$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft File: 95e29289-6f1c-4c2f-84f4-c944e9e54940.mft (raw, json) Hash identifier: /xdCZ1hAO9QnSGGjWCDARGRXndHITWjSL3SY57QCeRQ= Subject key identifier: 67:05:3E:93:30:EF:AD:30:46:3F:44:1D:D2:1F:71:1B:CF:38:F7:93 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584ABD6900787134FA93B33421FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft Manifest number: 010D0C9F4328584073A8378ED965A26DC80B7C1C Signing time: Mon 04 Aug 2025 02:00:03 +0000 Manifest this update: Mon 04 Aug 2025 02:00:03 +0000 Manifest next update: Wed 06 Aug 2025 02:00:00 +0000 Files and hashes: 1: 13c7705c-5068-3193-a68c-a2e387dab614.roa (hash: q3ARJexEwDMDMfQLgMoLM/HRDiFZPeu0ZSzP5XtA8AQ=) 2: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (hash: ExXbgPdu5+FAi/YPTLT6tLfncLsmlkP6AedNchRV46c=) 3: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (hash: PSWzzqOm4RaaxKR58oLiWZpSrEaPpbohmCs5tCrLof0=) 4: 650dd2fc-99af-35a3-81ca-030219a24999.roa (hash: 1rHwsnxA4wrTk9aoVsv5WIa+OU/M9yfh3q3yvV7vm88=) 5: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (hash: CVLLFUBBRONcT7+qrbNbHXuJgEx3gqZVKg9/uTNZVrU=) 6: 95e29289-6f1c-4c2f-84f4-c944e9e54940.crl (hash: q11Sb/OiQskUkaUJxtsnhSZU51mVO4lh4jb65BtQECU=) 7: eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa (hash: xaEUcZaVqQuh9axY6mDQdN94+vSzumZYf1uujFnlOGk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:69:00:78:71:34:fa:93:b3:34:21:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Aug 4 02:00:03 2025 GMT Not After : Aug 6 02:00:00 2025 GMT Subject: CN=8bb86336-0abc-47bd-b7a8-6111e0ba613f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:9b:26:7d:39:c5:8e:49:8d:4c:71:5d:68: 18:6a:d3:40:3b:15:23:38:ef:ab:7a:cc:98:47:f7: b1:cc:0b:cc:a5:a9:35:55:f1:fa:bf:e7:16:b5:2f: ec:8d:96:1d:6c:35:92:1b:b7:f4:01:4a:fd:11:32: e0:d6:a7:b6:79:cc:e0:0f:55:16:e0:35:1c:46:28: 60:fc:e0:31:b6:af:c0:8a:e2:56:53:a2:52:24:1e: fc:12:14:48:47:4e:f9:a4:28:40:cc:66:94:9d:d3: 83:a5:27:e5:fa:18:97:8b:51:dd:1d:77:0b:d1:41: ec:71:2c:27:43:b7:77:55:24:51:be:e9:19:12:37: 9a:05:19:39:7d:2f:e7:9c:df:bf:41:fd:78:fc:06: 40:b2:ce:23:c3:b9:8e:20:f7:5a:f9:73:3c:ca:96: 0f:a4:f0:68:f6:d6:3b:b8:f4:25:24:b1:43:b1:a0: 3e:5e:7c:b6:00:de:ad:08:3b:29:23:d5:f0:d7:ec: 6c:48:c7:a8:d1:d6:f9:ae:52:ba:5f:83:a6:22:7b: 3e:c8:32:8d:e1:4f:dc:1d:a3:18:3a:37:77:a0:3b: 