$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft File: d9e22f6d-5551-4712-9f95-3008c51223ec.mft (raw, json) Hash identifier: uyJcJjuEu+LGeJ/523gqF4PniXtEGYXWdmN08bouBoA= Subject key identifier: 0C:B0:C6:70:A5:0A:38:19:38:59:08:44:5C:D5:E1:B7:11:3E:C5:78 Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Certificate issuer: /CN=d9e22f6d-5551-4712-9f95-3008c51223ec Certificate serial: 010D0C9F4328584A629007AD950B478A4FA3A228 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft Manifest number: 010D0C9F43285841E6A4ADE0B31162520C965CBD Signing time: Wed 02 Jul 2025 13:00:08 +0000 Manifest this update: Wed 02 Jul 2025 13:00:08 +0000 Manifest next update: Sat 05 Jul 2025 13:00:00 +0000 Files and hashes: 1: 8357b082-17dc-3d36-87f1-8e0746d54610.roa (hash: dJcHXHSnu6MYMnDpuGtuz10KuO2PiT/K1Yse/1ZEmx0=) 2: d9e22f6d-5551-4712-9f95-3008c51223ec.crl (hash: pR4OrKWicrJ2SgTWFUkKKp0q9rwLwcjpGQzI/3UIjjg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:07:ad:95:0b:47:8a:4f:a3:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec Validity Not Before: Jul 2 13:00:08 2025 GMT Not After : Jul 5 13:00:00 2025 GMT Subject: CN=d6f73d91-af91-44fa-8740-4812d848bb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:54:61:66:c8:21:ad:37:83:ea:04:ac:36: 03:7c:fb:08:19:51:ae:b6:17:64:06:eb:bc:cd:d7: 32:ae:08:bf:69:b7:fc:f3:ee:73:6a:3b:0c:c8:5d: 45:2e:c8:07:6c:bc:58:13:97:17:4e:c2:83:bc:35: 44:b5:d7:ae:76:06:85:a2:d4:aa:9f:8b:1a:2d:f0: 11:70:24:4b:4c:d5:f6:7b:04:f9:79:af:a7:dd:77: 93:c9:83:be:c6:5b:1f:6e:5d:60:1a:e6:69:b6:d5: 56:b5:15:30:bb:2c:9e:ed:60:03:d6:44:ae:66:89: 00:d3:29:9d:04:c7:bd:d3:d3:19:84:95:72:44:2e: da:6e:1b:08:1d:19:27:08:4d:7d:1a:47:10:45:4e: b0:6c:84:f5:3d:49:7c:48:5c:3e:00:c7:51:1a:62: 53:b9:27:28:bc:f9:1f:aa:7e:7e:fa:5f:c4:a2:b3: 2f:04:5f:82:f6:b8:34:ab:49:98:5c:49:33:8d:9b: 2b:e2:df:27:3c:1a:c4:d6:0f:9d:a7:99:64:7f:3d: 58:5e:62:c0:56:3f:c0:5a:30:04:6e:3b:8e:78:45: 28:a1:e7:09:db:9c:95:6d:45:27:02:ef:63:1a:e5: 31:5e:ea:09:5d:91:d8:3d:65:dd:f2:30:07:e7:a5: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:C6:70:A5:0A:38:19:38:59:08:44:5C:D5:E1:B7:11:3E:C5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl X509v3 Authority Key Identifier: keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9b:e7:50:b1:4a:63:b0:db:c1:fd:58:c8:9a:d5:35:0f:3d: f5:2e:40:23:65:4f:20:25:43:cc:e9:c8:95:42:80:ba:d3:d5: bf:89:27:69:56:fe:ba:c2:82:f9:1b:c3:f2:ff:84:a8:ee:fd: ec:ff:17:3a:80:ae:1f:b8:33:34:4f:ae:52:e4:c8:10:be:0f: fb:f7:03:3a:8a:18:de:20:5a:5b:46:53:f6:f2:6f:c1:4c:32: d0:3a:b1:c9:7e:58:a9:c5:8a:28:3b:db:6e:ea:2e:26:b6:38: a3:a1:ed:26:9f:f7:56:eb:6f:56:ef:cf:92:41:75:58:cf:41: 47:5c:c8:14:da:ae:16:94:81:ea:23:a9:b2:95:d4:d5:dd:32: 7b:c4:53:06:51:c6:dd:53:a2:3f:50:55:b3:f4:b5:1b:e4:12: cf:2d:77:fd:a9:a4:f3:04:c1:19:00:d9:32:ef:d6:7a:00:1b: 8e:45:e7:65:64:dc:53:fa:da:05:34:5e:ac:50:2a:6f:8d:8b: 1d:f0:f6:39:50:57:b1:0a:af:bb:e1:10:df:a1:5d:53:8f:2e: ef:5c:83:7a:bb:e3:02:17:72:16:63:a3:59:66:b4:cd:08:da: 15:d9:4d:03:74:c9:10:7c:c9:fa:aa:d2:56:d4:5e:52:b9:90: db:aa:a3:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpikAetlQtHik+joigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIy M2VjMB4XDTI1MDcwMjEzMDAwOFoXDTI1MDcwNTEzMDAwMFowLzEtMCsGA1UEAxMk ZDZmNzNkOTEtYWY5MS00NGZhLTg3NDAtNDgxMmQ4NDhiYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J5UYWbIIa03g+oErDYDfPsIGVGuthdkBuu8 zdcyrgi/abf88+5zajsMyF1FLsgHbLxYE5cXTsKDvDVEtdeudgaFotSqn4saLfAR cCRLTNX2ewT5ea+n3XeTyYO+xlsfbl1gGuZpttVWtRUwuyye7WAD1kSuZokA0ymd BMe909MZhJVyRC7abhsIHRknCE19GkcQRU6wbIT1PUl8SFw+AMdRGmJTuScovPkf qn5++l/EorMvBF+C9rg0q0mYXEkzjZsr4t8nPBrE1g+dp5lkfz1YXmLAVj/AWjAE bjuOeEUooecJ25yVbUUnAu9jGuUxXuoJXZHYPWXd8jAH56XzQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAywxnClCjgZOFkIRFzV4bcRPsV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUy MmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvZDllMjJmNmQtNTU1MS00 NzEyLTlmOTUtMzAwOGM1MTIyM2VjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDllMjJmNmQtNTU1MS00NzEyLTlm OTUtMzAwOGM1MTIyM2VjL2Q5ZTIyZjZkLTU1NTEtNDcxMi05Zjk1LTMwMDhjNTEy MjNlYy5jcmwwHwYDVR0jBBgwFoAUKMgwTb3YSsAeO4Ye5UoxZba3l3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4 YzUxMjIzZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABm+dQsUpjsNvB/VjImtU1 Dz31LkAjZU8gJUPM6ciVQoC609W/iSdpVv66woL5G8Py/4So7v3s/xc6gK4fuDM0 T65S5MgQvg/79wM6ihjeIFpbRlP28m/BTDLQOrHJflipxYooO9tu6i4mtjijoe0m n/dW629W78+SQXVYz0FHXMgU2q4WlIHqI6myldTV3TJ7xFMGUcbdU6I/UFWz9LUb 5BLPLXf9qaTzBMEZANky79Z6ABuORedlZNxT+toFNF6sUCpvjYsd8PY5UFexCq+7 4RDfoV1Tjy7vXIN6u+MCF3IWY6NZZrTNCNoV2U0DdMkQfMn6qtJW1F5SuZDbqqMv -----END CERTIFICATE-----Generated at Thu Jul 3 03:52:37 2025 by rpki-client