$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft File: ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft (raw, json) Hash identifier: htgVv6r02lsv01HuFWAlydTegdv80AtyBaafXEfEFUk= Subject key identifier: EE:70:1D:45:5E:67:6E:3B:51:FA:66:DC:94:2B:6B:B9:AE:AE:29:69 Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F4328584A5B1E2CD2B490A8D26B58F700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft Manifest number: 010D0C9F4328584073A825ACC8E0595BA4259CA2 Signing time: Sun 29 Jun 2025 21:00:03 +0000 Manifest this update: Sun 29 Jun 2025 21:00:03 +0000 Manifest next update: Wed 02 Jul 2025 21:00:00 +0000 Files and hashes: 1: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (hash: wiYTuLrxll0GCJBwlMjznOj9ytl5Azt+CQoPwyTlpoU=) 2: ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl (hash: 8tkg9D5AYC7jBS8e88GZLzpK57+E3ijUR3W34RO1Wsg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:1e:2c:d2:b4:90:a8:d2:6b:58:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: Jun 29 21:00:03 2025 GMT Not After : Jul 2 21:00:00 2025 GMT Subject: CN=7a223233-7473-4bfa-8c80-a04b18a14577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:30:39:e9:15:ab:b0:32:0b:e4:dd:74:72: 3f:aa:dd:0d:13:fd:9f:8f:90:5b:7d:0b:e6:11:66: ab:f5:7f:3a:a5:86:3d:cb:8e:5e:79:3f:55:a3:d6: 40:4f:d2:ac:8a:ec:4c:8e:a7:5d:09:e3:98:8b:83: 9c:a0:de:9b:e0:b7:b5:58:43:8d:8a:b6:cd:a7:d8: 1b:99:c0:d2:67:69:ca:fb:cb:34:13:dc:ec:d5:1d: ed:9c:4c:8e:fe:de:47:c7:3e:3a:61:1e:f9:23:21: 6e:df:91:d7:88:4b:ba:8f:43:0b:d6:e9:b8:66:c1: 83:6c:b6:36:77:05:8b:36:79:a6:03:0f:a4:cc:11: 9c:7f:b7:bc:86:37:9e:2f:fc:5b:1f:2d:3c:26:0c: 1c:a2:18:9a:b8:4e:6e:b2:2f:52:63:2a:06:53:0c: c1:25:2e:c3:4c:11:ca:60:6c:c5:6c:87:e1:c3:2b: fe:6c:65:83:b0:a8:d9:36:d3:73:01:9c:78:5e:d9: 81:cb:bb:d6:33:49:af:08:e0:d7:0c:52:be:f0:94: 19:83:ec:fb:c1:c3:57:54:09:9e:a2:96:0b:2c:41: 0b:74:d7:57:6b:7c:d5:88:ac:27:c8:f0:41:14:49: f3:c6:07:4b:cb:a4:fc:29:fe:b2:cc:c6:94:a9:c2: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:70:1D:45:5E:67:6E:3B:51:FA:66:DC:94:2B:6B:B9:AE:AE:29:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:da:24:f2:c7:d2:04:4c:32:33:88:c0:5d:30:89:32:2b:84: b6:73:95:52:9d:55:8a:f6:e4:64:86:2c:be:e6:88:88:5d:fd: 03:43:d0:6b:5e:29:16:c4:ea:aa:92:68:f5:7c:87:75:33:95: 00:e4:aa:7e:ea:cb:ae:3c:9b:c9:fd:22:70:36:27:39:da:89: f5:d7:82:fa:24:fb:ca:c3:bb:3c:02:a0:83:ba:98:1d:d8:5e: a3:4e:01:df:e1:d8:78:61:dc:9c:cd:69:89:ff:37:c3:90:e9: 6b:0b:46:c8:1c:d5:60:bd:25:90:13:1e:5a:8f:e4:e1:b5:24: e8:34:ff:6c:ca:d4:e5:af:a0:fa:d3:18:3c:bd:46:f2:2d:6b: 7e:8e:1a:eb:48:05:49:03:2e:79:fe:3c:8a:3d:28:c5:2a:b7: e9:2f:67:69:6d:b1:ce:ac:89:16:a4:fa:09:b7:72:8c:6b:bf: cb:2c:e4:42:2f:e1:db:3c:df:1a:2b:42:56:b4:fb:e3:e3:df: d2:14:45:0e:9a:47:f4:0f:9b:c4:4a:39:08:49:d2:57:f5:5a: 37:58:57:d1:d4:de:d0:42:76:3f:00:7f:6f:62:4f:69:39:51: f9:7e:d8:15:9d:63:71:65:5e:c5:1d:77:2a:ce:e0:39:e9:1c: b4:37:a5:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpbHizStJCo0mtY9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI1MDYyOTIxMDAwM1oXDTI1MDcwMjIxMDAwMFowLzEtMCsGA1UEAxMk N2EyMjMyMzMtNzQ3My00YmZhLThjODAtYTA0YjE4YTE0NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyQwOekVq7AyC+TddHI/qt0NE/2fj5BbfQvm EWar9X86pYY9y45eeT9Vo9ZAT9KsiuxMjqddCeOYi4OcoN6b4Le1WEONirbNp9gb mcDSZ2nK+8s0E9zs1R3tnEyO/t5Hxz46YR75IyFu35HXiEu6j0ML1um4ZsGDbLY2 dwWLNnmmAw+kzBGcf7e8hjeeL/xbHy08JgwcohiauE5usi9SYyoGUwzBJS7DTBHK YGzFbIfhwyv+bGWDsKjZNtNzAZx4XtmBy7vWM0mvCODXDFK+8JQZg+z7wcNXVAme opYLLEELdNdXa3zViKwnyPBBFEnzxgdLy6T8Kf6yzMaUqcJEEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO5wHUVeZ247Ufpm3JQra7murilpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvYWMyYmQ1OTEtYjQ1ZS00 N2M2LTkzZjktODNmYjRhOTVlOWI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBt2iTyx9IETDIziMBdMIky K4S2c5VSnVWK9uRkhiy+5oiIXf0DQ9BrXikWxOqqkmj1fId1M5UA5Kp+6suuPJvJ /SJwNic52on114L6JPvKw7s8AqCDupgd2F6jTgHf4dh4YdyczWmJ/zfDkOlrC0bI HNVgvSWQEx5aj+ThtSToNP9sytTlr6D60xg8vUbyLWt+jhrrSAVJAy55/jyKPSjF KrfpL2dpbbHOrIkWpPoJt3KMa7/LLORCL+HbPN8aK0JWtPvj49/SFEUOmkf0D5vE SjkISdJX9Vo3WFfR1N7QQnY/AH9vYk9pOVH5ftgVnWNxZV7FHXcqzuA56Ry0N6Xd -----END CERTIFICATE-----Generated at Mon Jun 30 18:56:00 2025 by rpki-client