$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft File: 1f1c0c08-444d-43e6-923b-55c2d71244e4.mft (raw, json) Hash identifier: 0zxiSPVGXIGKxpp9K8FJv2yvygKKY5KiStE8dDLQG+g= Subject key identifier: 86:1F:39:B3:AB:6C:81:19:58:D3:2C:C5:87:A1:62:CA:EA:96:48:E3 Authority key identifier: 4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16 Certificate issuer: /CN=1f1c0c08-444d-43e6-923b-55c2d71244e4 Certificate serial: 010D0C9F4328584A5ED71335B3353F07E66FA300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft Manifest number: 010D0C9F4328584073A83FD3B86A6F6E35B99CD1 Signing time: Tue 01 Jul 2025 05:00:03 +0000 Manifest this update: Tue 01 Jul 2025 05:00:03 +0000 Manifest next update: Thu 03 Jul 2025 05:00:00 +0000 Files and hashes: 1: 1f1c0c08-444d-43e6-923b-55c2d71244e4.crl (hash: vsVx8RdxMttGM9cOOYqe5oQI8O4Da73sARyj7ELbXoM=) 2: f8c13836-c165-39bc-9bda-e76385fde4be.roa (hash: P8+n8NZfAUM9R8M4qAZKKtaVzr2mL2uX4abetHUhzno=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:d7:13:35:b3:35:3f:07:e6:6f:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1c0c08-444d-43e6-923b-55c2d71244e4 Validity Not Before: Jul 1 05:00:03 2025 GMT Not After : Jul 3 05:00:00 2025 GMT Subject: CN=9154dc91-148a-4673-99af-71bb129c8af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:e0:30:24:af:4d:0d:4c:a6:62:b3:32:34: cd:d6:49:b6:9a:25:81:47:5c:cd:fb:df:e0:b9:94: e5:c0:66:88:a6:ef:7a:b8:50:fc:25:66:34:67:3b: d4:9e:5c:ac:d2:70:85:7b:08:14:5c:46:5d:b7:e9: f6:fc:1b:8d:50:24:7a:b4:fc:a1:ba:d5:f0:dd:f8: 06:6d:96:7c:f5:c7:42:6a:3e:12:57:75:c8:cd:2c: 82:f9:1a:a2:e9:c2:38:99:30:05:27:7e:f9:cc:2a: 2a:27:08:c5:8a:02:fe:fe:7d:de:ba:06:99:9e:47: c2:57:15:64:a9:2b:60:e0:6a:2b:65:f6:bd:4b:b7: 69:5d:31:7a:f7:e1:ec:6b:66:32:a9:24:20:a3:4a: 16:fb:ad:46:83:5c:e8:b7:ba:c3:e7:d3:54:27:28: 10:b5:2c:5d:d5:e2:3c:f2:84:1b:98:77:da:64:71: e4:60:d5:43:65:7f:3f:cc:3a:ac:e7:44:83:ad:3e: db:89:f8:29:ab:f0:30:36:46:f0:e0:d9:8c:1b:4d: 0f:61:1b:fd:86:24:55:22:4e:71:8a:9e:1a:4d:b5: 38:6c:69:01:07:bc:0a:38:f7:67:6d:1b:ab:dc:85: ca:b1:9f:8d:ca:d7:f2:6e:6c:81:ff:ac:77:d3:a3: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:39:B3:AB:6C:81:19:58:D3:2C:C5:87:A1:62:CA:EA:96:48:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4/1f1c0c08-444d-43e6-923b-55c2d71244e4.crl X509v3 Authority Key Identifier: keyid:4B:D4:90:27:6C:37:FF:DF:57:06:1E:69:C5:A0:95:7A:E8:06:FA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1f1c0c08-444d-43e6-923b-55c2d71244e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cd:02:4d:fa:5c:44:68:f9:86:c0:54:be:02:ac:68:3d:ad: 