$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft File: d455139a-f627-4743-8284-7fbd2f76dd8b.mft (raw, json) Hash identifier: qq2vPJ03SR8COncn0NY/jlXLL14zA3bMAWwLdedXcOI= Subject key identifier: D3:E2:79:C0:29:28:8F:77:BA:4C:1E:99:44:06:58:C2:65:6C:1D:93 Authority key identifier: 05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA Certificate issuer: /CN=d455139a-f627-4743-8284-7fbd2f76dd8b Certificate serial: 010D0C9F4328584A61663FB55094569F07D1C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft Manifest number: 010D0C9F4328584073A83A583C0DF001CA2A8404 Signing time: Wed 02 Jul 2025 03:00:08 +0000 Manifest this update: Wed 02 Jul 2025 03:00:08 +0000 Manifest next update: Sat 05 Jul 2025 03:00:00 +0000 Files and hashes: 1: 58c14212-20fe-398a-92cb-4c98613dce46.roa (hash: ve/xG+1IRbDCSLHmmPkPFTkJCQjJs+1zpR5STgr0uz0=) 2: 6c142cb8-b620-3745-8e33-abb1772dfd03.roa (hash: T7ZGazrBvFHYRHUCulnMLFsw4OmP6s5hdk3lDjtCOcU=) 3: a3a579fa-a9dd-32a3-9b85-d1875cf1d8f2.roa (hash: 3ldjG4jOiWjUtlIT7TgrKrw2PwgM/ZJ3m/994owZEQQ=) 4: a474ef21-5145-3424-b8cb-6fe09836be86.roa (hash: RwQLnDhWJg2Yxw1AQYysWlQ1nSosLhn9YeQuSw9+E/k=) 5: ca9437ab-3b47-3b28-9b71-b7f4e42135dc.roa (hash: lApao/w2w9BEu9Fm1/UkDPdofDuy7ZhqHvKomas/mHk=) 6: d455139a-f627-4743-8284-7fbd2f76dd8b.crl (hash: fwGO9NhRV1QZLcx+/FvDp0ELEt85vGyDF4T5/uiC0dE=) 7: d5b3fa47-47cb-35ec-98a4-4cb9a46da12f.roa (hash: AIno9O5c6lV/UegeyluiKSjjGsCzTirzrCFn6bXPgL8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:66:3f:b5:50:94:56:9f:07:d1:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d455139a-f627-4743-8284-7fbd2f76dd8b Validity Not Before: Jul 2 03:00:08 2025 GMT Not After : Jul 5 03:00:00 2025 GMT Subject: CN=8dfd2940-7398-433b-aaf2-be14a14c7885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:0f:bd:f0:a2:33:e7:b9:f8:72:1c:87:52: d5:23:19:22:fb:48:c3:e3:7c:cc:0b:58:07:23:11: 23:c7:90:66:9d:5c:0b:0c:82:b8:42:09:2d:a4:97: 03:32:18:52:1e:46:f8:74:9d:af:db:9a:92:81:2e: 28:24:7f:1c:f2:f7:1a:98:62:63:0b:48:84:bb:a0: 93:47:c3:b4:c9:10:4d:ce:9a:ac:3c:27:dc:03:5d: e7:22:80:92:1f:8a:7a:4e:97:17:1c:9d:42:f5:2b: 5d:ca:19:22:3b:92:a4:72:e4:b4:c9:c2:55:8a:32: ee:4e:0b:6d:1f:31:15:53:da:ab:b9:b2:d5:31:40: 6e:3e:fd:6d:d0:ed:65:23:b4:27:cf:ae:ee:6e:96: 37:3f:c1:b8:a0:44:76:44:7e:ae:25:48:85:6e:17: 82:4a:a5:90:b2:3f:62:84:c7:04:63:14:05:01:94: e9:f7:88:91:59:e9:68:aa:48:a7:83:13:0b:36:a8: 72:b9:45:b1:67:55:4b:42:fb:f5:1c:20:00:20:7d: e0:c6:e3:6d:30:f0:67:14:0a:14:eb:1d:19:4f:69: 87:ee:46:c7:24:e9:91:ec:a6:ba:fb:4c:dd:13:de: 80:57:df:83:4b:27:5b:9a:6a:3e:c1:3f:c6:93:bb: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:79:C0:29:28:8F:77:BA:4C:1E:99:44:06:58:C2:65:6C:1D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.crl