$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft File: fd691680-2c46-4e86-8545-3e0e0c0e305a.mft (raw, json) Hash identifier: gW3wA/J816KL7wF9zxcYWznzVyNvXsiMF56v0uVsaJs= Subject key identifier: 88:72:25:94:F2:E8:84:09:8C:77:09:85:30:E9:07:6E:88:CD:69:CB Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Certificate serial: 010D0C9F4328584A5817EFF5565C87F01EF9B140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft Manifest number: 010D0C9F432858413A4FD441FB48FA29EC77E953 Signing time: Sat 28 Jun 2025 19:00:03 +0000 Manifest this update: Sat 28 Jun 2025 19:00:03 +0000 Manifest next update: Tue 01 Jul 2025 19:00:00 +0000 Files and hashes: 1: 44fa7203-10fb-3394-93c5-802539bacbc6.roa (hash: O4PnEYh88yMIxn00Eev7ykhBwNffbWBGKD6/fgKCDsk=) 2: deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (hash: pDxZEiRb5IBojuM+n5+18HvgkrG//iRFaKtaRyrgfOY=) 3: f53d8254-0516-3991-a742-bbfcc5001432.roa (hash: 26YolvqpAFJJdCOELPS2a7pB/wv7ccPwIE0kQ587LkY=) 4: fd691680-2c46-4e86-8545-3e0e0c0e305a.crl (hash: OEY/jvl4iA47mu4xr/rfZNd4hv5CklzXfZT31Nc1VC8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:17:ef:f5:56:5c:87:f0:1e:f9:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Validity Not Before: Jun 28 19:00:03 2025 GMT Not After : Jul 1 19:00:00 2025 GMT Subject: CN=0d24643b-2951-4569-8ec2-4516c4479c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:ba:3f:c2:b3:0c:48:17:29:f3:77:2c:28:7c: ca:a2:f1:68:d5:cb:a0:c4:ac:f7:c3:07:54:cd:26: 1e:da:b3:c4:f9:0d:fb:38:2c:91:6f:aa:df:09:29: e7:54:98:d9:47:73:94:b6:00:3c:03:11:d2:2d:e8: bf:ed:b4:9a:5c:42:a9:a6:6a:38:cd:2a:b0:f9:d5: ef:7e:6a:d8:72:6b:75:86:6e:df:d7:e9:16:a9:af: e0:f0:d1:ae:c0:86:e3:74:a1:14:49:70:c7:ed:56: d0:57:a0:70:70:37:73:5c:fb:f6:9f:e4:99:5d:e9: 29:fa:e9:5f:6b:8f:e4:83:a4:05:97:98:d7:de:27: a5:53:57:c6:22:a6:99:60:ac:f7:fa:5a:25:70:17: 25:30:84:ad:47:34:f8:df:e5:72:05:6c:c5:3d:41: cd:ea:1d:ca:44:6f:1d:b9:db:69:99:8e:e7:b3:f7: 26:7f:4a:4a:15:52:5f:85:d9:4c:c4:b8:92:43:81: 2a:1b:48:65:67:84:4b:5a:43:01:e9:4b:f3:50:03: 01:2d:cb:7c:5f:04:ff:4a:19:a9:ff:f9:2f:c5:dc: 40:7a:47:96:55:fd:88:51:fd:a0:13:13:55:d9:85: 2f:a6:5e:7a:4f:a5:5e:03:0d:e4:b1:6e:16:0b:b1: e0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:72:25:94:F2:E8:84:09:8C:77:09:85:30:E9:07:6E:88:CD:69:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl X509v3 Authority Key Identifier: keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:88:65:97:6c:5f:e4:ed:23:ce:fb:ca:72:87:45:a9:32:3d: d6:e4:2a:e9:23:7f:37:99:ce:f6:58:47:7b:8c:03:6c:c6:d0: 1a:e9:d8:4d:59:64:35:11:be:d5:7a:09:e6:16:27:c2:22:3b: 46:cb:34:c6:18:41:06:7b:11:0f:99:28:7f:bf:67:e4:be:72: 27:4d:1f:90:33:97:df:e3:8c:c4:1e:93:6a:d3:b7:e0:52:e0: 91:7d:83:75:fe:fb:e5:eb:63:6b:52:2c:05:2e:f0:6c:5e:db: d3:3a:e5:00:1b:61:71:63:85:77:5d:35:1e:ed:64:51:2a:95: bc:4c:41:7b:a5:9d:42:51:d1:71:3c:d7:8a:9f:d0:9d:54:2e: 17:b6:d4:44:6a:8b:62:35:fa:ae:f7:7c:a5:64:8e:f7:74:6f: 36:6c:bc:76:f3:5e:6f:95:9c:13:04:dc:ba:29:2c:1c:cd:4f: c7:40:8f:cd:15:87:57:c2:85:3f:63:18:4f:fd:ea:71:f3:fb: bc:96:d6:b7:c8:93:30:d9:ab:84:cb:6b:0a:53:22:2e:b1:97: 4b:f1:3e:7c:c8:1b:79:1f:41:45:53:6b:7d:51:63:12:7b:ce: 0a:bd:82:f6:a9:69:14:8d:64:c2:73:e3:b1:af:6c:3c:2c:68: eb:5b:79:24 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYF+/1VlyH8B75sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz MDVhMB4XDTI1MDYyODE5MDAwM1oXDTI1MDcwMTE5MDAwMFowLzEtMCsGA1UEAxMk MGQyNDY0M2ItMjk1MS00NTY5LThlYzItNDUxNmM0NDc5YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bo/wrMMSBcp83csKHzKovFo1cugxKz3wwdU zSYe2rPE+Q37OCyRb6rfCSnnVJjZR3OUtgA8AxHSLei/7bSaXEKppmo4zSqw+dXv fmrYcmt1hm7f1+kWqa/g8NGuwIbjdKEUSXDH7VbQV6BwcDdzXPv2n+SZXekp+ulf a4/kg6QFl5jX3ielU1fGIqaZYKz3+lolcBclMIStRzT43+VyBWzFPUHN6h3KRG8d udtpmY7ns/cmf0pKFVJfhdlMxLiSQ4EqG0hlZ4RLWkMB6UvzUAMBLct8XwT/Shmp //kvxdxAekeWVf2IUf2gExNV2YUvpl56T6VeAw3ksW4WC7HgJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIhyJZTy6IQJjHcJhTDpB26IzWnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5 MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZmQ2OTE2ODAtMmM0Ni00 ZTg2LTg1NDUtM2UwZTBjMGUzMDVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1 NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl MGMwZTMwNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2iGWXbF/k7SPO+8pyh0Wp Mj3W5CrpI383mc72WEd7jANsxtAa6dhNWWQ1Eb7VegnmFifCIjtGyzTGGEEGexEP mSh/v2fkvnInTR+QM5ff44zEHpNq07fgUuCRfYN1/vvl62NrUiwFLvBsXtvTOuUA G2FxY4V3XTUe7WRRKpW8TEF7pZ1CUdFxPNeKn9CdVC4XttREaotiNfqu93ylZI73 dG82bLx2815vlZwTBNy6KSwczU/HQI/NFYdXwoU/YxhP/epx8/u8lta3yJMw2auE y2sKUyIusZdL8T58yBt5H0FFU2t9UWMSe84KvYL2qWkUjWTCc+Oxr2w8LGjrW3kk -----END CERTIFICATE-----Generated at Sun Jun 29 16:58:26 2025 by rpki-client