$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft (raw, json) Hash identifier: x4NpcWL64NRo3rYh/BTcTJEB22yq5ZKuk5qYuYEY0CQ= Subject key identifier: 09:5E:21:C6:DF:DF:36:31:A0:E4:C1:15:63:CC:CC:27:F7:97:B3:C8 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584A6077FD7D8BF1BD7CA5336080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft Manifest number: 010D0C9F4328584073A8229E05ED3D48888CE241 Signing time: Tue 01 Jul 2025 19:00:03 +0000 Manifest this update: Tue 01 Jul 2025 19:00:03 +0000 Manifest next update: Fri 04 Jul 2025 19:00:00 +0000 Files and hashes: 1: 079ec49d-80c7-36fb-a80a-15036883ce48.roa (hash: kpJAZBnC08wSXXJFvZ3kkcSttnLFb+E/kkpKIaE/x3M=) 2: 11445a47-5fff-37b5-8a9b-8d703aea3e5f.roa (hash: i7gmNW1/qWHwHssCxzzAn60JIDd+oL4t2vX5MDI2oXA=) 3: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl (hash: qUoN6HbygOMsQ/I7wvwEesurY9weHYxyO5MWGniZkUI=) 4: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (hash: VRuxNuawFIHYSNNAAC+P6gktGie8avrvxuKFazoZP2Q=) 5: 600158e3-3a9d-334c-b3b8-2e4b9495b2ba.roa (hash: rdybZeTP+4EBEKAWZkk695W+5Z5rypU3m0hEaL+CKtw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:77:fd:7d:8b:f1:bd:7c:a5:33:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Jul 1 19:00:03 2025 GMT Not After : Jul 4 19:00:00 2025 GMT Subject: CN=3525d000-860f-4b75-9264-0526b597daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:5f:d6:62:76:e4:e0:ec:14:68:17:c0:7a: 33:98:99:48:c7:c6:2d:57:50:68:26:b8:f1:81:53: b8:61:97:f0:c1:31:3a:0f:b3:b1:b3:01:0d:ac:ea: bf:09:31:7e:82:af:7a:64:1b:57:75:91:0d:80:70: e5:65:19:5c:f9:9b:ea:ca:2f:29:eb:05:e8:c4:28: ef:75:85:fe:40:40:ea:cc:36:91:02:c5:bc:1a:d8: 41:79:d7:43:11:07:12:00:03:c2:4d:07:e4:99:69: 64:d3:9e:0b:40:a8:77:40:33:c5:80:28:f2:b5:7d: 99:3e:d7:68:8d:4e:a0:5f:32:e0:8b:89:5b:28:5c: 5f:75:24:04:52:b2:91:53:9d:46:98:f3:ee:4d:b2: 02:06:30:3f:4c:0f:03:7c:ca:ba:da:aa:c7:0f:3c: a8:67:f8:e6:eb:e5:ce:0b:3e:0c:9b:b6:e9:3d:28: 80:3c:d3:3f:32:0c:e4:17:e4:a2:c7:85:9f:b5:c5: 46:e2:ae:21:17:10:2c:30:8b:77:34:9d:0f:e0:65: 5d:32:45:18:ce:4e:95:ed:b0:8d:ba:b8:62:50:c6: 04:c8:4e:51:73:93:6e:79:15:0a:4b:df:32:3f:8a: bb:94:f2:27:29:dc:96:68:65:0a:25:e8:f8:b1:10: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5E:21:C6:DF:DF:36:31:A0:E4:C1:15:63:CC:CC:27:F7:97:B3:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:10:60:f0:dd:6e:d2:a8:85:e3:f7:2e:e3:0c:0b:a7:c8: 39:fd:81:ab:b7:4d:48:c1:f5:f2:66:bf:b8:fd:9d:e5:7f:8a: 7d:04:61:d0:4c:73:90:b3:ab:59:d1:f0:02:ce:ae:bc:aa:36: f1:48:29:fb:58:0d:b1:5c:a0:39:3d:f6:12:e7:0e:fb:75:b2: 9b:05:7e:29:4a:ca:24:e3:fd:0b:d9:09:3a:5b:e7:40:2f:6a: 1d:0f:88:dd:07:60:aa:be:e3:45:3a:37:5c:fa:2c:52:c4:6b: 5b:fc:b1:41:76:47:ee:b9:91:05:3c:5d:0e:53:d5:64:8e:a9: 6f:0f:72:5b:2a:a8:e8:08:ce:c4:6d:86:57:99:ba:b5:60:7f: 24:4b:99:4e:c7:16:f6:02:dc:4e:9c:0a:7e:60:a4:34:7d:48: d3:97:2e:0f:a4:e0:d7:be:f1:d4:97:95:e3:03:0b:1c:1b:89: 35:1f:f0:a8:8c:0f:d1:9f:07:78:96:8c:0b:8b:98:8c:84:20: 9f:54:0e:f4:85:3e:8f:ec:a0:68:76:a5:c3:cd:14:c2:b3:14: 82:73:e5:d1:ad:3e:41:1f:a9:10:32:bd:4a:89:c6:1c:cb:b1: d9:ee:81:0e:9d:29:c6:10:42:bb:f9:d1:91:08:51:f8:a6:b3: 1e:a9:b6:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgd/19i/G9fKUzYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDcwMTE5MDAwM1oXDTI1MDcwNDE5MDAwMFowLzEtMCsGA1UEAxMk MzUyNWQwMDAtODYwZi00Yjc1LTkyNjQtMDUyNmI1OTdkYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBVf1mJ25ODsFGgXwHozmJlIx8YtV1BoJrjx gVO4YZfwwTE6D7OxswENrOq/CTF+gq96ZBtXdZENgHDlZRlc+Zvqyi8p6wXoxCjv dYX+QEDqzDaRAsW8GthBeddDEQcSAAPCTQfkmWlk054LQKh3QDPFgCjytX2ZPtdo jU6gXzLgi4lbKFxfdSQEUrKRU51GmPPuTbICBjA/TA8DfMq62qrHDzyoZ/jm6+XO Cz4Mm7bpPSiAPNM/MgzkF+Six4WftcVG4q4hFxAsMIt3NJ0P4GVdMkUYzk6V7bCN urhiUMYEyE5Rc5NueRUKS98yP4q7lPInKdyWaGUKJej4sRDz/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAleIcbf3zYxoOTBFWPMzCf3l7PIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvM2Q5YTRjMzUtNTRjMS00 MjdjLThmNmUtZWYxYjE2NDRmODllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfEBBg8N1u0qiF4/cu4wwL p8g5/YGrt01IwfXyZr+4/Z3lf4p9BGHQTHOQs6tZ0fACzq68qjbxSCn7WA2xXKA5 PfYS5w77dbKbBX4pSsok4/0L2Qk6W+dAL2odD4jdB2CqvuNFOjdc+ixSxGtb/LFB dkfuuZEFPF0OU9VkjqlvD3JbKqjoCM7EbYZXmbq1YH8kS5lOxxb2AtxOnAp+YKQ0 fUjTly4PpODXvvHUl5XjAwscG4k1H/CojA/Rnwd4lowLi5iMhCCfVA70hT6P7KBo dqXDzRTCsxSCc+XRrT5BH6kQMr1KicYcy7HZ7oEOnSnGEEK7+dGRCFH4prMeqbbO -----END CERTIFICATE-----Generated at Wed Jul 2 14:52:15 2025 by rpki-client