bw 3B7MkuqA80WADxaxcFHF4iVOGtp3FmVKnqSws05a6KFvkqmQWv892RuFVTrpw32k N1G1QS0UTjDjiJIGBWYkYO469RchTZqpfRdGliYQmqhjmQsLjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEc1S9QeGPkJpIleYLSOEwKVIbOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcx ZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvZDY3MWU5NWMtZTQ4NC00 YjUzLTkxZmYtZTE0ZDMzZWFhMmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDY3MWU5NWMtZTQ4NC00YjUzLTkx ZmYtZTE0ZDMzZWFhMmE2L2Q2NzFlOTVjLWU0ODQtNGI1My05MWZmLWUxNGQzM2Vh YTJhNi5jcmwwHwYDVR0jBBgwFoAUR9sbpctPjkRcwmwsWddit+ypMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRk MzNlYWEyYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4vRq2062dsDDfhw2fhA0w RzgAQvHWp5LlCMozzP30+/Z8rmC+NZca++UajkIUQ9Diyj93ZpW86z9zsXhD/YhO gJW9qF5J1sW9MnMco9EBADmm+ryATd/9ktcryeA7tGp7DAl+WlSdwR3tNc7bdcYN NKfPS6L/StprR2JI8ObX63DM8SeAJsBD5OkiV/C7R7e3/mr2W0hCizhsA9GtU+hw +2uBmIkdbKqJcXdS+e7swQ9cVrbjtctrBvTm5TpGYuCNDv+RpLs9h9ufqA7z+8G+ 6RR2dEtXsQrdbI3xzhBpyknUc+e6Efm/EhdxmERWa/l6bev9gHXYIbUBvy71ip13 -----END CERTIFICATE-----Generated at Sun Jun 29 11:28:43 2025 by rpki-client