$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft File: 87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft (raw, json) Hash identifier: jJBqP/pP/rSLUrt9z/sMJmnSxx4M8yp6/0uoKJjS0tk= Subject key identifier: 01:5F:47:8F:26:2E:9F:1C:29:11:8A:21:BF:A3:67:EE:30:B5:26:88 Authority key identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51 Certificate issuer: /CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4 Certificate serial: 010D0C9F4328584A5E5FF64E247E72FDC67A6100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft Manifest number: 010D0C9F432858462064DDFA546B9186D6BECE90 Signing time: Tue 01 Jul 2025 01:00:03 +0000 Manifest this update: Tue 01 Jul 2025 01:00:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: 34cdba4c-80f1-350c-adea-5c65a62ef612.roa (hash: FYwf9u8YFSkGQkhOz7ITRwPm7ZEnXHchK6lL9PphACc=) 2: 72acf335-ac49-3430-8a62-91a96445ff98.roa (hash: bWsfl4+uvCTCF/UyeGZLIxcAnAA7Qasx5BuAdcfnO+E=) 3: 87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl (hash: qxVgU+vdSsp2oBlxc8IELAET5KJKinw4gc+n93bSB1g=) 4: a1363101-dc95-39a2-81e3-ed6b6d26cdc4.roa (hash: snOYxrbkFDxA60HEkvenLCgrh3Y9+CY8JSEpWAPFYUk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:5f:f6:4e:24:7e:72:fd:c6:7a:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4 Validity Not Before: Jul 1 01:00:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=aba72287-3111-4eb2-bbfe-df2b1a91d2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:30:a9:46:72:c4:ba:be:e2:fb:89:be:3c: e7:53:80:5b:43:78:b7:f8:f7:2f:c5:c0:4f:07:40: 8f:24:4c:c4:34:52:b0:99:40:95:fa:06:dd:5f:14: eb:61:e6:4f:66:6e:c6:2e:6c:9c:be:d2:1c:72:b9: e4:e5:f8:3b:64:29:13:d4:17:9e:f8:4a:fc:7f:25: 74:07:3b:ac:da:dd:05:5f:74:37:1b:f8:3a:2f:11: 3d:5b:91:91:2c:88:55:8f:56:c7:a3:9e:21:6d:e6: f8:7a:db:9b:74:c0:c0:ec:94:62:73:e3:fb:ca:8c: 29:6a:c8:d0:53:53:22:09:9b:84:7d:1e:d6:28:35: 27:12:bc:5a:40:55:bb:e3:26:ed:d0:83:f0:52:2b: 47:f8:c4:3a:64:ba:37:36:b4:ab:9e:87:49:e3:ab: 40:1d:87:6a:c7:74:b7:3d:5c:2d:07:9c:a3:0b:e1: 95:2d:9e:d5:82:96:4c:b4:3d:8d:46:07:4b:72:5c: f5:39:b4:87:9f:f2:53:36:18:1b:eb:c1:70:06:b8: 5f:0f:3e:5b:9c:45:eb:d5:2d:85:10:eb:c3:0c:a7: 45:fb:60:95:48:f4:df:39:57:d8:99:2c:07:b6:70: fa:48:c8:1b:b9:9e:56:d3:83:6e:53:5b:0a:c3:06: 62:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5F:47:8F:26:2E:9F:1C:29:11:8A:21:BF:A3:67:EE:30:B5:26:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl X509v3 Authority Key Identifier: