$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft File: 4d754a75-6fef-427a-8a5d-d152fb72f46d.mft (raw, json) Hash identifier: qOyi7Egmrak1e7572P0OshnGbBAfPle1qd4re7fpm6o= Subject key identifier: 9D:08:1C:7E:89:6B:3A:8B:0A:E6:9C:DF:BB:5D:44:D9:B7:96:5A:EE Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584A5E422F1875C23BA9DAF4A280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft Manifest number: 010D0C9F4328584073A832664368423983ED3F39 Signing time: Tue 01 Jul 2025 00:00:03 +0000 Manifest this update: Tue 01 Jul 2025 00:00:03 +0000 Manifest next update: Thu 03 Jul 2025 00:00:00 +0000 Files and hashes: 1: 2b0914da-3387-3454-bc38-ee4a7e5e9603.roa (hash: 7I7MG2xLCEl5yVxtg8Ex22hV0R+0kTR7SETT9t+Zh9g=) 2: 4b403672-80b4-3084-a82e-caf0c8c6e539.roa (hash: XdgnSrMcNSolwRwSydwz3deRLFFia4yhvZaEW+Ze++Y=) 3: 4d754a75-6fef-427a-8a5d-d152fb72f46d.crl (hash: xSZlUvoNvEJHcCGZqNl3HAKrW/OVJbcur8sDK8LkkNs=) 4: 7d6e23d2-80f3-39f5-abcb-0af1acf23e62.roa (hash: cwblYNvnh5uW+0lAtLEVYwWshD6vSh02Z7LxQK/Diic=) 5: df490bd0-0779-3f5f-bb40-4a405208be8e.roa (hash: MykqhbDuc71lOYZkFIhV6aN4qOyaVb+5vQRTEnbiWQY=) 6: eafd673f-1b99-3314-a8b5-d658f6891223.roa (hash: m1ZfILQY+TlLDDuN6kUe5OY4pOJ3l0k3xTAg2CenLzE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:42:2f:18:75:c2:3b:a9:da:f4:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Jul 1 00:00:03 2025 GMT Not After : Jul 3 00:00:00 2025 GMT Subject: CN=c7327d23-948e-483c-94aa-7158043857a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:1c:d7:5d:54:fb:f5:1c:bc:7e:4f:97:68: 88:fd:4a:6f:65:5a:81:b9:0b:b9:6c:92:c1:3b:58: 77:69:16:c9:86:4f:56:9f:65:07:1c:81:42:16:4e: 96:2c:f6:44:72:f2:e3:ef:91:77:79:d6:ba:ed:cd: c3:0f:d0:ef:91:92:dd:93:fa:a1:d1:49:e6:60:87: 6a:d6:10:d7:0b:13:07:7d:9c:e7:25:88:ee:d6:d6: 67:57:fa:d0:da:35:20:2f:a1:ae:09:e2:db:e8:bb: 45:de:d2:dd:ab:54:ed:b6:8a:6a:a3:ea:4c:23:3a: d8:f5:7b:66:db:0a:24:b6:c5:2c:aa:26:11:99:7b: 2d:d4:b6:e3:ca:7b:0f:42:d6:1b:2c:5d:f5:cf:51: 4e:1d:dc:15:a9:bb:07:3f:fa:e4:63:2c:1f:55:90: aa:e5:9f:4a:5e:ca:6d:d2:8d:bd:36:91:4d:7f:ea: 40:47:f7:2b:e3:cd:a3:74:38:d0:df:1d:69:23:74: b4:98:22:3f:66:f6:f5:cf:0f:c9:1f:3a:00:97:38: 4e:b5:b3:95:7b:f4:d4:38:1d:58:f8:84:7e:a8:91: 8f:ae:79:28:87:79:b6:d3:07:16:1d:ca:a4:0c:48: 