$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft File: 64da013d-8ba3-4af5-80ad-7674bd0cc403.mft (raw, json) Hash identifier: 6+YFvehJxx/6UgFjl/JnAC6vyoDykbLmiyWac3SZzTc= Subject key identifier: 8A:44:37:F1:78:BF:F9:3A:A8:26:02:E5:54:A8:C3:84:E3:D6:4D:98 Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Certificate serial: 010D0C9F4328584A5FE3225106F5BA8C31249660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft Manifest number: 010D0C9F4328584073A858DE12751A3B5874DE2E Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: 3480552e-78d8-3380-996d-dd3f947bb79c.roa (hash: srsSkzYlcZVsJxYv2GV3DLruMx+wOztw3T8wEnJkdoA=) 2: 5717c9fc-bf14-3da4-9371-4fc98a870156.roa (hash: yVvroHjBYihgugQkd+/iSWTXznU83aYVCWjQS1pk8m4=) 3: 64da013d-8ba3-4af5-80ad-7674bd0cc403.crl (hash: vnxcBrQnmsytX2UUQFjbfAKpPG1cwtjedlEhWVsIin4=) 4: ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa (hash: MP5rsW9jXQ6oLufhlz62Zzslm9H3otNSNpwDPBIiYGM=) 5: c1a8df51-cd13-36bf-8ae8-c10d54a82d18.roa (hash: ftg3gbU0qVd8TvSskk1t/oGwW3nmyW4UiMJRlh6sHjE=) 6: e0f1b718-aa3d-36c7-8024-83ec29cdd052.roa (hash: Bpl86ktccDegjK9DZNMcDrNUJMj06fJcPs8RsdjRGj8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:22:51:06:f5:ba:8c:31:24:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=795ed1e6-4966-4ab0-b4f3-77cb408527c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:ba:0c:68:67:84:63:d4:7e:3c:24:1a:d8: ae:f4:90:39:9c:a4:7a:a2:20:d5:7f:9e:8b:b2:d5: 97:46:34:23:72:f7:58:7a:f9:06:1c:ea:fc:7a:ac: 7e:3f:6a:20:e7:ac:e1:7c:d8:59:9f:ae:60:fa:c1: e8:e5:8d:62:e6:04:e8:0c:68:88:65:02:47:3b:08: 1c:b1:92:ae:58:3b:5c:1b:99:ec:c3:f7:21:8d:4f: cf:d4:15:d1:3f:d7:67:a3:52:eb:cc:ce:00:68:6b: 1c:7b:af:e7:4b:6b:09:99:3d:00:fa:84:8d:89:74: 04:ed:d7:0e:d5:57:97:13:3d:a4:1c:73:e7:06:92: 51:1f:62:71:13:14:f0:9e:3e:4a:53:56:17:6d:a6: 03:60:45:ca:8a:bc:c3:54:75:0f:cb:46:69:1a:dc: 5d:0b:88:87:38:ee:0e:67:8d:ee:e7:60:c1:8e:18: de:e1:0d:97:1b:11:69:88:28:96:3d:9b:9f:7d:67: 6c:27:e2:eb:b8:11:1c:ec:91:52:fb:2e:c2:1c:92: 4a:17:50:20:bb:6e:6a:7a:e2:2d:06:47:77:52:64: d2:c8:dc:a9:15:bf:96:d5:b4:20:72:3b:94:28:22: 55:56:67:17:2b:39:03:9b:67:83:80:59:6a:7e:30: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:44:37:F1:78:BF:F9:3A:A8:26:02:E5:54:A8:C3:84:E3:D6:4D:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl X509v3 Authority Key Identifier: keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f4:5d:d2:28:83:5a:4b:5a:23:e5:af:09:9a:8d:52:1e:3c: 