$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft File: 28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json) Hash identifier: O6yW2FstkmlFtxkhLnuFSXcBfxb1jn/Yb/6IVltSo0E= Subject key identifier: B8:A0:F2:40:F6:5A:45:18:33:54:86:61:8A:61:86:09:38:9F:C2:06 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584A61FB24E9B21068E1A3AFA100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft Manifest number: 010D0C9F4328584073A84793D8858966B5716341 Signing time: Wed 02 Jul 2025 08:00:08 +0000 Manifest this update: Wed 02 Jul 2025 08:00:08 +0000 Manifest next update: Sat 05 Jul 2025 08:00:00 +0000 Files and hashes: 1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: 6mCtWOrCU7yZSu63p0bi1qdHEPoLLVdEdbp3Yr/l8Zg=) 2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: YUUsUgxukIJu0+btURfRRwCfb7mZJjDs1IMNbXcN20g=) 3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: 2oBXkyPpE0ctnrmQz4kR3HQm45/4dO3IRA8vfUG+7Jc=) 4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: l4Fx9P1V5vrBLBJv/QzTwJeSTKQt1mHx+A4YQ4P+kFk=) 5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: Bx92XKL1Ee2oCJNVBMHYzEAT6cKDiw9Ib/eGVHkZkH4=) 6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: gXjDDRpozX1zYOKaKcLycNJ990uKHjGBwE8j3+iUevw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:fb:24:e9:b2:10:68:e1:a3:af:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Jul 2 08:00:08 2025 GMT Not After : Jul 5 08:00:00 2025 GMT Subject: CN=eab981b5-9432-4ef9-a3c1-4cd7d3a3bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:52:a7:d6:92:09:52:fa:61:22:16:fa:b7: 43:77:04:78:07:86:ea:0b:4f:55:4b:a1:0b:69:e5: 25:72:bb:52:2d:ff:88:ce:f3:f3:8d:5d:f0:f3:61: 06:ea:8a:2e:1b:cc:37:a1:5e:5d:ba:d7:9c:d8:4b: e8:6e:75:67:93:e8:b7:c6:01:cb:d0:23:9d:f2:21: 00:51:0e:79:cc:9b:a4:43:44:26:74:dc:9a:3b:a7: 6b:82:71:5b:98:eb:05:b9:a6:67:31:82:9c:cf:d5: d5:47:41:82:35:7b:89:75:fe:03:e6:31:fd:dc:20: d0:f2:00:d7:99:ac:80:81:c7:db:9f:c8:f9:e8:96: e5:53:92:0f:f2:95:32:ce:93:23:87:d1:72:f9:84: 86:b2:58:90:18:fb:40:cb:24:73:4a:66:3f:11:9c: e1:ea:ce:33:c1:34:5c:88:6b:37:ba:ca:0c:37:14: a9:05:95:8d:87:b1:82:03:70:0c:64:9e:03:3b:42: a1:0a:3d:58:a7:bc:d9:20:3a:0b:5b:1c:2d:d3:c7: 04:02:63:fd:d5:a3:63:65:0e:1a:72:43:25:31:e4: 7d:53:9c:fa:77:a9:2d:b0:4f:7c:7f:e5:df:11:a9: c7:df:78:80:24:b7:8b:ae:50:2d:b5:c1:69:5d:6e: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A0:F2:40:F6:5A:45:18:33:54:86:61:8A:61:86:09:38:9F:C2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:58:5c:c0:03:06:6d:23:0b:34:d5:8e:7b:e3:d9:c2:fa:83: 13:cf:93:29:fd:7c:9e:70:f0:17:0b:88:50:40:ae:37:de:25: 22:62:f0:2c:6b:4b:47:0d:69:c2:4f:b7:7a:08:a2:3a:1a:66: 45:44:5c:4e:be:fd:43:e5:9a:e8:4a:e3:b7:a9:f5:ea:6c:be: 02:b7:1c:0f:f2:80:a1:b0:51:74:22:fc:00:91:87:70:ee:9f: ab:3e:f2:18:20:0a:85:94:7c:c5:cd:86:e6:92:61:ae:bb:20: 7b:ce:c0:01:c8:06:0b:ce:74:41:d3:6d:30:3e:85:c5:98:30: 66:12:46:4d:84:a6:e3:42:c6:50:94:0c:e3:e7:68:87:0e:47: f7:bf:e4:e7:71:7b:f6:b9:da:d3:be:55:cc:08:bd:ed:77:d3: 99:a9:23:86:12:35:f1:87:b9:d8:80:53:c7:77:02:0a:a3:56: d6:4a:79:9c:e2:ec:e0:d9:53:7d:81:70:b4:56:f1:3b:62:fd: 3d:4b:cc:a7:4e:4f:24:d8:80:2d:19:da:16:d8:f7:98:5d:f1: 5f:0c:ee:07:3f:0c:6b:28:d5:c9:cc:e5:5b:2e:4e:b0:dd:f0: b5:af:d4:c5:6d:88:22:23:7f:10:c6:26:53:8c:b1:84:3b:28: 5e:6d:81:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEph+yTpshBo4aOvoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MDcwMjA4MDAwOFoXDTI1MDcwNTA4MDAwMFowLzEtMCsGA1UEAxMk ZWFiOTgxYjUtOTQzMi00ZWY5LWEzYzEtNGNkN2QzYTNiYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JVSp9aSCVL6YSIW+rdDdwR4B4bqC09VS6EL aeUlcrtSLf+IzvPzjV3w82EG6oouG8w3oV5dutec2EvobnVnk+i3xgHL0COd8iEA UQ55zJukQ0QmdNyaO6drgnFbmOsFuaZnMYKcz9XVR0GCNXuJdf4D5jH93CDQ8gDX mayAgcfbn8j56JblU5IP8pUyzpMjh9Fy+YSGsliQGPtAyyRzSmY/EZzh6s4zwTRc iGs3usoMNxSpBZWNh7GCA3AMZJ4DO0KhCj1Yp7zZIDoLWxwt08cEAmP91aNjZQ4a ckMlMeR9U5z6d6ktsE98f+XfEanH33iAJLeLrlAttcFpXW7CFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLig8kD2WkUYM1SGYYphhgk4n8IGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvMjg1OTFiOTUtMzlkNy00 ZTU0LTkwZjMtMTMzOTMzOGI4NDJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDTWFzAAwZtIws01Y5749nC +oMTz5Mp/XyecPAXC4hQQK433iUiYvAsa0tHDWnCT7d6CKI6GmZFRFxOvv1D5Zro SuO3qfXqbL4CtxwP8oChsFF0IvwAkYdw7p+rPvIYIAqFlHzFzYbmkmGuuyB7zsAB yAYLznRB020wPoXFmDBmEkZNhKbjQsZQlAzj52iHDkf3v+TncXv2udrTvlXMCL3t d9OZqSOGEjXxh7nYgFPHdwIKo1bWSnmc4uzg2VN9gXC0VvE7Yv09S8ynTk8k2IAt GdoW2PeYXfFfDO4HPwxrKNXJzOVbLk6w3fC1r9TFbYgiI38QxiZTjLGEOyhebYEI -----END CERTIFICATE-----Generated at Wed Jul 2 19:29:57 2025 by rpki-client