$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: UJh+S+0e9lk05Bn79tFyD2egwshcfoJNGVV/En5sHcs= Subject key identifier: 8D:7E:66:1D:30:50:5F:35:7B:67:77:14:90:A7:7D:BA:61:43:07:D2 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584A605A4119FFBB1D2891E1D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB318420F Signing time: Tue 01 Jul 2025 18:00:08 +0000 Manifest this update: Tue 01 Jul 2025 18:00:08 +0000 Manifest next update: Thu 03 Jul 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: jBTwfcK+r4GMca+zXdnY+z3DF6Qh4JP3OIeP30O7pDU=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: fAW+YC/2dWFz+7m+UhlVb0Eh35WT08PNMmBiD24CZDU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:5a:41:19:ff:bb:1d:28:91:e1:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Jul 1 18:00:08 2025 GMT Not After : Jul 3 18:00:00 2025 GMT Subject: CN=ae40e37e-69c3-4908-a025-0b7785e13534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:a8:5d:9e:3c:2b:34:f0:d3:4c:48:67:ae: cd:11:fe:63:73:b4:03:79:c3:e6:35:4d:e6:60:02: 12:43:43:60:c5:3c:7e:ac:fc:43:a6:c6:eb:a5:a9: 6c:c8:b8:fe:b7:c8:13:a3:7f:c4:b2:2c:df:d8:f2: 00:a3:2a:3d:70:95:39:0d:30:a7:a7:03:7d:4b:7e: fd:e7:60:c8:61:9e:a0:89:c1:18:33:a8:6d:fb:33: 6d:01:14:90:f0:14:b1:87:89:c2:bf:12:95:41:28: 95:9e:ea:be:d6:fc:c7:74:70:8d:7d:08:cb:aa:b8: eb:62:5e:aa:6d:f1:fc:60:9a:0b:3b:06:6d:5d:49: 71:8f:16:71:2a:7a:29:30:7b:29:e9:6b:71:c5:18: 2d:e3:0a:a2:9f:b9:89:66:8a:52:10:56:80:2a:55: 20:47:71:b6:7d:47:2e:0d:24:93:a6:db:23:df:e4: 28:51:6a:9b:a1:1f:cc:15:dc:f8:7e:14:31:25:57: fe:a8:b6:d4:1f:d0:c2:bf:09:c9:f6:3e:ea:31:46: f1:22:30:90:f4:c7:08:09:2c:48:b0:20:ff:fb:06: 48:24:a8:93:8e:97:33:46:b9:83:97:df:27:05:7b: 7f:e8:fa:06:a0:94:78:76:9f:28:aa:e6:2e:58:7d: 58:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7E:66:1D:30:50:5F:35:7B:67:77:14:90:A7:7D:BA:61:43:07:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:1d:c2:5e:98:4a:bb:46:01:e8:83:e5:06:df:30:02:53:4b: 4e:36:38:35:85:99:a2:6d:d8:0f:1d:bd:7c:c4:ce:aa:38:5a: 36:6e:d8:7c:07:f1:bc:d6:ec:39:25:03:bd:ba:35:a2:31:66: eb:07:be:f2:ca:ff:c9:b1:74:ea:4b:21:ff:9e:47:99:03:ca: 66:cd:ec:95:2f:72:e0:d9:88:04:06:af:30:b7:ba:fc:b5:c5: 57:7b:bd:a7:1e:e7:e1:5d:69:09:dc:a3:f1:aa:cb:71:94:4e: ca:1b:85:24:29:3d:10:3b:ae:2a:1a:2c:0f:f2:48:fe:9d:4e: 88:9e:72:89:51:cd:1c:71:5f:d6:12:1e:5e:db:85:f5:d9:91: 65:c1:7f:33:d4:3b:14:45:ac:b4:0b:09:e9:17:5e:b8:96:02: c7:95:98:4d:83:e4:29:b6:9b:10:06:48:62:e4:69:cc:77:ad: ad:20:98:7b:63:46:71:26:5e:bf:87:61:d5:8c:38:64:bf:93: 00:ce:f4:d2:49:ce:49:1d:37:96:39:7f:53:21:a3:f1:d4:d3: 63:57:e4:62:d2:63:52:09:b4:ff:a7:e1:d8:68:86:24:32:87: 28:44:9f:e7:a4:cc:39:22:96:12:e3:1a:81:f9:2e:7c:55:dc: f0:40:57:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgWkEZ/7sdKJHh2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MDcwMTE4MDAwOFoXDTI1MDcwMzE4MDAwMFowLzEtMCsGA1UEAxMk YWU0MGUzN2UtNjljMy00OTA4LWEwMjUtMGI3Nzg1ZTEzNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvuoXZ48KzTw00xIZ67NEf5jc7QDecPmNU3m YAISQ0NgxTx+rPxDpsbrpalsyLj+t8gTo3/Esizf2PIAoyo9cJU5DTCnpwN9S379 52DIYZ6gicEYM6ht+zNtARSQ8BSxh4nCvxKVQSiVnuq+1vzHdHCNfQjLqrjrYl6q bfH8YJoLOwZtXUlxjxZxKnopMHsp6WtxxRgt4wqin7mJZopSEFaAKlUgR3G2fUcu DSSTptsj3+QoUWqboR/MFdz4fhQxJVf+qLbUH9DCvwnJ9j7qMUbxIjCQ9McICSxI sCD/+wZIJKiTjpczRrmDl98nBXt/6PoGoJR4dp8oquYuWH1YCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI1+Zh0wUF81e2d3FJCnfbphQwfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqHcJemEq7RgHog+UG3zAC U0tONjg1hZmibdgPHb18xM6qOFo2bth8B/G81uw5JQO9ujWiMWbrB77yyv/JsXTq SyH/nkeZA8pmzeyVL3Lg2YgEBq8wt7r8tcVXe72nHufhXWkJ3KPxqstxlE7KG4Uk KT0QO64qGiwP8kj+nU6InnKJUc0ccV/WEh5e24X12ZFlwX8z1DsURay0CwnpF164 lgLHlZhNg+QptpsQBkhi5GnMd62tIJh7Y0ZxJl6/h2HVjDhkv5MAzvTSSc5JHTeW OX9TIaPx1NNjV+Ri0mNSCbT/p+HYaIYkMocoRJ/npMw5IpYS4xqB+S58VdzwQFeb -----END CERTIFICATE-----Generated at Tue Jul 1 21:51:44 2025 by rpki-client