$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft File: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft (raw, json) Hash identifier: vho142N6AREeqD+erYvA525mmqXwzRPkhtm3WAWKKLc= Subject key identifier: BF:A0:BE:4F:34:6D:2C:75:0D:57:4F:FF:57:27:D4:ED:A1:01:D9:90 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584A32DED8EB08B6EFA3E80E0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft Manifest number: 010D0C9F4328584073A84F901BB38ADE9983623B Signing time: Sun 15 Jun 2025 11:00:07 +0000 Manifest this update: Sun 15 Jun 2025 11:00:07 +0000 Manifest next update: Tue 17 Jun 2025 11:00:00 +0000 Files and hashes: 1: 1f9b0a21-4e53-3251-bedd-62da810defe6.roa (hash: 3QfED4mCJmJvUjmrVBmY7dfVJFTWKSy756/SVpMup54=) 2: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (hash: sJPWFMlQGsu5uPs9fc0/jkgdVSeEAbUSz3G1gWDMIcA=) 3: be5ef230-a561-3b1a-b0d0-d8840c8e46bc.roa (hash: oLn1UDrMqqEoUFpgL/W0M3cDYG8upJ0Ye0pc7XUFkIs=) 4: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (hash: +kW0nM4J5LmuY3CcNWYOI3ydET8icWokwMs5RO/e194=) 5: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl (hash: fHg+0b6Y7LWyPOvasO0K8nkRKUrkKQNaFLRL8gM9w4g=) 6: e8ade94f-71c7-3847-9891-9cce69f41ac8.roa (hash: Z4BS4TWSn8AMYWhk8uACJ21EvJAmzKL4+N9+QXRZYKc=) 7: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (hash: afZeDcoOuzBQi7C1TA2cLQpZ4+gEm3ZdLg28R1knChc=) 8: f30c9c21-4317-3091-8c73-74cf7dd4b318.roa (hash: tqn5LA9xecf8N2tm6zC9p5CxBMNPVpF7dfumiL0rF0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:de:d8:eb:08:b6:ef:a3:e8:0e:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jun 15 11:00:07 2025 GMT Not After : Jun 17 11:00:00 2025 GMT Subject: CN=06654fa8-ae22-45da-9e9b-ff1423de94e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:67:ac:08:66:0c:b6:2d:ef:dd:b1:a4:f9:58: 15:7f:2a:2c:af:57:97:65:c1:9d:d7:24:f3:1f:15: 3d:e1:3d:f0:78:5d:a2:c8:74:3e:da:09:35:b1:83: cf:48:d4:fd:30:35:f9:3e:c8:90:d1:18:f0:45:3b: f8:bd:98:d4:cd:4a:80:88:ef:d9:34:c2:df:b3:32: bf:70:76:62:0a:35:3e:a4:c5:67:3b:e9:f3:05:0e: 88:03:2f:f3:2a:5b:25:4e:c2:85:37:7a:d5:e6:5b: 73:c2:a4:57:71:aa:df:4a:69:7e:c9:b5:76:a3:c6: 98:eb:0d:ef:ec:c9:53:95:d3:23:79:ac:61:e6:26: 91:ae:5f:8b:31:b5:7c:25:ee:22:8d:db:dc:56:f8: a7:e8:f5:a5:0d:06:5d:6e:c8:0b:28:8b:45:11:a1: e4:65:47:71:fb:38:1f:2a:1a:a5:af:71:d2:7d:d8: 77:a7:1b:c8:ee:63:86:67:1c:61:3b:3b:8a:ff:ca: ca:0d:01:29:4a:da:58:f8:19:53:e9:b0:32:de:91: e3:2f:2e:8e:96:76:b0:55:b8:23:db:f7:ac:e4:a5: ab:32:f9:44:fe:da:2c:89:f9:6d:55:f9:de:49:93: c8:5a:4f:6c:bc:63:b4:82:9d:57:3b:f7:db:d5:06: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:BE:4F:34:6D:2C:75:0D:57:4F:FF:57:27:D4:ED:A1:01:D9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:50:07:0f:30:9d:a3:5a:e0:7e:bc:3b:98:80:be:7d:84:a2: f5:7f:c7:0e:0c:5b:8b:5e:a9:f9:03:73:6f:76:92:6a:2f:b2: 76:5d:54:41:c9:70:e2:2f:c6:41:a1:78:59:b1:20:08:55:22: d7:82:cd:f9:7d:77:de:9f:85:ba:81:8d:e2:c0:52:2d:cc:5b: 39:1d:cc:e4:dd:e6:c9:65:6f:92:02:66:9b:0c:a3:96:7a:d0: 11:05:f7:b6:45:1b:64:8d:09:93:35:8d:c4:ae:47:92:5e:4c: b6:ea:7d:d8:06:db:58:7b:cc:a9:3f:65:c1:08:c8:d8:13:a8: e9:6a:06:bd:9b:c1:ae:ba:a9:64:ad:45:29:88:2c:5b:36:fc: aa:d2:08:8d:36:3e:6a:54:0f:2d:19:c6:1e:69:43:88:3e:38: de:5b:37:ee:9a:40:a9:14:8a:f3:fd:47:26:4f:76:36:2c:93: 39:f3:44:f5:83:4f:cb:d6:aa:ee:de:40:b4:7b:2a:b1:fc:3b: 20:3d:4a:33:ae:6c:44:30:19:87:1b:9c:ad:a3:fd:bf:e2:e9: ad:80:24:ed:80:45:eb:2d:be:96:d6:7c:12:1f:3a:d3:b8:d1: e3:77:38:a1:aa:88:97:0a:b2:98:a9:d5:04:f5:fe:ed:8b:c7: e6:c0:12:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoy3tjrCLbvo+gOCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDYxNTExMDAwN1oXDTI1MDYxNzExMDAwMFowLzEtMCsGA1UEAxMk MDY2NTRmYTgtYWUyMi00NWRhLTllOWItZmYxNDIzZGU5NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimesCGYMti3v3bGk+VgVfyosr1eXZcGd1yTz HxU94T3weF2iyHQ+2gk1sYPPSNT9MDX5PsiQ0RjwRTv4vZjUzUqAiO/ZNMLfszK/ cHZiCjU+pMVnO+nzBQ6IAy/zKlslTsKFN3rV5ltzwqRXcarfSml+ybV2o8aY6w3v 7MlTldMjeaxh5iaRrl+LMbV8Je4ijdvcVvin6PWlDQZdbsgLKItFEaHkZUdx+zgf Khqlr3HSfdh3pxvI7mOGZxxhOzuK/8rKDQEpStpY+BlT6bAy3pHjLy6OlnawVbgj 2/es5KWrMvlE/tosifltVfneSZPIWk9svGO0gp1XO/fb1QbETQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL+gvk80bSx1DVdP/1cn1O2hAdmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZDU4OWYzZTQtMjcwMS00 OGY1LTljNmItN2VhOGQwNzFlY2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdUAcPMJ2jWuB+vDuYgL59 hKL1f8cODFuLXqn5A3NvdpJqL7J2XVRByXDiL8ZBoXhZsSAIVSLXgs35fXfen4W6 gY3iwFItzFs5Hczk3ebJZW+SAmabDKOWetARBfe2RRtkjQmTNY3ErkeSXky26n3Y BttYe8ypP2XBCMjYE6jpaga9m8GuuqlkrUUpiCxbNvyq0giNNj5qVA8tGcYeaUOI PjjeWzfumkCpFIrz/UcmT3Y2LJM580T1g0/L1qru3kC0eyqx/DsgPUozrmxEMBmH G5yto/2/4umtgCTtgEXrLb6W1nwSHzrTuNHjdzihqoiXCrKYqdUE9f7ti8fmwBJK -----END CERTIFICATE-----Generated at Sun Jun 15 15:33:09 2025 by rpki-client