$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft File: 1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft (raw, json) Hash identifier: xRN6Q97Q7b4urhaUMe5tW+Ep6/LdM5ZyVMcmTnxd7do= Subject key identifier: E2:18:BE:DB:1E:E7:0F:40:12:FC:BB:67:E0:50:49:B9:50:19:9C:C5 Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9 Certificate issuer: /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c Certificate serial: 010D0C9F4328584A5A895477C4D30FA45EC3C4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft Manifest number: 010D0C9F4328584300D45AC8346532504151BF3E Signing time: Sun 29 Jun 2025 16:00:08 +0000 Manifest this update: Sun 29 Jun 2025 16:00:08 +0000 Manifest next update: Wed 02 Jul 2025 16:00:00 +0000 Files and hashes: 1: 0a79c28a-229c-3754-8feb-e5e1bd6a96b7.roa (hash: h5QEh6QbQ1Oq/ZmkA6p9MlqTqajb0EQm+TjOuR5HGOQ=) 2: 1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl (hash: gF+M/f/eKvLTQb3eyCnyH/iAw/pJfaI5Zsk27EfLlr8=) 3: 4fc20683-5b70-31ea-825b-fb5aae7329ac.roa (hash: aDRToutPWzs+wD7vgW8P/8Gwc5ItxQZWqifIVUprqgI=) 4: d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa (hash: saY+/Dep3yVB3DegXv3Ynyvuu/ZBe09t7oJrNGfF0pc=) 5: f66ca858-b67d-347b-bd2d-d9a0ad73394a.roa (hash: rWMopCVDEHXckuGXEybQzZa3XGG0s2XvOPN5CeDAUMI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:89:54:77:c4:d3:0f:a4:5e:c3:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c Validity Not Before: Jun 29 16:00:08 2025 GMT Not After : Jul 2 16:00:00 2025 GMT Subject: CN=1df7d19e-1cf1-49df-a159-3c93a115cdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:80:df:2b:c2:4b:2e:8b:13:94:6c:f4:11: ea:86:26:05:e5:48:06:58:33:b2:4f:2f:2f:4e:33: 01:63:d0:11:46:95:20:fb:c1:a2:70:10:76:4b:68: e5:cb:70:c0:44:b6:06:4e:0a:85:de:6c:a5:78:ad: 2b:02:3d:b9:03:0b:46:d3:7c:da:20:a0:84:37:df: 3d:44:63:88:e0:18:62:06:fd:75:82:11:ce:82:d4: 35:a8:11:44:b9:da:20:1e:98:7c:e9:1b:5f:59:98: 9a:c8:9b:ce:86:b6:b2:4f:53:85:0e:75:1c:32:b3: 68:b3:90:cd:8e:56:75:7f:3e:fd:cd:7f:dd:db:9e: 35:72:88:0d:0a:38:cb:44:fa:4e:f0:3c:8b:91:f6: 52:35:78:00:54:cd:ed:34:a4:f4:7c:ed:70:e8:64: 76:82:92:1e:60:4c:03:d8:80:62:9c:ba:98:81:cd: 9f:03:d1:9f:48:09:bc:eb:03:b7:7f:ff:cd:bf:fb: 07:ff:46:f6:76:33:12:7b:da:ba:e0:ab:a1:a7:cc: d8:24:31:18:b2:1e:d3:68:c5:e2:64:13:83:da:0c: d1:cf:3d:b4:86:53:b4:c3:60:64:42:71:8d:c4:dc: 76:22:b9:bd:f5:09:d3:d3:81:e9:3e:7e:91:e4:06: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:18:BE:DB:1E:E7:0F:40:12:FC:BB:67:E0:50:49:B9:50:19:9C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl X509v3 Authority