$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft File: 9970d52c-d3a1-4687-a712-212a44ee0fb2.mft (raw, json) Hash identifier: kYlZV+Gp5/3RUnRK29kf8TzlxqT4+hLO8Z5UFWDLVfg= Subject key identifier: AA:E3:0A:04:1B:94:11:E9:FF:78:86:B0:58:78:F4:D3:C4:3B:B3:0D Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 Certificate issuer: /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Certificate serial: 010D0C9F4328584A5AC4E2BD37AA391BA5B5FA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft Manifest number: 010D0C9F43285840D864483ECF5D20F49CEFE427 Signing time: Sun 29 Jun 2025 18:00:08 +0000 Manifest this update: Sun 29 Jun 2025 18:00:08 +0000 Manifest next update: Wed 02 Jul 2025 18:00:00 +0000 Files and hashes: 1: 054d3026-e5df-3750-985f-6a33870df3a6.roa (hash: ImTzkJYA3SgI0MsS9AGctrg0g+ZH0qdwZyhPvI0aHUU=) 2: 472a87dc-5a34-3721-9aec-494ce65fdcb4.roa (hash: p/j0pE4tAvsOJ4vyTQne/rXhe8NAg5f85dvnIlHU6Fo=) 3: 9970d52c-d3a1-4687-a712-212a44ee0fb2.crl (hash: qf9EYAZcv5uUzgx6OTpmsDI7Vaoo5Y6bw0/FLdMUaMc=) 4: e21aefd6-472c-3930-aa58-debd99be2072.roa (hash: OBXpAIccbauSJ2RJaMJ2XzrBS2EHmKyYUtNiw7rBl4I=) 5: f794057a-6acb-3e0c-afac-ab23b4d2a0f1.roa (hash: Fjpdchh+3qbgMgvG72VMDZH3W9otigspkMegqxnCUs4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:c4:e2:bd:37:aa:39:1b:a5:b5:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2 Validity Not Before: Jun 29 18:00:08 2025 GMT Not After : Jul 2 18:00:00 2025 GMT Subject: CN=6f024e23-2050-4eda-bfdd-89a8edfe4246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:85:30:df:7e:43:06:b3:28:f2:9d:3e:1a: 3f:23:dd:3f:58:1a:94:b2:0e:dc:53:68:fd:81:ac: eb:8b:84:78:bc:38:8a:ec:24:52:84:fb:20:3f:6a: d2:b7:4b:f1:73:a2:5d:46:c5:c2:46:17:d6:9e:0f: f1:d6:89:c0:be:08:7a:d8:97:e5:8e:6e:91:36:27: 3c:49:3a:c2:ad:63:20:58:db:a3:8f:94:96:66:c3: 02:93:5e:44:86:6f:47:27:3d:5b:2b:05:81:59:0d: f4:01:33:3b:4b:a6:9a:5e:d4:2a:af:6a:e4:1e:65: ee:4d:71:57:21:cb:c8:7b:43:18:9d:c2:fe:ef:5e: d5:f6:7d:0e:f6:de:75:60:07:21:6e:98:d1:5b:98: 62:bf:78:fb:0f:e5:ee:4b:2e:c3:75:24:95:5b:1a: c8:c9:89:72:99:a0:a5:51:80:92:5c:8e:c9:43:48: b0:a2:dc:43:2f:e8:25:f6:84:44:29:25:0b:65:d9: 0c:43:8a:57:f2:da:80:ca:bb:e8:26:61:a4:6a:d8: 27:22:c1:e4:3f:45:0b:e4:fd:e4:1a:19:27:d5:04: a4:20:83:7c:3f:63:91:75:06:40:40:46:e0:c9:46: c4:d6:98:2b:2c:e6:36:ab:e2:72:58:4a:4e:1c:5a: c0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:0A:04:1B:94:11:E9:FF:78:86:B0:58:78:F4:D3:C4:3B:B3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl X509v3 Authority Key Identifier: keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d6:37:a4:5d:95:a6:b0:90:65:b5:bb:dd:2e:42:11:b8:16: b2:80:12:62:4d:d7:02:83:93:7c:ad:2f:18:d6:79:5b:68:45: 9a:00:de:de:22:8d:7a:d9:50:fa:fb:e9:c0:2d:12:ba:24:25: 08:f7:30:0e:9b:88:21:96:25:f9:8e:68:2c:6c:8d:48:18:69: f6:d1:00:9f:49:3a:5b:dc:44:94:b9:3f:10:27:cd:6f:58:5f: 0b:32:74:22:9d:83:82:d9:71:dd:2e:3a:32:63:31:c8:95:a9: df:47:4c:98:0b:e4:e4:b4:79:ac:b5:6e:fa:7c:6c:f5:b7:89: c4:1c:f0:37:18:6a:71:09:5a:c7:22:87:33:97:66:b2:9e:97: 8c:bf:61:57:e1:51:53:6a:f1:cf:9c:b7:7f:93:c2:87:af:83: 65:2a:16:2b:e9:6d:80:72:7c:c9:e4:61:75:30:c1:5d:3e:71: 4e:da:18:b6:ff:cd:2f:a9:bd:1c:4e:5b:9d:bd:d2:90:e9:19: 5b:d5:8f:79:08:c9:60:ca:ac:30:5c:92:d5:04:0a:54:01:ee: 80:d9:d8:6b:63:8f:7a:c8:02:ff:48:e1:d7:a3:bf:16:82:49: b4:16:85:ce:db:f8:92:df:ca:13:3c:31:f8:ce:c8:f4:a9:d5: 3b:b0:3f:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaxOK9N6o5G6W1+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3MGQ1MmMtZDNhMS00Njg3LWE3MTItMjEyYTQ0ZWUw ZmIyMB4XDTI1MDYyOTE4MDAwOFoXDTI1MDcwMjE4MDAwMFowLzEtMCsGA1UEAxMk NmYwMjRlMjMtMjA1MC00ZWRhLWJmZGQtODlhOGVkZmU0MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoySFMN9+QwazKPKdPho/I90/WBqUsg7cU2j9 gazri4R4vDiK7CRShPsgP2rSt0vxc6JdRsXCRhfWng/x1onAvgh62Jfljm6RNic8 STrCrWMgWNujj5SWZsMCk15Ehm9HJz1bKwWBWQ30ATM7S6aaXtQqr2rkHmXuTXFX IcvIe0MYncL+717V9n0O9t51YAchbpjRW5hiv3j7D+XuSy7DdSSVWxrIyYlymaCl UYCSXI7JQ0iwotxDL+gl9oREKSULZdkMQ4pX8tqAyrvoJmGkatgnIsHkP0UL5P3k Ghkn1QSkIIN8P2ORdQZAQEbgyUbE1pgrLOY2q+JyWEpOHFrAzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKrjCgQblBHp/3iGsFh49NPEO7MNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTcw ZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJhNDRlZTBmYjIvOTk3MGQ1MmMtZDNhMS00 Njg3LWE3MTItMjEyYTQ0ZWUwZmIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTk3MGQ1MmMtZDNhMS00Njg3LWE3 MTItMjEyYTQ0ZWUwZmIyLzk5NzBkNTJjLWQzYTEtNDY4Ny1hNzEyLTIxMmE0NGVl MGZiMi5jcmwwHwYDVR0jBBgwFoAUVtE8CMf2LAtCo8s6F+hr2dh34XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OTcwZDUyYy1kM2ExLTQ2ODctYTcxMi0yMTJh NDRlZTBmYjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx1jekXZWmsJBltbvdLkIR uBaygBJiTdcCg5N8rS8Y1nlbaEWaAN7eIo162VD6++nALRK6JCUI9zAOm4ghliX5 jmgsbI1IGGn20QCfSTpb3ESUuT8QJ81vWF8LMnQinYOC2XHdLjoyYzHIlanfR0yY C+TktHmstW76fGz1t4nEHPA3GGpxCVrHIoczl2aynpeMv2FX4VFTavHPnLd/k8KH r4NlKhYr6W2AcnzJ5GF1MMFdPnFO2hi2/80vqb0cTludvdKQ6Rlb1Y95CMlgyqww XJLVBApUAe6A2dhrY496yAL/SOHXo78Wgkm0FoXO2/iS38oTPDH4zsj0qdU7sD9U -----END CERTIFICATE-----Generated at Sun Jun 29 22:25:02 2025 by rpki-client