$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft File: aa912e91-41d3-4894-893c-8de4f94175f9.mft (raw, json) Hash identifier: 0FprUoODAHwGgYHV80x0r0EyBoYSiZGl/Cvj1kDwwW0= Subject key identifier: 16:C2:F2:A3:CB:00:CA:2A:F2:72:6B:B0:9E:D9:27:99:EA:78:17:E7 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584A2E733AFE5030E49B00947000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft Manifest number: 010D0C9F4328584073A82612B62F47807E021E3D Signing time: Fri 13 Jun 2025 21:00:03 +0000 Manifest this update: Fri 13 Jun 2025 21:00:03 +0000 Manifest next update: Mon 16 Jun 2025 21:00:00 +0000 Files and hashes: 1: 37677602-0a43-34e8-9622-a4ac56d7d1e8.roa (hash: vv9n1CgHjrk2J0EChzWJzWV8HQSwhKT06SFQAgYkqf4=) 2: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (hash: 9dG4vv2e0X0SVa6rBIpbhx+jfc0tqEy8JCgCPTPz7rU=) 3: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (hash: 1DxabKzIkOPmE/SJ/InKvGilJUOYEevXmTeUrVynit8=) 4: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (hash: gTxS5SKTRik98sGboYEGVPOZUTraYb8xSSLPkDYvpCs=) 5: 973a96a2-0162-35e7-90db-f4882fddf92f.roa (hash: syoLQK/VVcfcTEFp8TEZcCYBTjNq2pMfYqjsWZF69BI=) 6: aa912e91-41d3-4894-893c-8de4f94175f9.crl (hash: p8gXOMY3V8QC93x+kpzPQKWULwx1VvQTlspSA2LFoaY=) 7: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (hash: OPb541zWopUKdkfLvfiRYNiieIe2cCh1wBVrCYOIoY8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:73:3a:fe:50:30:e4:9b:00:94:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Jun 13 21:00:03 2025 GMT Not After : Jun 16 21:00:00 2025 GMT Subject: CN=3e2d4ff4-c7cc-4c5e-ad91-8127dc9fb635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ec:f3:69:64:63:63:2b:0e:0b:a5:01:4a:ad: 4b:d8:63:9b:2a:12:2e:d7:63:cb:29:37:f6:16:f3: 65:2b:45:b5:74:c1:76:a0:cc:fa:90:a8:78:00:b2: 59:e4:a7:8b:d6:5e:30:07:bb:1b:0a:e5:46:d1:fe: 7c:35:13:82:b2:18:a3:38:2f:06:bc:bc:53:cf:74: 5d:d4:69:b9:63:5a:4f:50:3f:ab:82:f1:5d:9f:1d: c9:60:6e:ac:26:07:04:2e:9c:09:a6:b7:97:8e:92: 44:c0:00:74:ce:10:e4:8a:ef:0f:0e:a5:54:2b:af: 52:84:c4:25:ed:26:e9:2c:2d:b1:d1:5e:1d:f1:02: f9:67:08:52:3f:70:4e:7c:56:07:4b:06:37:a7:da: b0:08:2c:94:39:ce:fa:ab:dd:c3:6d:f7:1a:27:e9: f5:32:76:70:16:ac:81:6b:6d:4e:7e:94:b4:24:c2: a5:67:0a:06:fa:3b:62:45:1f:01:bc:22:2a:0a:42: 39:bd:04:78:e2:4e:16:bf:dd:22:e8:96:e3:fb:ae: 0d:36:52:9e:64:c0:a1:56:75:05:b9:d9:f0:a4:c5: 