$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft File: 69e23836-98b5-4802-9778-a96a5ee3eac3.mft (raw, json) Hash identifier: 9Wa+c4CTZ5nzUDGRBElOPPJEKozaqpAoAJh62aI8weg= Subject key identifier: B8:1B:55:70:CB:82:EA:F4:E3:EE:37:F5:C0:26:B4:0E:D5:D8:89:5D Authority key identifier: F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D Certificate issuer: /CN=69e23836-98b5-4802-9778-a96a5ee3eac3 Certificate serial: 010D0C9F4328584A62900B3E8300B931CC6A5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft Manifest number: 010D0C9F4328584073A854A26BDE62E0F9E159A5 Signing time: Wed 02 Jul 2025 13:00:08 +0000 Manifest this update: Wed 02 Jul 2025 13:00:08 +0000 Manifest next update: Sat 05 Jul 2025 13:00:00 +0000 Files and hashes: 1: 69e23836-98b5-4802-9778-a96a5ee3eac3.crl (hash: MdL4GvUHwgu4b7CPLlASlOiSZpwBqNpoYsca+/hgWRI=) 2: 7e4d09f5-7d72-30fb-9eb4-b7d94944f78c.roa (hash: rZydPgmdemTIlxDefw3Hmr+y/nWXdnsDo0SPtlR3jOI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:0b:3e:83:00:b9:31:cc:6a:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69e23836-98b5-4802-9778-a96a5ee3eac3 Validity Not Before: Jul 2 13:00:08 2025 GMT Not After : Jul 5 13:00:00 2025 GMT Subject: CN=432d17a5-e98a-4601-b7cb-deb5fad71654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:ef:5d:77:e2:8b:fe:78:87:9b:ed:8f:86: 31:5d:31:f0:0a:dc:00:c4:59:6e:a0:de:6c:17:7d: e2:c1:53:b8:d7:65:bd:bf:aa:12:d9:e1:dd:a6:72: 7b:d1:fd:6c:39:1d:32:f8:81:18:0a:d7:cc:3b:2d: 41:9b:d2:bf:42:72:e4:05:a2:5a:eb:ed:ea:54:b2: 21:a1:45:e9:46:93:70:db:c1:20:39:3a:29:2c:6a: 80:05:b5:7d:70:89:6a:87:c7:8f:11:6e:27:f5:9e: 98:40:bf:1b:10:c5:6d:2f:cf:9d:31:bd:cd:f9:03: 6d:24:4b:68:0d:de:f3:c9:c3:84:60:93:68:93:e1: 7b:47:c8:bd:39:9f:a3:28:b2:e5:a5:7d:59:4d:83: 9b:8f:30:a2:4e:5e:2b:8a:d2:37:f3:5b:93:01:2f: 7a:6f:3f:3c:06:06:c4:5c:bf:bc:2a:10:c9:33:f1: 6b:bc:d9:09:88:c6:6b:08:70:12:5b:18:08:57:6a: f1:18:57:33:0d:ec:90:2e:26:d4:2e:b1:e2:a1:26: 2d:fb:66:24:81:3e:81:40:40:bd:23:3b:fe:47:85: b6:7a:c8:39:b5:65:d9:bc:8d:67:06:e8:f6:11:8e: 0f:f4:4f:b4:34:62:61:70:fc:e4:a8:e2:96:58:09: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:55:70:CB:82:EA:F4:E3:EE:37:F5:C0:26:B4:0E:D5:D8:89:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3/69e23836-98b5-4802-9778-a96a5ee3eac3.crl X509v3 Authority Key Identifier: keyid:F7:F4:4E:36:F2:8E:E6:3B:90:99:EE:39:FC:A9:72:F5:D6:4E:E4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/69e23836-98b5-4802-9778-a96a5ee3eac3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ba:58:91:60:69:20:9a:f8:5f:09:7a:4c:35:16:97:99:4d: