$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: tphRcH7jiqGu69cPcGhlyFedmusETpscxc97jr+N538= Subject key identifier: 1D:E2:1A:84:92:4A:F8:FA:2B:56:AE:B5:88:D7:66:07:AA:58:1F:D3 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584A32A33DFFA50913F410F8CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3ADB Signing time: Sun 15 Jun 2025 09:00:03 +0000 Manifest this update: Sun 15 Jun 2025 09:00:03 +0000 Manifest next update: Tue 17 Jun 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: UtoXe4ugFYSCVmHRn5I5k+tnHMh/3Dwg9SbQ4Q0V3n8=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: OA02WKCiCPeFhY8jGuL2cglDmrskTsDToHEgPSFqr+s=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: A7eyR/ClB4HrHryafnWEWZIYTQECk52dUcRzu1R9kdE=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: oGRV9adExMy3hGAYkcsoRjWm9ZPwITWKR7j+GPqYTak=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: P6EqG+UoVXa/WjhtyPwkEta3G6vyzMCeYwFU9qc8A4Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:a3:3d:ff:a5:09:13:f4:10:f8:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Jun 15 09:00:03 2025 GMT Not After : Jun 17 09:00:00 2025 GMT Subject: CN=e8ce486a-b987-45d3-b6a9-8c9933539bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:bf:a9:cb:a7:d5:42:67:0a:c0:ca:24:57:62: 27:64:b2:07:77:8a:c8:4b:c6:e4:c0:44:a3:91:86: 47:66:30:70:63:bc:a4:39:c4:e0:2f:45:30:68:c5: 70:f4:2c:30:e5:0c:8f:c0:18:7e:6d:ca:76:1f:12: e5:2e:90:d2:70:fc:90:7f:87:a2:50:88:33:08:84: f9:7e:b1:e1:f9:38:97:6f:2b:f8:f5:bc:2b:4d:3e: e9:c6:a2:35:c3:a2:38:d9:52:37:36:d8:fa:56:15: d0:9e:55:ed:eb:24:ab:3a:9f:62:f6:db:7f:d8:f6: af:2a:2c:57:5f:9c:d1:e8:8d:cc:25:12:8c:9e:b7: b2:c1:8e:73:38:e6:7c:e0:ae:85:96:0b:7f:c2:9d: 24:0e:cb:70:91:2f:df:f8:42:52:49:d1:66:44:ae: 34:27:42:21:f7:b6:25:47:55:8b:cd:60:c9:ab:b0: 1e:23:93:28:46:ec:03:79:a9:13:73:d0:86:82:c4: 14:ea:b5:7a:e1:9b:b7:b1:3a:4a:c6:11:e2:aa:f1: 3c:1d:ab:54:44:ef:59:fc:56:1e:1c:73:40:0a:f3: 14:92:41:a9:51:e8:8b:9c:41:ad:be:6b:3c:f6:cb: 45:6b:f8:82:89:b6:78:af:a2:41:5d:d6:4a:6a:83: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:1A:84:92:4A:F8:FA:2B:56:AE:B5:88:D7:66:07:AA:58:1F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f2:69:67:8b:5a:53:4d:44:57:98:5a:0b:07:a4:e9:18:1e: 7b:e0:15:dd:a2:77:7d:00:be:c5:ba:48:7b:ea:5c:5c:d9:ff: e7:fb:31:6b:45:61:6c:e1:e7:aa:89:29:94:11:78:37:de:7d: 52:e3:4d:c9:41:7a:3a:f0:d9:57:2f:97:1e:dc:87:74:eb:79: 4c:de:ac:49:3c:30:74:16:23:79:ba:08:ec:30:26:0c:4d:e2: cc:b1:28:79:0f:3a:51:9d:b4:3e:d6:aa:5c:65:98:11:44:5c: 15:b4:86:b7:87:46:c3:ec:d7:6a:80:6c:d8:23:d7:e6:72:bc: 20:8c:19:19:cf:49:7c:14:80:12:4e:41:cd:1a:24:e8:bd:2a: 68:1f:b0:83:57:f0:d5:c4:fb:90:85:03:ed:a1:31:a9:38:c5: dd:8d:6b:a3:b1:da:f0:22:53:b1:98:31:f9:a1:8b:3b:b7:30: bc:41:fa:f3:d6:09:01:d8:57:91:93:70:57:ce:02:0e:0b:42: 60:cf:b8:a5:ef:ea:16:2d:27:9b:15:c8:c7:50:28:e4:06:a7: fe:34:d8:7c:8d:6c:88:97:5b:ec:24:33:7f:d4:c1:7c:c4:3e: 98:3c:a0:88:4f:c3:75:ef:fe:45:e1:8c:6d:91:27:d9:38:1a: a6:c9:59:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoyoz3/pQkT9BD4zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MDYxNTA5MDAwM1oXDTI1MDYxNzA5MDAwMFowLzEtMCsGA1UEAxMk ZThjZTQ4NmEtYjk4Ny00NWQzLWI2YTktOGM5OTMzNTM5YmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87+py6fVQmcKwMokV2InZLIHd4rIS8bkwESj kYZHZjBwY7ykOcTgL0UwaMVw9Cww5QyPwBh+bcp2HxLlLpDScPyQf4eiUIgzCIT5 frHh+TiXbyv49bwrTT7pxqI1w6I42VI3Ntj6VhXQnlXt6ySrOp9i9tt/2PavKixX X5zR6I3MJRKMnreywY5zOOZ84K6Flgt/wp0kDstwkS/f+EJSSdFmRK40J0Ih97Yl R1WLzWDJq7AeI5MoRuwDeakTc9CGgsQU6rV64Zu3sTpKxhHiqvE8HatURO9Z/FYe HHNACvMUkkGpUeiLnEGtvms89stFa/iCibZ4r6JBXdZKaoNFkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB3iGoSSSvj6K1autYjXZgeqWB/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw8mlni1pTTURXmFoLB6Tp GB574BXdond9AL7Fukh76lxc2f/n+zFrRWFs4eeqiSmUEXg33n1S403JQXo68NlX L5ce3Id063lM3qxJPDB0FiN5ugjsMCYMTeLMsSh5DzpRnbQ+1qpcZZgRRFwVtIa3 h0bD7NdqgGzYI9fmcrwgjBkZz0l8FIASTkHNGiTovSpoH7CDV/DVxPuQhQPtoTGp OMXdjWujsdrwIlOxmDH5oYs7tzC8Qfrz1gkB2FeRk3BXzgIOC0Jgz7il7+oWLSeb FcjHUCjkBqf+NNh8jWyIl1vsJDN/1MF8xD6YPKCIT8N17/5F4YxtkSfZOBqmyVlx -----END CERTIFICATE-----Generated at Sun Jun 15 17:18:59 2025 by rpki-client