98:90:d8:8d:43:e1:4d:cc:d1:dd:04:14:22:60:54: f7:d6:7d:78:28:9c:c6:eb:5f:1a:3b:f2:b8:3f:26: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:F2:A3:CB:00:CA:2A:F2:72:6B:B0:9E:D9:27:99:EA:78:17:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:07:ed:67:cd:e9:c9:f1:7f:c0:43:e3:9d:35:55:db:0e:7e: 65:ad:be:43:7d:6f:ce:fd:92:5e:aa:79:ad:c7:3e:4f:85:19: 66:a1:82:dd:b1:f0:8f:33:1d:d4:f8:02:29:4d:1c:03:8c:7b: db:1f:55:7f:be:e9:07:d0:d3:8d:49:68:07:1c:58:35:cc:85: ba:dc:17:62:eb:43:51:ac:26:c4:31:67:54:c3:17:a2:cb:62: 01:42:ba:a2:b8:eb:d2:9e:c6:06:ec:5d:a5:26:58:df:7e:8a: 86:18:f0:69:5c:b0:aa:53:1e:9e:45:28:a5:5b:74:bf:d2:f9: 97:9f:31:98:ad:71:bd:00:c1:14:b7:77:5c:ac:c2:da:08:35: 52:36:7a:dc:b9:3f:97:62:04:54:ad:06:6a:22:a0:1f:52:a0: 5e:b2:b3:9e:4c:2e:a9:12:05:ed:da:d2:33:16:a3:72:e8:59: 79:6a:b2:b3:c3:a7:73:22:2d:84:db:db:3f:19:81:86:a1:ed: 26:50:84:b3:b0:f1:d7:b0:60:18:fe:9d:8b:e8:ec:80:e6:ff: c7:c5:0f:d7:1f:eb:ec:52:d1:ae:e2:fc:20:63:4a:45:f8:9e: e2:5e:1e:6d:57:3d:68:35:4e:1a:b2:3a:18:82:d2:0e:9c:7a: 70:fe:2c:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEouczr+UDDkmwCUcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDYxMzIxMDAwM1oXDTI1MDYxNjIxMDAwMFowLzEtMCsGA1UEAxMk M2UyZDRmZjQtYzdjYy00YzVlLWFkOTEtODEyN2RjOWZiNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuzzaWRjYysOC6UBSq1L2GObKhIu12PLKTf2 FvNlK0W1dMF2oMz6kKh4ALJZ5KeL1l4wB7sbCuVG0f58NROCshijOC8GvLxTz3Rd 1Gm5Y1pPUD+rgvFdnx3JYG6sJgcELpwJpreXjpJEwAB0zhDkiu8PDqVUK69ShMQl 7SbpLC2x0V4d8QL5ZwhSP3BOfFYHSwY3p9qwCCyUOc76q93DbfcaJ+n1MnZwFqyB a21OfpS0JMKlZwoG+jtiRR8BvCIqCkI5vQR44k4Wv90i6Jbj+64NNlKeZMChVnUF udnwpMWYkNiNQ+FNzNHdBBQiYFT31n14KJzG618aO/K4PyaMKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBbC8qPLAMoq8nJrsJ7ZJ5nqeBfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvYWE5MTJlOTEtNDFkMy00 ODk0LTg5M2MtOGRlNGY5NDE3NWY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiB+1nzenJ8X/AQ+OdNVXb Dn5lrb5DfW/O/ZJeqnmtxz5PhRlmoYLdsfCPMx3U+AIpTRwDjHvbH1V/vukH0NON SWgHHFg1zIW63Bdi60NRrCbEMWdUwxeiy2IBQrqiuOvSnsYG7F2lJljffoqGGPBp XLCqUx6eRSilW3S/0vmXnzGYrXG9AMEUt3dcrMLaCDVSNnrcuT+XYgRUrQZqIqAf UqBesrOeTC6pEgXt2tIzFqNy6Fl5arKzw6dzIi2E29s/GYGGoe0mUISzsPHXsGAY /p2L6OyA5v/HxQ/XH+vsUtGu4vwgY0pF+J7iXh5tVz1oNU4asjoYgtIOnHpw/iyU -----END CERTIFICATE-----Generated at Sat Jun 14 18:38:53 2025 by rpki-client