$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft File: 124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft (raw, json) Hash identifier: vF6kMdP7GRA8yKQR6mBNFT1ZkZ1Mw53cRWLFL8G9/ZM= Subject key identifier: BA:A5:D2:59:28:97:A5:FC:85:81:CF:CB:71:77:48:72:76:EC:1F:87 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584A5D187160F94B39117DC724E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft Manifest number: 010D0C9F432858437E6541D0C007126C71E4B887 Signing time: Mon 30 Jun 2025 14:00:08 +0000 Manifest this update: Mon 30 Jun 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: 124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl (hash: MXESNRzFey7aGvLx0OjqwfbkFHzs7s64iDBfYKp762c=) 2: 42972859-eb24-3402-bd6b-51e9207a7162.roa (hash: QSkAXB65rIoPeMdpFoh9/2OtSJOrj0d/OeieFseNXR0=) 3: 9106966a-062c-3184-acc1-9cf3a7deeac7.roa (hash: 1FyGmclWOb/L/YcP5EdxAIThveGJ6wAXY5JxZ4BSxH0=) 4: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (hash: L8eMcx/mR+PvyH7EMaML8gq6tvuRiL5UOE4rQBlo6To=) 5: c17d307a-6891-39f3-9e92-66ead209b199.roa (hash: bfUnP+IOq6lZ2NQ9db9YlM+u6W6M6v1THYcsd6xKYSk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:18:71:60:f9:4b:39:11:7d:c7:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Jun 30 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=78ddf754-eb51-4c42-88e7-de4a0ae47cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:e1:b7:16:b5:7b:d1:13:a0:df:8a:db:0e: 28:83:19:db:7d:16:09:16:c2:4e:4f:44:91:4c:f7: 39:f4:fc:e8:81:86:f1:12:90:b3:79:97:9c:ab:c0: 8d:6e:9c:fe:a7:af:c5:d4:42:71:95:cc:13:6f:2d: 60:48:72:ac:4f:7f:97:94:03:36:4d:ce:59:c5:0a: 51:33:5c:85:c2:98:15:9d:0b:c7:5d:2a:35:41:66: 37:b8:31:57:cf:ef:a8:ce:83:8e:74:73:d6:d4:e3: 5f:98:5f:ab:f4:f2:a6:cc:23:fc:f7:fb:33:47:fd: 73:65:57:77:57:96:d1:de:38:e7:ac:87:fb:21:1d: d3:e7:7d:7b:24:ac:e4:28:07:c2:77:8f:26:8a:7d: 94:33:b1:27:0f:d4:0e:31:ff:5d:88:e8:54:c0:7a: 93:06:1e:be:99:5d:c9:be:ce:26:1b:c5:74:f3:a3: 77:b3:17:a1:7e:6f:c2:ff:83:0c:5b:04:ed:39:b6: 8c:0c:71:51:92:8f:14:bc:04:a0:f6:8f:ed:0a:53: 08:ec:bc:85:b5:c4:21:55:08:56:e4:f2:a4:50:44: 4f:30:7e:d8:90:ed:ef:07:6f:27:b0:dc:de:74:ea: c6:4c:3f:98:f4:13:cc:17:28:ee:6b:e8:c3:d9:cf: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:D2:59:28:97:A5:FC:85:81:CF:CB:71:77:48:72:76:EC:1F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:40:cd:62:31:5b:de:99:ef:7c:1f:21:ae:6b:03:59:ee:c9: b4:5e:17:df:51:a2:af:63:86:e3:c6:79:2c:ee:e8:55:44:72: 80:aa:35:ba:57:5a:82:d9:e3:74:be:f3:7b:68:47:ab:dc:73: d1:85:d3:6d:a1:8c:25:e4:3a:49:84:53:04:9c:87:5a:e2:45: 54:44:5d:31:12:19:98:e8:84:43:b0:70:1f:8c:2b:89:4f:db: a7:c5:1f:46:cf:0d:a7:89:64:e3:d3:93:e0:e3:42:9b:7e:26: 1e:74:5d:ab:c4:b8:fb:3f:62:c2:9f:8e:02:2f:c4:d1:7a:f9: af:3a:ec:25:f9:b5:fa:97:a5:86:52:b2:c9:63:9f:f7:a7:85: 16:34:d3:49:75:5e:fe:55:4e:ca:15:4d:0b:77:20:99:91:a8: 6c:ee:c9:d5:ba:b2:cd:bc:c8:ca:d6:ab:1b:b0:75:00:7a:48: a4:76:47:d1:9f:5a:0e:b9:8e:bf:be:23:1f:ac:bc:96:4b:35: 13:21:61:0e:0d:19:48:3a:06:8f:47:f1:ca:82:87:5c:27:6a: 6d:4f:9b:c6:34:4e:53:ed:9e:ff:db:f2:28:70:78:65:a9:8d: 57:92:79:f1:a0:ae:9a:46:56:ae:b2:6a:42:a9:d1:83:39:04: ab:2c:16:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdGHFg+Us5EX3HJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDYzMDE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk NzhkZGY3NTQtZWI1MS00YzQyLTg4ZTctZGU0YTBhZTQ3Y2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj7htxa1e9EToN+K2w4ogxnbfRYJFsJOT0SR TPc59PzogYbxEpCzeZecq8CNbpz+p6/F1EJxlcwTby1gSHKsT3+XlAM2Tc5ZxQpR M1yFwpgVnQvHXSo1QWY3uDFXz++ozoOOdHPW1ONfmF+r9PKmzCP89/szR/1zZVd3 V5bR3jjnrIf7IR3T5317JKzkKAfCd48min2UM7EnD9QOMf9diOhUwHqTBh6+mV3J vs4mG8V086N3sxehfm/C/4MMWwTtObaMDHFRko8UvASg9o/tClMI7LyFtcQhVQhW 5PKkUERPMH7YkO3vB28nsNzedOrGTD+Y9BPMFyjua+jD2c8oqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLql0lkol6X8hYHPy3F3SHJ27B+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvMTI0Y2I0YzUtNmM3Mi00 ZTQ5LTkzNTgtNDljMWUzYzJkNmIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvQM1iMVveme98HyGuawNZ 7sm0XhffUaKvY4bjxnks7uhVRHKAqjW6V1qC2eN0vvN7aEer3HPRhdNtoYwl5DpJ hFMEnIda4kVURF0xEhmY6IRDsHAfjCuJT9unxR9Gzw2niWTj05Pg40KbfiYedF2r xLj7P2LCn44CL8TRevmvOuwl+bX6l6WGUrLJY5/3p4UWNNNJdV7+VU7KFU0LdyCZ kahs7snVurLNvMjK1qsbsHUAekikdkfRn1oOuY6/viMfrLyWSzUTIWEODRlIOgaP R/HKgodcJ2ptT5vGNE5T7Z7/2/IocHhlqY1XknnxoK6aRlausmpCqdGDOQSrLBaw -----END CERTIFICATE-----Generated at Mon Jun 30 19:09:56 2025 by rpki-client