c8:a5:06:e6:f3:04:63:bb:9b:61:c3:1c:a3:e3:2f:c4:c0:74: 37:28:fd:23:d0:02:8a:a3:64:38:4d:2e:3b:45:33:f6:90:bc: a5:1a:6f:6b:e2:54:dc:57:99:97:7f:56:6f:18:43:fa:25:43: e5:7e:54:ba:0f:86:65:a1:eb:77:46:03:32:76:cd:ee:ec:85: 11:06:7a:64:91:0e:a1:72:a5:0b:63:05:6b:c5:6f:d9:5a:8a: 9b:73:0c:6e:92:83:4a:af:64:98:30:33:f6:0d:80:16:75:1b: a9:61:42:a8:8a:b3:23:5d:9a:f7:c7:e2:dc:31:5c:2f:f9:53: 4e:ef:3d:df:9e:3a:20:62:d4:54:91:91:0a:ab:ef:67:05:1d: 79:32:b6:17:bd:b5:fd:a5:c5:8f:4a:cc:60:66:8d:a1:1f:7e: fb:ed:10:bc:7c:15:ba:2d:61:fe:9c:15:37:ee:ca:e4:05:ee: 2f:e0:83:30:22:67:9c:9f:e4:86:84:59:ad:99:56:bf:d7:1e: fe:cd:b3:ad:40:12:b5:d8:59:ba:04:11:ac:8d:2d:5b:74:57: cf:fc:10:4c:1e:b5:ed:ff:4f:4f:28:a9:d3:4c:d9:7a:a2:99: 39:41:2c:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpikAs+gwC5McxqWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjllMjM4MzYtOThiNS00ODAyLTk3NzgtYTk2YTVlZTNl YWMzMB4XDTI1MDcwMjEzMDAwOFoXDTI1MDcwNTEzMDAwMFowLzEtMCsGA1UEAxMk NDMyZDE3YTUtZTk4YS00NjAxLWI3Y2ItZGViNWZhZDcxNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpLvXXfii/54h5vtj4YxXTHwCtwAxFluoN5s F33iwVO412W9v6oS2eHdpnJ70f1sOR0y+IEYCtfMOy1Bm9K/QnLkBaJa6+3qVLIh oUXpRpNw28EgOTopLGqABbV9cIlqh8ePEW4n9Z6YQL8bEMVtL8+dMb3N+QNtJEto Dd7zycOEYJNok+F7R8i9OZ+jKLLlpX1ZTYObjzCiTl4ritI381uTAS96bz88BgbE XL+8KhDJM/FrvNkJiMZrCHASWxgIV2rxGFczDeyQLibULrHioSYt+2YkgT6BQEC9 Izv+R4W2esg5tWXZvI1nBuj2EY4P9E+0NGJhcPzkqOKWWAmxyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLgbVXDLgur04+439cAmtA7V2IldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82OWUy MzgzNi05OGI1LTQ4MDItOTc3OC1hOTZhNWVlM2VhYzMvNjllMjM4MzYtOThiNS00 ODAyLTk3NzgtYTk2YTVlZTNlYWMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjllMjM4MzYtOThiNS00ODAyLTk3 NzgtYTk2YTVlZTNlYWMzLzY5ZTIzODM2LTk4YjUtNDgwMi05Nzc4LWE5NmE1ZWUz ZWFjMy5jcmwwHwYDVR0jBBgwFoAU9/RONvKO5juQme45/Kly9dZO5H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82OWUyMzgzNi05OGI1LTQ4MDItOTc3OC1hOTZh NWVlM2VhYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeuliRYGkgmvhfCXpMNRaX mU3IpQbm8wRju5thwxyj4y/EwHQ3KP0j0AKKo2Q4TS47RTP2kLylGm9r4lTcV5mX f1ZvGEP6JUPlflS6D4Zloet3RgMyds3u7IURBnpkkQ6hcqULYwVrxW/ZWoqbcwxu koNKr2SYMDP2DYAWdRupYUKoirMjXZr3x+LcMVwv+VNO7z3fnjogYtRUkZEKq+9n BR15MrYXvbX9pcWPSsxgZo2hH3777RC8fBW6LWH+nBU37srkBe4v4IMwImecn+SG hFmtmVa/1x7+zbOtQBK12Fm6BBGsjS1bdFfP/BBMHrXt/09PKKnTTNl6opk5QSyC -----END CERTIFICATE-----Generated at Wed Jul 2 22:43:56 2025 by rpki-client