$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: qC6sh7b4tqw5Ki8aP4rZRWHihJpgRxgTxaRDAVcylfw= Subject key identifier: FF:F8:4F:FE:AA:5C:CE:74:0A:77:EC:5B:6B:A8:3C:B6:7F:D7:E1:34 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584A317977201F971566ACA1FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CA28 Signing time: Sat 14 Jun 2025 23:00:03 +0000 Manifest this update: Sat 14 Jun 2025 23:00:03 +0000 Manifest next update: Mon 16 Jun 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: UoVNnfhbJA6FxlQK0/QwNEF2v1s7eJu51Kr0yk88JTI=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: h2PB9mWxh11+ORXgWJ0xkcHILsB5eDcLXBWHiYDJkMU=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: +kHL8CKj/9ff7IsmfxdcUgEkE7pSQ+0+KeH4zkSDNmM=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: C0GBGMEaos6pjT75/V95Z0Nl2rHN3AXW2TV6FBAnxy0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:79:77:20:1f:97:15:66:ac:a1:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Jun 14 23:00:03 2025 GMT Not After : Jun 16 23:00:00 2025 GMT Subject: CN=f13a4170-5648-48ec-b799-6c0e819feea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:97:6c:37:d3:46:b0:0a:c8:f6:74:16:1d: ac:1b:e3:56:1e:23:75:18:56:ae:e9:82:41:04:03: 76:5a:42:cd:f4:b0:4b:f6:8c:4b:28:6b:95:6e:67: 26:fd:72:18:5e:6a:fc:98:70:8d:f0:c1:f5:10:16: 88:f2:39:5e:1b:8c:b2:d8:ec:4a:d5:3d:af:dc:ba: 3b:c8:fb:ba:40:2b:15:35:b7:91:d5:d3:f3:c2:7c: 11:d1:59:be:2a:7b:86:2d:73:1e:19:af:1c:92:d1: 03:67:dd:20:3d:98:a4:2b:4c:3b:bc:a0:36:7f:bf: fb:c1:aa:66:38:04:c3:e6:9c:fa:19:fe:d9:64:92: bc:de:62:73:d5:97:8a:89:b9:50:34:ee:5c:c4:72: 53:f0:e5:08:60:e2:f6:bf:0d:42:2a:eb:fe:c6:27: e5:49:f3:b9:cf:39:a3:45:62:9e:34:63:2a:10:de: 94:25:9d:aa:6d:70:84:55:83:90:dc:3f:77:6a:5c: 86:ad:c3:24:6f:f4:24:df:d8:fc:60:5e:a7:9c:02: 19:4d:11:23:dd:4b:d4:a9:38:e4:ec:46:09:d1:64: 91:ff:16:c8:5c:a8:2d:32:86:f4:8c:e4:b1:3b:00: fe:b0:a9:5c:45:4c:e6:b5:30:d9:b2:0e:8e:02:30: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:4F:FE:AA:5C:CE:74:0A:77:EC:5B:6B:A8:3C:B6:7F:D7:E1:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:20:44:9c:e9:7c:1c:e4:a2:61:c0:fe:9d:33:33:cb:bb:7b: bc:59:15:e4:b0:76:16:f4:b7:98:b3:9c:28:a1:21:ff:eb:a9: 17:58:d2:ca:b9:f3:79:48:d6:3d:8a:1f:3b:62:14:a4:2b:db: 61:62:20:f5:c1:47:68:ba:b9:ea:40:45:37:5f:3b:0d:fc:7e: ec:a3:3a:ab:9c:0d:43:fa:8e:12:b9:4c:6b:2f:48:05:1c:4f: 26:79:40:82:10:1b:c7:b3:6e:c8:c2:01:6c:b3:49:bc:ea:d5: 85:64:a8:fd:5d:67:15:5f:97:8b:6c:bd:aa:7f:30:df:46:07: 17:a3:7c:03:c8:0d:da:df:82:79:28:3a:eb:0f:60:a7:2e:9f: 44:06:72:83:db:9d:44:f4:14:f7:c7:d8:95:f1:74:ed:98:29: dd:36:ac:1a:d1:a1:c8:bd:eb:8d:fb:f2:48:87:92:40:d2:7c: 89:eb:4e:15:c9:96:db:3c:39:95:8f:40:b1:63:40:90:75:bd: 85:fb:ea:d6:32:e2:a6:cf:c0:6e:0a:1d:47:8a:70:9e:c4:aa: 96:fc:25:46:a6:ff:17:8a:e6:a5:76:98:42:46:95:6b:45:e2: 67:30:12:ca:82:9d:d8:9d:b7:81:25:7e:a8:33:6d:2d:69:60: b5:29:ef:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoxeXcgH5cVZqyh/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDYxNDIzMDAwM1oXDTI1MDYxNjIzMDAwMFowLzEtMCsGA1UEAxMk ZjEzYTQxNzAtNTY0OC00OGVjLWI3OTktNmMwZTgxOWZlZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY2XbDfTRrAKyPZ0Fh2sG+NWHiN1GFau6YJB BAN2WkLN9LBL9oxLKGuVbmcm/XIYXmr8mHCN8MH1EBaI8jleG4yy2OxK1T2v3Lo7 yPu6QCsVNbeR1dPzwnwR0Vm+KnuGLXMeGa8cktEDZ90gPZikK0w7vKA2f7/7wapm OATD5pz6Gf7ZZJK83mJz1ZeKiblQNO5cxHJT8OUIYOL2vw1CKuv+xiflSfO5zzmj RWKeNGMqEN6UJZ2qbXCEVYOQ3D93alyGrcMkb/Qk39j8YF6nnAIZTREj3UvUqTjk 7EYJ0WSR/xbIXKgtMob0jOSxOwD+sKlcRUzmtTDZsg6OAjCNJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP/4T/6qXM50CnfsW2uoPLZ/1+E0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIIESc6Xwc5KJhwP6dMzPL u3u8WRXksHYW9LeYs5wooSH/66kXWNLKufN5SNY9ih87YhSkK9thYiD1wUdournq QEU3XzsN/H7sozqrnA1D+o4SuUxrL0gFHE8meUCCEBvHs27IwgFss0m86tWFZKj9 XWcVX5eLbL2qfzDfRgcXo3wDyA3a34J5KDrrD2CnLp9EBnKD251E9BT3x9iV8XTt mCndNqwa0aHIveuN+/JIh5JA0nyJ604VyZbbPDmVj0CxY0CQdb2F++rWMuKmz8Bu Ch1HinCexKqW/CVGpv8XiualdphCRpVrReJnMBLKgp3YnbeBJX6oM20taWC1Ke9y -----END CERTIFICATE-----Generated at Sun Jun 15 14:22:08 2025 by rpki-client