$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft File: 1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft (raw, json) Hash identifier: xhEjtPrKDu35uVFOX2x+8bcJ4IEtagiVsgPHo3Alf2A= Subject key identifier: B8:8B:82:99:F3:63:AE:3E:77:D4:D7:7F:FE:C5:A1:80:26:22:B0:CE Authority key identifier: FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D Certificate issuer: /CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c Certificate serial: 010D0C9F4328584A5CA1480072ACD17E22CB2ED0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft Manifest number: 010D0C9F4328584073A84C73C1B6789E4E91D122 Signing time: Mon 30 Jun 2025 10:00:03 +0000 Manifest this update: Mon 30 Jun 2025 10:00:03 +0000 Manifest next update: Thu 03 Jul 2025 10:00:00 +0000 Files and hashes: 1: 0f8069e4-fcf4-3fed-8d08-706747fddde5.roa (hash: HjdLKDcF+lRUkL9mPHUwqqH4iXnsOmnZeIiRuCer93Y=) 2: 1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl (hash: dfQORc3+/wi8b3QZ8gSY9I1fan/82f9XwehiTIahEyU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:a1:48:00:72:ac:d1:7e:22:cb:2e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c Validity Not Before: Jun 30 10:00:03 2025 GMT Not After : Jul 3 10:00:00 2025 GMT Subject: CN=857a1b0a-df91-4797-8c79-093ea46e218f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:05:1b:11:ac:b5:20:0b:06:f0:df:ff:54: 0d:5d:df:ba:1c:32:48:43:81:00:8e:96:22:c1:41: c9:0c:fa:5d:b0:44:5d:25:95:fc:80:f3:39:5f:0e: c8:ca:6d:f0:8d:bc:77:eb:7c:91:a4:b2:b1:13:75: 0a:80:c1:fc:4c:7f:a3:f2:1f:82:99:17:d4:17:ea: 73:f5:5b:ff:0d:7e:38:8c:87:f0:c4:b3:b7:2e:2f: 3e:10:62:83:a4:60:00:53:15:48:67:21:54:0f:b3: 0a:45:cb:3a:a2:a9:ed:ea:0a:56:71:ae:f2:64:83: 1a:3a:97:d3:24:74:f6:38:00:a6:e3:81:76:76:8b: a6:8f:f7:26:32:92:6d:27:26:5e:a3:8c:98:20:05: ca:8b:1f:a2:5d:ab:0a:0e:9d:68:32:ce:ea:bc:a1: db:f2:44:5b:09:ba:2a:1d:8a:9c:3f:1c:43:e5:c8: 8e:0a:c9:2c:be:5f:85:31:7c:1e:07:fa:f5:94:f3: ba:49:8e:19:a6:b1:87:77:e2:93:ce:53:9f:3e:82: 54:b6:df:73:ca:c1:f8:73:3e:27:ea:6d:e5:f0:7b: 66:48:5f:fb:b9:70:ae:47:89:c9:bc:ca:b4:d0:7e: cc:f1:86:8f:29:e1:a5:1f:51:e2:c7:7b:72:1d:f3: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:82:99:F3:63:AE:3E:77:D4:D7:7F:FE:C5:A1:80:26:22:B0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.crl X509v3 Authority Key Identifier: keyid:FB:8B:B7:0D:9A:A3:B9:DD:E0:D5:E3:13:1E:E8:88:D7:0E:04:79:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1d8c6a26-e3cf-4ca5-bf2e-e572575a8d7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ef:eb:19:3a:d4:60:a1:07:d2:28:df:f8:67:bf:6f:aa:2a: b8:54:ed:6a:71:ba:83:0b:65:1d:a5:27:7d:d1:84:45:e0:92: 30:0b:97:a6:3c:66:d3:42:cf:af:fa:e9:88:3e:88:94:f2:d3: 59:d2:f9:e5:98:59:d4:cf:c6:80:67:94:42:46:2c:22:cf:42: bc:4d:04:b7:30:cc:61:73:80:cc:78:94:b7:91:b1:63:32:f7: 20:68:0e:fc:26:ab:66:d0:db:8b:5b:68:89:b5:31:06:39:8f: d4:87:da:b8:26:8e:fb:3b:03:c6:9e:11:08:c4:81:86:04:54: cd:7e:38:6a:25:fb:53:38:36:81:04:49:ea:c3:16:28:8f:15: 2a:6f:28:9c:5b:5d:28:46:08:cc:c7:b6:7e:c6:98:ff:4e:f9: 83:00:88:2f:fc:d0:bc:a5:68:07:5e:8c:94:da:46:a8:c3:05: b4:ba:9c:24:88:6d:fe:7d:22:e2:6b:60:5a:b6:f7:ad:42:60: 1c:5b:65:e2:ab:34:1c:b1:97:6b:7d:93:df:47:fd:91:8c:27: 4e:52:ed:80:e0:45:49:7b:93:d0:55:d9:fb:15:28:70:12:ed: d2:35:2a:1f:6b:ba:f0:38:79:27:b0:50:81:ef:03:6a:5b:68: db:f8:b0:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpcoUgAcqzRfiLLLtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ4YzZhMjYtZTNjZi00Y2E1LWJmMmUtZTU3MjU3NWE4 ZDdjMB4XDTI1MDYzMDEwMDAwM1oXDTI1MDcwMzEwMDAwMFowLzEtMCsGA1UEAxMk ODU3YTFiMGEtZGY5MS00Nzk3LThjNzktMDkzZWE0NmUyMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCEFGxGstSALBvDf/1QNXd+6HDJIQ4EAjpYi wUHJDPpdsERdJZX8gPM5Xw7Iym3wjbx363yRpLKxE3UKgMH8TH+j8h+CmRfUF+pz 9Vv/DX44jIfwxLO3Li8+EGKDpGAAUxVIZyFUD7MKRcs6oqnt6gpWca7yZIMaOpfT JHT2OACm44F2doumj/cmMpJtJyZeo4yYIAXKix+iXasKDp1oMs7qvKHb8kRbCboq HYqcPxxD5ciOCsksvl+FMXweB/r1lPO6SY4ZprGHd+KTzlOfPoJUtt9zysH4cz4n 6m3l8HtmSF/7uXCuR4nJvMq00H7M8YaPKeGlH1Hix3tyHfNuRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLiLgpnzY64+d9TXf/7FoYAmIrDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZDhj NmEyNi1lM2NmLTRjYTUtYmYyZS1lNTcyNTc1YThkN2MvMWQ4YzZhMjYtZTNjZi00 Y2E1LWJmMmUtZTU3MjU3NWE4ZDdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWQ4YzZhMjYtZTNjZi00Y2E1LWJm MmUtZTU3MjU3NWE4ZDdjLzFkOGM2YTI2LWUzY2YtNGNhNS1iZjJlLWU1NzI1NzVh OGQ3Yy5jcmwwHwYDVR0jBBgwFoAU+4u3DZqjud3g1eMTHuiI1w4EeQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZDhjNmEyNi1lM2NmLTRjYTUtYmYyZS1lNTcy NTc1YThkN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCE7+sZOtRgoQfSKN/4Z79v qiq4VO1qcbqDC2UdpSd90YRF4JIwC5emPGbTQs+v+umIPoiU8tNZ0vnlmFnUz8aA Z5RCRiwiz0K8TQS3MMxhc4DMeJS3kbFjMvcgaA78Jqtm0NuLW2iJtTEGOY/Uh9q4 Jo77OwPGnhEIxIGGBFTNfjhqJftTODaBBEnqwxYojxUqbyicW10oRgjMx7Z+xpj/ TvmDAIgv/NC8pWgHXoyU2kaowwW0upwkiG3+fSLia2BatvetQmAcW2XiqzQcsZdr fZPfR/2RjCdOUu2A4EVJe5PQVdn7FShwEu3SNSofa7rwOHknsFCB7wNqW2jb+LAB -----END CERTIFICATE-----Generated at Tue Jul 1 08:25:48 2025 by rpki-client