$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft File: 8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft (raw, json) Hash identifier: n2RcStSjh1ektlb7MfKfvLH5XasXSMTWZUGKrxvnNaQ= Subject key identifier: 4A:85:AF:C4:31:CD:F7:DD:6B:70:5E:0B:90:74:98:E1:BD:69:FD:F9 Authority key identifier: AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 Certificate issuer: /CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Certificate serial: 010D0C9F4328584A5B1E2E68C12F763CA7D22F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft Manifest number: 010D0C9F432858482F9AFAF1B0A8A49C25427618 Signing time: Sun 29 Jun 2025 21:00:03 +0000 Manifest this update: Sun 29 Jun 2025 21:00:03 +0000 Manifest next update: Tue 01 Jul 2025 21:00:00 +0000 Files and hashes: 1: 1f5d279c-2644-363f-a153-6489368c7e8c.roa (hash: PGe3gbZ6w2Tdb7xOerDhjZWq9fIllSoqD9UYjVQ2vmY=) 2: 6fcd8271-1db8-3c0d-ba46-c51ef1f1db1b.roa (hash: ybG2G3Fikme4SPL6cQ3WB7o9/nMUHp9q9I9e1RW1sfA=) 3: 8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl (hash: ZbSWvxYx3GJjKCE166eGdbReAmLiaBlFxsSgo5v5sN4=) 4: 906f0c7e-1aed-3407-9006-6459ec7f1b20.roa (hash: 35lETHP/h9y7bGdO+LVKqC19U//ILODTxDy7cfXpy5s=) 5: fade97ca-586d-3ef2-b3b6-9d7106b26189.roa (hash: r0Aio1PLGbIE0mUnGJHUIB9nharab6XMBQy+h+X9Dw8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:1e:2e:68:c1:2f:76:3c:a7:d2:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eaf014d-0b3e-4494-b07f-b3254fddef6a Validity Not Before: Jun 29 21:00:03 2025 GMT Not After : Jul 1 21:00:00 2025 GMT Subject: CN=33f05fe8-18d9-4116-8dd7-ba95a6f8582f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:64:34:f8:de:5f:af:81:3f:2a:9a:cf:b3:a3: bf:5f:dc:39:b8:c2:cc:cb:bf:d1:40:3d:44:38:b6: c8:f1:ad:43:d5:f7:ce:36:15:22:e5:96:32:a4:9a: e7:58:5a:76:13:37:bf:6f:e3:3d:4c:a4:20:73:57: 09:a5:42:f0:b7:ab:00:dd:2b:b5:cc:75:ee:2e:cd: ac:98:6f:1c:5d:f4:24:11:ac:96:8e:c3:b6:10:89: c3:3a:9c:42:29:03:f0:16:45:8a:e9:c3:75:58:80: 6b:93:95:53:41:6d:db:07:9b:7c:f8:8e:52:d8:38: 52:0d:33:0a:3d:11:6f:fc:fc:5d:03:be:51:12:7e: 55:ff:59:11:43:c6:0f:1f:83:ba:d7:47:9e:bb:af: e6:98:5c:2c:8b:a9:fc:0c:3c:44:af:b6:f8:ab:47: 0a:26:e4:d9:5d:da:92:1f:eb:95:da:84:e3:a2:98: 2c:21:5f:91:65:20:60:d0:b6:6d:cc:4e:0a:30:fd: a7:60:1d:03:62:2f:48:76:5a:65:7a:9d:9e:28:84: 1b:f6:60:cb:87:eb:db:59:5c:fb:f2:0e:0f:42:34: f7:48:06:29:e5:b9:d7:de:3a:1c:f7:a4:eb:3e:65: 2f:08:4c:21:d9:81:5d:74:b2:d4:88:53:60:48:b8: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:85:AF:C4:31:CD:F7:DD:6B:70:5E:0B:90:74:98:E1:BD:69:FD:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a/8eaf014d-0b3e-4494-b07f-b3254fddef6a.crl X509v3 Authority Key Identifier: