$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft File: 4c7bb7c9-9462-45de-9a96-5887b6042f79.mft (raw, json) Hash identifier: Y2Q2RvEEaUllF5h3xYAVQn3EW0aZNQhhzb5FOdUvlMs= Subject key identifier: 2C:74:CD:CF:29:62:06:77:1A:D7:FC:94:C9:4F:9F:47:50:56:81:E9 Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 Certificate issuer: /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Certificate serial: 010D0C9F4328584A5FC54E4CB71D2463ECA954C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft Manifest number: 010D0C9F4328584073A8552C1E7F02A5CF81D663 Signing time: Tue 01 Jul 2025 13:00:03 +0000 Manifest this update: Tue 01 Jul 2025 13:00:03 +0000 Manifest next update: Thu 03 Jul 2025 13:00:00 +0000 Files and hashes: 1: 4c7bb7c9-9462-45de-9a96-5887b6042f79.crl (hash: Qt2/GzyTPcJtQFH6nwkeKwqEkbPKTYSFMt9+bXTYRbs=) 2: dc37949b-fd68-31d3-8530-d51a972e599a.roa (hash: dkAc8/h9bBfbeMnb29r+Xfee8RF1m9rNacEpHs1WZ4M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:4e:4c:b7:1d:24:63:ec:a9:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Validity Not Before: Jul 1 13:00:03 2025 GMT Not After : Jul 3 13:00:00 2025 GMT Subject: CN=810912bc-dff5-4188-b12d-3a605d190a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:42:56:c5:4d:dd:2f:5d:f2:12:d8:34:b0:41: 6c:c3:26:7f:9d:4c:4e:db:73:b9:f6:bf:f0:4f:fd: 5e:a3:9a:29:cb:0c:e5:fc:09:c1:1d:d0:59:80:9f: b3:83:39:3f:52:39:b9:bb:e8:a6:00:cf:3c:37:c5: 18:58:be:88:c4:03:82:42:71:67:80:aa:f8:67:59: 2a:8b:19:dd:54:f3:00:2c:28:c0:d5:b8:f9:08:73: e9:17:32:4f:9f:e8:5d:ff:b5:55:1f:a6:d4:17:40: e1:28:1b:30:91:cf:da:e7:62:c2:61:56:d7:e5:b6: b2:ab:4b:c6:00:92:5b:8c:c9:f4:11:c8:5e:71:1e: b9:1d:be:b0:ce:64:2a:2b:da:c7:58:1c:b8:9a:c6: d2:46:11:68:9b:1b:69:a6:8c:7f:58:2a:ae:0c:56: 59:1f:13:cc:ec:d1:d5:0a:c9:74:ab:71:6f:29:5b: f8:de:6c:38:f8:5e:98:d1:31:cb:14:0e:06:79:62: 84:b3:85:7a:b4:98:1e:26:c4:b9:57:e1:ef:8d:25: a8:4a:23:b6:3b:ae:2e:f4:09:93:ec:62:3e:99:22: c2:23:7b:b8:f5:e5:7d:a7:b8:dd:de:84:fc:a7:9e: 59:5d:69:27:1c:46:cf:fa:d1:93:ff:eb:06:87:05: bf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:74:CD:CF:29:62:06:77:1A:D7:FC:94:C9:4F:9F:47:50:56:81:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl X509v3 Authority Key Identifier: keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:72:79:71:ab:a3:c4:53:ff:ba:03:d8:b7:05:74:56:0c:43: d6:53:6c:10:53:59:bf:ed:cb:b2:46:dd:88:19:d0:68:0b:2a: e1:3f:10:9e:d9:0f:d5:22:f9:18:3e:cc:4e:88:72:e4:52:9a: 05:6e:8e:af:87:80:43:68:d7:45:5c:df:40:bc:a9:3b:cf:10: 44:1e:ad:be:dd:b6:dc:32:92:dd:ab:7f:78:4b:5c:2a:54:30: b4:70:90:71:14:71:5a:54:05:96:ff:ac:ac:ce:b0:2d:16:87: a7:fc:b4:9d:62:82:1f:8c:cf:ef:96:00:de:e8:51:a9:3f:58: 2d:5f:71:e8:be:49:5d:2a:d0:56:b6:dc:18:87:21:62:c2:f8: 73:f6:cb:e1:8a:b3:d8:83:c2:b9:bb:0b:c2:86:62:a7:e9:74: 8b:e4:7c:33:5e:63:70:10:96:2c:fd:6c:21:41:aa:84:87:76: 78:62:55:fe:63:b8:5b:f3:03:4b:d1:8d:7e:0e:91:af:e3:94: cb:e0:54:07:b2:57:01:c0:f4:d8:8c:cd:fb:ad:c7:99:d0:6e: e5:50:49:84:be:6a:5d:6e:75:45:27:f8:e3:fa:e9:bf:78:c3: f8:97:43:e8:3d:62:dd:4e:1d:39:bc:b8:02:0c:8f:81:14:f8: 49:86:fc:48 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfxU5Mtx0kY+ypVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YmI3YzktOTQ2Mi00NWRlLTlhOTYtNTg4N2I2MDQy Zjc5MB4XDTI1MDcwMTEzMDAwM1oXDTI1MDcwMzEzMDAwMFowLzEtMCsGA1UEAxMk ODEwOTEyYmMtZGZmNS00MTg4LWIxMmQtM2E2MDVkMTkwYTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kJWxU3dL13yEtg0sEFswyZ/nUxO23O59r/w T/1eo5opywzl/AnBHdBZgJ+zgzk/Ujm5u+imAM88N8UYWL6IxAOCQnFngKr4Z1kq ixndVPMALCjA1bj5CHPpFzJPn+hd/7VVH6bUF0DhKBswkc/a52LCYVbX5bayq0vG AJJbjMn0EchecR65Hb6wzmQqK9rHWBy4msbSRhFomxtppox/WCquDFZZHxPM7NHV Csl0q3FvKVv43mw4+F6Y0THLFA4GeWKEs4V6tJgeJsS5V+HvjSWoSiO2O64u9AmT 7GI+mSLCI3u49eV9p7jd3oT8p55ZXWknHEbP+tGT/+sGhwW/+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCx0zc8pYgZ3Gtf8lMlPn0dQVoHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Yzdi YjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3YjYwNDJmNzkvNGM3YmI3YzktOTQ2Mi00 NWRlLTlhOTYtNTg4N2I2MDQyZjc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM3YmI3YzktOTQ2Mi00NWRlLTlh OTYtNTg4N2I2MDQyZjc5LzRjN2JiN2M5LTk0NjItNDVkZS05YTk2LTU4ODdiNjA0 MmY3OS5jcmwwHwYDVR0jBBgwFoAU2t23pTaJ1kBUpmtBcQSh9ASegwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzdiYjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3 YjYwNDJmNzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJcnlxq6PEU/+6A9i3BXRW DEPWU2wQU1m/7cuyRt2IGdBoCyrhPxCe2Q/VIvkYPsxOiHLkUpoFbo6vh4BDaNdF XN9AvKk7zxBEHq2+3bbcMpLdq394S1wqVDC0cJBxFHFaVAWW/6yszrAtFoen/LSd YoIfjM/vlgDe6FGpP1gtX3HovkldKtBWttwYhyFiwvhz9svhirPYg8K5uwvChmKn 6XSL5HwzXmNwEJYs/WwhQaqEh3Z4YlX+Y7hb8wNL0Y1+DpGv45TL4FQHslcBwPTY jM37rceZ0G7lUEmEvmpdbnVFJ/jj+um/eMP4l0PoPWLdTh05vLgCDI+BFPhJhvxI -----END CERTIFICATE-----Generated at Tue Jul 1 18:14:01 2025 by rpki-client