$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft File: 9d167629-63e9-440b-9a9f-22a4570f0d78.mft (raw, json) Hash identifier: QJh2ppavUXXY0ErkzJuh+S93po3Ccx87wtxWhjGqagw= Subject key identifier: 0E:FB:DE:1F:88:A0:94:F8:01:1F:DF:9C:BE:4E:C8:41:E0:32:17:08 Authority key identifier: 21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA Certificate issuer: /CN=9d167629-63e9-440b-9a9f-22a4570f0d78 Certificate serial: 010D0C9F4328584A5F12A38A89463F000B117EDA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft Manifest number: 010D0C9F4328584073A844BAB4002A0DA01A5D2C Signing time: Tue 01 Jul 2025 07:00:03 +0000 Manifest this update: Tue 01 Jul 2025 07:00:03 +0000 Manifest next update: Thu 03 Jul 2025 07:00:00 +0000 Files and hashes: 1: 78119901-a0c5-355d-8302-369b799c631b.roa (hash: mxdUR9vcqn1DGR5dl6RGP8DUbdd0pUVAgzJzsi1zE6Y=) 2: 9d167629-63e9-440b-9a9f-22a4570f0d78.crl (hash: 6vIkfin2XYe4ymQqQpWSDgQgNNMnyOF2UcSsE5Wk4FQ=) 3: a81389d9-5063-38cb-afbf-b2bed03366aa.roa (hash: fv8yyq0NWyMsfVOsLoa96gywzgbGlyzaGV8/9snxYUE=) 4: b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa (hash: /qmE2ykC2M4YdGaL+uFNFqdj5i7IZcIKtwDS/8wmsds=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:12:a3:8a:89:46:3f:00:0b:11:7e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d167629-63e9-440b-9a9f-22a4570f0d78 Validity Not Before: Jul 1 07:00:03 2025 GMT Not After : Jul 3 07:00:00 2025 GMT Subject: CN=05425719-b15c-4413-8349-7307943a32ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:6f:44:77:45:d1:c8:9c:0d:06:26:7f:9b: e5:96:f5:57:96:b2:e1:47:3e:c5:85:45:f1:40:4a: b4:a3:2c:da:a0:6c:4d:71:5a:88:02:13:c9:59:7b: c4:b3:97:9a:c5:26:c6:02:3a:53:4e:12:80:11:e5: 2b:6f:bb:76:cb:2f:db:b1:79:f4:aa:d7:3f:66:c8: 2e:a5:e8:75:93:ab:9f:2d:f4:51:43:d6:25:c9:68: ee:c1:2c:e7:f1:ad:e3:61:f1:42:3e:70:33:de:f4: e7:39:d7:a5:5a:c2:0c:33:07:15:26:10:fb:94:18: b9:1e:9d:f5:7e:9d:70:cb:62:35:6d:0c:c5:72:8a: 6c:3f:92:fd:f3:17:31:db:ec:99:00:0c:1c:6f:1b: 5e:a0:45:ed:e3:41:69:e3:88:8c:c5:1c:fe:5f:e2: ed:79:b0:bf:38:b5:e2:35:57:a3:7b:08:89:3a:8b: 5c:1d:f7:9e:93:5a:e4:cc:17:44:74:c4:02:a6:3b: 3e:6c:96:e3:cd:19:37:a2:a9:10:0e:a3:d5:56:a3: 85:8e:20:2a:c9:7e:c2:0c:31:5d:60:e0:4a:ab:ba: 5e:e3:12:f2:3f:ec:a0:a9:4b:4b:41:22:bb:3e:ed: 20:4e:2e:0a:64:e7:3b:16:b4:43:c8:8a:e5:51:18: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:DE:1F:88:A0:94:F8:01:1F:DF:9C:BE:4E:C8:41:E0:32:17:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl X509v3 Authority Key Identifier: keyid:21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:db:ae:00:0d:09:24:e1:68:cc:c8:03:ef:30:d1:d6:27:ba: 16:06:75:f1:94:97:e2:c5:07:d3:1d:2d:51:5b:cd:79:fb:4b: 1f:a4:8f:a8:31:51:f3:66:4a:00:f8:29:23:cf:81:3e:c9:57: d7:af:f3:c6:fe:38:a1:29:36:4a:b4:3e:da:0a:96:47:98:f4: 49:05:e7:9a:40:e5:fc:7d:3e:cb:2c:7f:1c:26:e5:79:cf:c7: c7:6d:0f:08:47:f8:62:80:dd:fe:50:0f:06:6c:c3:ea:c5:b7: fb:14:c5:bf:86:e4:53:52:e8:c5:ce:03:16:c8:99:a5:43:bd: d6:66:18:4c:a7:0a:66:52:83:fa:e7:94:79:9a:a8:6f:41:db: e4:a4:d8:4b:fa:cb:fb:58:aa:88:74:27:1c:f3:96:1a:86:14: 50:25:01:60:29:1e:36:3d:3c:d1:f0:4b:00:c0:7b:77:1a:e0: 4f:7c:5e:e7:1a:d9:14:5b:ad:c9:73:0c:76:31:5f:86:19:fb: b7:41:c4:c7:cc:69:3f:21:ad:92:bc:18:b6:55:c7:a1:42:d2: ec:57:e9:b0:1f:b6:b5:8f:e2:db:c2:da:d9:5e:c3:54:ed:fd: e1:4f:3b:9c:6f:99:20:78:62:cb:2c:9f:cf:0c:0c:79:1c:8c: 61:d4:e7:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfEqOKiUY/AAsRftowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQxNjc2MjktNjNlOS00NDBiLTlhOWYtMjJhNDU3MGYw ZDc4MB4XDTI1MDcwMTA3MDAwM1oXDTI1MDcwMzA3MDAwMFowLzEtMCsGA1UEAxMk MDU0MjU3MTktYjE1Yy00NDEzLTgzNDktNzMwNzk0M2EzMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TFvRHdF0cicDQYmf5vllvVXlrLhRz7FhUXx QEq0oyzaoGxNcVqIAhPJWXvEs5eaxSbGAjpTThKAEeUrb7t2yy/bsXn0qtc/Zsgu peh1k6ufLfRRQ9YlyWjuwSzn8a3jYfFCPnAz3vTnOdelWsIMMwcVJhD7lBi5Hp31 fp1wy2I1bQzFcopsP5L98xcx2+yZAAwcbxteoEXt40Fp44iMxRz+X+LtebC/OLXi NVejewiJOotcHfeek1rkzBdEdMQCpjs+bJbjzRk3oqkQDqPVVqOFjiAqyX7CDDFd YOBKq7pe4xLyP+ygqUtLQSK7Pu0gTi4KZOc7FrRDyIrlURgT8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA773h+IoJT4AR/fnL5OyEHgMhcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDE2 NzYyOS02M2U5LTQ0MGItOWE5Zi0yMmE0NTcwZjBkNzgvOWQxNjc2MjktNjNlOS00 NDBiLTlhOWYtMjJhNDU3MGYwZDc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQxNjc2MjktNjNlOS00NDBiLTlh OWYtMjJhNDU3MGYwZDc4LzlkMTY3NjI5LTYzZTktNDQwYi05YTlmLTIyYTQ1NzBm MGQ3OC5jcmwwHwYDVR0jBBgwFoAUIQ/xEambAUmpPmzJ0w0okxyOnqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDE2NzYyOS02M2U5LTQ0MGItOWE5Zi0yMmE0 NTcwZjBkNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDH264ADQkk4WjMyAPvMNHW J7oWBnXxlJfixQfTHS1RW815+0sfpI+oMVHzZkoA+Ckjz4E+yVfXr/PG/jihKTZK tD7aCpZHmPRJBeeaQOX8fT7LLH8cJuV5z8fHbQ8IR/higN3+UA8GbMPqxbf7FMW/ huRTUujFzgMWyJmlQ73WZhhMpwpmUoP655R5mqhvQdvkpNhL+sv7WKqIdCcc85Ya hhRQJQFgKR42PTzR8EsAwHt3GuBPfF7nGtkUW63Jcwx2MV+GGfu3QcTHzGk/Ia2S vBi2VcehQtLsV+mwH7a1j+LbwtrZXsNU7f3hTzucb5kgeGLLLJ/PDAx5HIxh1Of1 -----END CERTIFICATE-----Generated at Tue Jul 1 14:49:01 2025 by rpki-client