$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft File: e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft (raw, json) Hash identifier: KIUkvJLb5wvrOvzGa7YlQ1Kt0bxSsbwp3t4bgpHcdtE= Subject key identifier: 6C:D0:8D:CF:88:9D:3F:AF:0A:DF:C4:E6:45:1D:7D:F2:59:F7:A7:8B Authority key identifier: 1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 Certificate issuer: /CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Certificate serial: 010D0C9F4328584A59B8D53BB00BAEF1320A1F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft Manifest number: 010D0C9F4328584073A84C21DDB2F547F5C8EA7E Signing time: Sun 29 Jun 2025 09:00:03 +0000 Manifest this update: Sun 29 Jun 2025 09:00:03 +0000 Manifest next update: Tue 01 Jul 2025 09:00:00 +0000 Files and hashes: 1: 724a3de3-fa7b-350e-9620-6cb73ca032ec.roa (hash: CNn7QDt8dgdvAlrYUCGz3t/VZWGDD8f/SWXnOjArYbo=) 2: a3443ba9-a5c1-3f58-bf37-a3b0549e1245.roa (hash: LDAadv65TmFrqZ3x9JY9XHCsUZnx1fa4q/BDlGHyyYc=) 3: cf946ccd-298e-3852-a04f-6a34b0aec559.roa (hash: 5aqyL+cfsoQEFl0xzlTPSYgYHTmyyDyh5AlUZGNuW4I=) 4: e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl (hash: ifV20Bd8KCVJI8YoNM7MhpAH0xrhHTJ1B0OICpWnl6M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:b8:d5:3b:b0:0b:ae:f1:32:0a:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14e5e67-4161-4a2d-bd73-2deb5f1d8f51 Validity Not Before: Jun 29 09:00:03 2025 GMT Not After : Jul 1 09:00:00 2025 GMT Subject: CN=fcdb9513-2ff7-432d-9c44-14143f1e1849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:5c:73:43:17:01:3e:42:57:c7:35:91:3d: 51:43:9f:d3:3e:3d:85:71:3d:da:7a:b5:44:32:90: ee:d0:1b:68:d0:8b:2b:3a:2b:f3:3f:2c:85:d1:07: 27:b6:26:62:79:0e:67:21:a0:79:a4:8a:d3:1e:ed: 9c:cd:c7:62:43:75:73:57:8d:31:73:f4:bc:e7:5d: a9:91:f8:c3:58:a5:95:02:a0:6a:b0:ef:08:d4:b9: 1e:d5:3d:8c:ee:52:64:1d:86:a2:96:46:f4:6e:f7: 68:40:fc:83:56:4f:b0:6b:4a:ac:28:37:68:58:3f: 5f:88:60:4a:31:1b:09:5a:75:57:79:5a:ba:0e:44: 6b:c0:c7:49:8a:7f:c8:de:ca:c0:07:19:06:24:1a: 73:ec:a7:10:16:95:8d:b0:9a:6f:22:73:b6:8a:13: 84:b3:50:1b:80:b6:0f:6f:72:7e:f2:08:ed:cc:fa: 11:c1:d9:a1:db:7b:e4:66:42:c0:d4:ab:af:d1:3d: 45:5a:76:87:9d:0b:30:e0:dd:ea:64:36:c3:14:cf: 2a:ef:58:84:1c:9b:88:d9:13:0b:64:9d:2c:83:17: ca:71:73:7c:76:3e:9b:60:f4:6d:77:6a:4f:56:a1: 3f:24:19:6a:5c:a7:5b:88:4c:f5:97:be:07:cc:d9: 91:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D0:8D:CF:88:9D:3F:AF:0A:DF:C4:E6:45:1D:7D:F2:59:F7:A7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.crl X509v3 Authority Key Identifier: keyid:1B:D7:71:21:BE:98:06:94:A9:F3:2C:ED:72:1C:49:54:48:BE:69:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e14e5e67-4161-4a2d-bd73-2deb5f1d8f51.