keyid:AA:77:EC:D7:ED:F3:CC:EC:71:4B:19:7A:98:89:7F:7E:8F:90:76:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8eaf014d-0b3e-4494-b07f-b3254fddef6a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fd:54:8b:c6:26:e2:37:e7:72:ff:f4:27:55:00:1c:5b:32: 67:4f:50:fa:3b:6f:e5:5f:5e:87:2f:da:67:f3:f3:3d:f0:d2: a5:a8:69:93:be:0e:b2:59:25:3c:3a:97:3a:87:03:43:d8:8a: 0c:9a:a1:8c:1c:de:3b:d2:72:8a:70:bd:39:d9:d1:46:f1:33: d8:95:aa:b8:a8:06:22:57:dd:67:bf:63:f0:24:18:88:93:e8: 69:f0:f4:b8:55:41:23:c7:90:28:87:0a:07:10:07:03:e2:5a: e0:32:36:9d:86:ae:68:07:49:bf:cf:d4:35:8c:87:9b:34:6a: 4a:b4:34:d2:a9:0c:b6:14:87:bf:a2:f3:e0:58:0f:44:5e:bc: cb:4e:78:6f:a7:f7:55:41:8c:d2:0c:ce:34:db:84:b3:51:1a: f4:f1:99:00:16:14:c4:47:58:66:f3:1a:36:d0:12:76:f9:d9: c6:4f:64:8e:f6:99:2b:6f:39:9d:72:88:36:e3:14:e2:a0:23: 10:b6:82:2b:91:ef:8d:84:d5:5b:a7:9a:f7:99:05:f6:f4:43: 42:fe:77:9b:9f:06:e7:76:eb:38:4d:43:18:1c:e3:e1:12:b8: 8c:81:39:60:12:70:d5:61:c1:82:6a:7f:3f:98:21:65:7e:ee: 42:99:38:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpbHi5owS92PKfSL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVhZjAxNGQtMGIzZS00NDk0LWIwN2YtYjMyNTRmZGRl ZjZhMB4XDTI1MDYyOTIxMDAwM1oXDTI1MDcwMTIxMDAwMFowLzEtMCsGA1UEAxMk MzNmMDVmZTgtMThkOS00MTE2LThkZDctYmE5NWE2Zjg1ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGQ0+N5fr4E/KprPs6O/X9w5uMLMy7/RQD1E OLbI8a1D1ffONhUi5ZYypJrnWFp2Eze/b+M9TKQgc1cJpULwt6sA3Su1zHXuLs2s mG8cXfQkEayWjsO2EInDOpxCKQPwFkWK6cN1WIBrk5VTQW3bB5t8+I5S2DhSDTMK PRFv/PxdA75REn5V/1kRQ8YPH4O610eeu6/mmFwsi6n8DDxEr7b4q0cKJuTZXdqS H+uV2oTjopgsIV+RZSBg0LZtzE4KMP2nYB0DYi9Idlplep2eKIQb9mDLh+vbWVz7 8g4PQjT3SAYp5bnX3joc96TrPmUvCEwh2YFddLLUiFNgSLguLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqFr8Qxzffda3BeC5B0mOG9af35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZWFm MDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1NGZkZGVmNmEvOGVhZjAxNGQtMGIzZS00 NDk0LWIwN2YtYjMyNTRmZGRlZjZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGVhZjAxNGQtMGIzZS00NDk0LWIw N2YtYjMyNTRmZGRlZjZhLzhlYWYwMTRkLTBiM2UtNDQ5NC1iMDdmLWIzMjU0ZmRk ZWY2YS5jcmwwHwYDVR0jBBgwFoAUqnfs1+3zzOxxSxl6mIl/fo+QdugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZWFmMDE0ZC0wYjNlLTQ0OTQtYjA3Zi1iMzI1 NGZkZGVmNmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd/VSLxibiN+dy//QnVQAc WzJnT1D6O2/lX16HL9pn8/M98NKlqGmTvg6yWSU8Opc6hwND2IoMmqGMHN470nKK cL052dFG8TPYlaq4qAYiV91nv2PwJBiIk+hp8PS4VUEjx5AohwoHEAcD4lrgMjad hq5oB0m/z9Q1jIebNGpKtDTSqQy2FIe/ovPgWA9EXrzLTnhvp/dVQYzSDM4024Sz URr08ZkAFhTER1hm8xo20BJ2+dnGT2SO9pkrbzmdcog24xTioCMQtoIrke+NhNVb p5r3mQX29ENC/nebnwbndus4TUMYHOPhEriMgTlgEnDVYcGCan8/mCFlfu5CmThf -----END CERTIFICATE-----Generated at Mon Jun 30 17:02:21 2025 by rpki-client