$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft File: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft (raw, json) Hash identifier: g+uzUyB4dH5lNWRWRcexTxNzxkj5feZPJIxREV/jiis= Subject key identifier: 2C:DF:8E:90:15:3B:56:17:9A:D5:9A:A7:DE:EA:33:D2:79:C1:5F:30 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584ABE573B5FD4A7A376952DA380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft Manifest number: 010D0C9F4328584073A84E0231FF2DF1C04A365D Signing time: Mon 04 Aug 2025 10:00:03 +0000 Manifest this update: Mon 04 Aug 2025 10:00:03 +0000 Manifest next update: Wed 06 Aug 2025 10:00:00 +0000 Files and hashes: 1: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl (hash: eTcsAqRg8vVZKSszhpoF07oUrHAfdedrgnN2pGb8WB0=) 2: 58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (hash: vjx6X2C/WlIM11LVIrUB2XHCJC1SUu7m0uGQqIIKsmM=) 3: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (hash: 6RKTXVbh+xIczB+HtfzsKejtMzwvDzkrJRlmcZeIFi8=) 4: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (hash: uzS9awUi3LSAWLX5+edgHk/erToCtKWsVpjsbiNJ3Jg=) 5: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (hash: 1gFHe6h2+SbNDaRaxTq2BiVirmuZRjqM8v+FAtg6HhE=) 6: d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (hash: ap4cLATdRP+QR1d1fmGJZn3QE+SOe84dMjM2QdFeTzk=) 7: ed6b1126-250f-33f9-a75a-557964e92852.roa (hash: NgdoJmcdrDGfN7IQBxWBE4bzi8C4fMYdJKnAGIGgVR8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:57:3b:5f:d4:a7:a3:76:95:2d:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Aug 4 10:00:03 2025 GMT Not After : Aug 6 10:00:00 2025 GMT Subject: CN=5a42b38e-9782-46fe-946c-32c207803b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:15:56:86:68:48:48:c2:80:13:6b:3d:be: fd:a6:89:7f:ca:fa:50:71:f9:40:1a:36:c0:46:b9: 2b:28:c9:e0:62:95:5e:20:ac:7d:b5:99:79:ef:82: 14:e1:11:6a:56:43:8e:fd:8b:4a:22:e0:60:28:6d: 55:61:8f:af:c5:e8:fe:67:d7:60:53:fc:dd:07:7b: 4e:24:da:9a:e5:bd:4d:37:65:20:ac:6b:66:ff:9c: 5a:7c:20:f4:7b:c4:88:b4:0f:c6:d8:3e:d2:e2:e1: 24:c8:98:4d:60:d0:f6:1a:bc:60:ad:da:4e:f8:ee: 6b:9d:44:01:7f:2b:77:84:0a:d8:d6:91:b2:eb:d9: d2:08:8e:2a:35:ca:02:2c:90:6c:24:5a:39:a6:07: 6b:ea:e7:02:a5:d5:40:cb:b0:2d:b8:c4:06:3c:df: 34:4a:8b:cd:5b:71:79:02:e9:b3:e2:fb:a8:bc:ae: a0:15:34:a6:4c:ca:c1:1c:6f:ea:8e:4c:b8:00:81: 94:51:1c:b1:46:31:5b:6f:1f:a3:0e:0a:7f:56:2a: b1:e9:e5:79:3b:9f:91:0e:77:e2:f1:40:1d:0b:75: ef:a9:1d:da:d2:bd:c7:e4:7e:e1:fc:d2:f1:60:11: 74:27:6a:d9:09:0b:2d:2b:8a:ae:c7:81:a6:ff:e2: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:8E:90:15:3B:56:17:9A:D5:9A:A7:DE:EA:33:D2:79:C1:5F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c1:93:c8:83:fa:58:47:8b:16:82:c3:11:30:28:9f:a0:a9: 0e:90:e0:3d:f1:ff:0b:b5:7c:03:1d:7e:1b:49:e4:60:99:32: bc:76:2e:08:d6:0c:48:9e:b0:62:09:39:14:9d:40:85:c5:48: be:4b:ff:00:ab:15:28:86:cb:6d:99:29:2b:8c:cf:11:7f:78: 7e:53:ad:99:95:10:f2:ef:df:77:7a:a4:b1:42:6a:01:c2:70: 24:94:58:01:9c:55:04:31:59:ec:b0:44:b0:9d:57:0c:1c:c0: ef:dd:3a:58:ac:bb:a0:6a:4d:49:80:55:6d:b2:d8:fc:f2:59: 91:eb:8f:4c:f9:bf:97:35:25:83:dd:d0:fc:e7:2b:5d:96:61: 61:cb:10:8f:90:e0:fc:d7:80:3b:57:75:ad:7c:77:a6:24:b6: 9b:eb:db:b1:db:33:b7:76:8b:56:d5:3a:b6:4d:a5:be:55:96: ec:9a:3a:41:55:22:b1:3c:f2:21:6b:78:36:a5:fe:df:ba:2c: fd:ba:23:b5:5e:7c:75:48:e5:da:33:4f:50:16:cf:01:53:77: ee:01:f4:94:77:aa:40:1a:59:56:ae:f3:bc:8d:4c:8e:2a:70: c5:1b:3b:10:b1:d5:d6:d6:9a:bd:cc:d0:b8:68:91:13:42:ba: 46:65:3c:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+Vztf1KejdpUto4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MDgwNDEwMDAwM1oXDTI1MDgwNjEwMDAwMFowLzEtMCsGA1UEAxMk NWE0MmIzOGUtOTc4Mi00NmZlLTk0NmMtMzJjMjA3ODAzYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3cVVoZoSEjCgBNrPb79pol/yvpQcflAGjbA RrkrKMngYpVeIKx9tZl574IU4RFqVkOO/YtKIuBgKG1VYY+vxej+Z9dgU/zdB3tO JNqa5b1NN2UgrGtm/5xafCD0e8SItA/G2D7S4uEkyJhNYND2GrxgrdpO+O5rnUQB fyt3hArY1pGy69nSCI4qNcoCLJBsJFo5pgdr6ucCpdVAy7AtuMQGPN80SovNW3F5 Aumz4vuovK6gFTSmTMrBHG/qjky4AIGUURyxRjFbbx+jDgp/Viqx6eV5O5+RDnfi 8UAdC3XvqR3a0r3H5H7h/NLxYBF0J2rZCQstK4qux4Gm/+ITMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCzfjpAVO1YXmtWap97qM9J5wV8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvMGFhOGMyOTktMDNjYS00 YjgxLThiYWUtODNiNmQxYjNkN2Q5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQwZPIg/pYR4sWgsMRMCif oKkOkOA98f8LtXwDHX4bSeRgmTK8di4I1gxInrBiCTkUnUCFxUi+S/8AqxUohstt mSkrjM8Rf3h+U62ZlRDy7993eqSxQmoBwnAklFgBnFUEMVnssESwnVcMHMDv3TpY rLugak1JgFVtstj88lmR649M+b+XNSWD3dD85ytdlmFhyxCPkOD814A7V3WtfHem JLab69ux2zO3dotW1Tq2TaW+VZbsmjpBVSKxPPIha3g2pf7fuiz9uiO1Xnx1SOXa M09QFs8BU3fuAfSUd6pAGllWrvO8jUyOKnDFGzsQsdXW1pq9zNC4aJETQrpGZTw7 -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:50 2025 by rpki-client