$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: LRR9H4n/H35C8eOobXH7HXi675WcSMpcI5ZA4tL4UsI= Subject key identifier: 8C:F6:0E:D7:03:45:CA:C3:5D:16:98:32:96:26:B6:0E:AB:06:06:05 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584A59B8D4DD58BE323F3665A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3AE9 Signing time: Sun 29 Jun 2025 09:00:03 +0000 Manifest this update: Sun 29 Jun 2025 09:00:03 +0000 Manifest next update: Tue 01 Jul 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: UtoXe4ugFYSCVmHRn5I5k+tnHMh/3Dwg9SbQ4Q0V3n8=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: OA02WKCiCPeFhY8jGuL2cglDmrskTsDToHEgPSFqr+s=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: A7eyR/ClB4HrHryafnWEWZIYTQECk52dUcRzu1R9kdE=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: ndMiqDXL1dS2XJN9GIlw4ZdRZ1B8xmvmAKe5mmt0SbI=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: P6EqG+UoVXa/WjhtyPwkEta3G6vyzMCeYwFU9qc8A4Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:b8:d4:dd:58:be:32:3f:36:65:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Jun 29 09:00:03 2025 GMT Not After : Jul 1 09:00:00 2025 GMT Subject: CN=9154a7f2-e991-40be-84b2-d555b8f8a45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:8d:2a:57:b9:91:e6:d1:89:86:ad:a8:34: 40:e6:45:53:3e:45:2b:49:4e:36:c6:ac:0d:a4:14: a5:d5:90:9d:46:6e:9a:f8:b4:66:91:46:63:1c:fe: e7:da:cc:2a:2d:eb:b8:a6:ce:72:ec:18:bb:60:5f: 4a:66:4f:a1:f2:2d:e9:2a:40:fe:f9:e9:a0:8b:2f: 10:82:9f:3e:d9:cd:1e:a2:b0:db:bf:b2:06:5e:78: 7f:62:2f:74:10:25:7b:8a:65:98:0d:8c:c2:ed:54: c1:06:83:09:a2:a4:70:c8:a4:15:d4:2c:db:50:12: 10:b1:76:48:bb:89:de:2f:f9:5c:12:d5:31:5b:f9: cc:85:7d:bb:81:fc:60:ff:e1:4d:09:e0:39:07:67: 07:bb:c8:b7:64:f3:a4:cf:fd:48:7b:94:2c:6f:75: 1e:41:a1:f4:89:6a:1c:79:79:b7:59:60:4c:91:f2: 10:35:71:f0:7f:49:6b:a0:b4:bc:c9:2e:c0:0a:b1: fc:93:ae:70:1c:51:3b:30:75:c1:4c:d5:5c:38:1d: 3a:7c:c0:6d:19:97:c9:1e:4f:56:a0:db:c7:99:28: 20:da:81:23:9b:c5:1b:23:7f:c8:e0:58:87:7d:9b: cf:c8:50:88:36:cd:82:39:9d:a4:83:32:28:22:16: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F6:0E:D7:03:45:CA:C3:5D:16:98:32:96:26:B6:0E:AB:06:06:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:35:db:b5:96:c0:5d:ba:ef:92:7f:83:89:59:39:a9:1c:ff: 3a:96:b7:6f:42:17:cc:5f:6e:78:6b:5c:b9:7f:03:96:60:aa: 29:51:fd:9f:db:72:4c:eb:3c:f7:21:23:24:72:6f:a9:fa:3e: c8:54:7b:90:c9:d8:c4:61:4a:28:ed:c9:76:98:02:89:f0:96: cc:d2:67:8b:94:dd:e0:ed:aa:6b:e1:f9:15:74:6a:e9:3f:4f: 5f:90:0c:08:f0:21:22:6a:4e:66:50:f8:17:dd:56:7d:54:29: 78:9f:f1:ae:81:6d:e8:75:f6:f7:ab:fe:c4:0f:be:d4:6f:e3: e9:e0:d9:88:35:f2:e7:70:b3:0d:83:88:01:c1:7c:3a:92:c7: f1:8a:b1:7a:a5:df:86:bd:1f:1e:e7:27:41:6b:a9:d7:23:7e: 56:a7:62:d4:65:84:7e:de:2e:dd:9d:7e:4a:54:cf:8c:79:bd: 94:0e:c7:33:95:35:ce:48:77:bf:2b:c5:70:89:b6:a2:0c:60: c4:70:db:1d:f9:41:8b:ca:9e:47:de:ea:ca:69:06:07:92:b1: fd:df:59:a9:5f:a4:ba:a2:a6:7a:3d:32:e7:a3:99:a9:1c:cc: b8:b3:4c:45:10:7f:e8:91:10:32:99:3b:3f:2a:67:73:44:c8: ae:f1:2a:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZuNTdWL4yPzZlowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDYyOTA5MDAwM1oXDTI1MDcwMTA5MDAwMFowLzEtMCsGA1UEAxMk OTE1NGE3ZjItZTk5MS00MGJlLTg0YjItZDU1NWI4ZjhhNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHuNKle5kebRiYatqDRA5kVTPkUrSU42xqwN pBSl1ZCdRm6a+LRmkUZjHP7n2swqLeu4ps5y7Bi7YF9KZk+h8i3pKkD++emgiy8Q gp8+2c0eorDbv7IGXnh/Yi90ECV7imWYDYzC7VTBBoMJoqRwyKQV1CzbUBIQsXZI u4neL/lcEtUxW/nMhX27gfxg/+FNCeA5B2cHu8i3ZPOkz/1Ie5Qsb3UeQaH0iWoc eXm3WWBMkfIQNXHwf0lroLS8yS7ACrH8k65wHFE7MHXBTNVcOB06fMBtGZfJHk9W oNvHmSgg2oEjm8UbI3/I4FiHfZvPyFCINs2COZ2kgzIoIhaO1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIz2DtcDRcrDXRaYMpYmtg6rBgYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeNdu1lsBduu+Sf4OJWTmp HP86lrdvQhfMX254a1y5fwOWYKopUf2f23JM6zz3ISMkcm+p+j7IVHuQydjEYUoo 7cl2mAKJ8JbM0meLlN3g7apr4fkVdGrpP09fkAwI8CEiak5mUPgX3VZ9VCl4n/Gu gW3odfb3q/7ED77Ub+Pp4NmINfLncLMNg4gBwXw6ksfxirF6pd+GvR8e5ydBa6nX I35Wp2LUZYR+3i7dnX5KVM+Meb2UDsczlTXOSHe/K8VwibaiDGDEcNsd+UGLyp5H 3urKaQYHkrH931mpX6S6oqZ6PTLno5mpHMy4s0xFEH/okRAymTs/KmdzRMiu8Srk -----END CERTIFICATE-----Generated at Sun Jun 29 17:25:10 2025 by rpki-client