$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft File: 2d00478e-6a9e-4570-970a-f0a5baefc323.mft (raw, json) Hash identifier: bRnCAAR3gxc3Giv7nGkQK+MX1hIAjAl/OzQTx+y4Xzo= Subject key identifier: 96:6D:DD:5B:51:6C:F8:C4:6C:46:5E:DB:DC:1A:CE:0A:CB:9F:FA:13 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584A5AC4E30BD3CB0DA2215ADC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft Manifest number: 010D0C9F4328584073A81EB2087DF5616A46D3B6 Signing time: Sun 29 Jun 2025 18:00:08 +0000 Manifest this update: Sun 29 Jun 2025 18:00:08 +0000 Manifest next update: Wed 02 Jul 2025 18:00:00 +0000 Files and hashes: 1: 19dd8a48-a5b1-32f2-90cc-360536a432eb.roa (hash: YYd+XCB9pGJpV5DKDX37RjfNtHu+OXr9MWWbK4jHmGM=) 2: 2d00478e-6a9e-4570-970a-f0a5baefc323.crl (hash: q/iI/7rkt7xgcfVhfKxzJfNxPVEZNoSO3UM1cHQ4U3g=) 3: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (hash: NA8+NiRKdpXIU4nuHjZ5lCMo60KETbIhQ2zN6t7rJxQ=) 4: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (hash: h3s0HQC+iMe/5B3L4nF6WlbNODD9A20dudTp9AIpmJ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:c4:e3:0b:d3:cb:0d:a2:21:5a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Jun 29 18:00:08 2025 GMT Not After : Jul 2 18:00:00 2025 GMT Subject: CN=aa428211-fdfe-497a-a0a7-54e7eb226917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:52:d6:0b:4b:05:78:d6:51:87:00:75:a0: af:4b:0c:df:01:17:16:96:f6:2f:72:de:74:ed:15: fc:19:44:c1:05:f2:e5:ee:d8:65:b1:49:49:3d:d6: af:fd:c4:89:be:d0:65:b6:99:c9:7d:9b:04:59:c0: 51:fb:aa:5a:f3:7f:31:8d:ab:2c:82:f7:72:c5:93: 95:42:6c:ac:0d:e4:07:5b:31:31:0f:e4:57:13:50: f6:4c:54:56:1a:3e:37:42:39:e4:78:64:fd:64:f3: 71:ac:ab:9d:c9:b3:09:ce:a9:e7:af:ab:58:16:2f: d6:93:25:ce:c2:ae:69:10:d0:43:5b:92:ad:67:7c: bb:ce:3a:c6:77:de:62:d2:82:ca:5f:5a:57:d0:4f: f1:92:4b:98:e6:4f:45:64:8b:4b:3c:3d:c0:c2:d0: e0:e0:5e:8b:d7:e9:29:13:5c:cd:f4:da:7e:39:c3: 59:11:c6:48:eb:5b:31:52:dc:ca:31:1a:5e:cf:c3: e7:f4:31:dc:eb:6d:48:23:96:1a:a5:6c:b1:03:9f: 76:2c:69:3e:c0:aa:a6:c7:a0:00:2c:4b:df:f0:5f: 5c:d1:0c:17:16:1b:1d:40:fd:3d:97:2f:cf:5d:cc: 7b:3b:9e:30:01:f2:b9:01:6c:39:ca:ac:89:47:07: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6D:DD:5B:51:6C:F8:C4:6C:46:5E:DB:DC:1A:CE:0A:CB:9F:FA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fe:fe:b5:ee:f1:21:8b:fc:bc:63:50:04:07:35:b6:89:44: dd:b2:ec:b5:7d:25:5f:31:2f:4e:42:74:08:7f:aa:54:2e:49: 12:c6:04:a2:ba:cb:0c:4a:f5:71:5c:1c:92:3d:2e:0a:1d:5d: 24:aa:6d:d1:d6:30:86:0a:f3:5a:87:06:ff:84:0f:0e:c4:b8: 76:3e:59:ac:8b:f8:78:e5:f1:40:b3:47:11:3b:95:0c:b1:71: 84:1d:89:79:f2:9a:5c:2a:e0:de:3d:3e:30:62:a9:08:e5:33: 3d:dc:1a:fe:35:8f:ee:a2:b0:f8:6f:30:75:7e:0e:55:38:71: e0:ab:fc:b8:d0:e0:ff:76:32:1c:43:a4:ba:c5:cf:78:74:9a: d1:f0:45:46:64:ba:9d:3e:80:f1:ab:06:50:fd:f7:c3:03:17: 67:e7:f2:7f:a4:2f:f0:1e:a6:cd:60:57:bc:42:d7:b2:ca:96: f6:a5:e4:2c:a1:19:2c:0c:37:80:ff:d6:72:2c:04:20:ed:76: d7:82:76:5b:66:4d:6f:a5:6a:a6:73:27:be:93:b6:e6:04:7d: 5f:98:03:59:3c:0e:32:dd:c1:33:bd:9b:1b:7d:a5:95:94:74: cc:6c:4c:34:4e:80:3a:4e:fb:a5:3f:b7:c9:79:14:77:ce:8b: 8e:43:02:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaxOML08sNoiFa3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDYyOTE4MDAwOFoXDTI1MDcwMjE4MDAwMFowLzEtMCsGA1UEAxMk YWE0MjgyMTEtZmRmZS00OTdhLWEwYTctNTRlN2ViMjI2OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWJS1gtLBXjWUYcAdaCvSwzfARcWlvYvct50 7RX8GUTBBfLl7thlsUlJPdav/cSJvtBltpnJfZsEWcBR+6pa838xjassgvdyxZOV QmysDeQHWzExD+RXE1D2TFRWGj43QjnkeGT9ZPNxrKudybMJzqnnr6tYFi/WkyXO wq5pENBDW5KtZ3y7zjrGd95i0oLKX1pX0E/xkkuY5k9FZItLPD3AwtDg4F6L1+kp E1zN9Np+OcNZEcZI61sxUtzKMRpez8Pn9DHc621II5YapWyxA592LGk+wKqmx6AA LEvf8F9c0QwXFhsdQP09ly/PXcx7O54wAfK5AWw5yqyJRwcjhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJZt3VtRbPjEbEZe29wazgrLn/oTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvMmQwMDQ3OGUtNmE5ZS00 NTcwLTk3MGEtZjBhNWJhZWZjMzIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD/v617vEhi/y8Y1AEBzW2 iUTdsuy1fSVfMS9OQnQIf6pULkkSxgSiussMSvVxXBySPS4KHV0kqm3R1jCGCvNa hwb/hA8OxLh2Plmsi/h45fFAs0cRO5UMsXGEHYl58ppcKuDePT4wYqkI5TM93Br+ NY/uorD4bzB1fg5VOHHgq/y40OD/djIcQ6S6xc94dJrR8EVGZLqdPoDxqwZQ/ffD Axdn5/J/pC/wHqbNYFe8Qteyypb2peQsoRksDDeA/9ZyLAQg7XbXgnZbZk1vpWqm cye+k7bmBH1fmANZPA4y3cEzvZsbfaWVlHTMbEw0ToA6TvulP7fJeRR3zouOQwIc -----END CERTIFICATE-----Generated at Mon Jun 30 03:11:45 2025 by rpki-client