$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft File: 399fbcba-412a-4e4c-8856-d893d23bdd7b.mft (raw, json) Hash identifier: KXE8BauWsCJ0TU1nUgfkLafEpUZsBhqxBdAXn3y1vjw= Subject key identifier: 1A:16:3F:18:12:F3:52:36:D5:34:BD:F9:A1:58:01:C8:18:58:2D:8C Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 Certificate issuer: /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Certificate serial: 010D0C9F4328584A5FC55042B867D69EC8605740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft Manifest number: 010D0C9F4328584073A855378244960F024F1342 Signing time: Tue 01 Jul 2025 13:00:03 +0000 Manifest this update: Tue 01 Jul 2025 13:00:03 +0000 Manifest next update: Thu 03 Jul 2025 13:00:00 +0000 Files and hashes: 1: 399fbcba-412a-4e4c-8856-d893d23bdd7b.crl (hash: cGl2URL0ecb+NihZTqTPl6bYnR4CwhTWvK5YzXD4QsI=) 2: 5861fc8a-2a76-347e-aeaa-e9f8d8fd8a81.roa (hash: GlfVkWRuHgNcSG7/vPnlYwynNhORknyrByscYEzF8jk=) 3: 9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (hash: ZTYLxuFlmYIIOyo5WZmDn4VovS8XPbFBH0WCOpaDxd8=) 4: fc352432-4e67-3899-80a1-ee18ecf984a2.roa (hash: uzMm3GAO6vMLJ47O0ivuqLCXiWafJ0pOyBNXCDOZNOs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:50:42:b8:67:d6:9e:c8:60:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b Validity Not Before: Jul 1 13:00:03 2025 GMT Not After : Jul 3 13:00:00 2025 GMT Subject: CN=0b07d9fc-fdf6-4a06-80b8-9b8a4e71cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:9a:f5:b5:cc:c6:f1:19:39:48:eb:bd:42: af:18:a6:92:04:47:c2:96:77:c4:e4:db:74:b7:76: 0e:31:1e:52:50:c7:94:f2:a1:58:dc:c3:35:59:83: 7c:8c:97:4f:37:dd:4c:02:4c:cf:c8:01:a4:ed:fb: 82:3d:59:a3:d7:3d:5c:2f:ee:76:ad:4a:96:82:cd: cc:65:fa:59:bd:e2:e2:2e:c5:1e:c0:86:53:c3:b8: 31:5e:8e:2c:fa:e8:15:f5:9f:44:83:34:d7:38:71: e6:fe:6f:56:dc:d0:d5:3e:74:8d:9f:08:0a:f7:a4: b9:d6:8e:46:b7:3d:e6:1c:32:53:88:29:a8:ac:59: 34:9b:dc:38:2d:cd:a0:7d:3a:d8:0b:41:b3:4d:4f: ff:6f:be:3d:f5:94:66:e1:3e:ed:5e:41:db:29:22: bb:c1:88:48:8e:e7:e1:bb:5b:66:f3:de:c2:78:30: a6:7c:d6:b9:4f:2f:c6:4e:ed:fe:78:ce:84:a7:e3: 91:14:72:3a:b0:f8:43:07:7c:57:4d:06:60:ba:11: 7b:bc:00:56:e8:6d:5d:07:04:c8:45:79:e9:c5:80: 47:aa:d9:ad:aa:27:14:9d:e7:46:70:77:bc:db:40: b9:f2:29:9a:f9:0f:ab:07:38:e0:f9:31:6a:b0:7c: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:16:3F:18:12:F3:52:36:D5:34:BD:F9:A1:58:01:C8:18:58:2D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl X509v3 Authority Key Identifier: keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:60:7d:b4:2d:48:46:78:cc:43:76:02:3d:72:b7:53:34:53: e2:19:ee:49:43:40:9c:73:8d:95:7d:36:43:21:05:3e:4c:77: 5d:72:e7:ba:e1:17:ce:e6:2b:53:f4:d6:8f:c2:b0:34:e6:7f: 7b:c2:07:b4:9d:21:76:a8:26:21:3c:1a:73:e0:38:ac:75:4f: 87:81:02:0f:55:c8:72:2b:f3:23:86:08:57:7e:7a:f4:c9:d3: 1e:93:d5:20:d7:77:86:14:eb:f2:c6:08:fb:61:e1:a6:5b:a2: 34:8b:55:43:6d:2d:e4:20:d0:85:e0:24:7d:3e:1a:0f:79:b5: fc:a4:8d:1b:d7:67:5e:80:5a:e9:f3:30:b5:72:fd:9c:f5:4d: c2:4b:50:05:23:bb:21:63:3f:74:8b:33:b6:66:14:27:49:0c: cd:be:b1:cb:77:15:bf:f1:36:05:76:98:81:81:e6:50:c5:85: f4:85:9f:f9:26:be:f2:dd:36:7c:a3:6b:18:cc:46:8f:fc:6f: b9:5b:24:c0:2b:a2:1d:02:23:df:e6:78:b8:ff:17:c3:7d:d3: a1:2e:ae:85:2a:ff:03:f2:15:ed:bc:c7:d6:5d:bf:7d:06:06: 95:a0:4a:b1:52:7d:1b:ef:2c:d5:ce:74:bf:e6:50:ca:ba:d7: b7:fa:57:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfxVBCuGfWnshgV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk5ZmJjYmEtNDEyYS00ZTRjLTg4NTYtZDg5M2QyM2Jk ZDdiMB4XDTI1MDcwMTEzMDAwM1oXDTI1MDcwMzEzMDAwMFowLzEtMCsGA1UEAxMk MGIwN2Q5ZmMtZmRmNi00YTA2LTgwYjgtOWI4YTRlNzFjZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLma9bXMxvEZOUjrvUKvGKaSBEfClnfE5Nt0 t3YOMR5SUMeU8qFY3MM1WYN8jJdPN91MAkzPyAGk7fuCPVmj1z1cL+52rUqWgs3M ZfpZveLiLsUewIZTw7gxXo4s+ugV9Z9EgzTXOHHm/m9W3NDVPnSNnwgK96S51o5G tz3mHDJTiCmorFk0m9w4Lc2gfTrYC0GzTU//b7499ZRm4T7tXkHbKSK7wYhIjufh u1tm897CeDCmfNa5Ty/GTu3+eM6Ep+ORFHI6sPhDB3xXTQZguhF7vABW6G1dBwTI RXnpxYBHqtmtqicUnedGcHe820C58ima+Q+rBzjg+TFqsHwDrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBoWPxgS81I21TS9+aFYAcgYWC2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlm YmNiYS00MTJhLTRlNGMtODg1Ni1kODkzZDIzYmRkN2IvMzk5ZmJjYmEtNDEyYS00 ZTRjLTg4NTYtZDg5M2QyM2JkZDdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzk5ZmJjYmEtNDEyYS00ZTRjLTg4 NTYtZDg5M2QyM2JkZDdiLzM5OWZiY2JhLTQxMmEtNGU0Yy04ODU2LWQ4OTNkMjNi ZGQ3Yi5jcmwwHwYDVR0jBBgwFoAUVz4KYNYW+YnJpeiTWBr5Aj0g5uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOTlmYmNiYS00MTJhLTRlNGMtODg1Ni1kODkz ZDIzYmRkN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlYH20LUhGeMxDdgI9crdT NFPiGe5JQ0Ccc42VfTZDIQU+THddcue64RfO5itT9NaPwrA05n97wge0nSF2qCYh PBpz4DisdU+HgQIPVchyK/MjhghXfnr0ydMek9Ug13eGFOvyxgj7YeGmW6I0i1VD bS3kINCF4CR9PhoPebX8pI0b12degFrp8zC1cv2c9U3CS1AFI7shYz90izO2ZhQn SQzNvrHLdxW/8TYFdpiBgeZQxYX0hZ/5Jr7y3TZ8o2sYzEaP/G+5WyTAK6IdAiPf 5ni4/xfDfdOhLq6FKv8D8hXtvMfWXb99BgaVoEqxUn0b7yzVznS/5lDKute3+lc8 -----END CERTIFICATE-----Generated at Wed Jul 2 11:34:29 2025 by rpki-client