$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft File: 9f8abfb1-5f91-4570-a775-7435d3e52012.mft (raw, json) Hash identifier: 4fcZ3L9BgizJOzXdLJt8rJS51kWR3YAJdfgLzvWYiG0= Subject key identifier: 79:98:E7:1C:FD:B2:47:47:C3:3E:A1:A8:84:47:70:0F:FF:D7:0A:EC Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 Certificate issuer: /CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Certificate serial: 010D0C9F4328584A5E06B02F6A02E069A683A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft Manifest number: 010D0C9F4328584073A82D5F5401C587F87D9D0C Signing time: Mon 30 Jun 2025 22:00:08 +0000 Manifest this update: Mon 30 Jun 2025 22:00:08 +0000 Manifest next update: Wed 02 Jul 2025 22:00:00 +0000 Files and hashes: 1: 20ba3136-7192-3d31-ba1d-b329c8840df5.roa (hash: rAl6p2BzVCQoFo6AbqHkmf/iXy1EGnU+bymAml7i/AM=) 2: 907a2032-3d7d-36e2-bc36-8924c1c162b7.roa (hash: 2Nbn4GKa9NuHcb5HbCfWAECGhx2t2ePW4kVzK9G9eSI=) 3: 9b2f5a50-2298-35cf-a9de-9e639d6f5cce.roa (hash: WxTzRWTahEIRDGYk4vMH6P8V90cfq/vlx2XtbkMjqH8=) 4: 9f8abfb1-5f91-4570-a775-7435d3e52012.crl (hash: jMVBPNprfzAJXguuOmTrcB+mTukQUxmyuCWxuVemQmo=) 5: e0533640-95af-39f9-bfa9-1881a9fbeefb.roa (hash: rP22jywEcXpcX6W97q+05bRZzEuxt57QDhOI/yG18hY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:06:b0:2f:6a:02:e0:69:a6:83:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012 Validity Not Before: Jun 30 22:00:08 2025 GMT Not After : Jul 2 22:00:00 2025 GMT Subject: CN=db6f3fed-5cc9-4486-8030-992add61664a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:f8:eb:7c:89:64:1d:d4:dd:02:25:cb:20: ec:6d:d6:df:26:40:ab:29:e3:ec:1c:5d:f5:c1:35: 07:68:9a:3e:ec:b2:83:ab:6e:f3:91:56:15:3d:5a: 85:e5:82:d8:b3:a9:2f:06:d0:c9:a1:dd:18:df:f8: 46:80:5a:34:c8:33:bf:ad:17:0b:72:86:74:fb:d5: ec:b1:59:91:77:5f:ac:d9:4d:59:2f:f5:76:70:8a: c7:04:17:13:6c:94:b0:62:f2:06:8f:ee:48:71:67: cb:cb:f2:57:23:80:1c:e0:de:22:77:63:23:b8:27: a3:0b:00:e2:59:db:6d:de:26:01:5d:7b:7d:30:bc: 83:43:60:16:43:88:24:83:be:b0:5e:58:aa:81:3f: a9:9f:51:9a:bf:0b:0e:79:fd:7b:19:de:dd:48:19: 4a:d5:29:c2:31:24:db:17:44:9c:cb:ef:65:57:ea: 2a:9d:1b:7c:59:e3:53:60:90:d9:e3:4c:18:07:7d: 08:f4:cf:d6:9b:61:99:b2:48:52:02:d8:18:bd:25: f6:2e:6d:ca:f4:62:f0:dd:30:61:98:b1:aa:77:0a: 07:a2:42:64:42:4e:f9:09:6e:61:0a:19:89:b9:9a: 49:05:62:5b:0c:ad:a9:b2:ae:fd:3d:81:90:9c:22: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:98:E7:1C:FD:B2:47:47:C3:3E:A1:A8:84:47:70:0F:FF:D7:0A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl X509v3 Authority Key Identifier: keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1b:7e:25:db:ca:e9:c0:31:47:95:81:f8:00:f2:b1:62:cd: 81:f3:66:d7:50:20:f8:bf:20:f1:69:69:ec:cd:cb:29:7b:19: 53:82:c4:dd:94:12:44:5d:32:8f:72:f9:ac:58:d9:4f:0c:72: ae:5a:6c:88:0a:43:b0:4e:7e:2b:a4:62:b6:ca:7b:42:48:c8: 1b:69:25:1b:7d:7b:b7:57:e0:db:cc:5e:31:30:4f:c5:f2:bd: af:ff:b8:95:78:98:84:fd:7d:3c:dd:f6:31:84:10:c0:18:4f: f4:15:aa:dc:cc:ce:21:6a:c9:4e:72:0d:06:09:41:c4:99:1d: 42:b4:fd:84:90:1f:0f:d2:8f:e4:1b:7f:97:7d:3c:73:3c:98: 27:80:05:43:80:af:38:50:4f:7f:0a:de:e7:34:4e:5f:b4:7e: 14:b6:0f:f9:f6:e0:84:7e:48:30:fd:3a:97:ae:89:90:08:ee: ba:d3:62:a1:40:f2:67:1a:b1:b4:38:db:21:7c:e2:b3:e5:df: f5:f7:d0:de:eb:47:38:5d:ad:8c:a2:98:6c:d8:2e:f1:b5:76: 75:dd:f3:41:d9:9e:a6:58:aa:36:4d:d4:51:e2:c2:ae:fa:f7: 94:56:7f:a3:aa:ba:20:69:2e:61:87:40:86:71:b4:09:7e:3d: 55:d6:a9:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeBrAvagLgaaaDowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY4YWJmYjEtNWY5MS00NTcwLWE3NzUtNzQzNWQzZTUy MDEyMB4XDTI1MDYzMDIyMDAwOFoXDTI1MDcwMjIyMDAwMFowLzEtMCsGA1UEAxMk ZGI2ZjNmZWQtNWNjOS00NDg2LTgwMzAtOTkyYWRkNjE2NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4v463yJZB3U3QIlyyDsbdbfJkCrKePsHF31 wTUHaJo+7LKDq27zkVYVPVqF5YLYs6kvBtDJod0Y3/hGgFo0yDO/rRcLcoZ0+9Xs sVmRd1+s2U1ZL/V2cIrHBBcTbJSwYvIGj+5IcWfLy/JXI4Ac4N4id2MjuCejCwDi Wdtt3iYBXXt9MLyDQ2AWQ4gkg76wXliqgT+pn1GavwsOef17Gd7dSBlK1SnCMSTb F0Scy+9lV+oqnRt8WeNTYJDZ40wYB30I9M/Wm2GZskhSAtgYvSX2Lm3K9GLw3TBh mLGqdwoHokJkQk75CW5hChmJuZpJBWJbDK2psq79PYGQnCJuBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHmY5xz9skdHwz6hqIRHcA//1wrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Zjhh YmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1ZDNlNTIwMTIvOWY4YWJmYjEtNWY5MS00 NTcwLWE3NzUtNzQzNWQzZTUyMDEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWY4YWJmYjEtNWY5MS00NTcwLWE3 NzUtNzQzNWQzZTUyMDEyLzlmOGFiZmIxLTVmOTEtNDU3MC1hNzc1LTc0MzVkM2U1 MjAxMi5jcmwwHwYDVR0jBBgwFoAUQCU6+R+hAxnil4pZMCJgmNi7LRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjhhYmZiMS01ZjkxLTQ1NzAtYTc3NS03NDM1 ZDNlNTIwMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBG34l28rpwDFHlYH4APKx Ys2B82bXUCD4vyDxaWnszcspexlTgsTdlBJEXTKPcvmsWNlPDHKuWmyICkOwTn4r pGK2yntCSMgbaSUbfXu3V+DbzF4xME/F8r2v/7iVeJiE/X083fYxhBDAGE/0Farc zM4haslOcg0GCUHEmR1CtP2EkB8P0o/kG3+XfTxzPJgngAVDgK84UE9/Ct7nNE5f tH4Utg/59uCEfkgw/TqXromQCO6602KhQPJnGrG0ONshfOKz5d/199De60c4Xa2M ophs2C7xtXZ13fNB2Z6mWKo2TdRR4sKu+veUVn+jqrogaS5hh0CGcbQJfj1V1qnW -----END CERTIFICATE-----Generated at Tue Jul 1 08:28:25 2025 by rpki-client