$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft File: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft (raw, json) Hash identifier: Gg3aEuHBhJjVoehJCjLYtw3tykHE/1eujIYAKmvl/zo= Subject key identifier: C0:34:8D:B3:40:DD:3C:0F:43:9C:72:15:4B:9F:70:51:AC:D8:30:15 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584AC121E981099B25E4D3E7BCA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft Manifest number: 010D0C9F4328584073A84EB6BC7F2571415E205A Signing time: Tue 05 Aug 2025 10:00:03 +0000 Manifest this update: Tue 05 Aug 2025 10:00:03 +0000 Manifest next update: Fri 08 Aug 2025 10:00:00 +0000 Files and hashes: 1: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (hash: bkiYnoOqhcayItxqIMqmToTEmjpCrdnwKfTIphL8Rs4=) 2: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl (hash: igSHkJOuN1r6VpgHkSHYyDiaUub6h8GDN4AsvTHciXw=) 3: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (hash: f4o8EMDAUN0zE5N7+Z3n7nvQF7dH1xLVe+73jgxNSnQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:21:e9:81:09:9b:25:e4:d3:e7:bc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Aug 5 10:00:03 2025 GMT Not After : Aug 8 10:00:00 2025 GMT Subject: CN=767ebfd6-3ea3-4061-8e48-2f2b8dc3a264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:0a:e3:70:c9:48:6d:5c:3f:97:d2:42:4d: f1:dd:97:45:ef:bf:b3:be:fa:fa:f1:fb:67:c2:8e: fa:2e:cb:60:1a:10:80:25:d6:97:a1:a2:66:2d:ca: aa:d6:76:32:fb:3b:ad:17:54:a7:35:52:0f:e4:55: a7:29:3f:f8:5a:dc:2a:7b:7c:8c:67:bd:f0:a5:8a: c9:d1:3e:cd:13:cd:23:d6:72:aa:48:d5:d6:c8:4f: 7e:1a:cc:98:08:0b:0a:af:d3:e2:eb:db:30:93:6b: 7c:54:67:5d:df:0c:70:d1:13:f0:a8:61:57:d3:c3: 6b:bf:c5:ea:de:67:75:15:8e:4d:a3:d2:28:19:b8: 12:6c:a2:f1:9d:90:31:95:db:95:cc:9c:44:1d:72: 16:79:9a:22:f0:ea:8d:b8:71:16:e0:d8:b3:2a:73: eb:bc:43:c8:45:c8:f5:13:d7:e3:be:ca:d8:29:1b: 94:74:33:88:68:cd:0f:19:ed:b9:79:f3:55:11:36: be:30:3b:a0:bd:67:e2:9e:d9:aa:8d:74:ec:cd:e5: 33:08:15:e3:af:d1:85:28:ba:91:98:d9:46:10:10: 4b:f9:c7:fe:6c:bc:15:f3:d3:cd:3c:28:96:9f:a1: 55:67:58:d5:ea:e8:04:1b:b4:c6:d3:a7:10:ff:2e: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:34:8D:B3:40:DD:3C:0F:43:9C:72:15:4B:9F:70:51:AC:D8:30:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:aa:f3:96:ae:84:86:83:1f:ad:65:f6:8c:64:f9:45:21:8a: ec:3a:ca:39:f9:b7:24:75:04:ac:a7:46:5a:d1:1e:7a:26:bd: ce:e2:1b:ee:d5:40:8f:fc:f3:82:6f:f6:fd:48:fb:fb:ac:d6: 6d:e6:70:f4:fb:32:a5:9e:05:2b:ca:4e:e5:fd:a0:0c:95:44: 9d:ff:23:5d:cd:54:8d:42:73:2a:4d:9a:be:03:aa:57:05:a4: d0:4a:3c:15:b1:6d:2e:ba:c8:e4:18:67:73:35:cc:55:6a:4f: 0d:32:94:bf:d8:7a:c4:a5:19:7e:df:50:f3:90:e4:b2:21:36: 54:a0:56:52:66:d3:a4:cc:9d:81:09:fc:1e:0a:be:5a:e6:c0: eb:4f:c9:37:ac:72:b1:42:74:a9:a1:09:d8:40:6c:69:f9:7c: 4b:31:a3:78:70:4f:ac:92:68:d3:22:d5:51:aa:56:18:a4:f9: 26:ea:33:88:d6:68:d4:04:a9:c4:23:5e:f8:68:b0:32:34:84: 5a:83:46:04:52:e0:49:e1:32:35:11:7a:c4:6e:5a:33:5e:33: ea:9d:b8:f9:6d:05:bd:bc:dc:b6:8f:7c:2b:92:bb:ff:57:61: f5:f7:fa:91:4c:f6:a8:2b:8d:7d:df:e3:00:71:7b:3e:c8:2c: 0c:22:70:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBIemBCZsl5NPnvKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MDgwNTEwMDAwM1oXDTI1MDgwODEwMDAwMFowLzEtMCsGA1UEAxMk NzY3ZWJmZDYtM2VhMy00MDYxLThlNDgtMmYyYjhkYzNhMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUwK43DJSG1cP5fSQk3x3ZdF77+zvvr68ftn wo76LstgGhCAJdaXoaJmLcqq1nYy+zutF1SnNVIP5FWnKT/4Wtwqe3yMZ73wpYrJ 0T7NE80j1nKqSNXWyE9+GsyYCAsKr9Pi69swk2t8VGdd3wxw0RPwqGFX08Nrv8Xq 3md1FY5No9IoGbgSbKLxnZAxlduVzJxEHXIWeZoi8OqNuHEW4NizKnPrvEPIRcj1 E9fjvsrYKRuUdDOIaM0PGe25efNVETa+MDugvWfintmqjXTszeUzCBXjr9GFKLqR mNlGEBBL+cf+bLwV89PNPCiWn6FVZ1jV6ugEG7TG06cQ/y7MVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMA0jbNA3TwPQ5xyFUufcFGs2DAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWEwNDNlNTUtZTVkMi00 ZDcwLWJmZTgtN2Y0MTE0ZDNmYzJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnqvOWroSGgx+tZfaMZPlF IYrsOso5+bckdQSsp0Za0R56Jr3O4hvu1UCP/POCb/b9SPv7rNZt5nD0+zKlngUr yk7l/aAMlUSd/yNdzVSNQnMqTZq+A6pXBaTQSjwVsW0uusjkGGdzNcxVak8NMpS/ 2HrEpRl+31DzkOSyITZUoFZSZtOkzJ2BCfweCr5a5sDrT8k3rHKxQnSpoQnYQGxp +XxLMaN4cE+skmjTItVRqlYYpPkm6jOI1mjUBKnEI174aLAyNIRag0YEUuBJ4TI1 EXrEblozXjPqnbj5bQW9vNy2j3wrkrv/V2H19/qRTPaoK4193+MAcXs+yCwMInDY -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:41 2025 by rpki-client