$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft File: da61f786-99c2-4468-90f7-0b35abd168e5.mft (raw, json) Hash identifier: fWPV1MNlaKZe+NGhY38bzXOT1DXcFCFDDdAz/3LFS4A= Subject key identifier: 98:78:7D:7C:EB:04:89:C7:7B:60:A7:C6:A2:0B:FE:13:59:C8:51:7B Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584A5F3068ABE5C7044771657A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft Manifest number: 010D0C9F4328584073A846655D9F3F36F9E9D023 Signing time: Tue 01 Jul 2025 08:00:03 +0000 Manifest this update: Tue 01 Jul 2025 08:00:03 +0000 Manifest next update: Thu 03 Jul 2025 08:00:00 +0000 Files and hashes: 1: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (hash: SOD87n6zFTGx2Co8P2oxeCYjO08kR9Y2aYNl6+z0LM8=) 2: da61f786-99c2-4468-90f7-0b35abd168e5.crl (hash: gszGJYtHIIuQ3ekyBPekfbr4qJsy+6RWrORybdVuQ9E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:30:68:ab:e5:c7:04:47:71:65:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Jul 1 08:00:03 2025 GMT Not After : Jul 3 08:00:00 2025 GMT Subject: CN=90bcb9c0-a236-4211-a8d5-db5d6036f6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:15:ba:62:b6:5b:69:8f:94:0d:5d:f9:a7: fd:10:32:83:00:c2:23:75:0e:9a:e4:7d:81:ca:d7: 04:29:7b:87:99:1f:df:e9:6b:45:cd:b0:43:83:a7: 36:dc:60:5d:4f:80:2d:4b:8b:6c:19:ef:20:cf:b4: 59:c2:31:a3:2c:a6:de:7c:81:ee:49:04:f3:ff:60: a4:96:bc:18:9f:a7:f3:71:56:95:3a:3e:7d:2b:4b: 7c:cf:e4:a5:eb:8a:1d:68:7b:b5:43:a1:1a:97:e2: ee:0b:06:5b:a9:47:a6:d4:2a:07:e3:e2:5b:89:f5: 7d:b3:dd:d1:90:3d:a9:c1:88:f1:7f:0d:10:e5:10: fd:12:4b:7e:a8:da:e5:06:df:27:1a:23:9b:e1:55: 26:92:af:09:12:c0:aa:da:7d:47:27:44:f9:f1:0d: 17:b4:73:f7:25:97:9a:9c:eb:d4:e2:c1:6b:07:fb: bf:92:27:c8:a1:df:57:1d:04:d4:b9:b0:39:4b:bb: 33:70:c1:12:0c:eb:f6:f6:31:d0:20:1c:e0:fd:c8: cc:3a:c1:43:7d:da:fb:f7:92:c8:0d:99:44:19:73: 7b:b4:60:0d:ca:27:e8:33:cb:93:5a:54:6f:f6:4b: 9c:1c:58:70:65:66:cf:6c:e0:47:14:55:08:5c:4d: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:7D:7C:EB:04:89:C7:7B:60:A7:C6:A2:0B:FE:13:59:C8:51:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ae:be:81:27:7c:14:96:e7:58:b4:32:2a:5f:89:69:01:a9: 0f:d1:61:74:96:31:c4:9a:82:29:7c:e0:ad:f3:bf:81:b6:45: f7:1c:22:64:0c:eb:07:71:ad:9e:6f:5b:15:71:69:e9:69:bd: 07:a3:c9:52:e8:08:bf:0a:68:12:64:e0:fb:75:8b:21:df:bc: 42:4d:09:06:6c:14:7e:9e:fd:2e:13:ee:66:2a:11:09:6a:e2: 56:fa:31:87:d4:0c:08:42:f2:bb:b5:17:eb:f4:e3:4a:18:94: bf:ba:2e:0c:0f:e0:cb:44:aa:a6:5e:cc:3e:85:e1:3a:69:ac: 06:2b:43:6f:d9:62:31:fa:58:0b:6a:12:09:d0:4f:d8:63:dc: 42:a3:63:27:5f:de:bb:bf:13:7d:d5:6a:8b:da:c7:d9:74:f3: 32:2b:ec:e3:f2:e1:0b:a8:5a:a2:35:1e:38:5b:d8:21:57:8d: e4:7f:bf:cb:63:02:22:ec:d1:bc:34:a3:54:2d:81:88:ab:dc: 7a:02:cf:16:39:be:5a:3b:5e:a9:d8:cd:ed:ac:48:53:bc:0d: 80:93:76:f6:24:d6:68:56:6a:0d:1e:0f:73:ec:dd:95:ab:5a: 26:96:ef:65:f2:0d:4a:6f:d7:e0:69:4f:1c:ae:7f:84:66:e7: 9b:43:43:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfMGir5ccER3FlegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI1MDcwMTA4MDAwM1oXDTI1MDcwMzA4MDAwMFowLzEtMCsGA1UEAxMk OTBiY2I5YzAtYTIzNi00MjExLWE4ZDUtZGI1ZDYwMzZmNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWMVumK2W2mPlA1d+af9EDKDAMIjdQ6a5H2B ytcEKXuHmR/f6WtFzbBDg6c23GBdT4AtS4tsGe8gz7RZwjGjLKbefIHuSQTz/2Ck lrwYn6fzcVaVOj59K0t8z+Sl64odaHu1Q6Eal+LuCwZbqUem1CoH4+JbifV9s93R kD2pwYjxfw0Q5RD9Ekt+qNrlBt8nGiOb4VUmkq8JEsCq2n1HJ0T58Q0XtHP3JZea nOvU4sFrB/u/kifIod9XHQTUubA5S7szcMESDOv29jHQIBzg/cjMOsFDfdr795LI DZlEGXN7tGANyifoM8uTWlRv9kucHFhwZWbPbOBHFFUIXE1KFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJh4fXzrBInHe2CnxqIL/hNZyFF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvZGE2MWY3ODYtOTljMi00 NDY4LTkwZjctMGIzNWFiZDE2OGU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAorr6BJ3wUludYtDIqX4lp AakP0WF0ljHEmoIpfOCt87+BtkX3HCJkDOsHca2eb1sVcWnpab0Ho8lS6Ai/CmgS ZOD7dYsh37xCTQkGbBR+nv0uE+5mKhEJauJW+jGH1AwIQvK7tRfr9ONKGJS/ui4M D+DLRKqmXsw+heE6aawGK0Nv2WIx+lgLahIJ0E/YY9xCo2MnX967vxN91WqL2sfZ dPMyK+zj8uELqFqiNR44W9ghV43kf7/LYwIi7NG8NKNULYGIq9x6As8WOb5aO16p 2M3trEhTvA2Ak3b2JNZoVmoNHg9z7N2Vq1omlu9l8g1Kb9fgaU8crn+EZuebQ0NS -----END CERTIFICATE-----Generated at Tue Jul 1 21:46:40 2025 by rpki-client