$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft File: 7daa4589-66d8-4675-8538-e075ba80ecd3.mft (raw, json) Hash identifier: 9LGfZJwDSDomr6uFruaNlw+5mN1qdp8crh8lPecionQ= Subject key identifier: C6:52:63:F9:34:51:2E:8E:71:51:57:5F:46:F0:D5:2D:A9:9F:3B:03 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584A62ADD0ABC076C03750687900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft Manifest number: 010D0C9F432858419E1FC489CFC66112ACC838F2 Signing time: Wed 02 Jul 2025 14:00:08 +0000 Manifest this update: Wed 02 Jul 2025 14:00:08 +0000 Manifest next update: Sat 05 Jul 2025 14:00:00 +0000 Files and hashes: 1: 067b6d01-10cf-3749-9b9c-e9aacbbacd17.roa (hash: Czt603qdQV7HqRo2q/FU14yAYoEcSJcW6MhKt3RBoeY=) 2: 1a7296b5-8237-3066-a895-45ffc2cd14f5.roa (hash: rxHu7FMbnNHAESpOq9pNlCmBeiHp7oSQadgTHPXaj3c=) 3: 2608a530-797e-382f-ba66-c036b26d37cb.roa (hash: ZVShDNFDAX6xhBXIQe0QLWKDRrZlAF8ZExx2/JPjrEE=) 4: 2c6b6bae-ffdc-3418-b59b-f04590a471cc.roa (hash: yWYJGZI0fggC2e5zsEF5mkBV8C1Cuv7BwqnjTF3gTjs=) 5: 6e5ee02a-0afc-310a-8b0f-01d8498d1e4b.roa (hash: BUSaNWH/1OP8CXFN9VUwGG+YcaeLd6i2VI9bdFgNJwY=) 6: 7daa4589-66d8-4675-8538-e075ba80ecd3.crl (hash: 8Y0UagBZvCVBodjFkSX6qiPMEGaSO/OTUGLqA/qeTx8=) 7: 87197351-3982-3f54-942c-b39e31fc8536.roa (hash: m4wPT7gz/2SveHsGhUAj7b+r8nLMb4LjgSIzVHCzCv8=) 8: 9040d02d-778a-3b95-8393-591a4376d574.roa (hash: UVCvK/xpuUd0qf3SzhWFAukHdqIH3LJIlLYZ+GDODjM=) 9: a25775e3-512e-3d4f-a8d0-3335f43e990e.roa (hash: 9IJ/Q3IxZmeyJLliLgGYnZVUiZgRwQ8JmWhVNwd/bJw=) 10: c29cd6d6-48c5-3504-be27-36da993c905d.roa (hash: tjKvcathp+c1IVDIByaaeX0Zf+rNdJzRnIV/EmHFNk8=) 11: d9acac38-5ce9-3dff-885b-5b33c97768d5.roa (hash: nWas4+mqdpSpiOtCUK3tOJAX0ZUh7pG1Sy53FM0UNzI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:ad:d0:ab:c0:76:c0:37:50:68:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Jul 2 14:00:08 2025 GMT Not After : Jul 5 14:00:00 2025 GMT Subject: CN=2b315f3c-c9bb-4ded-bb89-eb83f2c1f6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:bc:7d:61:f3:63:91:e0:71:0b:72:52:6d: 11:44:0f:7d:02:96:5f:30:34:d1:e2:9c:96:61:6e: 71:a2:19:16:6e:ae:22:e2:ae:5b:90:02:a7:43:28: be:79:83:a3:ae:5b:f5:0c:c1:ee:f7:2d:f7:63:40: 23:ed:5b:77:f5:af:0f:7b:43:7e:91:df:6e:f4:b6: 9a:dc:73:b3:0b:6d:f2:e3:79:2e:ed:5c:e6:63:b5: 88:3c:c7:ef:eb:36:f8:c2:4a:1c:3e:56:dc:e6:4e: 07:6b:6a:17:0f:f8:6a:5b:63:ca:ad:81:39:a4:e4: 13:df:b0:61:61:ba:18:12:ad:ce:e6:78:06:3c:3e: 8b:ed:3c:82:20:d5:45:0a:9a:07:97:5a:65:f6:6d: 52:e3:a1:d0:da:e9:26:44:05:cb:5f:71:d0:b2:e7: 