$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft File: 03aa7869-00ee-4a38-9822-b5f285ade0c3.mft (raw, json) Hash identifier: pPPB3lhBUok4PsD1DWyU/RVITe8onmd2hNB610LLnXw= Subject key identifier: 9E:71:9C:21:8B:9A:99:36:79:75:4C:5D:8A:DD:57:15:DE:6D:3D:EC Authority key identifier: B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3 Certificate issuer: /CN=03aa7869-00ee-4a38-9822-b5f285ade0c3 Certificate serial: 010D0C9F4328584A5CFAA90C015DA1E064A42000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft Manifest number: 010D0C9F4328584073A8551217A1309A69CD96E1 Signing time: Mon 30 Jun 2025 13:00:08 +0000 Manifest this update: Mon 30 Jun 2025 13:00:08 +0000 Manifest next update: Thu 03 Jul 2025 13:00:00 +0000 Files and hashes: 1: 03aa7869-00ee-4a38-9822-b5f285ade0c3.crl (hash: rDhrI7ih83g8J68KXfg4C/xY6JrmL9im1MjWfevScD4=) 2: 736f6207-67a5-36c6-aa84-fc58d77c2dab.roa (hash: UIGq3GiLkF2sPDgexmMPg2CyJGtRmuLZOro58gZO+tc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fa:a9:0c:01:5d:a1:e0:64:a4:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03aa7869-00ee-4a38-9822-b5f285ade0c3 Validity Not Before: Jun 30 13:00:08 2025 GMT Not After : Jul 3 13:00:00 2025 GMT Subject: CN=c1a3aff1-ec2e-413f-9450-a2a983f30241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:99:61:58:9e:ea:1e:0d:97:b4:52:41:ce: e9:2d:26:df:31:b7:2f:8f:f1:59:aa:5a:5e:25:e0: 44:e9:13:db:38:62:1e:4b:46:b6:fd:37:f9:34:4e: bb:8d:b3:a3:e7:b0:b7:dd:87:d5:56:13:ae:f9:3a: 3b:1e:36:6d:35:e2:18:7f:bd:d3:df:de:10:d3:cb: 2d:a5:17:87:0c:7e:fd:da:45:11:72:4d:84:d2:ae: 2b:a0:1d:7b:8b:0f:f0:3b:e6:20:e1:4a:0c:0e:b8: 63:c8:17:fd:e8:c6:f8:6a:ea:35:ad:f3:12:0f:1a: 31:cd:c7:c7:30:d3:aa:30:ce:03:27:d2:a9:a7:94: 22:53:42:8d:59:cd:23:08:17:14:11:2e:cf:ef:25: 86:64:a3:82:4e:96:c6:1a:9e:cf:52:e2:c4:59:7e: 19:a1:95:68:31:1e:bb:64:34:63:7a:b7:87:4f:b8: ab:c1:b8:9a:e1:b2:27:a7:69:b3:df:1b:5f:45:f7: c1:2f:b4:cd:70:3d:bb:c8:1a:05:78:02:6b:19:e9: 28:fe:f9:cd:d4:76:02:39:15:bf:1d:62:f1:c1:ac: 4d:93:92:18:77:74:f6:62:74:94:f8:8c:80:2a:c2: 64:1a:62:43:af:97:ec:8d:bd:aa:b4:16:35:4b:fb: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:71:9C:21:8B:9A:99:36:79:75:4C:5D:8A:DD:57:15:DE:6D:3D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.crl X509v3 Authority Key Identifier: keyid:B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:46:89:f8:d2:b0:48:c1:7d:98:ac:57:ff:1b:8c:d7:86:b9: 