$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft File: 67612b49-91a4-42d2-8352-16977b5d8e8a.mft (raw, json) Hash identifier: wYBzQygdgXXilfyGbS0lvNu5kEpd1/EdGUtnq6r6MDY= Subject key identifier: 46:9D:30:CC:E6:EF:25:4F:25:A0:7C:98:FE:C9:31:08:68:12:52:A1 Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69 Certificate issuer: /CN=67612b49-91a4-42d2-8352-16977b5d8e8a Certificate serial: 010D0C9F4328584A61BF8A23B5F0B263574CAA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft Manifest number: 010D0C9F4328584073A842D956FDA98F21E2FF23 Signing time: Wed 02 Jul 2025 06:00:03 +0000 Manifest this update: Wed 02 Jul 2025 06:00:03 +0000 Manifest next update: Sat 05 Jul 2025 06:00:00 +0000 Files and hashes: 1: 67612b49-91a4-42d2-8352-16977b5d8e8a.crl (hash: aJZm43wbgFJsTCGpmKk9lYq9pHHb6lROgHz2y3chf2o=) 2: ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (hash: xlNvdKmF5pM8kdLbSFTADpVU58LkrhXjoRmeccjI45Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:bf:8a:23:b5:f0:b2:63:57:4c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a Validity Not Before: Jul 2 06:00:03 2025 GMT Not After : Jul 5 06:00:00 2025 GMT Subject: CN=3f5b9caf-7cc6-4ac9-b659-d93644f378e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:f3:bb:d5:c7:fc:2a:64:61:84:2a:9f:94: 5b:2c:12:a9:e8:77:ef:e8:23:25:0a:4e:bc:c6:fb: 57:6b:2b:68:63:35:fa:31:ed:2c:5e:d9:1c:cf:a1: af:27:da:e7:ef:a7:cd:44:1c:89:c6:4e:50:58:76: 5c:30:ba:bf:bb:71:90:20:0c:91:0b:dc:57:d3:cd: c6:e9:76:9c:3b:48:3f:0b:21:45:39:ba:95:bd:c6: f2:4d:61:e1:eb:ff:45:55:d9:94:6b:48:ae:79:f1: fe:58:7d:9f:73:27:0b:04:1d:82:01:02:76:40:04: 84:c6:a5:e9:37:03:98:a0:b4:f4:fa:7b:15:97:37: 3b:c6:d3:73:29:c6:6d:69:bb:f4:26:c7:d5:9e:05: de:c5:9a:6b:5b:79:5c:54:c4:01:a5:67:bf:9d:43: 6f:7c:f1:d2:6d:aa:a6:25:20:a1:1a:04:b6:d4:31: 17:37:5c:93:d0:61:43:1c:47:a8:d0:d8:07:55:0d: 9e:14:66:c8:15:c5:d5:4d:eb:ff:36:9d:f0:38:92: bb:ba:44:08:28:41:db:16:aa:08:b4:31:af:47:3e: 4b:d8:77:9d:d3:95:fb:94:8d:2f:b4:3c:9b:aa:97: 77:35:c9:13:f3:e0:cf:8d:2a:b7:28:16:32:f9:13: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:30:CC:E6:EF:25:4F:25:A0:7C:98:FE:C9:31:08:68:12:52:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl X509v3 Authority Key Identifier: keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b9:9a:c2:b9:63:7c:76:36:1b:d4:58:35:55:93:f9:41:37: 9b:ea:e8:61:c0:f7:9e:c5:43:60:9f:f9:f6:01:21:c4:23:be: 