$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft File: 85be797f-f426-4ba8-98b0-1c2b5f752753.mft (raw, json) Hash identifier: cf+C56BXZtskAqypMDULR9jBTRF4VseOMecDyfZufMQ= Subject key identifier: 73:6F:38:A4:5C:18:48:CB:A2:8B:08:60:28:08:A0:D9:BB:F4:E6:88 Authority key identifier: 49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 Certificate issuer: /CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Certificate serial: 010D0C9F4328584A5E9B856C680397CB31B3FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft Manifest number: 010D0C9F4328584073A839281E4F1168C0BB16D5 Signing time: Tue 01 Jul 2025 03:00:03 +0000 Manifest this update: Tue 01 Jul 2025 03:00:03 +0000 Manifest next update: Thu 03 Jul 2025 03:00:00 +0000 Files and hashes: 1: 43d529a5-06fc-3596-b306-3805ee39efec.roa (hash: Z9jhbzeKokmew0tR2ppAZPIgqdGAXBwlyqSlbHzEQaY=) 2: 6134d21e-8982-3a39-a51f-8ad22c3de95a.roa (hash: qBCyDEMH0h5/Zf1/uzjmj3uMrWqwhb7gZIED9I2bKWE=) 3: 714385cc-6caf-3534-9571-6bf92f8ea373.roa (hash: qQqyL27l5Zt9ishyzQv7iQtvVJWeuEnour2/OQkKmtM=) 4: 85be797f-f426-4ba8-98b0-1c2b5f752753.crl (hash: g+0v+tNysD9Qb6QfYnFkrtxiJBCCw9CNLoBImJG9oEg=) 5: 9699501c-da98-381a-90a4-a8aa59586482.roa (hash: sZNm9ej6IFh6RRwHro5/nNkbUT0qnVeHgSleTDSYOgM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:9b:85:6c:68:03:97:cb:31:b3:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85be797f-f426-4ba8-98b0-1c2b5f752753 Validity Not Before: Jul 1 03:00:03 2025 GMT Not After : Jul 3 03:00:00 2025 GMT Subject: CN=2c672acb-f78a-4f4b-b5af-6d64af5f2dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:ab:c5:bc:66:ee:6f:49:49:c2:45:7c:b9: ec:33:2c:14:91:6a:43:ce:5b:6f:f3:94:a6:2b:37: c5:bc:68:e3:8d:10:1b:5f:9d:5a:43:db:aa:be:d0: e7:25:9c:3c:3f:1e:a5:a2:1f:67:bd:c4:52:0b:4c: c2:3b:ea:f7:c0:54:ea:37:c3:b9:99:20:b4:5e:75: 92:19:9d:6b:4c:4f:f5:34:af:1d:bc:f2:f8:34:02: c5:61:54:e8:19:f4:be:31:92:12:50:d8:10:ee:4a: 3f:a5:b2:9b:9b:24:b0:7e:5d:c8:6f:3f:d7:75:83: 5e:0a:74:73:35:66:fa:7d:59:95:0d:42:c7:c5:ef: d7:0a:37:82:f2:8b:08:b1:27:f2:b5:37:4b:d4:23: 2a:cb:8d:b6:e0:01:85:74:ec:3c:67:17:c0:e9:77: 71:e5:1b:c9:d3:e5:8a:13:d7:1f:e9:74:49:90:a1: c0:ef:b0:b8:2d:ea:44:f4:7f:bf:e3:44:3d:8c:99: 72:65:26:b6:64:eb:f8:de:77:f8:c0:ee:4d:09:28: 7d:0c:2d:85:f1:4d:73:97:70:73:26:dc:e0:dc:55: bd:48:07:43:94:56:7d:5c:44:8e:52:31:84:53:d7: af:6d:7c:05:35:99:8c:a0:91:ff:6a:f6:a8:ea:be: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6F:38:A4:5C:18:48:CB:A2:8B:08:60:28:08:A0:D9:BB:F4:E6:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753/85be797f-f426-4ba8-98b0-1c2b5f752753.crl X509v3 Authority Key Identifier: keyid:49:B1:C9:49:07:A5:46:4D:23:DA:5C:68:99:40:F9:73:99:9E:30:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85be797f-f426-4ba8-98b0-1c2b5f752753.