4b:40:b8:a4:ec:02:a8:bf:06:bc:80:38:f7:dd:d5:a3:7d:92: 5b:64:90:b7:11:59:ce:1b:00:1d:a6:12:1c:03:81:37:1a:0f: 6c:07:1d:5a:8b:78:53:79:ed:3a:4c:ef:d2:23:e1:40:c2:cf: 45:09:16:ed:b0:94:22:4d:32:76:dc:11:fd:c4:10:f4:c2:ce: 9f:b7:d8:91:0f:41:de:ab:14:45:ca:68:39:1d:9a:ef:de:ae: 52:52:7a:7e:1e:e7:bd:ae:c3:31:dd:40:45:ff:d8:69:d6:f6: bb:2d:e9:8d:74:3a:99:12:f9:23:30:7c:ac:3d:6b:99:5e:64: 46:7c:0b:ae:37:50:c3:e8:ea:3a:8a:56:ba:5a:9d:22:29:7f: 65:d8:45:fa:c0:9e:5f:29:e7:f1:22:df:43:3d:61:90:0c:02: d3:5d:64:10:3a:fe:ac:4b:c0:5a:f3:8c:32:2a:49:e1:ad:8d: 31:72:ac:62:27:be:40:58:af:b5:65:3e:08:99:41:ac:50:56: ef:ce:ef:78:8d:72:56:80:88:d7:7d:63:62:7d:34:f3:cf:b2: cd:26:ea:17:d1:15:b7:ea:87:a1:e2:b8:f7:0d:29:ee:8e:c3: 14:11:3e:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4yJRBvW6jDEklmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNj NDAzMB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk Nzk1ZWQxZTYtNDk2Ni00YWIwLWI0ZjMtNzdjYjQwODUyN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUm6DGhnhGPUfjwkGtiu9JA5nKR6oiDVf56L stWXRjQjcvdYevkGHOr8eqx+P2og56zhfNhZn65g+sHo5Y1i5gToDGiIZQJHOwgc sZKuWDtcG5nsw/chjU/P1BXRP9dno1LrzM4AaGsce6/nS2sJmT0A+oSNiXQE7dcO 1VeXEz2kHHPnBpJRH2JxExTwnj5KU1YXbaYDYEXKirzDVHUPy0ZpGtxdC4iHOO4O Z43u52DBjhje4Q2XGxFpiCiWPZuffWdsJ+LruBEc7JFS+y7CHJJKF1Agu25qeuIt Bkd3UmTSyNypFb+W1bQgcjuUKCJVVmcXKzkDm2eDgFlqfjC6/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIpEN/F4v/k6qCYC5VSow4Tj1k2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGRh MDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvNjRkYTAxM2QtOGJhMy00 YWY1LTgwYWQtNzY3NGJkMGNjNDAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRkYTAxM2QtOGJhMy00YWY1LTgw YWQtNzY3NGJkMGNjNDAzLzY0ZGEwMTNkLThiYTMtNGFmNS04MGFkLTc2NzRiZDBj YzQwMy5jcmwwHwYDVR0jBBgwFoAULdEBwduz9WxXjIPl1BW4QAapnzQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0 YmQwY2M0MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQ9F3SKINaS1oj5a8Jmo1S HjxLQLik7AKovwa8gDj33dWjfZJbZJC3EVnOGwAdphIcA4E3Gg9sBx1ai3hTee06 TO/SI+FAws9FCRbtsJQiTTJ23BH9xBD0ws6ft9iRD0HeqxRFymg5HZrv3q5SUnp+ Hue9rsMx3UBF/9hp1va7LemNdDqZEvkjMHysPWuZXmRGfAuuN1DD6Oo6ila6Wp0i KX9l2EX6wJ5fKefxIt9DPWGQDALTXWQQOv6sS8Ba84wyKknhrY0xcqxiJ75AWK+1 ZT4ImUGsUFbvzu94jXJWgIjXfWNifTTzz7LNJuoX0RW36oeh4rj3DSnujsMUET5e -----END CERTIFICATE-----Generated at Tue Jul 1 21:23:41 2025 by rpki-client