81:9a:61:f1:e6:ac:bb:d1:59:6d:f0:1c:e3:f8:9a:84:19:1b: 08:fd:ff:0b:e4:22:b3:48:98:b0:d8:f4:35:88:ec:c0:c9:ed: 79:dd:87:87:66:66:09:d0:ce:af:44:f4:92:46:c8:65:60:06: 12:ed:d2:93:54:06:7e:a1:0c:58:ec:45:7e:d9:3d:5b:e3:0b: 23:eb:fc:6f:9d:67:a0:ea:ca:55:75:99:c9:92:cd:eb:c0:a2: 3a:68:db:7e:76:ac:94:15:7c:35:b3:57:b5:ba:e1:0e:70:95: 33:d2:0f:a5:0a:20:04:ab:f9:d1:ae:48:cc:eb:fe:0f:37:8c: 4f:34:6b:5c:0c:a6:96:86:f3:31:d7:a5:90:d9:81:09:36:2c: 57:24:d6:0c:a6:fa:d5:99:ef:88:94:07:27:f8:3c:5e:d8:8e: e3:84:84:bf:a7:ba:c6:06:56:d6:1a:65:4c:18:83:db:a2:c2: c5:0f:f0:3b:bb:72:eb:c5:75:df:f1:20:cb:d4:7e:20:88:5b: 7b:69:e0:e8:0a:db:c4:a8:dc:15:bf:76:99:7f:3f:36:e5:23: 9c:e0:59:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEphv4ojtfCyY1dMqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc2MTJiNDktOTFhNC00MmQyLTgzNTItMTY5NzdiNWQ4 ZThhMB4XDTI1MDcwMjA2MDAwM1oXDTI1MDcwNTA2MDAwMFowLzEtMCsGA1UEAxMk M2Y1YjljYWYtN2NjNi00YWM5LWI2NTktZDkzNjQ0ZjM3OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5zzu9XH/CpkYYQqn5RbLBKp6Hfv6CMlCk68 xvtXaytoYzX6Me0sXtkcz6GvJ9rn76fNRByJxk5QWHZcMLq/u3GQIAyRC9xX083G 6XacO0g/CyFFObqVvcbyTWHh6/9FVdmUa0iuefH+WH2fcycLBB2CAQJ2QASExqXp NwOYoLT0+nsVlzc7xtNzKcZtabv0JsfVngXexZprW3lcVMQBpWe/nUNvfPHSbaqm JSChGgS21DEXN1yT0GFDHEeo0NgHVQ2eFGbIFcXVTev/Np3wOJK7ukQIKEHbFqoI tDGvRz5L2Hed05X7lI0vtDybqpd3NckT8+DPjSq3KBYy+RMtlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEadMMzm7yVPJaB8mP7JMQhoElKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzYx MmI0OS05MWE0LTQyZDItODM1Mi0xNjk3N2I1ZDhlOGEvNjc2MTJiNDktOTFhNC00 MmQyLTgzNTItMTY5NzdiNWQ4ZThhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc2MTJiNDktOTFhNC00MmQyLTgz NTItMTY5NzdiNWQ4ZThhLzY3NjEyYjQ5LTkxYTQtNDJkMi04MzUyLTE2OTc3YjVk OGU4YS5jcmwwHwYDVR0jBBgwFoAUJrnqumV62+Nk2D+/0vp39lsQDGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzYxMmI0OS05MWE0LTQyZDItODM1Mi0xNjk3 N2I1ZDhlOGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7uZrCuWN8djYb1Fg1VZP5 QTeb6uhhwPeexUNgn/n2ASHEI76BmmHx5qy70Vlt8Bzj+JqEGRsI/f8L5CKzSJiw 2PQ1iOzAye153YeHZmYJ0M6vRPSSRshlYAYS7dKTVAZ+oQxY7EV+2T1b4wsj6/xv nWeg6spVdZnJks3rwKI6aNt+dqyUFXw1s1e1uuEOcJUz0g+lCiAEq/nRrkjM6/4P N4xPNGtcDKaWhvMx16WQ2YEJNixXJNYMpvrVme+IlAcn+Dxe2I7jhIS/p7rGBlbW GmVMGIPbosLFD/A7u3LrxXXf8SDL1H4giFt7aeDoCtvEqNwVv3aZfz825SOc4Fnf -----END CERTIFICATE-----Generated at Thu Jul 3 03:44:11 2025 by rpki-client