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ec:f5:19:33:17:a8:93:42:f9:f1:bb:3b:7b:5b:f9:34:a7: 63:89:0f:ff:21:f0:5d:96:f3:2e:1c:80:12:b7:fc:40:9b:9f: 3f:13:59:a3:13:e4:73:d8:99:0a:c5:ea:c1:58:61:de:1b:73: 4c:6f:2c:46:47:37:d5:9f:d6:79:36:42:aa:7a:d3:8a:49:f1: 82:b0:5f:5b:68:9d:e1:19:e5:ea:43:fa:c0:64:58:73:22:78: aa:35:ae:f5:26:2e:fe:cb:02:68:80:74:a3:2f:aa:a5:01:58: 91:ba:01:aa:ab:c2:c1:50:86:6a:d8:b9:ee:33:84:53:81:3d: 3f:56:ca:ce:99:1e:e6:8e:43:a2:64:6b:f9:00:b7:29:76:48: 57:d5:44:fb:15:c1:90:ea:ea:bf:7f:51:68:18:41:e0:ec:16: 9a:de:ed:4d:45:25:9f:9b:9a:32:bf:6c:54:a2:05:2b:79:6f: fb:e6:87:80:7e:e5:40:d7:cc:c5:d5:45:a8:b1:d6:28:80:ab: 0b:18:ee:af:df:ae:cd:63:81:0e:09:66:04:ad:c5:ca:0b:62: f0:09:5e:93:bd:d2:37:41:2f:5a:53:33:5a:b6:a6:4c:50:8a: ea:a1:66:60:82:ac:1e:07:01:e9:05:a1:1c:2b:c7:83:a9:e8: d3:33:b0:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpem4VsaAOXyzGz/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZTc5N2YtZjQyNi00YmE4LTk4YjAtMWMyYjVmNzUy NzUzMB4XDTI1MDcwMTAzMDAwM1oXDTI1MDcwMzAzMDAwMFowLzEtMCsGA1UEAxMk MmM2NzJhY2ItZjc4YS00ZjRiLWI1YWYtNmQ2NGFmNWYyZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQarxbxm7m9JScJFfLnsMywUkWpDzltv85Sm KzfFvGjjjRAbX51aQ9uqvtDnJZw8Px6loh9nvcRSC0zCO+r3wFTqN8O5mSC0XnWS GZ1rTE/1NK8dvPL4NALFYVToGfS+MZISUNgQ7ko/pbKbmySwfl3Ibz/XdYNeCnRz NWb6fVmVDULHxe/XCjeC8osIsSfytTdL1CMqy4224AGFdOw8ZxfA6Xdx5RvJ0+WK E9cf6XRJkKHA77C4LepE9H+/40Q9jJlyZSa2ZOv43nf4wO5NCSh9DC2F8U1zl3Bz Jtzg3FW9SAdDlFZ9XESOUjGEU9evbXwFNZmMoJH/avao6r68sQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHNvOKRcGEjLoosIYCgIoNm79OaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84NWJl Nzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJiNWY3NTI3NTMvODViZTc5N2YtZjQyNi00 YmE4LTk4YjAtMWMyYjVmNzUyNzUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODViZTc5N2YtZjQyNi00YmE4LTk4 YjAtMWMyYjVmNzUyNzUzLzg1YmU3OTdmLWY0MjYtNGJhOC05OGIwLTFjMmI1Zjc1 Mjc1My5jcmwwHwYDVR0jBBgwFoAUSbHJSQelRk0j2lxomUD5c5meMFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84NWJlNzk3Zi1mNDI2LTRiYTgtOThiMC0xYzJi NWY3NTI3NTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz7PUZMxeok0L58bs7e1v5 NKdjiQ//IfBdlvMuHIASt/xAm58/E1mjE+Rz2JkKxerBWGHeG3NMbyxGRzfVn9Z5 NkKqetOKSfGCsF9baJ3hGeXqQ/rAZFhzIniqNa71Ji7+ywJogHSjL6qlAViRugGq q8LBUIZq2LnuM4RTgT0/VsrOmR7mjkOiZGv5ALcpdkhX1UT7FcGQ6uq/f1FoGEHg 7Baa3u1NRSWfm5oyv2xUogUreW/75oeAfuVA18zF1UWosdYogKsLGO6v367NY4EO CWYErcXKC2LwCV6TvdI3QS9aUzNatqZMUIrqoWZggqweBwHpBaEcK8eDqejTM7De -----END CERTIFICATE-----Generated at Tue Jul 1 17:25:30 2025 by rpki-client