0c:f9:c5:92:f6:16:d0:cc:b1:f6:21:05:4a:85:ca:ff:46:24: 47:0f:c2:ac:78:21:cf:bd:61:c6:0f:11:3c:b3:07:eb:e9:7f: 45:87:96:1a:b0:eb:15:0a:1e:2e:93:52:42:0e:76:ee:27:e8: 37:cd:23:a0:c4:fe:c3:ad:2e:13:89:02:06:07:e0:b5:6c:22: 84:09:53:48:d2:f5:73:5c:82:d7:d5:13:a6:16:f8:da:72:2b: 1e:73:29:88:b4:11:fc:e4:62:fe:3e:62:15:7c:f3:5f:d8:8f: 20:71:55:89:ea:a2:3d:b1:38:8d:5c:8c:d5:47:92:e1:7b:01: 8c:f8:18:2b:e0:83:41:f7:58:8e:80:0c:84:82:f0:8d:1d:53: fa:ee:e7:83:43:5e:c2:c5:e3:cf:39:6a:85:7d:22:ca:6c:58: b9:67:19:d4:55:0e:ce:16:c3:3b:36:79:f4:c0:26:05:5f:46: 28:43:12:fb:18:88:f1:73:34:f5:21:a4:6a:8b:73:d5:b9:95: 81:2f:8d:4e:d0:18:66:ed:56:db:58:65:04:1f:f8:74:58:1a: 34:db:3e:61:18:29:2a:dc:1d:50:fa:48:b4:11:9b:e4:b5:8a: a1:57:50:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpe1xM1szU/B+ZvowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxYzBjMDgtNDQ0ZC00M2U2LTkyM2ItNTVjMmQ3MTI0 NGU0MB4XDTI1MDcwMTA1MDAwM1oXDTI1MDcwMzA1MDAwMFowLzEtMCsGA1UEAxMk OTE1NGRjOTEtMTQ4YS00NjczLTk5YWYtNzFiYjEyOWM4YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7bgMCSvTQ1MpmKzMjTN1km2miWBR1zN+9/g uZTlwGaIpu96uFD8JWY0ZzvUnlys0nCFewgUXEZdt+n2/BuNUCR6tPyhutXw3fgG bZZ89cdCaj4SV3XIzSyC+Rqi6cI4mTAFJ375zCoqJwjFigL+/n3eugaZnkfCVxVk qStg4GorZfa9S7dpXTF69+Hsa2YyqSQgo0oW+61Gg1zot7rD59NUJygQtSxd1eI8 8oQbmHfaZHHkYNVDZX8/zDqs50SDrT7bifgpq/AwNkbw4NmMG00PYRv9hiRVIk5x ip4aTbU4bGkBB7wKOPdnbRur3IXKsZ+NytfybmyB/6x306MvkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIYfObOrbIEZWNMsxYehYsrqlkjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFj MGMwOC00NDRkLTQzZTYtOTIzYi01NWMyZDcxMjQ0ZTQvMWYxYzBjMDgtNDQ0ZC00 M2U2LTkyM2ItNTVjMmQ3MTI0NGU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWYxYzBjMDgtNDQ0ZC00M2U2LTky M2ItNTVjMmQ3MTI0NGU0LzFmMWMwYzA4LTQ0NGQtNDNlNi05MjNiLTU1YzJkNzEy NDRlNC5jcmwwHwYDVR0jBBgwFoAUS9SQJ2w3/99XBh5pxaCVeugG+hYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZjFjMGMwOC00NDRkLTQzZTYtOTIzYi01NWMy ZDcxMjQ0ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJzQJN+lxEaPmGwFS+Aqxo Pa0M+cWS9hbQzLH2IQVKhcr/RiRHD8KseCHPvWHGDxE8swfr6X9Fh5YasOsVCh4u k1JCDnbuJ+g3zSOgxP7DrS4TiQIGB+C1bCKECVNI0vVzXILX1ROmFvjacisecymI tBH85GL+PmIVfPNf2I8gcVWJ6qI9sTiNXIzVR5LhewGM+Bgr4INB91iOgAyEgvCN HVP67ueDQ17CxePPOWqFfSLKbFi5ZxnUVQ7OFsM7Nnn0wCYFX0YoQxL7GIjxczT1 IaRqi3PVuZWBL41O0Bhm7VbbWGUEH/h0WBo02z5hGCkq3B1Q+ki0EZvktYqhV1CA -----END CERTIFICATE-----Generated at Wed Jul 2 04:14:03 2025 by rpki-client