$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft File: c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft (raw, json) Hash identifier: sV4kOMS2UtKceJwfKeWZD28MXymne5Na1FcNLV8Vuo8= Subject key identifier: BE:9E:93:78:6C:6E:3B:EC:62:F0:02:33:F3:05:B7:16:25:7E:20:21 Authority key identifier: FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 Certificate issuer: /CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Certificate serial: 010D0C9F4328584A5AC4E3DD0FBAFE00257DD980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft Manifest number: 010D0C9F43285845F5B42892868162D1AFD49B31 Signing time: Sun 29 Jun 2025 18:00:08 +0000 Manifest this update: Sun 29 Jun 2025 18:00:08 +0000 Manifest next update: Tue 01 Jul 2025 18:00:00 +0000 Files and hashes: 1: 4d174698-f0e1-3dfc-8937-59d2c51f39a9.roa (hash: Mz4abMWsFBkT8eOSuZYBAKGJrMIMbI3XSAWNtT69sTc=) 2: 4e206120-21a0-3b6c-80db-62308ac9e02c.roa (hash: jWnTWAHiJJGs0qxvDBF1YY9hQjsIRudMWsSU0WJVDbE=) 3: a142e04a-4bc1-3111-b089-dbf0feff0e10.roa (hash: DaJUQMvFT/HPicSmZjdlZj4y2EjzJS0ldQYdx4m4PLs=) 4: c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl (hash: I3sozOK03jnkOltVbmrjmD8y7sEveb4Rzal4UfrR02E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:c4:e3:dd:0f:ba:fe:00:25:7d:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b3cf4c-bba0-481c-8e82-74f050c5fa2e Validity Not Before: Jun 29 18:00:08 2025 GMT Not After : Jul 1 18:00:00 2025 GMT Subject: CN=34d5a89f-5aa4-41bd-b052-4e9ae3b31c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:0f:d9:85:81:eb:8d:d0:03:66:07:e6:26: 0a:5e:fe:92:72:dc:a8:d7:7a:1e:fb:2c:51:e3:42: bc:2b:93:59:1c:66:6d:bf:b6:cb:13:36:52:7e:e9: 39:27:46:ed:05:77:f5:c6:cf:81:99:7d:79:ac:c6: 63:43:fb:90:c1:e5:73:c9:82:ef:02:04:64:8a:45: 0c:b0:1d:89:41:93:f9:b4:a0:93:a9:e4:49:db:23: ef:0a:14:5e:86:c7:51:05:43:23:e2:94:8d:66:ba: 80:2a:ba:ad:ed:8a:b6:76:bd:a0:a1:eb:61:33:25: 17:2e:3c:a0:9c:bf:9b:c8:80:ac:a1:05:d5:12:36: e2:93:a8:cf:d4:88:6d:5d:9a:00:92:c5:a6:df:8c: 10:23:a5:5f:88:7d:fc:78:a4:79:f6:61:c6:a1:60: 56:2f:f1:cd:71:d7:a9:25:be:c6:09:7e:26:1b:f5: b1:43:3c:fa:ec:40:c9:6d:36:c8:81:f1:b5:f2:a7: b4:11:54:22:38:59:79:c3:00:24:2c:a4:fc:fb:e9: d9:c0:a7:93:e3:fd:b8:41:58:3e:3b:f7:27:87:2c: ec:c3:94:97:9b:c2:b0:d2:96:1b:65:2c:a5:64:fb: 7b:08:30:7e:11:bc:08:f8:1d:85:57:7a:03:b4:12: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9E:93:78:6C:6E:3B:EC:62:F0:02:33:F3:05:B7:16:25:7E:20:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.crl X509v3 Authority Key Identifier: keyid:FF:BC:A7:A8:B0:C9:3E:0B:30:5C:7D:40:5E:6D:1E:0F:2B:BA:93:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7b3cf4c-bba0-481c-8e82-74f050c5fa2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ff:67:f7:ee:d3:d2:ed:be:f6:7f:a4:b5:95:96:97:c2:44: ee:0c:e2:28:d1:4f:9d:e8:bd:cd:b5:fd:00:ed:db:da:a8:61: 22:85:f5:79:45:eb:77:dd:92:5a:9b:7d:9d:a3:bc:fd:3e:d8: 85:d0:94:0b:18:94:51:b6:73:46:26:88:2b:ba:22:29:19:fc: 8a:00:9c:0d:b9:84:75:15:23:38:17:52:6c:16:d2:09:be:f5: e9:43:f2:fb:7b:b0:70:ed:04:e2:88:51:d5:80:45:bf:51:c2: 2b:34:8c:62:15:ad:07:ee:34:55:c5:48:6c:33:0f:19:02:d7: fd:bf:7f:77:62:2a:b5:5a:98:92:77:f3:10:3c:20:81:7b:cf: b4:c2:7d:51:55:8e:aa:81:97:2d:9a:4f:10:dd:36:51:95:71: 36:8e:f6:7c:9e:36:af:43:da:05:cc:e1:a7:fc:41:f7:ef:96: 0f:07:bc:ad:75:4a:3a:5a:f0:60:4c:c0:35:70:cb:d5:fb:00: 70:9b:30:9b:12:4c:2e:ea:98:08:1f:72:35:b3:8b:0b:2b:06: 8f:ab:29:b9:24:51:b0:23:99:b3:24:01:ca:2c:ac:8f:3a:2d: 7f:a9:32:92:56:d8:ef:31:c8:84:37:7f:88:11:6c:18:c0:fe: 75:c1:3f:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaxOPdD7r+ACV92YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdiM2NmNGMtYmJhMC00ODFjLThlODItNzRmMDUwYzVm YTJlMB4XDTI1MDYyOTE4MDAwOFoXDTI1MDcwMTE4MDAwMFowLzEtMCsGA1UEAxMk MzRkNWE4OWYtNWFhNC00MWJkLWIwNTItNGU5YWUzYjMxYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT0P2YWB643QA2YH5iYKXv6Sctyo13oe+yxR 40K8K5NZHGZtv7bLEzZSfuk5J0btBXf1xs+BmX15rMZjQ/uQweVzyYLvAgRkikUM sB2JQZP5tKCTqeRJ2yPvChRehsdRBUMj4pSNZrqAKrqt7Yq2dr2goethMyUXLjyg nL+byICsoQXVEjbik6jP1IhtXZoAksWm34wQI6VfiH38eKR59mHGoWBWL/HNcdep Jb7GCX4mG/WxQzz67EDJbTbIgfG18qe0EVQiOFl5wwAkLKT8++nZwKeT4/24QVg+ O/cnhyzsw5SXm8Kw0pYbZSylZPt7CDB+EbwI+B2FV3oDtBJH+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL6ek3hsbjvsYvACM/MFtxYlfiAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jN2Iz Y2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYwNTBjNWZhMmUvYzdiM2NmNGMtYmJhMC00 ODFjLThlODItNzRmMDUwYzVmYTJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzdiM2NmNGMtYmJhMC00ODFjLThl ODItNzRmMDUwYzVmYTJlL2M3YjNjZjRjLWJiYTAtNDgxYy04ZTgyLTc0ZjA1MGM1 ZmEyZS5jcmwwHwYDVR0jBBgwFoAU/7ynqLDJPgswXH1AXm0eDyu6kwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jN2IzY2Y0Yy1iYmEwLTQ4MWMtOGU4Mi03NGYw NTBjNWZhMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe/2f37tPS7b72f6S1lZaX wkTuDOIo0U+d6L3Ntf0A7dvaqGEihfV5Ret33ZJam32do7z9PtiF0JQLGJRRtnNG JogruiIpGfyKAJwNuYR1FSM4F1JsFtIJvvXpQ/L7e7Bw7QTiiFHVgEW/UcIrNIxi Fa0H7jRVxUhsMw8ZAtf9v393Yiq1WpiSd/MQPCCBe8+0wn1RVY6qgZctmk8Q3TZR lXE2jvZ8njavQ9oFzOGn/EH375YPB7ytdUo6WvBgTMA1cMvV+wBwmzCbEkwu6pgI H3I1s4sLKwaPqym5JFGwI5mzJAHKLKyPOi1/qTKSVtjvMciEN3+IEWwYwP51wT/n -----END CERTIFICATE-----Generated at Sun Jun 29 21:27:44 2025 by rpki-client