$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft File: 8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft (raw, json) Hash identifier: goElf622QUtFeAFY4soMbWgOKwj5sXu1JbCICCuNhxw= Subject key identifier: A6:CF:43:4F:F0:66:CB:E9:89:79:6D:7D:A2:39:77:8A:95:C5:30:83 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584AC0AACC91E8D55AAE29E3B540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft Manifest number: 010D0C9F432858473DCA7184D71EC5D06F5C5853 Signing time: Tue 05 Aug 2025 06:00:03 +0000 Manifest this update: Tue 05 Aug 2025 06:00:03 +0000 Manifest next update: Fri 08 Aug 2025 06:00:00 +0000 Files and hashes: 1: 0156459b-1048-3ac6-b762-361ee7d49132.roa (hash: Ha5Xn2X2mr8vWkLfT6QFaFgj2NlU8UipcQMble+587w=) 2: 1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa (hash: MWEvxpOoKXdgW/8EBIUwSnN/AXBA6fFZv0D+4lBG/c8=) 3: 74643a59-339d-31eb-989b-007a513d5754.roa (hash: g/6G8KnjltsCn3zvczv2520Km+yCyj9SpFVYqAtnTUM=) 4: 79c5f43d-784b-3f3e-8a0b-d94e129bd755.roa (hash: u1VDzm1R2vOEP2O7o5/Ca1LeLPJvUjR+M+HTSVUJJec=) 5: 8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl (hash: CrtiaKOmu/7buymrOLH5WYr9K+lauVUxJhzVTjMsAEU=) 6: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (hash: rOqeugRS0hVNUsurkROVXPH1hSOXfVWC3ejUMap1y/s=) 7: ebd76a09-c746-3e90-b835-0218552a1e60.roa (hash: iMMyG5dSJoNReO16s0jZCTDMK7t/uMIxd7oRELJF2dg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:aa:cc:91:e8:d5:5a:ae:29:e3:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Aug 5 06:00:03 2025 GMT Not After : Aug 8 06:00:00 2025 GMT Subject: CN=b1fc2382-7689-4bed-af34-6407a8990c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:e9:3d:b3:0d:99:59:2e:44:5b:e5:06:01: 49:7d:ea:bd:31:d1:07:f5:cc:66:b3:26:0e:d6:2a: 52:cc:e5:ab:25:c1:9e:c1:4f:48:37:3d:a5:fa:98: 40:b7:c2:f4:1d:08:53:4b:30:90:ad:2b:f2:9b:97: 0b:3b:4c:75:22:61:04:ba:81:6a:3a:49:e2:f8:8c: 3f:40:c1:59:a3:42:c8:ca:66:a4:3d:7a:c2:7a:bc: 95:2a:07:56:61:13:97:81:44:28:86:0f:15:11:cd: 21:32:ba:16:68:4f:a5:be:c7:94:7a:44:64:d7:d0: 15:6f:b1:46:f7:5a:93:75:0f:d1:06:a3:53:aa:95: 4b:6c:44:f7:7c:73:f4:8b:9c:79:c1:e4:31:a1:fa: 4a:77:9c:81:d7:e6:c6:d9:2a:3b:79:f7:42:46:38: 41:dc:58:31:ce:4b:6d:e1:86:15:53:f5:01:0c:8c: 2e:46:18:25:c5:bf:3c:49:23:e4:13:9c:91:17:02: 96:d8:34:ce:f3:a3:01:9d:8b:ca:1e:94:97:f5:de: f9:73:39:31:bf:ec:dd:a4:6d:76:b2:1d:84:4f:ee: