$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft File: d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft (raw, json) Hash identifier: XXt1YVEm7qQTy/zM9aixjfE14QR5xp8J6kWYCELihHE= Subject key identifier: 86:6D:AE:9A:35:BB:77:0E:41:24:6A:E6:7E:DF:4D:17:2A:2A:22:C5 Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29 Certificate issuer: /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b Certificate serial: 010D0C9F4328584A58ACD24CD8A9A00F5539B600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft Manifest number: 010D0C9F432858460CD22361C69F16CD2791A262 Signing time: Sun 29 Jun 2025 00:00:03 +0000 Manifest this update: Sun 29 Jun 2025 00:00:03 +0000 Manifest next update: Wed 02 Jul 2025 00:00:00 +0000 Files and hashes: 1: 16e040f3-42b1-387b-aca6-5b8efee58de6.roa (hash: kW0yGU3pYQ3bi4DCDpLdkl1DRUsvYPSJtOw75l1v+Ck=) 2: 5387381b-ecda-3c66-b507-6cc44cac79fa.roa (hash: ba17/MbBJMZicCW9ExeWY98fiwlshPqYfNr+v43jDrk=) 3: 833224cb-bd10-31f7-b89a-5dd938893e65.roa (hash: kJgT6st8R4KpJ/ZTMHr8wKWtQtaUGQO+d5wFGGcP6Mk=) 4: d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl (hash: ZtGaQF15OkYwYm7awVjQyPldH6qxL4azpTJOQB1Tvss=) 5: dfef8664-2552-32ef-ab49-09e987678f7f.roa (hash: t1yRkeiMQxZvzcbDRuhptZBmzCfzpvgWZj6td2NopzI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ac:d2:4c:d8:a9:a0:0f:55:39:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b Validity Not Before: Jun 29 00:00:03 2025 GMT Not After : Jul 2 00:00:00 2025 GMT Subject: CN=e411d21c-2714-4cc2-9145-bfae7ae0d7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:b4:72:b3:d7:fe:57:79:3c:d9:be:bb:81: 31:57:1b:5a:b4:a3:60:fe:c1:46:fa:1d:39:33:11: b0:ce:a4:1e:02:a5:fc:f0:cb:84:91:ac:0e:3a:09: aa:56:fd:63:78:87:36:84:ce:79:bd:53:7d:05:17: 7d:7f:1e:2a:6c:64:95:31:b5:f3:29:ef:cd:60:4b: 64:fd:99:56:9a:ee:62:33:51:d2:f5:bf:9d:f5:03: 4a:a1:76:f6:21:e1:a4:c9:ff:63:9b:fe:5d:8b:8e: f3:ac:df:3f:6d:25:29:9e:9a:91:de:de:d2:c5:93: 26:fc:d4:0b:8a:4c:d8:3f:0b:72:b7:b4:02:db:67: 02:ac:0f:db:ee:7a:86:7b:81:aa:40:89:e6:cb:0e: 83:25:12:e7:0b:b6:05:07:ad:0c:76:51:7b:fb:c6: 65:30:68:fa:42:0a:05:55:5e:e7:31:a1:4e:06:9f: 0e:f9:01:f0:c6:32:0f:79:56:cb:61:c6:a7:8c:09: 2a:4c:bf:48:e3:61:33:2f:20:e5:61:79:9d:8c:24: d0:55:26:ac:54:3e:5c:eb:77:aa:87:32:b6:96:52: 6f:53:57:22:3f:22:21:0a:c2:f1:c6:0f:c7:95:73: ee:a8:98:8f:cd:2c:28:c6:12:52:96:be:c3:89:26: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6D:AE:9A:35:BB:77:0E:41:24:6A:E6:7E:DF:4D:17:2A:2A:22:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl X509v3 Authority