$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft File: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft (raw, json) Hash identifier: quU3VfGY+QKFvvQ08mbg1tX2T3oKFVpMWqlw0NkoZMc= Subject key identifier: 7B:2A:44:7E:7B:97:14:57:31:11:B4:6F:3C:57:CC:8B:72:44:73:8E Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584A5D71BCE0141A06FC0E3B5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft Manifest number: 010D0C9F4328584720528DA38C7982779313AE30 Signing time: Mon 30 Jun 2025 17:00:03 +0000 Manifest this update: Mon 30 Jun 2025 17:00:03 +0000 Manifest next update: Wed 02 Jul 2025 17:00:00 +0000 Files and hashes: 1: 16633004-e46a-3fb4-be3b-681f6a980807.roa (hash: oA8In+ipbiXyPICb7DwD5Q6AX9MRyuY8OhWT9IndnU4=) 2: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl (hash: oEYZSoW5yIkKi5/nA8cN22VR4Ikr/+m0IgdkyMygu3Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:71:bc:e0:14:1a:06:fc:0e:3b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Jun 30 17:00:03 2025 GMT Not After : Jul 2 17:00:00 2025 GMT Subject: CN=6009a1f9-4553-431f-9720-dea0b3ee4302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:c3:91:0a:53:c5:31:7e:94:9c:43:08:34: bc:5c:0e:48:42:66:ea:a7:98:d6:fb:06:24:54:a0: 22:5d:5b:e9:d6:86:c8:da:d1:ac:03:d6:1e:1d:75: 6e:cd:18:ef:76:37:78:67:71:fa:8a:97:cb:27:49: 97:28:f7:04:c4:ce:bb:9c:1f:e5:b3:e1:77:6a:bb: 31:2a:3f:38:25:9f:d9:c4:f2:d2:c7:24:11:3a:dc: b2:08:a5:c9:b6:7f:e4:b4:d3:30:a3:85:95:ca:8a: 52:e1:a6:a8:a9:08:2f:7b:d5:de:d7:a0:78:d6:f9: 4f:40:f4:85:ac:37:1e:e5:54:a5:d1:0e:d9:4a:3a: b3:1b:03:4a:01:1b:2d:dd:71:15:e3:76:8c:c7:07: 2b:24:6b:e1:56:4a:d6:66:7a:41:78:5c:c2:4e:df: 43:5e:6e:55:3c:7d:c9:ef:e1:fb:c8:99:a6:07:fa: a7:7d:1a:d8:e2:f0:dc:b5:57:17:e6:db:0a:2c:b6: 69:bb:ff:dc:f6:8a:51:52:e6:90:d0:49:49:b6:d5: 5f:0d:5a:f8:40:f1:2e:11:b4:c9:51:c0:bc:a3:06: 75:af:42:14:9d:38:a1:2d:05:62:15:45:00:10:1f: 02:b3:dc:a2:e1:85:87:6e:41:28:dc:5f:1c:da:f0: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2A:44:7E:7B:97:14:57:31:11:B4:6F:3C:57:CC:8B:72:44:73:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:39:5f:77:1b:6c:59:33:ef:fa:6c:e7:d4:b2:b3:f2:a3:13: 96:d6:28:5f:5c:33:7d:7b:24:a4:0d:69:8d:eb:a3:ee:ed:85: e1:2a:20:c3:61:5e:ce:7b:a9:d3:6d:41:d5:46:20:14:c5:34: dc:ed:20:82:37:32:70:a4:40:f0:3c:49:7b:6c:7c:10:fd:88: df:d8:7f:b7:21:01:e9:ac:a8:2f:25:fe:5f:14:37:c2:cc:70: a3:8f:4f:3e:99:e9:ab:27:a5:bf:f0:3b:13:cb:9c:c9:9d:4e: 31:c5:11:d7:a9:6b:23:24:af:6a:e5:c4:76:ef:4b:fb:9f:78: c6:8d:27:70:d2:eb:8e:73:1d:7b:34:5d:51:0a:4d:6c:ce:c6: 5a:0f:3b:f3:ee:86:59:6d:b8:f8:20:df:b6:18:f3:92:fd:b1: 1a:1e:c2:80:40:7c:e5:e5:38:ba:68:6f:9d:8f:9f:b2:79:ce: ef:b7:8c:45:19:a6:89:c4:59:03:48:dc:2d:88:48:d7:37:9e: 2a:45:e3:ec:04:9f:a6:cb:01:7b:5e:fb:c4:20:52:10:5d:fb: 0f:5f:ff:81:89:f4:59:f9:58:c3:46:34:ae:e2:7b:b0:71:48: b0:a0:18:0a:98:62:8a:b4:7c:18:78:ad:73:3e:09:bf:e8:88: 44:99:cf:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdcbzgFBoG/A47WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI1MDYzMDE3MDAwM1oXDTI1MDcwMjE3MDAwMFowLzEtMCsGA1UEAxMk NjAwOWExZjktNDU1My00MzFmLTk3MjAtZGVhMGIzZWU0MzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7jDkQpTxTF+lJxDCDS8XA5IQmbqp5jW+wYk VKAiXVvp1obI2tGsA9YeHXVuzRjvdjd4Z3H6ipfLJ0mXKPcExM67nB/ls+F3arsx Kj84JZ/ZxPLSxyQROtyyCKXJtn/ktNMwo4WVyopS4aaoqQgve9Xe16B41vlPQPSF rDce5VSl0Q7ZSjqzGwNKARst3XEV43aMxwcrJGvhVkrWZnpBeFzCTt9DXm5VPH3J 7+H7yJmmB/qnfRrY4vDctVcX5tsKLLZpu//c9opRUuaQ0ElJttVfDVr4QPEuEbTJ UcC8owZ1r0IUnTihLQViFUUAEB8Cs9yi4YWHbkEo3F8c2vDGhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHsqRH57lxRXMRG0bzxXzItyRHOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvNjZjZDRhNDAtNzVkMy00 MTEyLWE0YzgtNmRlOWNhNTcxZmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANOV93G2xZM+/6bOfUsrPy oxOW1ihfXDN9eySkDWmN66Pu7YXhKiDDYV7Oe6nTbUHVRiAUxTTc7SCCNzJwpEDw PEl7bHwQ/Yjf2H+3IQHprKgvJf5fFDfCzHCjj08+memrJ6W/8DsTy5zJnU4xxRHX qWsjJK9q5cR270v7n3jGjSdw0uuOcx17NF1RCk1szsZaDzvz7oZZbbj4IN+2GPOS /bEaHsKAQHzl5Ti6aG+dj5+yec7vt4xFGaaJxFkDSNwtiEjXN54qRePsBJ+mywF7 XvvEIFIQXfsPX/+BifRZ+VjDRjSu4nuwcUiwoBgKmGKKtHwYeK1zPgm/6IhEmc+c -----END CERTIFICATE-----Generated at Tue Jul 1 11:47:18 2025 by rpki-client