c5:ea:ab:7c:6b:1d:7a:fa:c4:07:cd:d1:a1:e3:28: 1e:9f:57:4f:bb:69:b7:61:20:26:f2:da:2f:4b:4d: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CF:43:4F:F0:66:CB:E9:89:79:6D:7D:A2:39:77:8A:95:C5:30:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e0:74:21:3e:06:0a:4f:ac:67:2b:a2:eb:93:51:fb:bc:98: fb:d2:3e:7d:04:9a:92:a6:ab:22:ea:8a:3f:03:4e:f4:cf:c6: d9:8f:98:3e:1f:e3:c1:12:5c:1b:20:19:19:03:45:70:49:65: 89:89:2c:c5:1f:28:6f:87:13:87:38:62:10:4a:d6:89:2b:d6: b0:d0:99:97:73:28:c4:52:5b:30:b9:19:3b:5b:23:df:d9:67: e5:8b:91:a7:ff:a1:41:24:d0:e8:9e:c8:b9:02:11:b4:fa:2a: ac:87:5b:75:95:e0:96:30:1e:f6:a5:47:b1:01:40:56:c9:82: 25:7d:2b:9b:e2:d0:04:b3:dc:46:46:79:02:d3:8c:71:c7:fc: 53:dc:cf:1a:f9:4f:fe:a6:99:53:1f:90:4b:87:6d:53:34:c3: 23:1c:c7:56:64:23:1d:4f:a3:58:b9:14:4e:d2:f0:04:db:68: 4b:4d:42:33:c1:f3:bb:cc:84:c2:28:f4:e4:7e:44:ec:81:60: 7b:11:c5:a3:19:b0:1e:1e:90:2f:59:50:5d:70:ea:bf:49:2f: 6a:ec:41:4e:ad:47:2e:4c:1b:d9:50:f4:29:d2:f6:4f:a1:e4: 0b:cc:41:f0:00:95:78:94:58:2a:9a:c6:54:de:70:91:d3:84: 32:78:03:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErAqsyR6NVarinjtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI1MDgwNTA2MDAwM1oXDTI1MDgwODA2MDAwMFowLzEtMCsGA1UEAxMk YjFmYzIzODItNzY4OS00YmVkLWFmMzQtNjQwN2E4OTkwYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/zpPbMNmVkuRFvlBgFJfeq9MdEH9cxmsyYO 1ipSzOWrJcGewU9INz2l+phAt8L0HQhTSzCQrSvym5cLO0x1ImEEuoFqOkni+Iw/ QMFZo0LIymakPXrCeryVKgdWYROXgUQohg8VEc0hMroWaE+lvseUekRk19AVb7FG 91qTdQ/RBqNTqpVLbET3fHP0i5x5weQxofpKd5yB1+bG2So7efdCRjhB3Fgxzktt 4YYVU/UBDIwuRhglxb88SSPkE5yRFwKW2DTO86MBnYvKHpSX9d75czkxv+zdpG12 sh2ET+7F6qt8ax16+sQHzdGh4ygen1dPu2m3YSAm8tovS010DQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKbPQ0/wZsvpiXltfaI5d4qVxTCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvOGYxNGY4ZDctNTQwYi00 YTRhLWI1YWUtMGFmMTQ3ZjdjMWU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAB4HQhPgYKT6xnK6Lrk1H7 vJj70j59BJqSpqsi6oo/A070z8bZj5g+H+PBElwbIBkZA0VwSWWJiSzFHyhvhxOH OGIQStaJK9aw0JmXcyjEUlswuRk7WyPf2Wfli5Gn/6FBJNDonsi5AhG0+iqsh1t1 leCWMB72pUexAUBWyYIlfSub4tAEs9xGRnkC04xxx/xT3M8a+U/+pplTH5BLh21T NMMjHMdWZCMdT6NYuRRO0vAE22hLTUIzwfO7zITCKPTkfkTsgWB7EcWjGbAeHpAv WVBdcOq/SS9q7EFOrUcuTBvZUPQp0vZPoeQLzEHwAJV4lFgqmsZU3nCR04QyeAP3 -----END CERTIFICATE-----Generated at Tue Aug 5 16:45:14 2025 by rpki-client