Key Identifier: keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6a:58:3c:a7:9f:84:ed:4a:b7:51:27:f4:64:72:68:98:ed: 25:b2:b2:ce:6d:20:ca:1e:c4:cd:4e:0e:18:cb:a2:66:07:b7: 0f:f2:de:7b:f1:50:75:a4:a8:9c:01:7e:d5:af:74:2e:af:3d: fc:8f:a0:a3:e0:4e:19:ab:54:8f:cf:13:a0:c3:2b:6f:fe:e5: 83:19:80:e2:14:2e:66:26:73:45:96:3c:ea:a8:d3:63:96:34: d4:29:b9:87:b8:ab:88:cf:95:56:4a:f8:2e:c5:e3:88:34:46: 1f:d8:4e:e7:45:df:67:c4:30:3c:e7:39:a9:d5:55:64:bf:cf: 57:e9:19:c8:f0:c2:a0:ca:d1:1c:be:f8:6a:06:d0:0f:5f:da: af:6f:2f:aa:c0:f7:e5:a4:ac:39:b9:24:d4:bc:1d:0a:a7:27: 41:a4:bf:fd:f4:92:8e:77:ac:98:76:66:b2:3d:a7:b4:2c:f4: f7:0c:b5:e4:77:41:e7:29:2d:a3:44:ee:8a:2a:c1:85:8b:38: 56:e7:05:c7:42:7a:64:87:b1:84:e0:9a:e5:32:26:b8:8d:a6: b1:e6:9d:c1:36:d3:51:d2:c3:47:20:b1:51:a6:46:55:8c:be: d9:76:88:e7:aa:7b:8d:c2:6e:dd:0c:ab:71:dd:4e:11:eb:02: 9f:15:87:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaiVR3xNMPpF7DxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQwZTY4ZTUtMGMwZS00ZmYyLTgyOWYtNmY1Y2RjNzdh MzljMB4XDTI1MDYyOTE2MDAwOFoXDTI1MDcwMjE2MDAwMFowLzEtMCsGA1UEAxMk MWRmN2QxOWUtMWNmMS00OWRmLWExNTktM2M5M2ExMTVjZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTaA3yvCSy6LE5Rs9BHqhiYF5UgGWDOyTy8v TjMBY9ARRpUg+8GicBB2S2jly3DARLYGTgqF3myleK0rAj25AwtG03zaIKCEN989 RGOI4BhiBv11ghHOgtQ1qBFEudogHph86RtfWZiayJvOhrayT1OFDnUcMrNos5DN jlZ1fz79zX/d2541cogNCjjLRPpO8DyLkfZSNXgAVM3tNKT0fO1w6GR2gpIeYEwD 2IBinLqYgc2fA9GfSAm86wO3f//Nv/sH/0b2djMSe9q64Kuhp8zYJDEYsh7TaMXi ZBOD2gzRzz20hlO0w2BkQnGNxNx2Irm99QnT04HpPn6R5AaBHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOIYvtse5w9AEvy7Z+BQSblQGZzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZDBl NjhlNS0wYzBlLTRmZjItODI5Zi02ZjVjZGM3N2EzOWMvMWQwZTY4ZTUtMGMwZS00 ZmYyLTgyOWYtNmY1Y2RjNzdhMzljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWQwZTY4ZTUtMGMwZS00ZmYyLTgy OWYtNmY1Y2RjNzdhMzljLzFkMGU2OGU1LTBjMGUtNGZmMi04MjlmLTZmNWNkYzc3 YTM5Yy5jcmwwHwYDVR0jBBgwFoAUjSk9LnfODeSVfqu4c4ceMcAy/MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZDBlNjhlNS0wYzBlLTRmZjItODI5Zi02ZjVj ZGM3N2EzOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1alg8p5+E7Uq3USf0ZHJo mO0lsrLObSDKHsTNTg4Yy6JmB7cP8t578VB1pKicAX7Vr3Qurz38j6Cj4E4Zq1SP zxOgwytv/uWDGYDiFC5mJnNFljzqqNNjljTUKbmHuKuIz5VWSvguxeOINEYf2E7n Rd9nxDA85zmp1VVkv89X6RnI8MKgytEcvvhqBtAPX9qvby+qwPflpKw5uSTUvB0K pydBpL/99JKOd6yYdmayPae0LPT3DLXkd0HnKS2jRO6KKsGFizhW5wXHQnpkh7GE 4JrlMia4jaax5p3BNtNR0sNHILFRpkZVjL7ZdojnqnuNwm7dDKtx3U4R6wKfFYfw -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:00 2025 by rpki-client