$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft File: aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft (raw, json) Hash identifier: yweSGcwCjF6LBPDZWzz2s3WzuOIu3wXQwEd0OBRQJJw= Subject key identifier: 0B:A8:37:8B:18:C5:64:DD:39:BF:95:82:6C:BC:C3:83:45:E8:E5:8B Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F4328584A5835B427A3E88C559608D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft Manifest number: 010D0C9F43285845CBFB971D3FD588688E672EAC Signing time: Sat 28 Jun 2025 20:00:03 +0000 Manifest this update: Sat 28 Jun 2025 20:00:03 +0000 Manifest next update: Mon 30 Jun 2025 20:00:00 +0000 Files and hashes: 1: 23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (hash: SqsqB1wvvVHD82oUilbOg4k6UwTZBS5BTFb/1UAAc9A=) 2: aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl (hash: qhYrLuHHKJFjgNk9H3x1WkvBrS5dv9sVvRSLzaFpzZs=) 3: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (hash: yke5M6lafD0XSY5IAU71hr2yjJuhigael9nkhqOtD78=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:35:b4:27:a3:e8:8c:55:96:08:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Jun 28 20:00:03 2025 GMT Not After : Jun 30 20:00:00 2025 GMT Subject: CN=2451c08b-d6f6-405a-bab4-434478ded63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:45:cf:ed:cc:7c:c4:6c:87:97:bc:21:e9: 9b:86:c6:44:01:49:8f:aa:7b:ea:6a:a1:40:40:7d: dc:3c:a7:d6:bd:18:08:be:00:a4:17:88:b6:cc:c6: d6:f1:db:f3:65:fb:0a:7b:f3:da:74:d7:70:9f:5b: dc:1a:71:53:13:05:0e:3a:ed:b9:5d:08:9b:6f:9d: d3:40:8c:7b:2e:eb:92:37:5e:bb:6d:c0:9a:39:f0: a0:48:a4:51:dc:0d:29:a4:3d:42:d4:7e:1d:b0:95: 53:b8:c5:7e:f9:f3:7e:c1:5a:98:15:ea:da:cd:8d: d7:27:61:29:00:41:dd:8e:ee:74:36:7f:fb:69:d6: 60:9a:01:bd:06:33:64:4d:a8:7d:fd:2d:1f:d9:ca: 92:f8:68:3e:c2:b9:16:82:74:43:e8:c0:2d:83:8a: 98:35:47:d6:36:12:38:b7:8a:b5:b5:e7:0d:00:06: 6d:a1:d4:fe:3f:72:20:87:f6:a8:ac:a6:94:fa:43: b5:12:82:05:b7:a7:c1:cd:10:db:8b:47:31:4e:50: 11:40:b8:4c:0a:3a:3b:a3:ff:bb:69:26:d1:4d:a5: 41:ef:b0:14:89:08:e4:44:35:8d:a4:5e:12:75:49: b1:18:f3:9c:5b:4a:57:1b:d4:ce:e4:a5:78:2a:5b: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A8:37:8B:18:C5:64:DD:39:BF:95:82:6C:BC:C3:83:45:E8:E5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:28:c4:10:f9:ab:4a:29:f1:22:44:e8:5d:7b:d0:7f:6c:8e: f3:3f:b3:39:3a:40:d7:02:96:1b:fe:d1:97:7c:62:27:e8:54: 82:b4:95:38:4f:90:3b:fa:66:18:1e:c5:33:59:cc:7a:e8:65: c2:de:a9:7c:85:1e:cc:7d:ea:94:b5:09:7a:9a:a0:6f:0c:30: 98:0f:09:51:79:bf:ed:5b:61:52:55:f7:14:3a:d9:37:2d:e9: 18:1f:9a:c0:4b:97:0f:75:b6:2c:07:07:f4:0a:37:50:cc:aa: 6c:f0:8b:a2:97:dd:f0:90:d6:57:ca:cb:b1:63:ca:b8:bc:5a: d8:7e:7c:34:31:6e:8a:97:57:ba:52:ce:8e:8a:51:c7:39:11: 4b:9a:ea:c1:fe:07:d6:6d:3c:72:48:f3:fe:8f:e0:c3:56:81: 7e:7e:a7:f6:9f:ec:db:84:87:2e:23:d0:79:db:e6:f3:00:eb: b3:e3:7a:59:54:9c:6f:ad:ce:1c:a3:d5:b9:b8:a9:f9:22:61: ee:58:cd:aa:59:22:60:15:ca:d4:d2:5d:91:79:d4:30:72:00: 42:ac:e4:85:7b:ec:fd:d0:69:41:f6:7a:40:28:b4:d8:d5:09: 47:3b:e6:f1:be:82:56:65:b9:40:f6:75:65:9b:e8:e8:1d:1f: 52:f0:ea:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYNbQno+iMVZYI1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI1MDYyODIwMDAwM1oXDTI1MDYzMDIwMDAwMFowLzEtMCsGA1UEAxMk MjQ1MWMwOGItZDZmNi00MDVhLWJhYjQtNDM0NDc4ZGVkNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC1Fz+3MfMRsh5e8IembhsZEAUmPqnvqaqFA QH3cPKfWvRgIvgCkF4i2zMbW8dvzZfsKe/PadNdwn1vcGnFTEwUOOu25XQibb53T QIx7LuuSN167bcCaOfCgSKRR3A0ppD1C1H4dsJVTuMV++fN+wVqYFerazY3XJ2Ep AEHdju50Nn/7adZgmgG9BjNkTah9/S0f2cqS+Gg+wrkWgnRD6MAtg4qYNUfWNhI4 t4q1tecNAAZtodT+P3Igh/aorKaU+kO1EoIFt6fBzRDbi0cxTlARQLhMCjo7o/+7 aSbRTaVB77AUiQjkRDWNpF4SdUmxGPOcW0pXG9TO5KV4KlsxhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAuoN4sYxWTdOb+Vgmy8w4NF6OWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvYWEwM2JlOGMtYjIzYy00 ZDgyLTlmOGQtNjRlZDdhOGEzOWQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOKMQQ+atKKfEiROhde9B/ bI7zP7M5OkDXApYb/tGXfGIn6FSCtJU4T5A7+mYYHsUzWcx66GXC3ql8hR7MfeqU tQl6mqBvDDCYDwlReb/tW2FSVfcUOtk3LekYH5rAS5cPdbYsBwf0CjdQzKps8Iui l93wkNZXysuxY8q4vFrYfnw0MW6Kl1e6Us6OilHHORFLmurB/gfWbTxySPP+j+DD VoF+fqf2n+zbhIcuI9B52+bzAOuz43pZVJxvrc4co9W5uKn5ImHuWM2qWSJgFcrU 0l2RedQwcgBCrOSFe+z90GlB9npAKLTY1QlHO+bxvoJWZblA9nVlm+joHR9S8Oqw -----END CERTIFICATE-----Generated at Sun Jun 29 05:02:53 2025 by rpki-client