$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft File: 12a9b198-d23d-4f41-8397-cc467b398bc3.mft (raw, json) Hash identifier: kASMEYcStE7T3PWJTDsvnFxLPc7B0lX+RApRaRLCnGc= Subject key identifier: B3:13:CB:89:77:1A:C5:46:BD:28:35:47:BD:8D:F6:13:41:F0:B6:2C Authority key identifier: 72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 Certificate issuer: /CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Certificate serial: 010D0C9F4328584A6218E0290B3257FF534B3A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft Manifest number: 010D0C9F4328584073A8494E35EF9969DC5DD4A4 Signing time: Wed 02 Jul 2025 09:00:03 +0000 Manifest this update: Wed 02 Jul 2025 09:00:03 +0000 Manifest next update: Sat 05 Jul 2025 09:00:00 +0000 Files and hashes: 1: 12a9b198-d23d-4f41-8397-cc467b398bc3.crl (hash: 0YgB5MPSYxDXuuJputVeKmSj9L8AgYMIYztleNgJE3M=) 2: 20b12159-fae1-324b-856e-4ffaaa0299f4.roa (hash: +zpUQ84/T4WcYeVvR8sR2R+HVzagVGRBTVI09njHkdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:18:e0:29:0b:32:57:ff:53:4b:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a9b198-d23d-4f41-8397-cc467b398bc3 Validity Not Before: Jul 2 09:00:03 2025 GMT Not After : Jul 5 09:00:00 2025 GMT Subject: CN=a8dbce07-b9f3-4143-8eff-1ea01176a1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:3a:cd:27:20:e1:7b:3a:3f:8b:69:39:3c: f0:d0:7a:23:1a:49:c7:fd:1e:1c:94:50:1e:5e:6a: 09:a5:fb:49:ef:a6:91:04:aa:7d:ca:a9:b4:8c:11: f6:0b:77:42:e2:5b:36:cc:65:a7:4d:a5:0f:51:f4: d0:77:12:62:30:15:bd:d4:09:0e:e1:98:80:a7:5d: c8:07:47:db:76:50:2c:d2:5c:f4:a1:ad:07:b6:34: dd:7a:9b:56:d3:b5:c7:7d:eb:7a:0c:bf:f5:3b:a1: 87:ad:ae:3a:b6:50:ba:02:7e:4d:e2:86:b0:69:dc: 3b:14:90:e6:85:d9:c1:64:57:a2:c1:82:c0:c4:22: 02:c9:c2:e5:f7:69:ff:8a:dd:e2:21:ac:78:c9:1d: d1:34:d5:7a:8f:35:2e:1a:9a:3e:f3:c2:73:8e:2f: e4:a7:12:11:ea:92:fb:55:8e:d3:25:12:ab:b0:5b: 60:80:f7:14:c3:1b:ac:4b:6a:0b:fb:ff:84:bf:1f: 2b:6d:4a:34:0e:8c:8b:8f:14:ef:52:8d:85:b7:d8: 7e:6a:e2:3e:64:e8:6f:7a:cc:c9:ed:b1:e7:34:6d: 06:b9:f1:86:a2:5f:03:c3:e3:cf:f5:69:a3:16:7a: 97:1f:23:88:9b:de:d3:99:c8:37:f1:7a:b2:aa:8e: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:13:CB:89:77:1A:C5:46:BD:28:35:47:BD:8D:F6:13:41:F0:B6:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3/12a9b198-d23d-4f41-8397-cc467b398bc3.crl X509v3 Authority Key Identifier: keyid:72:84:0D:43:69:6F:2A:43:67:22:ED:6B:46:20:A3:82:9C:45:47:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/12a9b198-d23d-4f41-8397-cc467b398bc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b0:51:b9:99:d0:78:d1:01:74:ed:d7:30:05:1e:f3:4b:3f: 