X509v3 Authority Key Identifier: keyid:05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bd:37:b0:5f:2f:76:87:61:e4:11:b7:91:bb:a5:4d:56:6b: a7:65:31:66:fe:a9:6a:66:7a:da:9a:46:a3:a5:15:ec:fd:36: c8:7c:32:67:e1:41:32:7e:06:0c:55:d1:12:7f:c3:b5:9c:82: 46:05:90:2d:b1:15:ec:72:38:b4:1c:71:70:fd:73:ab:3d:39: 3d:6b:1f:6a:c8:6d:38:23:ba:5f:f3:ef:58:0f:b9:44:b0:a4: ff:5e:2c:e5:79:bf:ec:a5:1d:e7:f3:82:5b:05:79:ea:74:5e: 0d:7c:4e:20:4e:2e:05:c1:a5:b3:42:5d:bb:cb:e6:81:ff:b7: 6e:a2:0b:ab:b6:e9:b5:e3:ea:e3:c7:a4:97:b6:d8:80:17:2b: 1e:4f:ea:8e:7f:7d:d6:b0:fe:e7:59:ba:01:8c:ba:75:81:20: cd:f6:bb:0c:61:99:f8:07:fc:54:b9:5c:ef:83:39:1d:62:be: 0e:04:3f:47:6b:73:11:d2:43:2b:cf:bc:86:d0:27:e2:96:b8: 93:84:3d:90:65:93:e7:a2:09:94:6e:b1:06:98:2d:7a:a0:72: 26:7d:ec:21:76:9c:a5:c1:3e:d5:24:75:3f:31:86:e3:d0:23: 76:ff:59:38:14:aa:f9:00:59:e9:26:0f:91:82:c4:01:a6:c9: bc:86:ea:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEphZj+1UJRWnwfRxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NTEzOWEtZjYyNy00NzQzLTgyODQtN2ZiZDJmNzZk ZDhiMB4XDTI1MDcwMjAzMDAwOFoXDTI1MDcwNTAzMDAwMFowLzEtMCsGA1UEAxMk OGRmZDI5NDAtNzM5OC00MzNiLWFhZjItYmUxNGExNGM3ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6APvfCiM+e5+HIch1LVIxki+0jD43zMC1gH IxEjx5BmnVwLDIK4QgktpJcDMhhSHkb4dJ2v25qSgS4oJH8c8vcamGJjC0iEu6CT R8O0yRBNzpqsPCfcA13nIoCSH4p6TpcXHJ1C9StdyhkiO5KkcuS0ycJVijLuTgtt HzEVU9qrubLVMUBuPv1t0O1lI7Qnz67ubpY3P8G4oER2RH6uJUiFbheCSqWQsj9i hMcEYxQFAZTp94iRWeloqkingxMLNqhyuUWxZ1VLQvv1HCAAIH3gxuNtMPBnFAoU 6x0ZT2mH7kbHJOmR7Ka6+0zdE96AV9+DSydbmmo+wT/Gk7u/PwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNPiecApKI93ukwemUQGWMJlbB2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1 MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJkMmY3NmRkOGIvZDQ1NTEzOWEtZjYyNy00 NzQzLTgyODQtN2ZiZDJmNzZkZDhiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ1NTEzOWEtZjYyNy00NzQzLTgy ODQtN2ZiZDJmNzZkZDhiL2Q0NTUxMzlhLWY2MjctNDc0My04Mjg0LTdmYmQyZjc2 ZGQ4Yi5jcmwwHwYDVR0jBBgwFoAUBQeylnQILQLv7Pg3hTxiQBwlN6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDU1MTM5YS1mNjI3LTQ3NDMtODI4NC03ZmJk MmY3NmRkOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZvTewXy92h2HkEbeRu6VN VmunZTFm/qlqZnramkajpRXs/TbIfDJn4UEyfgYMVdESf8O1nIJGBZAtsRXscji0 HHFw/XOrPTk9ax9qyG04I7pf8+9YD7lEsKT/Xizleb/spR3n84JbBXnqdF4NfE4g Ti4FwaWzQl27y+aB/7duogurtum14+rjx6SXttiAFyseT+qOf33WsP7nWboBjLp1 gSDN9rsMYZn4B/xUuVzvgzkdYr4OBD9Ha3MR0kMrz7yG0CfilriThD2QZZPnogmU brEGmC16oHImfewhdpylwT7VJHU/MYbj0CN2/1k4FKr5AFnpJg+RgsQBpsm8huoR -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:04 2025 by rpki-client