$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft File: 28ab384d-3018-413f-b253-d2f3ef552ffa.mft (raw, json) Hash identifier: 8+VipfOobzFvJ2nVvAX7SJaIvAlG7ewd9k118Y+wVQU= Subject key identifier: 38:54:6F:D6:DA:55:94:BE:0C:FA:99:75:02:6B:F5:99:35:EE:EF:19 Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa Certificate serial: 010D0C9F4328584A5FA790EB788289C1492DF940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft Manifest number: 010D0C9F43285845188E40594C1633D6658FF7B0 Signing time: Tue 01 Jul 2025 12:00:08 +0000 Manifest this update: Tue 01 Jul 2025 12:00:08 +0000 Manifest next update: Fri 04 Jul 2025 12:00:00 +0000 Files and hashes: 1: 28ab384d-3018-413f-b253-d2f3ef552ffa.crl (hash: UWn7KZPMJrkzL5bnH44K6ZD6mk/WeeJsy8YfPquOc9k=) 2: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (hash: ShIyA1k1nqTyvnuN2/GejyduvYbRV5AY/lmHGexToqQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:a7:90:eb:78:82:89:c1:49:2d:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa Validity Not Before: Jul 1 12:00:08 2025 GMT Not After : Jul 4 12:00:00 2025 GMT Subject: CN=0ca0c821-d8b0-4df6-aebe-ca69bf0f7c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:60:6a:32:6e:aa:25:cb:c0:0d:e2:a7:94: b6:c9:5a:e0:51:98:5b:02:73:3a:b8:f1:e3:7a:37: 3d:6a:cb:be:8b:5b:0a:9a:b7:75:c8:aa:ea:5f:52: 98:84:94:9c:71:90:e8:7d:78:6f:f5:eb:39:d2:a7: 39:4f:41:89:2e:1c:08:6a:7d:64:d4:1a:7a:56:bc: 72:1a:cd:f2:6f:eb:ec:4c:fa:01:d8:21:0f:e8:52: 05:9e:1c:b6:73:40:5d:c5:2a:f7:3c:94:41:14:75: c0:4a:9f:12:05:34:f2:74:90:81:57:b1:7c:89:ff: a7:f3:95:46:77:3c:f4:a5:69:fa:13:ee:fe:3a:ea: 56:ff:82:c3:50:e2:8d:34:6d:5c:a2:ad:ec:fd:d1: c2:43:e2:d5:04:bb:53:14:b7:70:61:53:56:4b:1f: 42:f2:9c:6b:e5:5a:b1:2f:42:ab:8e:64:59:16:c1: fa:aa:34:7c:53:90:05:ab:8a:d2:87:07:dd:df:4c: ed:5d:d6:32:0e:5a:b9:a3:cf:73:87:d5:0a:0f:28: 38:f8:86:f8:08:f4:e7:3b:b8:49:3a:b9:7a:75:c6: a7:c9:9f:20:cf:ba:99:b5:af:2e:31:3c:62:dc:bd: d9:4b:d8:de:e5:b7:2f:d3:33:48:69:a9:ea:0c:5b: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:54:6F:D6:DA:55:94:BE:0C:FA:99:75:02:6B:F5:99:35:EE:EF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl X509v3 Authority Key Identifier: keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d2:88:1a:71:2a:47:43:7b:59:07:0f:cf:9b:9d:e3:d5:11: c0:18:83:eb:61:e8:a1:7b:c5:0a:61:4b:ab:cc:58:24:55:b0: 24:46:e8:b5:ba:61:d6:ee:04:94:de:eb:68:c7:a5:26:59:05: 2d:df:36:4a:dc:ac:ce:d1:15:f0:eb:49:18:0a:3e:93:07:93: 1e:7e:39:73:02:39:50:b2:f5:e6:d7:c6:da:a9:ec:e1:6c:fb: d7:7e:7d:f8:9a:7e:a3:45:64:53:18:f7:10:87:37:56:45:c2: 04:85:f8:3b:56:38:2d:46:e6:b9:79:1a:2d:76:2d:b9:2f:ed: 85:e1:12:88:cf:81:66:f6:bb:b9:69:14:52:97:ba:b9:1b:34: 77:88:ef:8f:32:7a:03:9e:c3:46:f5:93:d1:7f:50:db:15:c9: 7d:9b:ca:9b:0e:8d:8d:65:ed:30:2d:aa:00:37:21:ce:73:d5: e2:a3:2b:a4:57:04:5c:7c:9f:6d:66:5a:87:98:00:c8:e0:13: ae:d5:51:94:cb:0b:7f:25:2a:fb:4b:70:4a:e1:1c:67:70:32: 1c:72:58:a6:b9:bb:96:0b:fa:6e:7d:81:f2:00:02:60:b9:4e: 63:82:ad:0e:fc:1c:64:1e:09:be:cb:5e:4e:d9:11:53:b7:26: c6:75:c0:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfp5DreIKJwUkt+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy ZmZhMB4XDTI1MDcwMTEyMDAwOFoXDTI1MDcwNDEyMDAwMFowLzEtMCsGA1UEAxMk MGNhMGM4MjEtZDhiMC00ZGY2LWFlYmUtY2E2OWJmMGY3YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkRgajJuqiXLwA3ip5S2yVrgUZhbAnM6uPHj ejc9asu+i1sKmrd1yKrqX1KYhJSccZDofXhv9es50qc5T0GJLhwIan1k1Bp6Vrxy Gs3yb+vsTPoB2CEP6FIFnhy2c0BdxSr3PJRBFHXASp8SBTTydJCBV7F8if+n85VG dzz0pWn6E+7+OupW/4LDUOKNNG1coq3s/dHCQ+LVBLtTFLdwYVNWSx9C8pxr5Vqx L0KrjmRZFsH6qjR8U5AFq4rShwfd30ztXdYyDlq5o89zh9UKDyg4+Ib4CPTnO7hJ Orl6dcanyZ8gz7qZta8uMTxi3L3ZS9je5bcv0zNIaanqDFtakwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDhUb9baVZS+DPqZdQJr9Zk17u8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvMjhhYjM4NGQtMzAxOC00 MTNmLWIyNTMtZDJmM2VmNTUyZmZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1 MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz ZWY1NTJmZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK0ogacSpHQ3tZBw/Pm53j 1RHAGIPrYeihe8UKYUurzFgkVbAkRui1umHW7gSU3utox6UmWQUt3zZK3KzO0RXw 60kYCj6TB5MefjlzAjlQsvXm18baqezhbPvXfn34mn6jRWRTGPcQhzdWRcIEhfg7 VjgtRua5eRotdi25L+2F4RKIz4Fm9ru5aRRSl7q5GzR3iO+PMnoDnsNG9ZPRf1Db Fcl9m8qbDo2NZe0wLaoANyHOc9XioyukVwRcfJ9tZlqHmADI4BOu1VGUywt/JSr7 S3BK4RxncDIcclimubuWC/pufYHyAAJguU5jgq0O/BxkHgm+y15O2RFTtybGdcBo -----END CERTIFICATE-----Generated at Tue Jul 1 16:02:50 2025 by rpki-client