$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft File: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft (raw, json) Hash identifier: C/MWH3vNE1JuBDg+DstbC9EFiP5NsgUFpROrVV2zA4E= Subject key identifier: 47:81:9A:F2:9F:D1:6A:E5:0E:92:5F:A3:D5:F3:51:FD:43:A7:F9:B6 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584A32C1043B6A801ABDAA2FDE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft Manifest number: 010D0C9F4328584073A84E0231FF2DF1C04A362A Signing time: Sun 15 Jun 2025 10:00:03 +0000 Manifest this update: Sun 15 Jun 2025 10:00:03 +0000 Manifest next update: Tue 17 Jun 2025 10:00:00 +0000 Files and hashes: 1: 0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl (hash: ftsrdS9kdxjHZbcuUNUOVmRyeVgx86lowX87Uut84v8=) 2: 58ae2a95-69c6-3c2a-8493-3f45c86d73e0.roa (hash: vjx6X2C/WlIM11LVIrUB2XHCJC1SUu7m0uGQqIIKsmM=) 3: 6624b998-13e0-3a4d-aac9-4037a34bff51.roa (hash: 6RKTXVbh+xIczB+HtfzsKejtMzwvDzkrJRlmcZeIFi8=) 4: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (hash: uzS9awUi3LSAWLX5+edgHk/erToCtKWsVpjsbiNJ3Jg=) 5: b7eef4be-80b7-3b1d-9220-d57d94c78330.roa (hash: 7C5Ea8s+WTZcki+exq2UmJtMxHfqkE3bEsCZytdTFMg=) 6: d057ed2f-9fd1-3cf7-8b2f-92f9901c8924.roa (hash: ap4cLATdRP+QR1d1fmGJZn3QE+SOe84dMjM2QdFeTzk=) 7: ed6b1126-250f-33f9-a75a-557964e92852.roa (hash: NgdoJmcdrDGfN7IQBxWBE4bzi8C4fMYdJKnAGIGgVR8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:c1:04:3b:6a:80:1a:bd:aa:2f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Jun 15 10:00:03 2025 GMT Not After : Jun 17 10:00:00 2025 GMT Subject: CN=0cbef061-a3f8-411f-adaa-08f00f658663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6d:20:09:36:52:3a:9d:1f:99:20:eb:05:45: fd:bd:e3:b3:01:88:b2:53:9b:17:fd:2e:ab:18:5d: 3d:86:01:31:83:f6:a7:21:00:9d:57:50:f8:2f:70: 1f:b1:71:f0:7b:fa:96:bc:3f:ac:90:d6:6d:40:84: eb:96:e7:e8:65:4f:0f:6d:69:ae:37:d9:43:89:d8: b5:2c:c3:ea:ce:5d:5b:f9:87:b9:d4:ba:46:fc:1b: 35:c4:b7:89:9d:05:c3:80:1f:ac:d9:2a:20:5b:ff: 1b:84:5d:0c:97:20:c2:ea:c7:c6:ae:2a:76:c4:d0: f0:c8:68:9d:88:d7:45:ca:b1:01:f6:0b:60:62:f2: 40:bb:d9:8c:bf:e1:03:39:80:18:9c:0d:99:3c:8c: 18:6f:cf:fd:bf:8c:e8:92:4f:1d:2f:dd:a8:e9:f3: 75:58:ef:e4:17:17:85:e4:ba:9e:da:c7:3d:78:93: ef:a7:62:4b:20:b5:2e:aa:c8:2a:68:77:e3:25:d5: 4c:a0:73:75:53:15:02:40:c4:0d:65:a2:82:69:c0: 62:a1:ab:79:37:37:77:8a:0f:6d:da:75:97:da:51: