$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft File: 8322c61d-99cf-48fc-b867-b2c2cce4d324.mft (raw, json) Hash identifier: 3enOzNHwMp5zuXSYsJCclkkebE/eMLCUIa5kcuT4+KU= Subject key identifier: A7:98:95:EA:72:DD:2F:68:EB:1B:39:72:49:FA:48:F5:19:35:19:64 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584A5B95496B1A82F1648FF416A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft Manifest number: 010D0C9F4328584073A834B047174291E7698B4E Signing time: Mon 30 Jun 2025 01:00:03 +0000 Manifest this update: Mon 30 Jun 2025 01:00:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: 12121739-ba19-3a49-a1ce-88a3e9cad17f.roa (hash: P7QNn5fiK447EnUgng/eMstv5F5PgJHQAeKK7jka7FY=) 2: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (hash: mvSDhbxv762LMduUUu6ia424AfgclWsYxDOJu8dDgj4=) 3: 36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (hash: o5lihdQEm08mS7jxChI/ThfSedEf//rDt2qauAveVzg=) 4: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (hash: kNaUuYyOHcS2SfDvO6PnrsJRL/t9UiFOD0xfXmjInsU=) 5: 8322c61d-99cf-48fc-b867-b2c2cce4d324.crl (hash: mK0mTB5u+NfVRQt+14waXlFH7Ge0dMYlsAabGsrRpXc=) 6: dfe95880-e08c-3c88-ba0f-676ebf56bd93.roa (hash: GM8oSfyZlkEKta4cX1O0YAyTTm3/cKnlwhtIQ4azNS0=) 7: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (hash: PSnoASUyge54DJ6ixZKzsgOds5oWRVyqpGuF0h6/C/Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:49:6b:1a:82:f1:64:8f:f4:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Jun 30 01:00:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=f670885f-2427-4aeb-b6a4-d9514980a7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f2:64:78:f2:ec:d4:0e:5b:b1:ef:db:ea:e4: 16:ca:b5:ef:af:3c:de:27:ca:40:25:0b:42:cf:ec: d6:4a:ed:54:fd:42:eb:29:23:3f:f7:69:57:c2:d2: 0c:2b:ba:a2:e0:94:9a:70:22:f4:79:49:97:3c:ab: da:10:07:ff:79:0f:f8:ca:14:5d:d2:be:04:49:dc: a0:35:75:a9:21:fb:89:ed:3b:54:9f:b0:be:da:ba: 23:95:c5:5c:56:cc:30:f2:86:a8:a6:4c:26:28:99: 1f:71:58:fb:41:b6:e3:19:ca:93:18:97:5b:75:01: ad:05:91:89:60:61:f0:3f:f9:6d:3a:3f:1e:a5:fd: 09:19:77:8a:a9:c7:11:3c:09:ee:cf:5a:15:ce:ea: 96:56:f0:b8:01:72:24:f5:41:1d:52:c7:f3:45:29: 63:55:11:dd:8b:d8:82:70:20:48:23:64:69:9f:c6: 2c:26:33:06:9a:cd:14:c4:96:50:88:a7:1d:fd:30: 67:87:ec:21:a8:79:1e:b5:79:9f:eb:96:bc:b3:1d: 35:84:cf:67:53:89:23:22:2a:ca:7c:ab:7f:fc:cd: ae:57:7d:c8:76:f6:3d:2f:c6:06:80:9f:0a:6c:b3: dc:88:a1:0e:f3:e5:19:a2:b1:b7:03:7f:92:17:67: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:98:95:EA:72:DD:2F:68:EB:1B:39:72:49:FA:48:F5:19:35:19:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b8:8b:38:74:e0:7e:a3:83:86:1d:14:ad:d9:82:cc:5e:9c: 90:b3:03:95:bd:25:de:83:16:61:c8:54:2b:1b:3e:4d:4a:82: 6f:79:ac:b0:07:19:45:4c:75:d8:21:20:0e:91:93:74:d6:35: a0:6b:62:bd:e9:04:0d:56:03:6e:07:b0:a2:d5:2e:c3:d8:74: e7:b4:72:7f:ef:3e:03:69:66:44:0a:e8:04:13:52:ab:8d:c3: 43:cd:73:ca:a8:11:de:26:f2:e5:2e:dc:18:6a:e6:2c:8b:f7: 5c:85:f6:b8:0a:ee:fb:d6:74:3d:ef:56:c2:ef:f9:70:6f:74: 4f:89:4b:fc:10:47:51:86:54:ec:69:b7:c8:46:2e:bd:54:28: bd:90:16:54:2d:d3:2f:c8:96:57:8f:a4:2b:9b:dd:92:26:cc: ca:6f:98:e4:e7:4a:11:62:b8:15:b2:d9:88:1b:6f:d1:15:ce: 60:4a:e6:a1:44:f3:17:25:69:2b:f9:e0:20:66:d9:da:32:93: dd:0b:18:6e:7c:37:17:54:34:e7:24:43:d8:bf:2e:ae:66:ab: 90:d0:3d:0c:20:91:80:eb:9d:fe:83:20:5f:64:f3:8c:91:f7: ae:95:d3:26:9f:51:3b:90:f9:53:76:c8:36:5d:d9:5f:e3:3b: 8f:18:f2:3f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpblUlrGoLxZI/0FqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDYzMDAxMDAwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk ZjY3MDg4NWYtMjQyNy00YWViLWI2YTQtZDk1MTQ5ODBhN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fJkePLs1A5bse/b6uQWyrXvrzzeJ8pAJQtC z+zWSu1U/ULrKSM/92lXwtIMK7qi4JSacCL0eUmXPKvaEAf/eQ/4yhRd0r4ESdyg NXWpIfuJ7TtUn7C+2rojlcVcVsww8oaopkwmKJkfcVj7QbbjGcqTGJdbdQGtBZGJ YGHwP/ltOj8epf0JGXeKqccRPAnuz1oVzuqWVvC4AXIk9UEdUsfzRSljVRHdi9iC cCBII2Rpn8YsJjMGms0UxJZQiKcd/TBnh+whqHketXmf65a8sx01hM9nU4kjIirK fKt//M2uV33IdvY9L8YGgJ8KbLPciKEO8+UZorG3A3+SF2fwJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKeYlepy3S9o6xs5ckn6SPUZNRlkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvODMyMmM2MWQtOTljZi00 OGZjLWI4NjctYjJjMmNjZTRkMzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYuIs4dOB+o4OGHRSt2YLM XpyQswOVvSXegxZhyFQrGz5NSoJveaywBxlFTHXYISAOkZN01jWga2K96QQNVgNu B7Ci1S7D2HTntHJ/7z4DaWZECugEE1KrjcNDzXPKqBHeJvLlLtwYauYsi/dchfa4 Cu771nQ971bC7/lwb3RPiUv8EEdRhlTsabfIRi69VCi9kBZULdMvyJZXj6Qrm92S JszKb5jk50oRYrgVstmIG2/RFc5gSuahRPMXJWkr+eAgZtnaMpPdCxhufDcXVDTn JEPYvy6uZquQ0D0MIJGA653+gyBfZPOMkfeuldMmn1E7kPlTdsg2Xdlf4zuPGPI/ -----END CERTIFICATE-----Generated at Mon Jun 30 10:47:12 2025 by rpki-client