60:33:31:00:77:b4:5c:76:94:1f:58:ed:7c:c4:8b: 98:55:b1:74:a2:0c:f1:a1:54:6d:4f:82:e2:00:ec: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:3E:93:30:EF:AD:30:46:3F:44:1D:D2:1F:71:1B:CF:38:F7:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:52:24:70:b4:ab:75:8b:95:1d:8d:4d:0d:3d:5e:2b:06:eb: ec:76:f7:e9:85:d9:d2:e5:91:22:9f:c2:00:35:fb:80:77:a5: 73:e0:2e:ad:b6:aa:c7:2c:49:f7:6f:b7:f6:a0:8a:5d:43:b7: a7:4c:c1:e5:66:55:93:75:ff:64:e7:b7:46:50:8e:0c:70:07: 01:fe:65:ad:be:53:36:37:23:50:48:c6:5d:ab:c2:ed:6d:e3: ee:28:15:0e:c2:f9:42:0f:1e:ff:a3:01:e7:ee:e5:c0:99:a1: 65:71:bd:84:db:41:da:9b:30:7a:cb:6e:f7:81:09:1f:50:a8: d3:40:b5:52:7a:f1:e4:d3:e4:a0:9f:d3:c9:05:08:f4:e7:0f: 46:be:dc:53:ff:9d:35:bb:96:7b:e2:fc:ba:28:09:83:8c:51: bb:3c:e2:6a:cc:49:85:0a:b5:5e:cc:31:30:85:9f:40:7b:8e: 02:3c:a0:e8:f1:4f:26:18:82:13:3e:5d:8f:f5:d2:c8:25:b0: 64:69:0c:b5:8d:d9:36:e3:5c:b9:35:68:50:31:04:12:aa:3b: af:49:e5:18:fd:3a:5b:64:d1:87:98:f1:a0:ca:5a:bd:1e:24: e3:34:18:8c:2b:e8:16:6e:e5:e4:6d:d9:5a:6e:db:44:2d:e1: 95:8f:d8:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9aQB4cTT6k7M0IfwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MDgwNDAyMDAwM1oXDTI1MDgwNjAyMDAwMFowLzEtMCsGA1UEAxMk OGJiODYzMzYtMGFiYy00N2JkLWI3YTgtNjExMWUwYmE2MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRibJn05xY5JjUxxXWgYatNAOxUjOO+resyY R/exzAvMpak1VfH6v+cWtS/sjZYdbDWSG7f0AUr9ETLg1qe2eczgD1UW4DUcRihg /OAxtq/AiuJWU6JSJB78EhRIR075pChAzGaUndODpSfl+hiXi1HdHXcL0UHscSwn Q7d3VSRRvukZEjeaBRk5fS/nnN+/Qf14/AZAss4jw7mOIPda+XM8ypYPpPBo9tY7 uPQlJLFDsaA+Xny2AN6tCDspI9Xw1+xsSMeo0db5rlK6X4OmIns+yDKN4U/cHaMY Ojd3oDtgMzEAd7RcdpQfWO18xIuYVbF0ogzxoVRtT4LiAOwigwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGcFPpMw760wRj9EHdIfcRvPOPeTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvOTVlMjkyODktNmYxYy00 YzJmLTg0ZjQtYzk0NGU5ZTU0OTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNUiRwtKt1i5UdjU0NPV4r BuvsdvfphdnS5ZEin8IANfuAd6Vz4C6ttqrHLEn3b7f2oIpdQ7enTMHlZlWTdf9k 57dGUI4McAcB/mWtvlM2NyNQSMZdq8LtbePuKBUOwvlCDx7/owHn7uXAmaFlcb2E 20HamzB6y273gQkfUKjTQLVSevHk0+Sgn9PJBQj05w9GvtxT/501u5Z74vy6KAmD jFG7POJqzEmFCrVezDEwhZ9Ae44CPKDo8U8mGIITPl2P9dLIJbBkaQy1jdk241y5 NWhQMQQSqjuvSeUY/TpbZNGHmPGgylq9HiTjNBiMK+gWbuXkbdlabttELeGVj9jk -----END CERTIFICATE-----Generated at Mon Aug 4 11:16:16 2025 by rpki-client