f0:bf:fd:10:ac:50:53:c9:31:e6:0b:50:0c:fa:83: b3:e4:12:c9:86:65:77:9a:fd:25:cd:1f:ba:71:7a: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:81:9A:F2:9F:D1:6A:E5:0E:92:5F:A3:D5:F3:51:FD:43:A7:F9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3a:f1:b6:6e:83:0c:ee:49:33:05:b0:b2:7e:22:9d:97:77: 20:38:8c:e3:eb:94:b3:0f:d5:d7:0b:00:4e:8f:42:c3:fa:af: c9:b4:90:e1:ce:f8:f5:f3:5b:9b:bc:48:30:3d:c3:4f:d8:a8: 92:d6:f1:9b:03:af:84:92:9c:77:41:81:33:b4:73:55:52:42: de:e8:c7:f1:00:59:8f:58:94:96:bc:34:86:58:b2:5c:e4:ae: f6:10:23:39:aa:18:13:a4:29:16:c4:47:59:72:e5:f3:98:80: 53:68:8b:76:73:dd:5a:68:98:cb:f6:59:9a:ae:d3:f1:53:dd: 81:b6:64:bd:f6:b2:57:f2:a4:16:5a:aa:88:72:77:8b:9a:f2: 7e:68:f4:b0:37:a1:b1:55:18:b2:e1:54:ba:f6:a5:6f:33:5d: dd:24:bf:88:0b:a6:c8:2a:84:0c:de:03:c0:6c:20:42:9d:eb: c0:c6:72:f3:c0:c7:c7:b9:96:4d:9a:7b:b1:0d:e0:de:47:4b: 0f:5b:5d:63:46:53:e9:73:bf:af:97:b6:3a:71:66:b0:ed:7a: bd:6f:9e:bf:e7:bd:e9:53:2b:a4:97:28:ec:b6:6d:ec:bf:73: cd:7e:91:80:d1:66:4d:b9:8a:16:25:b3:8c:7f:7c:b9:1d:15: 25:eb:e3:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoywQQ7aoAavaov3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MDYxNTEwMDAwM1oXDTI1MDYxNzEwMDAwMFowLzEtMCsGA1UEAxMk MGNiZWYwNjEtYTNmOC00MTFmLWFkYWEtMDhmMDBmNjU4NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim0gCTZSOp0fmSDrBUX9veOzAYiyU5sX/S6r GF09hgExg/anIQCdV1D4L3AfsXHwe/qWvD+skNZtQITrlufoZU8PbWmuN9lDidi1 LMPqzl1b+Ye51LpG/Bs1xLeJnQXDgB+s2SogW/8bhF0MlyDC6sfGrip2xNDwyGid iNdFyrEB9gtgYvJAu9mMv+EDOYAYnA2ZPIwYb8/9v4zokk8dL92o6fN1WO/kFxeF 5Lqe2sc9eJPvp2JLILUuqsgqaHfjJdVMoHN1UxUCQMQNZaKCacBioat5Nzd3ig9t 2nWX2lHwv/0QrFBTyTHmC1AM+oOz5BLJhmV3mv0lzR+6cXqGMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEeBmvKf0WrlDpJfo9XzUf1Dp/m2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvMGFhOGMyOTktMDNjYS00 YjgxLThiYWUtODNiNmQxYjNkN2Q5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIOvG2boMM7kkzBbCyfiKd l3cgOIzj65SzD9XXCwBOj0LD+q/JtJDhzvj181ubvEgwPcNP2KiS1vGbA6+Ekpx3 QYEztHNVUkLe6MfxAFmPWJSWvDSGWLJc5K72ECM5qhgTpCkWxEdZcuXzmIBTaIt2 c91aaJjL9lmartPxU92BtmS99rJX8qQWWqqIcneLmvJ+aPSwN6GxVRiy4VS69qVv M13dJL+IC6bIKoQM3gPAbCBCnevAxnLzwMfHuZZNmnuxDeDeR0sPW11jRlPpc7+v l7Y6cWaw7Xq9b56/573pUyuklyjstm3sv3PNfpGA0WZNuYoWJbOMf3y5HRUl6+PR -----END CERTIFICATE-----Generated at Sun Jun 15 16:06:42 2025 by rpki-client