$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft File: 207c40f4-33c4-478b-ae61-d3f51358881b.mft (raw, json) Hash identifier: +nbg15PCieJ46nH2pvVnyLXwXLRO8RHJQltSlr91NSA= Subject key identifier: 40:92:43:BE:21:D2:18:94:16:76:85:59:05:C6:1B:A9:2E:06:99:7B Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584A5E06B03D8C0E56BDECC09800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft Manifest number: 010D0C9F4328584073A82D4189108E20C31E2422 Signing time: Mon 30 Jun 2025 22:00:08 +0000 Manifest this update: Mon 30 Jun 2025 22:00:08 +0000 Manifest next update: Wed 02 Jul 2025 22:00:00 +0000 Files and hashes: 1: 207c40f4-33c4-478b-ae61-d3f51358881b.crl (hash: b8KI3mc6D3w7hleR6OGCazHeXAa5gHJrkuHHYr5ZdyY=) 2: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (hash: Vp7+KF2SMGaXs5fmNw4O6wxd6BSyuS9kGTbYWGWarj4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:06:b0:3d:8c:0e:56:bd:ec:c0:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Jun 30 22:00:08 2025 GMT Not After : Jul 2 22:00:00 2025 GMT Subject: CN=cd16a080-2af3-4647-8391-1c9a0e0b4ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:ed:ae:18:7c:a8:8e:72:60:0d:9a:e8:10: a8:1a:66:94:b6:c6:6b:a1:7f:4d:3e:b4:46:09:df: da:d8:64:36:3c:b5:b6:59:3c:cd:3a:50:fc:b7:5b: fa:91:d7:ec:57:9d:d9:c5:04:55:f2:68:d6:5f:da: dd:ba:77:67:bf:d6:d3:70:2f:cf:54:c6:e5:a4:a7: 9b:11:da:6c:37:76:84:9e:a3:75:d2:e7:78:be:d2: 9a:95:b2:a2:7b:6d:3c:bd:47:4a:61:84:0e:08:1e: 40:0c:77:20:98:3c:c7:96:e8:5e:8c:81:4f:5e:66: 4a:b9:51:f8:67:65:46:8b:51:33:b0:63:9e:01:0b: 52:e1:4c:c8:24:49:e8:f1:8a:ec:b9:70:63:55:78: 8d:65:d4:fd:c1:c0:5f:89:43:de:d4:0d:89:c1:f5: 99:e4:f1:5f:44:6c:cc:33:86:e7:85:d1:96:7f:c4: 85:47:d7:eb:a5:b8:49:ed:c4:9b:51:7b:92:33:40: 50:2c:b1:0a:8d:26:dc:d1:ec:2c:a8:3d:4c:0d:94: 86:61:e7:98:ce:7e:fc:d2:91:d1:1f:b3:e8:8f:5f: 51:25:23:14:f0:7a:7a:04:43:ff:72:75:1d:20:36: 4b:b9:5d:a9:b1:03:69:0e:ad:25:89:f1:54:81:77: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:92:43:BE:21:D2:18:94:16:76:85:59:05:C6:1B:A9:2E:06:99:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:30:ea:9e:42:82:aa:70:cb:f8:2a:20:d4:aa:ad:82:e4:d9: 91:f8:7a:bb:85:26:75:dc:e6:7b:c8:cf:82:f5:06:3d:ed:2f: 11:31:ce:94:a1:5f:42:f6:ca:af:d3:30:92:22:44:1d:bf:ea: 8d:dd:ac:26:07:2e:d0:7f:cf:18:aa:9c:05:35:23:e2:fd:6b: 77:60:44:19:7f:60:51:0a:df:de:0c:f6:3e:37:3c:19:74:a4: 4d:58:93:5a:18:70:8b:97:0f:19:ad:41:ad:4e:83:dc:65:49: d7:c9:9a:a8:ed:53:6e:7c:56:15:bd:ef:7a:1c:7a:ed:07:27: df:0a:45:6b:c4:5b:d5:86:fc:f9:66:8a:84:25:73:73:3c:9e: e8:ab:5e:b4:db:30:07:9a:0a:c4:c6:ba:65:53:c2:fc:4f:55: a5:0a:61:bf:36:ff:b6:ba:1c:5c:65:c1:96:37:ef:47:bb:e7: f0:86:50:91:17:94:4d:29:35:19:e5:08:fd:4e:1e:9c:b0:fd: a9:70:c5:74:9a:0c:b1:41:5e:ab:58:32:5b:fd:01:67:da:65: d4:be:e2:86:20:c3:77:2f:f8:05:57:48:aa:fa:49:3a:08:a7: 82:b7:42:ea:28:be:f2:df:c4:7d:06:53:be:c2:7b:d3:fb:45: 51:04:25:64 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeBrA9jA5WvezAmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI1MDYzMDIyMDAwOFoXDTI1MDcwMjIyMDAwMFowLzEtMCsGA1UEAxMk Y2QxNmEwODAtMmFmMy00NjQ3LTgzOTEtMWM5YTBlMGI0Y2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3btrhh8qI5yYA2a6BCoGmaUtsZroX9NPrRG Cd/a2GQ2PLW2WTzNOlD8t1v6kdfsV53ZxQRV8mjWX9rdundnv9bTcC/PVMblpKeb EdpsN3aEnqN10ud4vtKalbKie208vUdKYYQOCB5ADHcgmDzHluhejIFPXmZKuVH4 Z2VGi1EzsGOeAQtS4UzIJEno8YrsuXBjVXiNZdT9wcBfiUPe1A2JwfWZ5PFfRGzM M4bnhdGWf8SFR9frpbhJ7cSbUXuSM0BQLLEKjSbc0ewsqD1MDZSGYeeYzn780pHR H7Poj19RJSMU8Hp6BEP/cnUdIDZLuV2psQNpDq0lifFUgXcHcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFECSQ74h0hiUFnaFWQXGG6kuBpl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMjA3YzQwZjQtMzNjNC00 NzhiLWFlNjEtZDNmNTEzNTg4ODFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPMOqeQoKqcMv4KiDUqq2C 5NmR+Hq7hSZ13OZ7yM+C9QY97S8RMc6UoV9C9sqv0zCSIkQdv+qN3awmBy7Qf88Y qpwFNSPi/Wt3YEQZf2BRCt/eDPY+NzwZdKRNWJNaGHCLlw8ZrUGtToPcZUnXyZqo 7VNufFYVve96HHrtByffCkVrxFvVhvz5ZoqEJXNzPJ7oq1602zAHmgrExrplU8L8 T1WlCmG/Nv+2uhxcZcGWN+9Hu+fwhlCRF5RNKTUZ5Qj9Th6csP2pcMV0mgyxQV6r WDJb/QFn2mXUvuKGIMN3L/gFV0iq+kk6CKeCt0LqKL7y38R9BlO+wnvT+0VRBCVk -----END CERTIFICATE-----Generated at Tue Jul 1 19:58:05 2025 by rpki-client