Key Identifier: keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:e3:41:b4:fb:6c:29:90:06:10:31:f5:75:5f:83:54:56:89: 87:a3:60:ce:64:40:ee:50:80:46:64:fe:b3:73:dc:d8:00:3c: 80:97:9a:8f:e5:75:75:6e:a8:75:e5:fc:59:d3:2e:fb:50:73: e0:bc:ff:78:0a:f3:62:5d:d8:00:60:96:b3:bd:93:7a:34:44: 31:a2:16:3b:1e:eb:a4:71:d4:28:25:aa:c1:21:06:e3:2e:4c: 2b:14:d6:4d:f2:c5:2f:30:df:72:74:5d:89:d0:cd:ee:15:9a: 23:ee:7d:ef:f5:7f:f1:b9:9a:8f:e6:5e:72:bb:bf:cf:ff:22: 39:a7:c0:d4:6b:33:3f:49:ef:b9:d9:b1:36:d2:b7:c8:89:e7: f6:18:ce:f4:7a:17:b8:c3:ed:9a:37:7a:4b:eb:58:7d:21:c3: 9f:73:42:1e:fb:db:1e:a2:6a:d6:1f:51:10:df:1b:eb:ba:9c: 52:da:f6:fb:f8:07:49:6b:f5:9b:7b:97:3e:eb:d9:d8:0f:ba: df:cc:c1:c5:d5:fe:08:bb:7c:87:19:27:44:e5:46:7e:a8:eb: 95:5f:49:0b:bf:51:27:2d:5e:05:42:e6:81:2c:4d:93:45:5d: 98:a5:ae:af:bb:59:e0:21:da:d8:29:2f:fb:ec:16:e3:1e:0e: f7:a8:06:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYrNJM2KmgD1U5tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkNDQwOWUtNWMyNS00NjhiLWExZTYtNmNhMGYyYThj YThiMB4XDTI1MDYyOTAwMDAwM1oXDTI1MDcwMjAwMDAwMFowLzEtMCsGA1UEAxMk ZTQxMWQyMWMtMjcxNC00Y2MyLTkxNDUtYmZhZTdhZTBkN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRG0crPX/ld5PNm+u4ExVxtatKNg/sFG+h05 MxGwzqQeAqX88MuEkawOOgmqVv1jeIc2hM55vVN9BRd9fx4qbGSVMbXzKe/NYEtk /ZlWmu5iM1HS9b+d9QNKoXb2IeGkyf9jm/5di47zrN8/bSUpnpqR3t7SxZMm/NQL ikzYPwtyt7QC22cCrA/b7nqGe4GqQInmyw6DJRLnC7YFB60MdlF7+8ZlMGj6QgoF VV7nMaFOBp8O+QHwxjIPeVbLYcanjAkqTL9I42EzLyDlYXmdjCTQVSasVD5c63eq hzK2llJvU1ciPyIhCsLxxg/HlXPuqJiPzSwoxhJSlr7DiSbXDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIZtrpo1u3cOQSRq5n7fTRcqKiLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Q0 NDA5ZS01YzI1LTQ2OGItYTFlNi02Y2EwZjJhOGNhOGIvZDNkNDQwOWUtNWMyNS00 NjhiLWExZTYtNmNhMGYyYThjYThiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkNDQwOWUtNWMyNS00NjhiLWEx ZTYtNmNhMGYyYThjYThiL2QzZDQ0MDllLTVjMjUtNDY4Yi1hMWU2LTZjYTBmMmE4 Y2E4Yi5jcmwwHwYDVR0jBBgwFoAU1lBBd3C2kdJvSMBEHoGaDLR5aSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2Q0NDA5ZS01YzI1LTQ2OGItYTFlNi02Y2Ew ZjJhOGNhOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJ40G0+2wpkAYQMfV1X4NU VomHo2DOZEDuUIBGZP6zc9zYADyAl5qP5XV1bqh15fxZ0y77UHPgvP94CvNiXdgA YJazvZN6NEQxohY7HuukcdQoJarBIQbjLkwrFNZN8sUvMN9ydF2J0M3uFZoj7n3v 9X/xuZqP5l5yu7/P/yI5p8DUazM/Se+52bE20rfIief2GM70ehe4w+2aN3pL61h9 IcOfc0Ie+9seomrWH1EQ3xvrupxS2vb7+AdJa/Wbe5c+69nYD7rfzMHF1f4Iu3yH GSdE5UZ+qOuVX0kLv1EnLV4FQuaBLE2TRV2Ypa6vu1ngIdrYKS/77BbjHg73qAbX -----END CERTIFICATE-----Generated at Sun Jun 29 07:33:48 2025 by rpki-client