$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft File: aa912e91-41d3-4894-893c-8de4f94175f9.mft (raw, json) Hash identifier: 3KFdS1368PsiUCIO8Xg1MQqBYwCKT9SBZOooqDMElaE= Subject key identifier: 90:47:24:2C:E2:F4:6C:32:EC:C8:25:EE:6D:5A:F4:BF:38:5B:D6:06 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584A58538750F0C47EC5FDE36100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft Manifest number: 010D0C9F4328584073A82612B62F47807E021E4C Signing time: Sat 28 Jun 2025 21:00:08 +0000 Manifest this update: Sat 28 Jun 2025 21:00:08 +0000 Manifest next update: Mon 30 Jun 2025 21:00:00 +0000 Files and hashes: 1: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (hash: vv9n1CgHjrk2J0EChzWJzWV8HQSwhKT06SFQAgYkqf4=) 2: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (hash: 9dG4vv2e0X0SVa6rBIpbhx+jfc0tqEy8JCgCPTPz7rU=) 3: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (hash: 1DxabKzIkOPmE/SJ/InKvGilJUOYEevXmTeUrVynit8=) 4: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (hash: gTxS5SKTRik98sGboYEGVPOZUTraYb8xSSLPkDYvpCs=) 5: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (hash: syoLQK/VVcfcTEFp8TEZcCYBTjNq2pMfYqjsWZF69BI=) 6: aa912e91-41d3-4894-893c-8de4f94175f9.crl (hash: W0+dxVaazGz01lrBMmmtRoqvMytKCRL4DYOS1609uu0=) 7: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (hash: OPb541zWopUKdkfLvfiRYNiieIe2cCh1wBVrCYOIoY8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:53:87:50:f0:c4:7e:c5:fd:e3:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jun 28 21:00:08 2025 GMT Not After : Jun 30 21:00:00 2025 GMT Subject: CN=2e15dd7d-b788-4160-aba2-c714e7b441c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:a9:69:8e:eb:aa:bf:f7:f8:3f:d7:da:30: 27:34:3d:e0:89:03:83:67:da:15:47:96:5b:b6:03: 81:19:f9:48:64:f2:e2:07:e8:f4:55:19:85:08:77: 6f:01:93:d9:55:17:94:01:e9:0c:ba:ad:e5:89:c1: a6:d3:3c:03:c9:26:e9:0f:36:ff:6b:8a:1b:6c:aa: bf:90:da:6f:76:d8:0f:c0:a4:20:e3:cb:31:34:78: 4f:6e:b2:82:7a:de:c5:e0:9c:65:be:da:32:b3:11: 25:87:a7:15:84:7d:eb:30:a9:ca:25:58:03:4d:1b: 00:24:67:57:cd:ec:82:a0:b5:1e:5e:62:ee:1d:28: fe:9b:17:5f:23:aa:49:d6:31:35:c7:8c:d7:b0:9f: 4f:af:7a:88:b6:8f:24:34:06:c4:61:7f:ab:b3:db: 22:de:7f:22:53:00:7f:cc:bc:c4:47:57:ef:47:54: 3c:f3:4e:4c:51:a0:82:81:7f:82:ee:44:fb:18:13: 13:25:dc:0b:2e:62:a9:7c:9a:ad:ec:d3:55:aa:91: d9:0a:d5:42:47:86:f2:0d:c8:e3:d2:c1:29:6d:98: 59:bd:33:c2:6b:7d:de:af:22:0d:c4:b8:85:03:fa: 7d:18:37:27:95:1f:ea:da:df:e7:ff:43:c1:f7:c9: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:24:2C:E2:F4:6C:32:EC:C8:25:EE:6D:5A:F4:BF:38:5B:D6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9c:c2:64:5f:47:6a:e4:bd:82:73:2a:0c:83:4e:e3:b4:a9: 56:a4:9e:df:03:39:30:98:4c:dd:50:99:1b:b9:8a:25:4e:54: 8f:dd:f5:a7:71:1d:02:11:73:32:6b:92:24:00:89:65:a3:fb: 4b:ff:f0:fc:38:72:10:d1:82:70:c6:c6:8c:bf:2f:6b:fa:9e: e5:06:e7:a5:e9:b1:ef:bb:bf:42:bf:fb:7f:09:d4:10:6f:ef: 79:25:bb:b7:33:a2:e3:c4:89:71:f4:ba:88:45:15:fd:25:4a: 71:f5:47:3a:ed:f0:80:42:36:15:8b:05:43:80:e6:f5:9c:25: f8:d7:52:1f:4b:f2:fe:de:f7:16:b3:f3:fc:f8:00:88:33:47: f5:12:60:0c:01:99:b9:a5:12:7b:2f:1c:da:85:6e:7e:0a:e7: b8:b1:16:d6:f9:67:b4:d6:23:01:b5:fa:21:47:d9:fa:c8:d9: cd:0e:8c:5f:b8:99:1c:62:9b:08:3e:00:63:d1:16:b8:ca:68: 2d:be:30:ab:89:a7:09:cf:a3:1f:d0:be:5e:cb:2b:e2:57:c5: 26:2b:74:af:c9:79:d5:b7:86:df:3b:be:6d:9d:38:f2:52:66: 88:a1:b5:e9:5f:64:75:37:de:73:a0:ae:68:8f:e6:c8:cc:44: db:bd:16:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYU4dQ8MR+xf3jYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDYyODIxMDAwOFoXDTI1MDYzMDIxMDAwMFowLzEtMCsGA1UEAxMk MmUxNWRkN2QtYjc4OC00MTYwLWFiYTItYzcxNGU3YjQ0MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGCpaY7rqr/3+D/X2jAnND3giQODZ9oVR5Zb tgOBGflIZPLiB+j0VRmFCHdvAZPZVReUAekMuq3licGm0zwDySbpDzb/a4obbKq/ kNpvdtgPwKQg48sxNHhPbrKCet7F4JxlvtoysxElh6cVhH3rMKnKJVgDTRsAJGdX zeyCoLUeXmLuHSj+mxdfI6pJ1jE1x4zXsJ9Pr3qIto8kNAbEYX+rs9si3n8iUwB/ zLzER1fvR1Q8805MUaCCgX+C7kT7GBMTJdwLLmKpfJqt7NNVqpHZCtVCR4byDcjj 0sEpbZhZvTPCa33eryINxLiFA/p9GDcnlR/q2t/n/0PB98mqTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJBHJCzi9Gwy7Mgl7m1a9L84W9YGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvYWE5MTJlOTEtNDFkMy00 ODk0LTg5M2MtOGRlNGY5NDE3NWY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsnMJkX0dq5L2CcyoMg07j tKlWpJ7fAzkwmEzdUJkbuYolTlSP3fWncR0CEXMya5IkAIllo/tL//D8OHIQ0YJw xsaMvy9r+p7lBuel6bHvu79Cv/t/CdQQb+95Jbu3M6LjxIlx9LqIRRX9JUpx9Uc6 7fCAQjYViwVDgOb1nCX411IfS/L+3vcWs/P8+ACIM0f1EmAMAZm5pRJ7LxzahW5+ Cue4sRbW+We01iMBtfohR9n6yNnNDoxfuJkcYpsIPgBj0Ra4ymgtvjCriacJz6Mf 0L5eyyviV8UmK3SvyXnVt4bfO75tnTjyUmaIobXpX2R1N95zoK5oj+bIzETbvRZC -----END CERTIFICATE-----Generated at Sun Jun 29 06:14:32 2025 by rpki-client