45:10:fa:50:df:7f:c2:43:9b:24:b8:06:ed:f0:61: 1a:75:6f:4c:18:2d:7b:16:26:c9:69:29:48:3c:6d: 0f:ed:c0:ae:17:96:7e:a2:cc:a2:30:c0:25:b3:4a: 5c:c4:81:d2:dc:b4:b1:41:ff:11:fb:69:8a:af:a6: b1:e2:b7:ff:79:ad:a6:8e:70:20:41:a5:90:4f:9b: f1:a0:46:c6:5e:8c:b0:4f:12:d4:ac:8f:27:be:50: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:52:63:F9:34:51:2E:8E:71:51:57:5F:46:F0:D5:2D:A9:9F:3B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9f:28:84:56:67:6c:13:d4:67:b3:e8:2f:e4:77:9d:f5:62: 0d:22:f5:d0:1a:58:b5:f3:ad:c6:59:72:e5:fd:db:69:09:9c: 75:2c:c8:39:ba:fb:fd:b7:06:02:7a:29:4a:66:ad:35:c4:ae: a1:db:32:37:c1:a7:54:53:de:19:85:4e:17:5a:b2:8d:c2:53: a3:d5:61:22:f2:d1:00:ae:36:62:49:f5:21:69:ce:a7:87:22: b7:8e:88:4b:89:96:3f:a9:28:e5:a3:a8:b6:b8:ee:4d:3c:96: 46:8d:0e:3d:51:db:8d:b9:89:f3:36:ce:de:aa:4f:65:be:c4: 21:54:06:07:36:b5:bf:93:6f:32:b5:55:57:19:15:90:fc:02: 72:de:f3:19:d7:b7:d6:79:83:29:e0:a8:8d:f9:1c:61:91:72: 32:8a:07:c2:ef:26:99:33:11:66:26:7c:ce:eb:4c:72:bb:93: ad:66:26:5a:c4:80:59:ce:3a:3d:82:14:01:78:82:95:3e:79: d3:0d:37:2f:00:23:36:f6:6c:87:1e:d4:50:d5:f6:b4:79:d9: 51:7e:0b:df:36:50:79:04:70:c5:d4:0d:49:8f:43:05:0f:8d: 4f:d7:6b:65:de:df:eb:83:53:49:b5:9a:9d:38:d0:a5:a6:d0: e5:e6:a8:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpirdCrwHbAN1BoeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MDcwMjE0MDAwOFoXDTI1MDcwNTE0MDAwMFowLzEtMCsGA1UEAxMk MmIzMTVmM2MtYzliYi00ZGVkLWJiODktZWI4M2YyYzFmNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYK8fWHzY5HgcQtyUm0RRA99ApZfMDTR4pyW YW5xohkWbq4i4q5bkAKnQyi+eYOjrlv1DMHu9y33Y0Aj7Vt39a8Pe0N+kd9u9Laa 3HOzC23y43ku7VzmY7WIPMfv6zb4wkocPlbc5k4Ha2oXD/hqW2PKrYE5pOQT37Bh YboYEq3O5ngGPD6L7TyCINVFCpoHl1pl9m1S46HQ2ukmRAXLX3HQsudFEPpQ33/C Q5skuAbt8GEadW9MGC17FibJaSlIPG0P7cCuF5Z+osyiMMAls0pcxIHS3LSxQf8R +2mKr6ax4rf/ea2mjnAgQaWQT5vxoEbGXoywTxLUrI8nvlCGVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMZSY/k0US6OcVFXX0bw1S2pnzsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvN2RhYTQ1ODktNjZkOC00 Njc1LTg1MzgtZTA3NWJhODBlY2QzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEnyiEVmdsE9Rns+gv5Hed 9WINIvXQGli1863GWXLl/dtpCZx1LMg5uvv9twYCeilKZq01xK6h2zI3wadUU94Z hU4XWrKNwlOj1WEi8tEArjZiSfUhac6nhyK3johLiZY/qSjlo6i2uO5NPJZGjQ49 UduNuYnzNs7eqk9lvsQhVAYHNrW/k28ytVVXGRWQ/AJy3vMZ17fWeYMp4KiN+Rxh kXIyigfC7yaZMxFmJnzO60xyu5OtZiZaxIBZzjo9ghQBeIKVPnnTDTcvACM29myH HtRQ1fa0edlRfgvfNlB5BHDF1A1Jj0MFD41P12tl3t/rg1NJtZqdONClptDl5qiz -----END CERTIFICATE-----Generated at Wed Jul 2 20:15:16 2025 by rpki-client