$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft File: b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft (raw, json) Hash identifier: Y/JgBMMZ/Yts7vi6ThSRUaVq/xIG9mYT71N2fLp1Qpc= Subject key identifier: AE:D0:39:0B:C8:DB:67:F6:7C:13:B9:64:02:59:C2:08:06:7C:0D:41 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584ABE92D5FFE13AC3B391921180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft Manifest number: 010D0C9F4328584073A852681CE382326F634E34 Signing time: Mon 04 Aug 2025 12:00:08 +0000 Manifest this update: Mon 04 Aug 2025 12:00:08 +0000 Manifest next update: Wed 06 Aug 2025 12:00:00 +0000 Files and hashes: 1: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (hash: 2bhdkZYerHF/LywC78KKs96dT5yGkLRVg/B624ZO8M0=) 2: 6d329d86-ae5c-3e97-b60e-380b387c9d19.roa (hash: TJr1RT+ay2+nWoSbjJdWxFwhpY94aXSOAOwQWevw+oA=) 3: 7714f8b4-e08c-3ecd-b63d-aac5909ad71d.roa (hash: ObF0gr8+ihoTqThtXl3aCWXlOtelSHjYY+SwPnwBD5M=) 4: a6a73e55-bfaf-383e-b044-b9d0120ce4f9.roa (hash: VkgUD7DgHvQNYROeaDUXDwXBl5CknA4JW3OVEholacM=) 5: b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl (hash: rD3KKRa3D49QRtaRzlYq5GGHp96hWHn5jpqIDTghMxU=) 6: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (hash: TuJtjsI40eJ09VvDqPMR4AomcRKMeL6NxYnyLuW3u+o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:be:92:d5:ff:e1:3a:c3:b3:91:92:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Aug 4 12:00:08 2025 GMT Not After : Aug 6 12:00:00 2025 GMT Subject: CN=f0f0d9a8-a406-49e4-b564-4fd3d8168e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:ab:53:58:2b:1f:06:1a:82:04:b9:e4:2c: fe:d6:94:e8:23:e1:a2:2e:54:f5:4d:83:a1:c7:77: 60:ed:04:6b:7d:24:2f:c7:53:ff:a3:c5:1b:62:23: 48:6d:dc:00:05:ed:37:dd:e6:15:ed:85:3f:71:86: 5d:f9:28:b3:6a:55:88:b1:09:a3:b5:8a:08:dd:71: 66:1c:d8:7e:0c:26:ee:19:db:6f:cd:88:af:29:78: fb:14:fb:6b:ef:a6:89:9b:58:f3:86:aa:18:0c:0f: 38:ab:97:2b:96:b0:7d:60:f0:32:60:a0:39:3e:14: 26:d2:26:4f:71:1f:13:92:b0:e4:82:fa:48:11:34: f7:75:a9:6c:2f:8b:27:86:56:c2:fa:2f:0b:83:8f: 99:9c:64:66:b5:48:17:78:bc:bc:44:58:9b:f8:b3: 43:89:1e:8f:39:e8:e2:bc:77:a1:c7:ac:b5:a6:94: 37:82:c7:97:68:d1:2f:af:1e:a0:22:42:df:52:31: 17:48:2e:2e:aa:19:bf:e1:c7:a7:9f:83:f7:59:0a: bd:5b:95:d3:67:12:d2:ab:8f:06:7e:ec:4f:13:7e: 78:12:fd:8d:0d:c0:83:d3:24:e7:60:7f:4c:a3:53: 29:5d:e0:82:44:d3:de:fc:db:c6:74:45:f5:93:c1: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D0:39:0B:C8:DB:67:F6:7C:13:B9:64:02:59:C2:08:06:7C:0D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e0:31:1d:0e:e6:40:12:93:f4:61:2d:82:9e:d2:28:12:59: 37:68:0b:aa:3f:c0:ce:c7:4f:30:ae:af:83:7f:e4:43:ee:d0: 8a:2c:09:18:c0:b2:d7:a7:84:7f:47:4b:4d:51:ae:86:d6:cc: c4:ad:80:35:37:2d:22:4a:a8:af:89:6e:a3:c3:f7:16:4a:5f: 22:39:da:8a:33:4b:fc:8e:4a:9b:9a:eb:72:30:a7:02:c7:e2: fb:df:59:2d:68:52:41:c0:f1:e8:c3:cb:45:c2:96:e3:b3:b5: ea:f9:1c:b4:6d:a8:fc:f3:c2:cf:4e:b6:bf:4b:56:e1:a4:d4: e8:46:18:4e:97:11:d0:e0:13:87:83:e8:0a:16:e2:47:eb:9b: 5c:f2:eb:39:bc:f4:93:18:31:0a:60:fb:be:a4:99:27:30:89: 15:5d:06:04:e6:7d:b2:e1:c8:d4:82:15:75:71:af:a0:0e:77: 7b:21:a2:55:13:8b:f2:6e:ee:12:82:cc:c3:55:f3:38:fa:b4: 3d:11:fd:27:6c:af:21:87:f5:9d:59:6c:ee:70:05:31:3d:62: 11:a2:6e:6c:d8:3f:03:f1:82:7e:23:89:76:51:80:fe:ff:c6: 65:36:f8:c7:f4:a8:99:0d:72:c9:e4:37:92:6a:18:10:39:78: 5c:e0:52:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq+ktX/4TrDs5GSEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI1MDgwNDEyMDAwOFoXDTI1MDgwNjEyMDAwMFowLzEtMCsGA1UEAxMk ZjBmMGQ5YTgtYTQwNi00OWU0LWI1NjQtNGZkM2Q4MTY4ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOWrU1grHwYaggS55Cz+1pToI+GiLlT1TYOh x3dg7QRrfSQvx1P/o8UbYiNIbdwABe033eYV7YU/cYZd+SizalWIsQmjtYoI3XFm HNh+DCbuGdtvzYivKXj7FPtr76aJm1jzhqoYDA84q5crlrB9YPAyYKA5PhQm0iZP cR8TkrDkgvpIETT3dalsL4snhlbC+i8Lg4+ZnGRmtUgXeLy8RFib+LNDiR6POeji vHehx6y1ppQ3gseXaNEvrx6gIkLfUjEXSC4uqhm/4cenn4P3WQq9W5XTZxLSq48G fuxPE354Ev2NDcCD0yTnYH9Mo1MpXeCCRNPe/NvGdEX1k8FgtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK7QOQvI22f2fBO5ZAJZwggGfA1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvYjg2YTRlYzMtYTNiNS00 ZDcyLWJlZTItZjU4YzNjZGUwMWExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCH4DEdDuZAEpP0YS2CntIo Elk3aAuqP8DOx08wrq+Df+RD7tCKLAkYwLLXp4R/R0tNUa6G1szErYA1Ny0iSqiv iW6jw/cWSl8iOdqKM0v8jkqbmutyMKcCx+L731ktaFJBwPHow8tFwpbjs7Xq+Ry0 baj888LPTra/S1bhpNToRhhOlxHQ4BOHg+gKFuJH65tc8us5vPSTGDEKYPu+pJkn MIkVXQYE5n2y4cjUghV1ca+gDnd7IaJVE4vybu4SgszDVfM4+rQ9Ef0nbK8hh/Wd WWzucAUxPWIRom5s2D8D8YJ+I4l2UYD+/8ZlNvjH9KiZDXLJ5DeSahgQOXhc4FLl -----END CERTIFICATE-----Generated at Mon Aug 4 14:00:16 2025 by rpki-client