21:a9:3a:da:5e:09:42:b1:ca:b0:20:33:32:20:ff:77:23:a0: 55:43:3f:60:94:e5:71:5f:7f:f9:95:53:e6:f8:04:5f:b7:90: 6c:2b:1d:8d:5d:d5:4b:a3:02:8a:53:5d:cd:96:98:53:c6:d4: 35:a5:06:db:ba:2f:07:44:47:d7:3e:7a:a5:5e:6f:8d:d1:4e: a6:ab:51:d5:86:eb:2c:9f:05:b3:26:dc:b7:cc:e4:64:35:21: 22:76:47:81:49:32:9e:03:03:c9:94:55:06:37:c5:c1:22:fb: a2:b0:74:b4:be:9f:e4:ac:97:3e:af:eb:d1:79:f5:83:44:b4: 96:81:48:31:6d:17:97:da:26:0a:95:54:e7:78:6e:71:e8:1c: 8e:42:52:9d:b4:c3:53:89:12:28:5d:93:bc:fe:fe:5d:65:97: 01:41:c9:a7:d1:1a:31:92:b8:08:c8:52:d6:38:3a:7b:2b:12: 18:4a:9c:ea:75:18:24:bd:2e:6a:d1:ed:25:fe:9c:2f:d2:5c: 1e:a5:6c:b2:c3:50:01:35:c3:fa:83:40:16:2d:c3:8e:6d:c1: eb:51:fb:4f:52:dc:3d:7b:27:72:64:8c:21:fe:98:2d:12:28: 2b:36:e7:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpc+qkMAV2h4GSkIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNhYTc4NjktMDBlZS00YTM4LTk4MjItYjVmMjg1YWRl MGMzMB4XDTI1MDYzMDEzMDAwOFoXDTI1MDcwMzEzMDAwMFowLzEtMCsGA1UEAxMk YzFhM2FmZjEtZWMyZS00MTNmLTk0NTAtYTJhOTgzZjMwMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg2ZYVie6h4Nl7RSQc7pLSbfMbcvj/FZqlpe JeBE6RPbOGIeS0a2/Tf5NE67jbOj57C33YfVVhOu+To7HjZtNeIYf73T394Q08st pReHDH792kURck2E0q4roB17iw/wO+Yg4UoMDrhjyBf96Mb4auo1rfMSDxoxzcfH MNOqMM4DJ9Kpp5QiU0KNWc0jCBcUES7P7yWGZKOCTpbGGp7PUuLEWX4ZoZVoMR67 ZDRjereHT7irwbia4bInp2mz3xtfRffBL7TNcD27yBoFeAJrGeko/vnN1HYCORW/ HWLxwaxNk5IYd3T2YnSU+IyAKsJkGmJDr5fsjb2qtBY1S/tiYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ5xnCGLmpk2eXVMXYrdVxXebT3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wM2Fh Nzg2OS0wMGVlLTRhMzgtOTgyMi1iNWYyODVhZGUwYzMvMDNhYTc4NjktMDBlZS00 YTM4LTk4MjItYjVmMjg1YWRlMGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDNhYTc4NjktMDBlZS00YTM4LTk4 MjItYjVmMjg1YWRlMGMzLzAzYWE3ODY5LTAwZWUtNGEzOC05ODIyLWI1ZjI4NWFk ZTBjMy5jcmwwHwYDVR0jBBgwFoAUsfBKmHpzSprmP1YEPFIG36Nzd/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wM2FhNzg2OS0wMGVlLTRhMzgtOTgyMi1iNWYy ODVhZGUwYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDMRon40rBIwX2YrFf/G4zX hrkhqTraXglCscqwIDMyIP93I6BVQz9glOVxX3/5lVPm+ARft5BsKx2NXdVLowKK U13NlphTxtQ1pQbbui8HREfXPnqlXm+N0U6mq1HVhussnwWzJty3zORkNSEidkeB STKeAwPJlFUGN8XBIvuisHS0vp/krJc+r+vRefWDRLSWgUgxbReX2iYKlVTneG5x 6ByOQlKdtMNTiRIoXZO8/v5dZZcBQcmn0RoxkrgIyFLWODp7KxIYSpzqdRgkvS5q 0e0l/pwv0lwepWyyw1ABNcP6g0AWLcOObcHrUftPUtw9eydyZIwh/pgtEigrNucv -----END CERTIFICATE-----Generated at Tue Jul 1 11:47:18 2025 by rpki-client