keyid:05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c7:b2:f7:9a:af:4e:33:af:ba:d0:03:22:7a:39:77:88:81: 9a:be:95:7f:3c:04:06:e1:50:03:a3:be:c0:fe:34:08:ae:c2: d4:f0:3c:ec:39:e3:22:87:6c:c7:4a:b7:5a:5f:60:f5:22:4e: f9:83:95:f1:7e:3c:aa:ef:7f:13:58:7d:eb:a0:00:d3:22:12: 65:66:66:7a:68:d3:d2:d9:da:df:07:dd:2c:98:de:49:a1:3c: 92:ab:68:86:8c:55:1f:9b:1e:5f:35:fe:5b:e2:2e:b0:48:1a: 4b:8b:76:69:4e:1f:2d:1a:6e:ed:1d:a5:d9:7c:6c:ef:34:2b: 7f:4f:fa:e8:71:32:c0:24:ce:a4:cd:dd:98:47:32:8f:3f:a8: 7c:62:ea:57:77:c3:89:d0:79:3d:ea:9c:90:1d:af:5c:a3:9d: c2:ef:fb:eb:00:08:ba:ff:81:6d:bc:04:d1:e6:1d:50:d6:b8: 8c:2c:26:8a:e4:f4:4b:22:36:c6:aa:dd:16:a8:72:78:29:39: 88:e2:a4:0d:3b:39:63:f1:dd:2f:98:b2:ae:29:75:9f:be:9c: 9a:fc:f3:c4:c1:d0:2c:e9:aa:4c:2e:74:ff:60:c8:e2:be:f5: bc:b5:bc:f2:64:86:bd:aa:c2:02:c6:95:e4:aa:dd:ea:85:04: c5:50:e6:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeX/ZOJH5y/cZ6YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiYWE0ZDItMTFiMS00ODI5LTliZjYtODZlMGVmYzY1 ZmY0MB4XDTI1MDcwMTAxMDAwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk YWJhNzIyODctMzExMS00ZWIyLWJiZmUtZGYyYjFhOTFkMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA4wqUZyxLq+4vuJvjznU4BbQ3i3+PcvxcBP B0CPJEzENFKwmUCV+gbdXxTrYeZPZm7GLmycvtIccrnk5fg7ZCkT1Bee+Er8fyV0 Bzus2t0FX3Q3G/g6LxE9W5GRLIhVj1bHo54hbeb4etubdMDA7JRic+P7yowpasjQ U1MiCZuEfR7WKDUnErxaQFW74ybt0IPwUitH+MQ6ZLo3NrSrnodJ46tAHYdqx3S3 PVwtB5yjC+GVLZ7VgpZMtD2NRgdLclz1ObSHn/JTNhgb68FwBrhfDz5bnEXr1S2F EOvDDKdF+2CVSPTfOVfYmSwHtnD6SMgbuZ5W04NuU1sKwwZiPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFfR48mLp8cKRGKIb+jZ+4wtSaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84N2Jh YTRkMi0xMWIxLTQ4MjktOWJmNi04NmUwZWZjNjVmZjQvODdiYWE0ZDItMTFiMS00 ODI5LTliZjYtODZlMGVmYzY1ZmY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODdiYWE0ZDItMTFiMS00ODI5LTli ZjYtODZlMGVmYzY1ZmY0Lzg3YmFhNGQyLTExYjEtNDgyOS05YmY2LTg2ZTBlZmM2 NWZmNC5jcmwwHwYDVR0jBBgwFoAUBb+63RTgjbLix+Z71475OeHIRlEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84N2JhYTRkMi0xMWIxLTQ4MjktOWJmNi04NmUw ZWZjNjVmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWx7L3mq9OM6+60AMiejl3 iIGavpV/PAQG4VADo77A/jQIrsLU8DzsOeMih2zHSrdaX2D1Ik75g5Xxfjyq738T WH3roADTIhJlZmZ6aNPS2drfB90smN5JoTySq2iGjFUfmx5fNf5b4i6wSBpLi3Zp Th8tGm7tHaXZfGzvNCt/T/rocTLAJM6kzd2YRzKPP6h8YupXd8OJ0Hk96pyQHa9c o53C7/vrAAi6/4FtvATR5h1Q1riMLCaK5PRLIjbGqt0WqHJ4KTmI4qQNOzlj8d0v mLKuKXWfvpya/PPEwdAs6apMLnT/YMjivvW8tbzyZIa9qsICxpXkqt3qhQTFUObN -----END CERTIFICATE-----Generated at Tue Jul 1 02:33:58 2025 by rpki-client