$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft File: 0c3cf342-4337-44bf-ac45-d0772ad75854.mft (raw, json) Hash identifier: AsEKk7Y4PFsMLHcCT1WXN+ffiGotD5pTZkkaAQMJHV8= Subject key identifier: 38:D3:E2:DD:01:C6:7E:82:2E:7D:5E:A2:80:07:DA:30:E3:1C:78:7A Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584A60B39903EFE3038A928AA040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft Manifest number: 010D0C9F4328584073A8286FB665AF5FD97EC54A Signing time: Tue 01 Jul 2025 21:00:08 +0000 Manifest this update: Tue 01 Jul 2025 21:00:08 +0000 Manifest next update: Fri 04 Jul 2025 21:00:00 +0000 Files and hashes: 1: 034976f2-b73d-31c2-a41d-907be371012c.roa (hash: pv6nV2pdzRfatvtTu+PTv899q0XhNB2Lcqnj9sL2J6s=) 2: 0c3cf342-4337-44bf-ac45-d0772ad75854.crl (hash: q/NV2GIHG/CnPsMkcKU2O2Y8v7lzyD/UCAOm4uiMQ1w=) 3: 1b6464a5-3725-3742-83db-ed28b8df3f78.roa (hash: 0TKTsLsTfE+IYAaHnspSRxsrKTjCLjO+buObqVBJX4s=) 4: 7463cdb5-e306-3d42-9b16-fafcf27f63d2.roa (hash: NadFCG+pF9TYiKOycUaVl44KOPiulVAi7Y+AEVc09qg=) 5: 79a75857-a8dd-342c-933c-947c4710fda2.roa (hash: +w1Wey5y/nPHHQ9A61hMheId8eBwHwtyUr+zmJTLOz8=) 6: a15bb8f9-5f58-3dde-b836-b44822b3323f.roa (hash: w8ghcxQGeXLDBNWA0wX4FmoYBT2cb47CeVV6wJu1hpY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:b3:99:03:ef:e3:03:8a:92:8a:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Jul 1 21:00:08 2025 GMT Not After : Jul 4 21:00:00 2025 GMT Subject: CN=e4624b90-fcb0-43d0-ba3e-ba1bae8f9bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:1a:13:03:90:e3:11:74:6b:3c:a4:86:42: cc:ba:76:ae:a3:91:e6:7d:17:57:86:ae:a8:5f:7d: 59:60:20:29:b1:68:a4:1e:45:4f:2b:be:7e:c9:f4: 40:35:49:54:b6:c0:20:6d:85:ae:17:3a:26:e4:4f: a3:39:1d:07:c2:0f:55:12:15:63:98:53:28:73:34: 25:19:5c:09:ed:77:b9:c8:59:d1:84:a6:6e:29:e9: c0:76:40:83:a5:5f:5e:74:31:a0:b9:68:f2:b4:e3: eb:1b:61:55:5f:c3:d5:76:4c:c9:e4:60:4e:a2:24: b3:e4:07:c7:95:08:f9:86:78:9b:7b:69:95:2e:26: c3:f9:86:3a:97:ee:2a:c3:1f:44:00:b0:b4:df:69: 74:a8:9b:f8:7d:72:de:74:00:6f:b6:a5:5f:7d:36: 58:77:1c:e4:9c:62:f4:da:f3:f5:b0:37:01:3e:e2: 77:3a:ea:9b:3e:fc:e0:bc:d1:8b:46:6b:3b:02:ba: 40:18:52:0d:31:94:91:c1:ae:10:f8:3a:11:7b:7b: 03:b5:8a:54:23:b3:b9:92:83:e7:fe:cb:22:0d:4f: 0b:55:4e:8c:13:5d:05:fd:c3:b9:0d:c1:31:5f:1b: 