$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft File: 99cd086f-b993-42d9-8f47-c65df74d693b.mft (raw, json) Hash identifier: 1lxAapgqDnsI3I5HgIhZ/AUVl/1u3HoHXPY+4oHKs4I= Subject key identifier: 37:90:F2:C1:69:8F:60:55:FD:29:59:6A:88:4E:E7:DC:0B:32:D6:8A Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584A33AF456DE57B37527FDB3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft Manifest number: 010D0C9F4328584073A821EFFDC032F582708BCB Signing time: Sun 15 Jun 2025 18:00:03 +0000 Manifest this update: Sun 15 Jun 2025 18:00:03 +0000 Manifest next update: Wed 18 Jun 2025 18:00:00 +0000 Files and hashes: 1: 008dee23-d333-3f26-86fd-5b8c3cfb96e8.roa (hash: hLbec2cdCbaYJ/OHSL5D6UelY4XeT4Sd/3Rz4lsLIRQ=) 2: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (hash: 0NVOEP9+VjvGZWwYq3pZWdFF4trbPhf5t29+5q/ILHk=) 3: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (hash: lj/+IkJwtSjf4oOsluyVjIUqeE1PtGKo8RKLvHAlWcM=) 4: 99cd086f-b993-42d9-8f47-c65df74d693b.crl (hash: inpScZeQwg+0zuNngn2r8TLebboxTpDgh2J9wDABKRU=) 5: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (hash: mkFwo4/XBAUiJo007OeCKm5H13eAi7ROsBAeybsfAGM=) 6: e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (hash: RLI62Hf0rbTjdspH1c+flGjCjm9qUSqOYdiPCPgz/ag=) 7: fbff6a61-554c-33f6-b7b9-ba39c39e0c6f.roa (hash: c+ADznqoLQMzAAz/jrQDR9wGEvOb6upPbTQzZPM2VD0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:af:45:6d:e5:7b:37:52:7f:db:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jun 15 18:00:03 2025 GMT Not After : Jun 18 18:00:00 2025 GMT Subject: CN=5213f51a-4a2f-4995-b863-d33637993571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:d3:72:2c:10:e2:8f:b6:e7:48:a0:e0:e9: b3:02:84:03:04:82:1e:05:b0:59:a7:51:d1:4f:16: 62:6d:63:85:17:90:b2:3a:86:71:5e:4d:c6:4a:6f: e1:cf:44:e1:62:d8:88:13:47:b5:b3:58:3e:68:1e: 4f:0d:a0:13:3f:5a:48:08:1b:b8:9c:68:fc:c6:70: 6d:47:e6:5f:c1:c7:7e:1a:46:34:ba:bc:ea:a5:55: 1d:8b:79:f3:2c:25:ea:af:23:a2:cc:54:5b:46:25: 2b:dd:bb:01:e0:e2:a5:27:a3:ef:23:7b:43:d1:ab: 28:ce:78:c7:71:72:8e:db:16:70:43:61:8c:a3:7f: 8b:a1:4f:d9:37:90:2d:b2:65:e8:70:39:f7:4e:4d: e6:ca:73:b5:76:c1:78:6c:83:39:a2:31:90:27:9d: 3f:e6:eb:b3:54:28:16:c4:e3:84:49:3c:10:15:07: bd:8f:c4:e7:c1:62:9d:ec:54:45:08:78:95:53:06: b1:55:0c:30:cf:f0:a4:d9:13:52:ef:67:35:40:a3: a5:63:45:dd:23:ac:17:89:ef:eb:7c:d5:40:2d:c0: 