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4f:06:32:67:99:a6:7c:b8:18:56:62:3e:83:b3:62:56:00: 8d:a8:e0:7c:d0:01:e3:cb:02:4f:bf:fd:b6:e7:b4:ae:e6:48: 22:31:09:f0:e0:1d:fd:3b:ff:2d:74:ff:b6:fd:43:e1:07:e2: 80:5a:5f:70:58:18:43:20:ac:28:de:f3:f2:f2:9a:7f:30:9f: ea:6b:81:06:cf:80:9f:9c:dc:3a:5a:83:a0:cd:30:0a:93:30: 97:a3:83:38:57:41:65:c2:ad:43:ca:0e:40:1c:f3:b3:34:fd: c1:1f:86:8a:48:0e:85:0d:9d:f7:24:31:c8:04:96:e5:22:55: 71:50:28:e2:0f:92:46:4a:01:19:de:df:03:32:4e:86:6c:bc: d3:75:6b:e7:89:aa:4e:14:b9:f2:2e:9a:f5:27:74:2f:5e:7a: 98:77:88:ae:bd:49:01:77:70:38:9a:6e:cb:c1:e2:0d:70:c6: 5e:56:f3:39:f1:3a:2b:f4:22:e1:39:7b:c4:70:66:1b:7b:d2: ae:c6:0b:66:6b:c1:cd:0b:8e:ff:3b:cf:04:32:65:d0:eb:2f: ba:03:90:28:9a:c7:90:86:87:70:5b:65:e6:1c:c6:22:63:cb: f2:05:50:82:64:f0:93:f7:f8:de:e0:8d:15:6b:4e:3f:74:bc: 23:1a:34:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZuNU7sAuu8TIKHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE0ZTVlNjctNDE2MS00YTJkLWJkNzMtMmRlYjVmMWQ4 ZjUxMB4XDTI1MDYyOTA5MDAwM1oXDTI1MDcwMTA5MDAwMFowLzEtMCsGA1UEAxMk ZmNkYjk1MTMtMmZmNy00MzJkLTljNDQtMTQxNDNmMWUxODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWRcc0MXAT5CV8c1kT1RQ5/TPj2FcT3aerVE MpDu0Bto0IsrOivzPyyF0QcntiZieQ5nIaB5pIrTHu2czcdiQ3VzV40xc/S8512p kfjDWKWVAqBqsO8I1Lke1T2M7lJkHYailkb0bvdoQPyDVk+wa0qsKDdoWD9fiGBK MRsJWnVXeVq6DkRrwMdJin/I3srABxkGJBpz7KcQFpWNsJpvInO2ihOEs1AbgLYP b3J+8gjtzPoRwdmh23vkZkLA1Kuv0T1FWnaHnQsw4N3qZDbDFM8q71iEHJuI2RML ZJ0sgxfKcXN8dj6bYPRtd2pPVqE/JBlqXKdbiEz1l74HzNmRewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGzQjc+InT+vCt/E5kUdffJZ96eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRl NWU2Ny00MTYxLTRhMmQtYmQ3My0yZGViNWYxZDhmNTEvZTE0ZTVlNjctNDE2MS00 YTJkLWJkNzMtMmRlYjVmMWQ4ZjUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE0ZTVlNjctNDE2MS00YTJkLWJk NzMtMmRlYjVmMWQ4ZjUxL2UxNGU1ZTY3LTQxNjEtNGEyZC1iZDczLTJkZWI1ZjFk OGY1MS5jcmwwHwYDVR0jBBgwFoAUG9dxIb6YBpSp8yztchxJVEi+aecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTRlNWU2Ny00MTYxLTRhMmQtYmQ3My0yZGVi NWYxZDhmNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+TwYyZ5mmfLgYVmI+g7Ni VgCNqOB80AHjywJPv/2257Su5kgiMQnw4B39O/8tdP+2/UPhB+KAWl9wWBhDIKwo 3vPy8pp/MJ/qa4EGz4CfnNw6WoOgzTAKkzCXo4M4V0Flwq1Dyg5AHPOzNP3BH4aK SA6FDZ33JDHIBJblIlVxUCjiD5JGSgEZ3t8DMk6GbLzTdWvniapOFLnyLpr1J3Qv XnqYd4iuvUkBd3A4mm7LweINcMZeVvM58Tor9CLhOXvEcGYbe9Kuxgtma8HNC47/ O88EMmXQ6y+6A5AomseQhodwW2XmHMYiY8vyBVCCZPCT9/je4I0Va04/dLwjGjSQ -----END CERTIFICATE-----Generated at Sun Jun 29 22:04:03 2025 by rpki-client