31:08:f1:8a:6a:55:10:a6:ad:e9:f8:e9:10:73:e4: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:E2:DD:01:C6:7E:82:2E:7D:5E:A2:80:07:DA:30:E3:1C:78:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:bd:a6:f0:3e:ba:be:38:29:78:1f:dd:47:c0:e1:fc:bd:4d: c1:e4:49:97:82:89:57:ce:c2:5c:00:70:2b:06:03:fd:7f:fb: d6:91:7f:e6:72:87:e5:5e:58:24:06:61:06:66:83:8c:7a:78: 98:26:a6:f5:45:53:7e:06:6a:44:21:0f:f7:e5:84:01:e9:fc: 2e:3f:c0:75:52:eb:36:ea:08:19:6e:98:da:9e:45:11:ee:a8: 78:5c:bb:72:2f:9e:e1:86:93:e4:eb:b9:f1:62:fd:52:07:86: 3f:bb:ba:ff:8b:ce:5f:41:37:88:5d:5e:e3:ad:ee:5d:ca:1d: 92:89:c0:2e:7f:56:09:46:f8:c7:35:5a:72:10:14:32:c4:eb: 77:95:dd:d2:2b:6e:7e:68:ea:fe:c5:f7:6e:67:d2:0b:bb:be: 7c:4c:39:89:fe:c2:d4:e1:95:ec:6f:87:86:4b:17:d4:33:88: d0:9b:90:45:00:46:23:11:91:43:e6:8f:8e:2f:49:7c:ed:7c: fb:90:a4:70:0d:e3:77:41:0a:ae:32:33:81:bf:50:d4:74:f4: 87:91:9e:e4:cf:46:e2:db:cd:e0:af:3e:e5:d6:93:c3:fe:8f: ff:88:cc:75:26:11:d4:d8:f6:69:64:d9:28:97:39:6e:9f:a0: 63:a9:ae:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgs5kD7+MDipKKoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI1MDcwMTIxMDAwOFoXDTI1MDcwNDIxMDAwMFowLzEtMCsGA1UEAxMk ZTQ2MjRiOTAtZmNiMC00M2QwLWJhM2UtYmExYmFlOGY5YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3saEwOQ4xF0azykhkLMunauo5HmfRdXhq6o X31ZYCApsWikHkVPK75+yfRANUlUtsAgbYWuFzom5E+jOR0Hwg9VEhVjmFMoczQl GVwJ7Xe5yFnRhKZuKenAdkCDpV9edDGguWjytOPrG2FVX8PVdkzJ5GBOoiSz5AfH lQj5hnibe2mVLibD+YY6l+4qwx9EALC032l0qJv4fXLedABvtqVffTZYdxzknGL0 2vP1sDcBPuJ3OuqbPvzgvNGLRms7ArpAGFINMZSRwa4Q+DoRe3sDtYpUI7O5koPn /ssiDU8LVU6ME10F/cO5DcExXxsxCPGKalUQpq3p+OkQc+S/fQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDjT4t0Bxn6CLn1eooAH2jDjHHh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMGMzY2YzNDItNDMzNy00 NGJmLWFjNDUtZDA3NzJhZDc1ODU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJvabwPrq+OCl4H91HwOH8 vU3B5EmXgolXzsJcAHArBgP9f/vWkX/mcoflXlgkBmEGZoOMeniYJqb1RVN+BmpE IQ/35YQB6fwuP8B1Uus26ggZbpjankUR7qh4XLtyL57hhpPk67nxYv1SB4Y/u7r/ i85fQTeIXV7jre5dyh2SicAuf1YJRvjHNVpyEBQyxOt3ld3SK25+aOr+xfduZ9IL u758TDmJ/sLU4ZXsb4eGSxfUM4jQm5BFAEYjEZFD5o+OL0l87Xz7kKRwDeN3QQqu MjOBv1DUdPSHkZ7kz0bi283grz7l1pPD/o//iMx1JhHU2PZpZNkolzlun6Bjqa4X -----END CERTIFICATE-----Generated at Wed Jul 2 19:56:48 2025 by rpki-client