$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft File: b558fe83-60e3-423a-b823-c3c24b9a60dd.mft (raw, json) Hash identifier: 9wqsgZAVO+5SVzFKbXy/J7OS1H5xdICoAmKhe3VhuQY= Subject key identifier: 9C:D7:5D:D1:5B:3E:2B:C0:76:4D:EC:6B:7E:43:08:14:66:9E:4F:AE Authority key identifier: 7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC Certificate issuer: /CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Certificate serial: 010D0C9F4328584A5FE31F7285FD8BB734317680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft Manifest number: 010D0C9F4328584073A859718A5913EBADD0E9A3 Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: afe54e83-cd0f-38a4-8069-4a0eac3c61ba.roa (hash: I91Q4XSoMi5DEILG+UnRBlAT1MWQvIsi56eFvkXqljE=) 2: b558fe83-60e3-423a-b823-c3c24b9a60dd.crl (hash: tJilnDy3s5OI0MDHk/9qXrIdHCDKhOHhgz9JdVG3W70=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:1f:72:85:fd:8b:b7:34:31:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b558fe83-60e3-423a-b823-c3c24b9a60dd Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=2b80fef7-56ea-463a-b198-e2bdcafa4f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:34:dc:ee:89:c9:e0:72:79:45:47:b6:2a:a4: 8c:7b:6d:dc:31:00:82:da:67:79:83:d1:a7:ae:68: 56:22:72:3a:57:f2:68:a2:c6:c1:da:06:46:a4:fc: 0d:09:59:94:a6:2d:64:8f:73:3b:9d:48:96:2f:30: f6:95:0a:52:ef:1f:00:d3:23:f6:92:bc:7c:e9:7c: 9a:1e:e1:a2:7a:76:3d:7f:43:95:f4:8d:18:2d:4b: 81:14:62:49:77:c2:35:43:3d:2c:b3:ac:80:32:29: f4:17:65:ba:af:7a:bd:ff:80:ec:08:a4:82:68:2e: 36:c7:52:6d:fa:34:e1:a3:8d:e8:f5:b0:25:d8:b9: 08:40:c9:a6:64:c7:43:72:3f:08:c4:32:ef:c3:c8: f3:74:b7:ad:da:99:78:ef:94:25:e6:ea:8e:2e:dd: 82:8a:89:2f:d8:c9:5b:28:d4:15:8d:bf:55:79:31: 46:a0:e2:75:cb:19:46:9c:ab:8f:e7:ff:b0:47:aa: 3a:ae:1c:ff:87:6d:5d:09:22:4b:5c:0c:47:e9:f5: a4:b8:81:1b:46:86:42:17:d8:9c:71:13:9f:17:76: ec:04:59:6b:81:46:08:96:85:74:26:67:f2:14:94: 36:8b:9d:b5:69:f6:10:51:e6:00:93:3a:3a:00:5b: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D7:5D:D1:5B:3E:2B:C0:76:4D:EC:6B:7E:43:08:14:66:9E:4F:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd/b558fe83-60e3-423a-b823-c3c24b9a60dd.crl X509v3 Authority Key Identifier: keyid:7C:DB:AE:AE:08:A0:92:A8:31:52:55:26:BE:2B:E1:07:43:E5:9B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b558fe83-60e3-423a-b823-c3c24b9a60dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:89:3a:4a:b4:6f:23:91:14:88:a6:5f:2c:7e:76:66:14:72: 