$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: d9YwyyT9kkgrzwzrXQOwFSh+WRYholPF2xP5WFaLcL4= Subject key identifier: 06:9F:B5:0B:D4:42:24:AE:E7:A8:52:BC:E4:A5:56:2A:5D:AF:50:92 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F4328584A5A6B8364FDA5E0F2E840D5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C5DB Signing time: Sun 29 Jun 2025 15:00:03 +0000 Manifest this update: Sun 29 Jun 2025 15:00:03 +0000 Manifest next update: Wed 02 Jul 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: otBPMgJwtZ5POuXLV/vpmEiLbDFMs0eVTt3qgP5O6RI=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: 61wim2lDu0tasxKVA31oWL2/nOJkILd3S8g7iU75sqw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:6b:83:64:fd:a5:e0:f2:e8:40:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Jun 29 15:00:03 2025 GMT Not After : Jul 2 15:00:00 2025 GMT Subject: CN=6f1004ec-7cac-4ebe-8cf1-d60ca44c7b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:f3:70:37:e4:64:32:7b:0e:b4:97:46:41: 7a:87:a6:3d:a4:5f:cb:82:73:19:b2:91:6c:d7:90: 18:41:d8:19:3b:25:6c:1e:36:6e:a8:52:06:e8:12: 19:96:f5:dc:24:d1:aa:07:d4:02:1b:e2:e2:b1:9d: c2:59:72:d1:8f:fa:4e:57:ce:85:7f:55:a8:47:1f: df:23:b2:86:28:86:49:22:db:15:a0:f1:1a:d5:15: 51:bc:0c:2c:02:0c:1c:29:93:f7:78:c7:16:ed:01: b0:b8:8a:7a:22:89:fc:f5:c7:8f:3a:ba:f9:79:99: 3c:9d:97:cc:80:ee:76:5f:f7:83:d9:a3:eb:e7:b5: 5c:0f:98:96:8f:b2:f5:e9:ac:cb:3d:4d:56:46:0d: d1:88:fc:01:d1:d7:1c:95:12:19:d1:87:27:6f:60: 16:ec:0f:d1:8a:b8:b4:2a:b1:66:8b:34:b4:92:3f: 63:a3:b3:d6:2b:88:e1:f6:73:c5:67:86:ba:3e:62: 17:84:1b:60:b0:e6:23:39:88:2f:a5:f6:ce:a1:02: 53:da:5a:c4:ab:4e:64:c7:e2:b7:f1:19:62:0e:f0: 64:87:ea:88:20:78:3e:44:6f:78:77:12:35:ca:80: b6:ce:01:d9:ba:e7:77:5d:11:40:0e:1a:57:ff:a7: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9F:B5:0B:D4:42:24:AE:E7:A8:52:BC:E4:A5:56:2A:5D:AF:50:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a3:6c:a2:c9:9b:c8:09:8f:9a:75:41:fa:a2:a2:95:b3:d5: 9b:de:e1:b1:1f:a9:ef:19:93:19:d6:f9:86:53:d5:27:3c:cb: b5:a4:80:5c:fc:e3:5a:b7:a9:dd:f6:49:c2:0b:6f:cc:72:d2: c5:d9:06:49:97:64:2e:d4:50:de:de:f7:19:83:6e:07:1e:af: f8:d1:8c:72:11:bb:1f:64:49:61:da:69:56:d9:d7:ce:d2:f0: d5:e0:02:1a:7b:85:0d:f3:c3:40:ff:d3:aa:78:bd:4f:01:ef: a0:10:15:44:92:04:76:5b:39:11:05:af:53:87:ca:5f:a4:1b: 40:39:5a:76:ce:ac:de:3e:1f:5c:fd:37:11:e1:60:09:f7:6a: 02:6d:56:c8:df:d8:3e:4d:50:3d:b1:96:99:9b:bf:3a:b4:33: 83:bd:23:59:f7:84:5f:2c:07:e5:a3:ce:84:49:8f:ae:b6:ce: e5:5d:e7:56:dd:eb:a3:ef:f6:74:a1:fa:3e:c2:00:6b:c7:93: bb:cb:80:33:46:01:14:0e:a9:99:1a:7e:31:23:73:b7:16:31: e5:c4:04:04:00:23:c0:78:b0:85:fb:04:f4:89:5c:e8:4b:16: 48:24:06:9d:09:1c:f0:18:fc:51:7e:88:b8:97:c0:ce:39:37: ee:fe:24:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaa4Nk/aXg8uhA1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MDYyOTE1MDAwM1oXDTI1MDcwMjE1MDAwMFowLzEtMCsGA1UEAxMk NmYxMDA0ZWMtN2NhYy00ZWJlLThjZjEtZDYwY2E0NGM3YjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4bzcDfkZDJ7DrSXRkF6h6Y9pF/LgnMZspFs 15AYQdgZOyVsHjZuqFIG6BIZlvXcJNGqB9QCG+LisZ3CWXLRj/pOV86Ff1WoRx/f I7KGKIZJItsVoPEa1RVRvAwsAgwcKZP3eMcW7QGwuIp6Ion89cePOrr5eZk8nZfM gO52X/eD2aPr57VcD5iWj7L16azLPU1WRg3RiPwB0dcclRIZ0Ycnb2AW7A/Riri0 KrFmizS0kj9jo7PWK4jh9nPFZ4a6PmIXhBtgsOYjOYgvpfbOoQJT2lrEq05kx+K3 8RliDvBkh+qIIHg+RG94dxI1yoC2zgHZuud3XRFADhpX/6ezgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAaftQvUQiSu56hSvOSlVipdr1CSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFo2yiyZvICY+adUH6oqKV s9Wb3uGxH6nvGZMZ1vmGU9UnPMu1pIBc/ONat6nd9knCC2/MctLF2QZJl2Qu1FDe 3vcZg24HHq/40YxyEbsfZElh2mlW2dfO0vDV4AIae4UN88NA/9OqeL1PAe+gEBVE kgR2WzkRBa9Th8pfpBtAOVp2zqzePh9c/TcR4WAJ92oCbVbI39g+TVA9sZaZm786 tDODvSNZ94RfLAflo86ESY+uts7lXedW3euj7/Z0ofo+wgBrx5O7y4AzRgEUDqmZ Gn4xI3O3FjHlxAQEACPAeLCF+wT0iVzoSxZIJAadCRzwGPxRfoi4l8DOOTfu/iRE -----END CERTIFICATE-----Generated at Sun Jun 29 22:27:29 2025 by rpki-client