$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft File: b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft (raw, json) Hash identifier: NdB+eayR0BrRxHlFvDKZY7XZgrIxewC4ZQXNo6H7Nmw= Subject key identifier: 67:12:87:FE:B6:9B:84:03:1C:A5:F5:00:70:8D:CA:FA:21:3D:67:FC Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584A5AA70C041413080D166B15C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft Manifest number: 010D0C9F43285841C860503D02ECCF56D2C95AED Signing time: Sun 29 Jun 2025 17:00:03 +0000 Manifest this update: Sun 29 Jun 2025 17:00:03 +0000 Manifest next update: Wed 02 Jul 2025 17:00:00 +0000 Files and hashes: 1: 6bb3e0fa-da4c-3bb0-8eed-a6f21b814e7d.roa (hash: 7mf7W8BSa8TDpt2cHchvDErX7Mlq+b4bQWgI4tQ8uA0=) 2: 77a7ad12-30f2-3190-b9dc-dd3c8c0a95ff.roa (hash: X4JNO3H8HM4AHFnUIpDBO8wIvwfW1mRQdDzdxaEpFn4=) 3: 9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (hash: aJDNqtExop/IDDu+fqTGa8cxP/6/xSy5YLiHFwVzh2g=) 4: b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl (hash: t/F3LNC6/0qTXc/DTMDiDMrpo6HGEnq2MMbqu7qZHuQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:a7:0c:04:14:13:08:0d:16:6b:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Jun 29 17:00:03 2025 GMT Not After : Jul 2 17:00:00 2025 GMT Subject: CN=8082a7b4-9ffb-43b7-bae6-eae8e3a78d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:47:51:a8:17:42:8e:53:27:da:9c:20:07: fb:ae:77:f6:df:2e:3b:c1:70:f0:e1:ae:dd:f4:be: 36:27:21:74:d9:aa:43:11:e0:6c:37:5f:7a:12:e5: 00:61:c7:7c:e9:87:e7:bc:ed:32:e6:98:e1:b6:55: c0:ab:e8:ca:79:7a:c2:e4:cc:db:16:36:66:de:49: 65:00:1b:06:1f:8a:70:88:e8:e0:a0:22:ae:ee:4f: 6e:6c:88:da:7c:8b:3f:08:b8:a5:ae:47:bd:8b:5a: ea:a7:8b:c4:25:d3:80:9e:14:9b:f8:de:5a:de:9a: ee:68:1d:81:83:45:42:d8:9f:e6:9c:60:de:34:ce: ef:ce:87:76:53:e3:e1:c9:16:7e:f2:0e:3a:16:0c: a9:ac:7f:66:77:f5:a7:e6:e1:f9:89:56:11:b3:cc: 5a:1c:96:e5:82:1b:cf:5a:62:e9:78:26:03:45:19: 28:51:2f:a7:1e:63:bb:80:56:68:10:2e:2d:e5:b1: 03:44:7a:96:a1:b1:b4:17:6a:c3:90:cf:ef:37:2b: 58:f3:9c:7a:60:fd:2c:e1:97:59:d6:f8:03:2c:58: 2a:29:38:7a:aa:18:64:d1:32:25:80:38:97:49:b4: da:2d:65:61:9d:cc:1e:24:3a:e6:21:33:d1:37:db: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:12:87:FE:B6:9B:84:03:1C:A5:F5:00:70:8D:CA:FA:21:3D:67:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:da:66:61:ad:51:a6:68:03:cb:35:05:88:d9:35:04:7a:bd: 55:a2:cf:76:01:d8:35:86:be:ba:d4:a6:8b:37:99:ae:2c:d3: f0:96:a8:1f:d0:5c:4a:2d:f1:37:4e:73:97:8d:e4:ab:ab:a4: a8:34:22:69:d6:94:91:fd:b1:58:d6:e8:f3:27:97:5f:51:d4: 04:47:21:b3:65:76:bf:2d:24:88:38:60:8d:18:f8:f3:a4:20: c1:79:11:5f:8a:1e:10:b7:e8:fa:77:19:05:77:32:ae:5d:6c: 9c:61:59:98:38:62:7a:53:b0:a6:f6:d9:0b:5c:ae:28:2e:cb: 96:0d:56:f9:ad:6e:36:e8:30:8e:13:ea:94:7c:15:47:7f:80: bc:0d:d4:b4:f0:27:d9:5d:8e:ac:ca:24:09:0a:f1:53:b7:93: dd:36:96:c7:a2:94:cd:8e:2f:81:21:c0:84:dd:cb:2f:67:9d: a0:41:a0:7f:57:27:88:4f:af:b3:44:0b:b4:0c:f0:a4:03:d5: bf:5f:d0:93:9d:66:13:01:0a:03:df:02:0a:82:76:c1:57:00: d7:83:65:7c:69:f0:c2:6c:8e:86:09:ca:fb:7b:9e:1a:80:20: 2f:8c:fb:3c:7a:bb:3a:4e:df:11:f9:43:d0:c6:b2:6e:3a:7a: 37:c4:03:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpapwwEFBMIDRZrFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI1MDYyOTE3MDAwM1oXDTI1MDcwMjE3MDAwMFowLzEtMCsGA1UEAxMk ODA4MmE3YjQtOWZmYi00M2I3LWJhZTYtZWFlOGUzYTc4ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocRHUagXQo5TJ9qcIAf7rnf23y47wXDw4a7d 9L42JyF02apDEeBsN196EuUAYcd86YfnvO0y5pjhtlXAq+jKeXrC5MzbFjZm3kll ABsGH4pwiOjgoCKu7k9ubIjafIs/CLilrke9i1rqp4vEJdOAnhSb+N5a3pruaB2B g0VC2J/mnGDeNM7vzod2U+PhyRZ+8g46FgyprH9md/Wn5uH5iVYRs8xaHJblghvP WmLpeCYDRRkoUS+nHmO7gFZoEC4t5bEDRHqWobG0F2rDkM/vNytY85x6YP0s4ZdZ 1vgDLFgqKTh6qhhk0TIlgDiXSbTaLWVhncweJDrmITPRN9vf1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGcSh/62m4QDHKX1AHCNyvohPWf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvYjM1ZmVmZDctZjJlNS00 MTZjLTkzMmEtMGQ1MmQ0MzBjM2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ2mZhrVGmaAPLNQWI2TUE er1Vos92Adg1hr661KaLN5muLNPwlqgf0FxKLfE3TnOXjeSrq6SoNCJp1pSR/bFY 1ujzJ5dfUdQERyGzZXa/LSSIOGCNGPjzpCDBeRFfih4Qt+j6dxkFdzKuXWycYVmY OGJ6U7Cm9tkLXK4oLsuWDVb5rW426DCOE+qUfBVHf4C8DdS08CfZXY6syiQJCvFT t5PdNpbHopTNji+BIcCE3csvZ52gQaB/VyeIT6+zRAu0DPCkA9W/X9CTnWYTAQoD 3wIKgnbBVwDXg2V8afDCbI6GCcr7e54agCAvjPs8ers6Tt8R+UPQxrJuOno3xAOb -----END CERTIFICATE-----Generated at Sun Jun 29 19:04:53 2025 by rpki-client