$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft File: a8355b3e-327c-45f5-af94-a965911c3103.mft (raw, json) Hash identifier: lSoA+xB/BQvGaLa6t3PSTDHO/KddnZI6S4l64dHwAog= Subject key identifier: A0:69:B6:9E:33:08:57:31:15:A9:04:18:DE:6A:ED:78:6A:99:FE:49 Authority key identifier: DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55 Certificate issuer: /CN=a8355b3e-327c-45f5-af94-a965911c3103 Certificate serial: 010D0C9F4328584A5EF4E790B48E4DBDC89D4960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft Manifest number: 010D0C9F4328584073A841A78E8E122CA4627243 Signing time: Tue 01 Jul 2025 06:00:08 +0000 Manifest this update: Tue 01 Jul 2025 06:00:08 +0000 Manifest next update: Thu 03 Jul 2025 06:00:00 +0000 Files and hashes: 1: a81bd514-e259-39d2-b605-b62b11e5b68d.roa (hash: 1QmvoxbHtXeelAYjvnLg6BdpwEAPsgB8Y+bGS9BJwCA=) 2: a8355b3e-327c-45f5-af94-a965911c3103.crl (hash: CSe+zibqTvxepVlgMuvqEkG7w9gF4tjEnC2VENps0Jo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:f4:e7:90:b4:8e:4d:bd:c8:9d:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8355b3e-327c-45f5-af94-a965911c3103 Validity Not Before: Jul 1 06:00:08 2025 GMT Not After : Jul 3 06:00:00 2025 GMT Subject: CN=ca69b6eb-f312-4bf1-9df1-be2751963976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:15:13:1e:67:d0:af:d3:c5:fb:7d:c3:05: c4:7c:41:a8:2f:7d:fa:e8:83:ab:59:ea:33:5f:8a: 18:1f:fc:42:71:6b:08:34:92:9c:cf:f5:cf:1f:75: ab:b0:a9:8b:d2:8d:b8:98:08:59:75:e7:5b:d2:97: 1f:df:26:3a:87:40:b2:4a:8a:4d:a4:5c:37:23:7b: b5:47:96:5b:9b:a4:e0:d8:c9:db:de:eb:d7:f4:45: ac:cb:ed:3e:ef:4a:44:e3:ae:26:6a:97:46:ef:9a: 8d:c3:6b:98:99:24:01:9f:33:27:99:4c:c2:d0:8e: b8:28:f9:35:46:56:fa:6e:33:e1:55:d7:1a:c2:d7: e8:51:39:ca:9d:7e:0d:d9:52:8c:6a:72:08:f9:d9: c5:50:88:70:6a:3d:54:71:9a:62:59:42:1f:b0:f4: 05:47:71:cd:7f:d8:0f:ee:57:9f:32:67:45:67:8c: a4:71:ed:7d:ef:07:ac:dc:82:e3:14:dd:c8:81:49: ae:98:7f:91:d2:8a:5c:e2:72:f5:14:de:bd:39:f7: e8:b0:a3:dc:42:83:de:74:ae:39:78:e5:c7:9c:57: 2a:31:46:07:bd:4a:cc:af:2e:17:e7:b8:f2:52:b1: 5e:a4:f4:dd:3b:9f:80:56:cc:b4:7f:1f:50:00:b3: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:69:B6:9E:33:08:57:31:15:A9:04:18:DE:6A:ED:78:6A:99:FE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.crl X509v3 Authority Key Identifier: keyid:DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9e:70:da:84:bc:eb:30:aa:8d:66:6a:50:3c:72:c2:89:c1: b0:e0:a1:98:43:69:dc:ab:47:72:cc:22:7a:7c:38:81:34:0e: 