8e:a6:66:b2:a2:59:43:d1:62:37:94:47:23:ef:74: 07:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:1C:7E:89:6B:3A:8B:0A:E6:9C:DF:BB:5D:44:D9:B7:96:5A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:12:96:2b:83:27:47:64:e1:61:39:5d:26:23:df:88:5a:39: 3e:ab:98:0f:3f:41:6c:49:70:9a:54:2e:fe:4e:96:de:c9:d2: ee:3a:df:d7:2e:41:e6:83:44:ce:2a:38:61:e4:78:66:b7:d2: dc:be:00:f3:e2:37:75:b6:ca:0f:c2:4d:5e:25:f0:9e:98:69: ed:e3:87:e9:5e:e3:70:be:3b:2c:57:97:f1:d4:50:d3:db:55: dd:24:63:2f:a9:92:eb:03:43:a7:0c:6d:12:d9:12:11:3d:24: d1:eb:f6:b2:73:62:65:6d:29:a6:7c:35:b7:14:f7:46:ce:bc: 6b:40:b9:27:04:c0:91:08:89:5d:b6:66:d5:f7:d8:62:68:92: b7:f5:3a:b4:a6:65:e5:7d:52:13:b7:d7:d8:a9:2d:f8:8d:f1: 68:d6:0a:57:24:78:6b:33:c0:38:c1:32:e3:7d:69:49:ac:48: b0:bc:19:29:2d:f7:a7:e9:30:0e:52:c7:be:e2:8d:53:7a:c3: 45:59:77:92:e6:47:0c:ba:f0:5d:91:fc:2c:42:72:40:e4:c7: 1b:1f:a2:b4:80:8a:6f:04:4c:ea:71:e7:26:73:57:69:92:d3: ee:42:87:f9:c9:71:79:1f:df:d7:b1:1c:a7:df:ff:4a:6c:09: 68:ca:58:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeQi8YdcI7qdr0ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI1MDcwMTAwMDAwM1oXDTI1MDcwMzAwMDAwMFowLzEtMCsGA1UEAxMk YzczMjdkMjMtOTQ4ZS00ODNjLTk0YWEtNzE1ODA0Mzg1N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMkc111U+/UcvH5Pl2iI/UpvZVqBuQu5bJLB O1h3aRbJhk9Wn2UHHIFCFk6WLPZEcvLj75F3eda67c3DD9DvkZLdk/qh0UnmYIdq 1hDXCxMHfZznJYju1tZnV/rQ2jUgL6GuCeLb6LtF3tLdq1Tttopqo+pMIzrY9Xtm 2woktsUsqiYRmXst1LbjynsPQtYbLF31z1FOHdwVqbsHP/rkYywfVZCq5Z9KXspt 0o29NpFNf+pAR/cr482jdDjQ3x1pI3S0mCI/Zvb1zw/JHzoAlzhOtbOVe/TUOB1Y +IR+qJGPrnkoh3m20wcWHcqkDEiOpmayollD0WI3lEcj73QHewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ0IHH6JazqLCuac37tdRNm3llruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvNGQ3NTRhNzUtNmZlZi00 MjdhLThhNWQtZDE1MmZiNzJmNDZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7EpYrgydHZOFhOV0mI9+I Wjk+q5gPP0FsSXCaVC7+TpbeydLuOt/XLkHmg0TOKjhh5Hhmt9LcvgDz4jd1tsoP wk1eJfCemGnt44fpXuNwvjssV5fx1FDT21XdJGMvqZLrA0OnDG0S2RIRPSTR6/ay c2JlbSmmfDW3FPdGzrxrQLknBMCRCIldtmbV99hiaJK39Tq0pmXlfVITt9fYqS34 jfFo1gpXJHhrM8A4wTLjfWlJrEiwvBkpLfen6TAOUse+4o1TesNFWXeS5kcMuvBd kfwsQnJA5McbH6K0gIpvBEzqcecmc1dpktPuQof5yXF5H9/XsRyn3/9KbAloylgd -----END CERTIFICATE-----Generated at Tue Jul 1 19:34:40 2025 by rpki-client