$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.mft (raw, json) Hash identifier: XU7WN0N+Ryt7OsymIEoUcl9W0DKp5WS4SHPpo3sHk1c= Subject key identifier: F4:28:C4:B4:65:E0:73:D7:79:99:28:9D:4C:30:C9:EA:43:6F:2C:35 Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F4328584A61FB21A90CC95DC543387800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft Manifest number: 010D0C9F4328584073A8468DFCDC747631CA8DA4 Signing time: Wed 02 Jul 2025 08:00:08 +0000 Manifest this update: Wed 02 Jul 2025 08:00:08 +0000 Manifest next update: Sat 05 Jul 2025 08:00:00 +0000 Files and hashes: 1: 604dd155-d846-413d-9d18-9c6d0f03ee8c.crl (hash: r9RpOxVHPmyldV7ozfwFMll6gp009bxrvQ3Lg6YeZsw=) 2: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (hash: jNfYua4WMnDYayA85FwRhyGZ5VYwi0w69lU0qSh8EPU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:fb:21:a9:0c:c9:5d:c5:43:38:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Jul 2 08:00:08 2025 GMT Not After : Jul 5 08:00:00 2025 GMT Subject: CN=99243ca8-01d7-4e5d-860c-f9c793c1ac3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:0e:9b:a7:6f:c4:fe:aa:ea:0f:e2:76:b0: 8d:c5:14:ee:68:9c:1a:14:e9:eb:1e:33:be:4b:1a: 23:8d:27:93:8b:e9:90:46:34:64:88:7e:a7:c5:db: 41:40:27:6e:9b:d7:53:d5:4d:96:71:10:4a:f7:ee: 5e:9a:75:f2:1c:75:00:77:21:1f:41:64:80:9f:96: a9:9b:b7:8d:45:77:72:6c:f1:d5:46:fe:65:1e:08: 59:b1:98:a7:92:f9:9b:06:18:e3:77:38:fd:37:6b: 20:69:b4:4c:cd:88:a8:1a:6f:1c:62:d5:dc:0c:6d: ff:80:5d:99:e3:fb:1d:b5:99:3b:81:38:4c:83:4b: ba:92:5f:03:8e:4b:e0:b9:cf:80:07:ff:34:79:64: 83:20:90:e1:b3:ff:2f:1d:4c:45:7a:9c:9b:08:5a: 53:8d:80:9e:5b:30:88:ad:57:b3:63:d9:b3:fc:59: 13:8f:d9:0e:e0:46:76:80:32:e9:da:12:cd:1d:f1: 86:0a:f4:b9:5c:63:e2:da:dc:84:d8:1d:03:bb:21: 7a:5f:d3:68:e5:32:42:e7:2b:7f:0e:15:38:fb:00: f7:67:2b:c2:94:1a:d3:3b:ec:a2:6e:be:49:c5:84: 45:92:72:77:65:74:8a:18:f7:0f:b0:84:a4:df:87: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:28:C4:B4:65:E0:73:D7:79:99:28:9D:4C:30:C9:EA:43:6F:2C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:96:43:cf:f5:17:d2:b9:22:34:25:38:51:dd:00:03:01:ef: ba:f3:43:b3:4c:07:f9:c9:a1:f2:04:d1:83:2d:79:c1:c0:79: 60:11:51:15:e3:dd:03:20:4d:e5:10:af:9c:98:a3:84:31:02: 85:e8:f5:63:46:43:48:c2:a8:02:31:02:97:fe:0a:e7:58:0d: d0:07:62:d6:e8:42:91:43:3f:56:1d:45:dd:1f:ea:35:9e:e4: aa:54:7a:26:52:76:ec:82:7d:2b:48:0a:12:de:2a:04:da:5f: 97:5d:71:de:b5:71:0b:5b:b6:4c:77:24:09:18:6c:21:43:de: 62:76:94:f8:7e:55:d7:5d:95:89:c4:23:ca:75:0e:ac:5f:29: 9c:56:8d:84:f9:74:70:fc:8f:23:9f:02:0e:cf:be:78:39:e2: 40:3c:9b:d9:96:d3:f1:57:74:84:dd:ad:89:3b:b9:47:24:da: 0c:a3:75:e3:3a:38:4a:01:68:75:a1:fd:fa:ac:e1:0d:2a:a3: 45:51:14:f3:c4:5d:1c:1a:3d:32:62:b1:c7:19:e5:de:42:67: f4:82:b2:15:4e:03:b9:f6:89:b7:95:a7:b6:cb:81:46:b1:34: 7b:da:75:3f:58:23:8a:95:a4:db:20:17:14:0b:cc:d4:33:f0: b1:02:81:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEph+yGpDMldxUM4eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI1MDcwMjA4MDAwOFoXDTI1MDcwNTA4MDAwMFowLzEtMCsGA1UEAxMk OTkyNDNjYTgtMDFkNy00ZTVkLTg2MGMtZjljNzkzYzFhYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJIOm6dvxP6q6g/idrCNxRTuaJwaFOnrHjO+ SxojjSeTi+mQRjRkiH6nxdtBQCdum9dT1U2WcRBK9+5emnXyHHUAdyEfQWSAn5ap m7eNRXdybPHVRv5lHghZsZinkvmbBhjjdzj9N2sgabRMzYioGm8cYtXcDG3/gF2Z 4/sdtZk7gThMg0u6kl8Djkvguc+AB/80eWSDIJDhs/8vHUxFepybCFpTjYCeWzCI rVezY9mz/FkTj9kO4EZ2gDLp2hLNHfGGCvS5XGPi2tyE2B0DuyF6X9No5TJC5yt/ DhU4+wD3ZyvClBrTO+yibr5JxYRFknJ3ZXSKGPcPsISk34ekeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPQoxLRl4HPXeZkonUwwyepDbyw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvNjA0ZGQxNTUtZDg0Ni00 MTNkLTlkMTgtOWM2ZDBmMDNlZThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJlkPP9RfSuSI0JThR3QAD Ae+680OzTAf5yaHyBNGDLXnBwHlgEVEV490DIE3lEK+cmKOEMQKF6PVjRkNIwqgC MQKX/grnWA3QB2LW6EKRQz9WHUXdH+o1nuSqVHomUnbsgn0rSAoS3ioE2l+XXXHe tXELW7ZMdyQJGGwhQ95idpT4flXXXZWJxCPKdQ6sXymcVo2E+XRw/I8jnwIOz754 OeJAPJvZltPxV3SE3a2JO7lHJNoMo3XjOjhKAWh1of36rOENKqNFURTzxF0cGj0y YrHHGeXeQmf0grIVTgO59om3lae2y4FGsTR72nU/WCOKlaTbIBcUC8zUM/CxAoFx -----END CERTIFICATE-----Generated at Wed Jul 2 11:29:45 2025 by rpki-client