0a:43:60:2b:02:fa:43:3f:7f:7d:b0:d5:3b:cf:84:6d:0d:d6: 3f:22:03:ca:d5:64:56:f4:1c:f9:a7:72:f7:7e:7d:1c:9e:9d: c5:a1:2c:db:96:e6:ac:9d:e3:20:2e:95:ea:4d:24:9d:26:e0: b2:49:ad:3d:12:52:5b:21:bd:5e:95:c4:a6:4f:73:36:7f:8b: 57:93:e6:c9:2e:70:b6:a9:00:f6:0e:bc:d3:2a:98:14:95:55: a5:a8:20:15:55:90:4f:74:94:d1:1f:7d:42:d9:6a:87:81:55: ba:b9:54:2d:ce:0e:fb:c7:93:7b:30:1f:05:0a:bc:0a:e4:3a: 3a:d7:bd:bc:2b:85:56:05:d0:49:8a:40:4e:bb:ed:9c:57:2f: 5d:e1:8f:d5:f7:b5:43:0d:cd:3f:08:54:0c:ec:f0:ea:ef:59: 2b:98:53:ca:dd:ba:bd:6d:87:47:95:0c:62:42:46:41:13:17: 9b:79:f4:43:04:9d:51:1e:92:4a:5e:1b:ff:21:57:72:28:ec: 61:e3:aa:1b:28:3a:e5:a8:b0:bc:16:29:3d:bf:18:42:87:2c: 35:64:74:4c:52:9b:d0:60:26:36:49:62:88:73:f4:5a:f7:cf: 7a:15:b8:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4x9yhf2LtzQxdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU1OGZlODMtNjBlMy00MjNhLWI4MjMtYzNjMjRiOWE2 MGRkMB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk MmI4MGZlZjctNTZlYS00NjNhLWIxOTgtZTJiZGNhZmE0Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzTc7onJ4HJ5RUe2KqSMe23cMQCC2md5g9Gn rmhWInI6V/JoosbB2gZGpPwNCVmUpi1kj3M7nUiWLzD2lQpS7x8A0yP2krx86Xya HuGienY9f0OV9I0YLUuBFGJJd8I1Qz0ss6yAMin0F2W6r3q9/4DsCKSCaC42x1Jt +jTho43o9bAl2LkIQMmmZMdDcj8IxDLvw8jzdLet2pl475Ql5uqOLt2Ciokv2Mlb KNQVjb9VeTFGoOJ1yxlGnKuP5/+wR6o6rhz/h21dCSJLXAxH6fWkuIEbRoZCF9ic cROfF3bsBFlrgUYIloV0JmfyFJQ2i521afYQUeYAkzo6AFu8nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJzXXdFbPivAdk3sa35DCBRmnk+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4 ZmU4My02MGUzLTQyM2EtYjgyMy1jM2MyNGI5YTYwZGQvYjU1OGZlODMtNjBlMy00 MjNhLWI4MjMtYzNjMjRiOWE2MGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU1OGZlODMtNjBlMy00MjNhLWI4 MjMtYzNjMjRiOWE2MGRkL2I1NThmZTgzLTYwZTMtNDIzYS1iODIzLWMzYzI0Yjlh NjBkZC5jcmwwHwYDVR0jBBgwFoAUfNuurgigkqgxUlUmvivhB0Plm8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTU4ZmU4My02MGUzLTQyM2EtYjgyMy1jM2My NGI5YTYwZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByiTpKtG8jkRSIpl8sfnZm FHIKQ2ArAvpDP399sNU7z4RtDdY/IgPK1WRW9Bz5p3L3fn0cnp3FoSzbluasneMg LpXqTSSdJuCySa09ElJbIb1elcSmT3M2f4tXk+bJLnC2qQD2DrzTKpgUlVWlqCAV VZBPdJTRH31C2WqHgVW6uVQtzg77x5N7MB8FCrwK5Do61728K4VWBdBJikBOu+2c Vy9d4Y/V97VDDc0/CFQM7PDq71krmFPK3bq9bYdHlQxiQkZBExebefRDBJ1RHpJK Xhv/IVdyKOxh46obKDrlqLC8Fik9vxhChyw1ZHRMUpvQYCY2SWKIc/Ra9896FbgP -----END CERTIFICATE-----Generated at Wed Jul 2 15:01:09 2025 by rpki-client