$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: 6LiOHZpJGbtCdT61gnWbiCxWDJlVG0HQSllJdOBmr3k= Subject key identifier: BD:87:64:8A:5A:23:B6:7F:08:97:50:09:73:4D:E8:EF:2C:4A:72:11 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584A5DE8D81ACFFE95E90A9C5240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079984 Signing time: Mon 30 Jun 2025 21:00:03 +0000 Manifest this update: Mon 30 Jun 2025 21:00:03 +0000 Manifest next update: Thu 03 Jul 2025 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: bmjSa+t6VspiTi/zASx83HmKaFxKurepxt4tpiM02z0=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: vqyvObdwacG0BvBmuICe1MB7sTmdrlCEsmSJKA96FSA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:e8:d8:1a:cf:fe:95:e9:0a:9c:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Jun 30 21:00:03 2025 GMT Not After : Jul 3 21:00:00 2025 GMT Subject: CN=d3926af6-6093-46bc-9ae5-267b5b6c354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:c7:f7:92:80:51:fc:49:33:a3:97:d6:ca: 9f:9f:56:a8:2e:cc:db:36:04:9e:fa:1f:75:98:b4: 51:19:a0:2a:9d:9f:0f:12:14:60:19:a8:ae:fd:14: 10:06:66:5c:da:a1:24:cd:d7:7a:c8:c9:7c:26:f5: 0b:dd:77:c1:dc:a1:ae:d1:8f:ee:71:13:81:19:f6: 3e:96:3a:01:1c:37:59:52:36:91:6c:4f:dc:41:2c: 79:72:38:43:4e:40:7d:b8:47:2a:28:05:49:d0:82: 35:ae:88:ab:8a:79:31:03:f1:63:56:ff:0d:80:d6: 82:b5:99:7e:34:50:7e:ba:20:f3:81:73:04:52:7d: ea:28:68:a6:b7:53:47:79:05:06:6d:32:51:79:36: 00:a9:ce:4c:47:0a:28:23:8e:e3:82:29:35:10:02: 79:df:09:16:1d:41:63:46:ab:33:99:50:d1:fa:38: 3d:90:c2:fc:2a:7b:0b:ac:cd:b5:a5:4c:c6:a6:29: b3:7c:64:e5:5b:7e:64:b9:40:e7:3d:7a:ca:7b:45: a0:ec:e0:9e:6f:37:22:d4:5d:e4:28:17:11:50:af: c5:1d:30:71:bd:77:e7:7a:2a:75:8a:d2:84:d8:1b: 71:d6:7e:76:46:8b:d8:38:a3:24:74:5e:ef:4a:9a: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:87:64:8A:5A:23:B6:7F:08:97:50:09:73:4D:E8:EF:2C:4A:72:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f8:75:66:bb:61:f0:df:6b:68:70:f5:38:5b:7d:23:58:06: de:91:56:ae:ab:bb:fe:d1:3c:5d:fa:3b:5d:99:a1:ce:0e:b7: 3f:ce:6c:fb:fe:77:c3:de:7b:3c:7d:ea:ce:98:16:0c:12:8a: fd:d9:3d:54:aa:0e:c8:93:ff:13:fa:f8:08:cf:ff:bf:50:20: d0:53:56:5f:79:56:33:73:b7:0c:81:80:c9:55:b0:ee:d9:c0: 3c:63:43:33:79:f4:d0:a6:37:e8:de:ce:c0:ce:39:87:ab:aa: 5a:35:65:ff:d7:26:f6:9b:f1:44:3d:7a:ae:01:f9:42:26:d8: e1:52:96:cd:82:5e:65:bf:8c:24:c0:72:c1:ec:7d:e2:65:13: fe:60:57:33:fb:ae:5a:53:4b:2f:1a:38:de:f6:74:59:d6:b1: 0b:8e:a6:7d:f6:5a:1e:81:8f:61:99:08:ac:b4:a6:55:78:4f: 68:41:ca:76:d7:89:18:c6:8c:4d:29:d4:19:09:1b:14:c8:96: 4b:5a:70:36:00:cc:9d:84:89:0e:a5:06:51:fc:4b:ca:ea:01: fa:d7:36:42:fe:f3:c7:3d:34:e3:db:8e:c1:ac:60:9e:65:b8: a0:c5:38:e9:eb:f5:63:b5:8c:1d:c3:08:d1:00:ef:2b:42:76: 8d:fc:63:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpd6Ngaz/6V6QqcUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MDYzMDIxMDAwM1oXDTI1MDcwMzIxMDAwMFowLzEtMCsGA1UEAxMk ZDM5MjZhZjYtNjA5My00NmJjLTlhZTUtMjY3YjViNmMzNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXH95KAUfxJM6OX1sqfn1aoLszbNgSe+h91 mLRRGaAqnZ8PEhRgGaiu/RQQBmZc2qEkzdd6yMl8JvUL3XfB3KGu0Y/ucROBGfY+ ljoBHDdZUjaRbE/cQSx5cjhDTkB9uEcqKAVJ0II1roirinkxA/FjVv8NgNaCtZl+ NFB+uiDzgXMEUn3qKGimt1NHeQUGbTJReTYAqc5MRwooI47jgik1EAJ53wkWHUFj RqszmVDR+jg9kML8KnsLrM21pUzGpimzfGTlW35kuUDnPXrKe0Wg7OCebzci1F3k KBcRUK/FHTBxvXfneip1itKE2Btx1n52RovYOKMkdF7vSpqLeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL2HZIpaI7Z/CJdQCXNN6O8sSnIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3+HVmu2Hw32tocPU4W30j WAbekVauq7v+0Txd+jtdmaHODrc/zmz7/nfD3ns8ferOmBYMEor92T1Uqg7Ik/8T +vgIz/+/UCDQU1ZfeVYzc7cMgYDJVbDu2cA8Y0MzefTQpjfo3s7AzjmHq6paNWX/ 1yb2m/FEPXquAflCJtjhUpbNgl5lv4wkwHLB7H3iZRP+YFcz+65aU0svGjje9nRZ 1rELjqZ99loegY9hmQistKZVeE9oQcp214kYxoxNKdQZCRsUyJZLWnA2AMydhIkO pQZR/EvK6gH61zZC/vPHPTTj247BrGCeZbigxTjp6/VjtYwdwwjRAO8rQnaN/GPB -----END CERTIFICATE-----Generated at Tue Jul 1 15:45:15 2025 by rpki-client