$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft File: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft (raw, json) Hash identifier: rJ6qHoYKx0WKnvSgKKgqU3nC2uPLK64QqboDrFu3GRg= Subject key identifier: E3:BF:95:3E:34:EF:A6:B0:13:61:E6:66:B6:5E:F1:8E:C3:AE:AA:64 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584A5D71BD8D92C53B212BBE1900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft Manifest number: 010D0C9F4328584073A81C71C685F3E52EAFE1FA Signing time: Mon 30 Jun 2025 17:00:03 +0000 Manifest this update: Mon 30 Jun 2025 17:00:03 +0000 Manifest next update: Wed 02 Jul 2025 17:00:00 +0000 Files and hashes: 1: 41149ca8-84ee-3c37-b491-83ba1a424870.roa (hash: niVTlBtqYTvk1om3ICmysCaD0YiqVO1FVLu9bCn+3fU=) 2: 5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl (hash: y6X1q5JApyJq2zJuehIoItov6+8QyoW36rqPeELbp1Y=) 3: 85e6adee-b389-3dc7-8d34-6ef4bc2d9e72.roa (hash: 8sNYI9g9N0JAyx44KXAlIHc69vSFgWGrvXtz86J8E2k=) 4: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (hash: PmiT5pLSF7FkjtjfGeozYEC6oONrCUfLSE61PWo59aQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:71:bd:8d:92:c5:3b:21:2b:be:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Jun 30 17:00:03 2025 GMT Not After : Jul 2 17:00:00 2025 GMT Subject: CN=ca638af8-340d-41e3-9965-385a4b5e9ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:a9:87:e9:6c:eb:cb:63:10:81:5e:2a:f2: 70:67:98:d1:c1:7b:5f:17:84:83:40:21:47:5a:bf: eb:c4:4c:65:f0:79:30:b6:1d:9a:0a:26:cc:f0:f6: 53:54:3c:7e:07:56:6e:0a:6e:26:22:9e:c3:4b:f1: 7e:33:5d:60:69:aa:8d:25:51:3e:fa:73:94:fc:7d: e1:02:60:40:72:f2:7b:2b:79:76:f1:eb:54:67:2b: b9:32:e0:3a:87:e7:db:f3:67:fb:af:e2:32:3e:a4: ce:57:84:71:19:24:6a:85:0e:60:03:a4:25:7d:60: 1c:bb:6a:a5:a3:7a:1e:24:d5:f3:39:66:43:39:d4: 58:bf:51:8d:d2:21:65:10:db:b6:8e:fd:79:83:d7: 4d:b9:c0:0d:c9:4f:a3:fb:92:67:11:12:a5:d3:71: 7d:55:66:ef:ce:91:5c:bb:a9:30:68:23:52:51:c1: f9:a6:1b:b5:48:a8:af:f1:fe:75:eb:94:f1:a4:2e: 15:dd:61:af:76:b0:a2:b9:ca:32:6c:4c:27:3d:8a: 16:38:2c:c9:ad:44:75:2c:67:35:9b:e8:5f:ce:0e: d7:b8:bf:df:fc:67:ee:a5:d4:16:e5:43:78:c1:24: 62:d5:ac:32:fe:cd:4b:ed:e8:c4:38:66:ed:f7:93: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BF:95:3E:34:EF:A6:B0:13:61:E6:66:B6:5E:F1:8E:C3:AE:AA:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f7:6d:53:e3:c3:0c:24:65:8e:8c:18:f9:9c:6b:cb:ff:ba: 44:10:59:9b:8d:91:ab:d7:79:ae:6a:47:af:45:bd:95:4c:af: 4a:87:df:ad:11:6d:33:9b:9d:49:dd:3c:98:01:5f:4e:ce:9b: f9:2a:db:7c:5c:61:52:58:b4:da:0f:90:2c:54:3c:c7:0f:c4: df:bd:9c:ab:13:a8:dd:91:b0:a3:37:d1:ee:d5:1e:57:0f:78: 5a:81:da:48:58:7b:b6:29:55:76:3e:6c:73:9c:7e:9f:aa:44: 47:76:93:05:aa:d3:9e:58:14:68:0a:1a:9d:48:95:58:ce:76: f1:38:1a:e3:e8:0e:6a:4c:62:a9:91:0d:8e:96:a3:1c:ce:f7: bc:4c:4f:fe:a0:da:ef:a8:2f:c7:6b:c6:6d:72:ea:f5:5d:ef: a8:e9:07:19:7b:a0:9f:b5:fc:c0:6f:7d:ba:8c:15:cf:e0:2d: ae:d7:8a:19:92:5c:bd:d8:28:c6:ea:a5:09:37:45:dd:71:ad: 26:49:73:1a:f4:c7:b1:d0:0c:a7:a4:f6:e3:9e:45:e0:5c:ac: 0c:c1:6d:fd:1a:13:ea:9c:f2:72:cc:f4:06:d5:76:e3:07:19: 61:a7:37:e1:04:c1:69:6d:8e:d7:74:bf:06:e4:1b:02:e9:60: dd:59:e3:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdcb2NksU7ISu+GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI1MDYzMDE3MDAwM1oXDTI1MDcwMjE3MDAwMFowLzEtMCsGA1UEAxMk Y2E2MzhhZjgtMzQwZC00MWUzLTk5NjUtMzg1YTRiNWU5Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUyph+ls68tjEIFeKvJwZ5jRwXtfF4SDQCFH Wr/rxExl8Hkwth2aCibM8PZTVDx+B1ZuCm4mIp7DS/F+M11gaaqNJVE++nOU/H3h AmBAcvJ7K3l28etUZyu5MuA6h+fb82f7r+IyPqTOV4RxGSRqhQ5gA6QlfWAcu2ql o3oeJNXzOWZDOdRYv1GN0iFlENu2jv15g9dNucANyU+j+5JnERKl03F9VWbvzpFc u6kwaCNSUcH5phu1SKiv8f5165TxpC4V3WGvdrCiucoybEwnPYoWOCzJrUR1LGc1 m+hfzg7XuL/f/GfupdQW5UN4wSRi1awy/s1L7ejEOGbt95MgmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOO/lT4076awE2HmZrZe8Y7DrqpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvNWFiYTRiN2EtZGU3Yi00 ZTg0LWI5MTMtYTFiZWRiZTU4ZjlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1921T48MMJGWOjBj5nGvL /7pEEFmbjZGr13muakevRb2VTK9Kh9+tEW0zm51J3TyYAV9Ozpv5Ktt8XGFSWLTa D5AsVDzHD8TfvZyrE6jdkbCjN9Hu1R5XD3hagdpIWHu2KVV2PmxznH6fqkRHdpMF qtOeWBRoChqdSJVYznbxOBrj6A5qTGKpkQ2OlqMczve8TE/+oNrvqC/Ha8Ztcur1 Xe+o6QcZe6CftfzAb326jBXP4C2u14oZkly92CjG6qUJN0Xdca0mSXMa9Mex0Ayn pPbjnkXgXKwMwW39GhPqnPJyzPQG1XbjBxlhpzfhBMFpbY7XdL8G5BsC6WDdWePQ -----END CERTIFICATE-----Generated at Tue Jul 1 11:51:43 2025 by rpki-client