6f:a7:26:cb:bb:a1:07:be:b6:f5:c8:f5:4c:24:77:ae:42:ba: b6:17:fd:53:ed:ab:17:42:00:c7:be:16:7f:b8:f3:b3:21:4d: cb:f3:97:23:97:75:56:91:8e:31:6d:cd:f6:a1:98:13:70:f9: bf:3a:b3:dc:b2:53:62:33:6a:80:5f:9c:9c:13:5b:ba:fa:26: d4:24:5f:64:cc:53:14:31:b7:5b:7d:16:2f:95:4c:5e:f6:f9: 16:fd:f9:cb:a9:9c:1a:4c:1e:7d:ca:22:fe:34:f0:09:7a:9e: ec:03:90:63:3b:4a:5b:ba:a7:52:e9:58:69:b9:9f:62:35:20: 5f:e6:f2:29:15:27:9f:d2:f3:17:fe:10:ae:b0:e6:aa:7d:16: ce:02:e3:c3:cc:52:77:ea:ab:4a:8f:b6:d9:a5:b9:e9:05:2d: cb:1b:e7:24:dc:ea:bd:da:82:20:d5:76:cb:d4:a9:30:45:b7: 35:d1:76:df:44:25:cc:9f:2f:a2:46:b3:44:cd:a9:80:2f:5b: fc:69:1c:ca:09:eb:25:41:c0:42:bb:bb:ab:40:86:a3:fd:3b: 0e:50:14:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpe9OeQtI5NvcidSWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTgzNTViM2UtMzI3Yy00NWY1LWFmOTQtYTk2NTkxMWMz MTAzMB4XDTI1MDcwMTA2MDAwOFoXDTI1MDcwMzA2MDAwMFowLzEtMCsGA1UEAxMk Y2E2OWI2ZWItZjMxMi00YmYxLTlkZjEtYmUyNzUxOTYzOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2QVEx5n0K/Txft9wwXEfEGoL3366IOrWeoz X4oYH/xCcWsINJKcz/XPH3WrsKmL0o24mAhZdedb0pcf3yY6h0CySopNpFw3I3u1 R5Zbm6Tg2Mnb3uvX9EWsy+0+70pE464mapdG75qNw2uYmSQBnzMnmUzC0I64KPk1 Rlb6bjPhVdcawtfoUTnKnX4N2VKManII+dnFUIhwaj1UcZpiWUIfsPQFR3HNf9gP 7lefMmdFZ4ykce197wes3ILjFN3IgUmumH+R0opc4nL1FN69OffosKPcQoPedK45 eOXHnFcqMUYHvUrMry4X57jyUrFepPTdO5+AVsy0fx9QALP0yQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKBptp4zCFcxFakEGN5q7Xhqmf5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hODM1 NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1OTExYzMxMDMvYTgzNTViM2UtMzI3Yy00 NWY1LWFmOTQtYTk2NTkxMWMzMTAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTgzNTViM2UtMzI3Yy00NWY1LWFm OTQtYTk2NTkxMWMzMTAzL2E4MzU1YjNlLTMyN2MtNDVmNS1hZjk0LWE5NjU5MTFj MzEwMy5jcmwwHwYDVR0jBBgwFoAU2+mUNGobUY4ZA775rvdJV62Cj1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hODM1NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1 OTExYzMxMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFnnDahLzrMKqNZmpQPHLC icGw4KGYQ2ncq0dyzCJ6fDiBNA5vpybLu6EHvrb1yPVMJHeuQrq2F/1T7asXQgDH vhZ/uPOzIU3L85cjl3VWkY4xbc32oZgTcPm/OrPcslNiM2qAX5ycE1u6+ibUJF9k zFMUMbdbfRYvlUxe9vkW/fnLqZwaTB59yiL+NPAJep7sA5BjO0pbuqdS6VhpuZ9i NSBf5vIpFSef0vMX/hCusOaqfRbOAuPDzFJ36qtKj7bZpbnpBS3LG+ck3Oq92oIg 1XbL1KkwRbc10XbfRCXMny+iRrNEzamAL1v8aRzKCeslQcBCu7urQIaj/TsOUBSS -----END CERTIFICATE-----Generated at Wed Jul 2 04:13:21 2025 by rpki-client