3b:69:de:6a:35:6c:2f:92:f7:96:9c:bc:15:05:db:6e:75:4e: bb:aa:e6:07:94:d2:90:d8:bc:93:ee:0d:16:c4:5a:56:5d:e1: f9:1e:4c:e5:51:77:80:26:dc:04:3d:27:47:fe:4b:98:a3:dc: c4:fc:8d:5f:87:cc:2a:77:86:ce:21:54:14:6b:c3:ff:4b:71: 36:5d:64:d0:78:56:42:69:c2:7d:ef:f7:bb:af:cd:e1:e8:fe: 81:1a:64:0a:17:be:a5:ce:1b:b1:21:e2:01:84:2f:3f:f8:3e: 4f:51:3b:89:99:64:98:3b:38:ea:63:ca:67:b9:d6:02:d9:05: 1b:76:ce:d0:b7:7d:25:61:41:3c:b4:9a:4e:8f:34:31:5d:55: 59:a1:cb:a8:d7:5e:6d:47:f0:dc:5b:c1:e4:95:1f:c0:f9:cf: 2f:aa:b0:94:c5:4a:5e:ce:f4:e1:f7:9e:83:1a:e9:02:d8:67: 71:f4:b6:1e:7a:81:c0:bc:73:e5:ae:72:db:48:de:4e:b7:60: 51:a7:4a:f7:07:26:90:fa:e5:0c:29:c4:8f:6c:97:e4:03:ab: 8f:0f:67:09:c4:db:bb:ca:c8:7c:46:c3:62:3b:4c:c1:69:8c: 16:02:88:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpiGOApCzJX/1NLOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJhOWIxOTgtZDIzZC00ZjQxLTgzOTctY2M0NjdiMzk4 YmMzMB4XDTI1MDcwMjA5MDAwM1oXDTI1MDcwNTA5MDAwMFowLzEtMCsGA1UEAxMk YThkYmNlMDctYjlmMy00MTQzLThlZmYtMWVhMDExNzZhMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMc6zScg4Xs6P4tpOTzw0HojGknH/R4clFAe XmoJpftJ76aRBKp9yqm0jBH2C3dC4ls2zGWnTaUPUfTQdxJiMBW91AkO4ZiAp13I B0fbdlAs0lz0oa0HtjTdeptW07XHfet6DL/1O6GHra46tlC6An5N4oawadw7FJDm hdnBZFeiwYLAxCICycLl92n/it3iIax4yR3RNNV6jzUuGpo+88Jzji/kpxIR6pL7 VY7TJRKrsFtggPcUwxusS2oL+/+Evx8rbUo0DoyLjxTvUo2Ft9h+auI+ZOhveszJ 7bHnNG0GufGGol8Dw+PP9WmjFnqXHyOIm97Tmcg38Xqyqo52SQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMTy4l3GsVGvSg1R72N9hNB8LYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5 YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2N2IzOThiYzMvMTJhOWIxOTgtZDIzZC00 ZjQxLTgzOTctY2M0NjdiMzk4YmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTJhOWIxOTgtZDIzZC00ZjQxLTgz OTctY2M0NjdiMzk4YmMzLzEyYTliMTk4LWQyM2QtNGY0MS04Mzk3LWNjNDY3YjM5 OGJjMy5jcmwwHwYDVR0jBBgwFoAUcoQNQ2lvKkNnIu1rRiCjgpxFRzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMmE5YjE5OC1kMjNkLTRmNDEtODM5Ny1jYzQ2 N2IzOThiYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1sFG5mdB40QF07dcwBR7z Sz87ad5qNWwvkveWnLwVBdtudU67quYHlNKQ2LyT7g0WxFpWXeH5HkzlUXeAJtwE PSdH/kuYo9zE/I1fh8wqd4bOIVQUa8P/S3E2XWTQeFZCacJ97/e7r83h6P6BGmQK F76lzhuxIeIBhC8/+D5PUTuJmWSYOzjqY8pnudYC2QUbds7Qt30lYUE8tJpOjzQx XVVZocuo115tR/DcW8HklR/A+c8vqrCUxUpezvTh956DGukC2Gdx9LYeeoHAvHPl rnLbSN5Ot2BRp0r3ByaQ+uUMKcSPbJfkA6uPD2cJxNu7ysh8RsNiO0zBaYwWAojl -----END CERTIFICATE-----Generated at Thu Jul 3 00:46:46 2025 by rpki-client