57:6a:c5:2f:c0:09:22:14:b3:0f:90:d8:7e:03:c9: 2f:95:55:1b:1e:2d:1a:77:bc:21:79:32:cb:76:45: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:F2:C1:69:8F:60:55:FD:29:59:6A:88:4E:E7:DC:0B:32:D6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a9:f8:0f:96:8e:1a:6f:dd:06:fb:46:8c:5e:55:c9:6b:8e: 8c:3d:f3:09:7b:77:0a:ae:0f:c4:91:06:63:a0:e6:c9:2c:4f: 1f:a4:c9:13:b6:63:25:2a:69:8e:15:df:84:be:86:62:02:4d: 46:0e:f2:dc:a9:88:cd:c6:bf:d7:85:39:09:f2:00:cc:52:7a: a2:ab:6a:14:27:f9:8f:09:2f:27:e7:7f:de:45:ff:8f:ed:55: eb:1e:a8:9b:2a:3f:04:5a:cb:8d:c0:cd:bd:08:04:5d:c4:f9: 90:71:c1:b8:66:55:95:9c:59:15:9c:8c:ef:be:72:3c:e8:b5: f3:01:46:9b:8b:55:4d:39:2b:70:1b:1d:06:14:68:a9:6d:44: a7:f3:c9:48:57:cf:8e:d6:cd:71:d3:28:d6:af:02:95:f2:ef: db:b4:19:9f:76:16:ad:66:1c:f2:5c:de:56:5c:2a:d3:61:d7: 18:4e:af:18:8b:6d:7f:79:3f:62:7d:d9:ca:5b:01:2f:ac:8a: d7:69:b2:ef:14:69:26:48:c1:c2:a8:62:8f:e8:b7:17:96:10: cd:78:3f:51:8d:ef:60:3d:a3:87:e7:1d:28:36:0c:eb:a8:79: c6:2a:d8:1f:ae:f5:65:7d:8e:8c:cd:f7:2c:f2:9a:9c:50:d9: 9f:ab:57:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEozr0Vt5Xs3Un/bM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDYxNTE4MDAwM1oXDTI1MDYxODE4MDAwMFowLzEtMCsGA1UEAxMk NTIxM2Y1MWEtNGEyZi00OTk1LWI4NjMtZDMzNjM3OTkzNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxjTciwQ4o+250ig4OmzAoQDBIIeBbBZp1HR TxZibWOFF5CyOoZxXk3GSm/hz0ThYtiIE0e1s1g+aB5PDaATP1pICBu4nGj8xnBt R+Zfwcd+GkY0urzqpVUdi3nzLCXqryOizFRbRiUr3bsB4OKlJ6PvI3tD0asoznjH cXKO2xZwQ2GMo3+LoU/ZN5AtsmXocDn3Tk3mynO1dsF4bIM5ojGQJ50/5uuzVCgW xOOESTwQFQe9j8TnwWKd7FRFCHiVUwaxVQwwz/Ck2RNS72c1QKOlY0XdI6wXie/r fNVALcBXasUvwAkiFLMPkNh+A8kvlVUbHi0ad7wheTLLdkWemQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDeQ8sFpj2BV/SlZaohO59wLMtaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOTljZDA4NmYtYjk5My00 MmQ5LThmNDctYzY1ZGY3NGQ2OTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4qfgPlo4ab90G+0aMXlXJ a46MPfMJe3cKrg/EkQZjoObJLE8fpMkTtmMlKmmOFd+EvoZiAk1GDvLcqYjNxr/X hTkJ8gDMUnqiq2oUJ/mPCS8n53/eRf+P7VXrHqibKj8EWsuNwM29CARdxPmQccG4 ZlWVnFkVnIzvvnI86LXzAUabi1VNOStwGx0GFGipbUSn88lIV8+O1s1x0yjWrwKV 8u/btBmfdhatZhzyXN5WXCrTYdcYTq8Yi21/eT9ifdnKWwEvrIrXabLvFGkmSMHC qGKP6LcXlhDNeD9Rje9gPaOH5x0oNgzrqHnGKtgfrvVlfY6Mzfcs8pqcUNmfq1fE -----END CERTIFICATE-----Generated at Mon Jun 16 05:31:59 2025 by rpki-client