$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: by6Ada9jQELIfhqY3LmWpuq/5f3JIHBhpgPUjcvMML8= Subject key identifier: A0:C7:CD:08:59:36:EC:9E:F0:88:66:A5:C7:5D:40:31:75:C6:DD:F4 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584A605A3B01CF7AF590B7914880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DAFE4 Signing time: Tue 01 Jul 2025 18:00:08 +0000 Manifest this update: Tue 01 Jul 2025 18:00:08 +0000 Manifest next update: Fri 04 Jul 2025 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: 5AHVk5iSrBUWf8zPSVWbK1E3JthHbNRMwUB+VYOIGQA=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: 6kKNWySJv5gZLhNerIKNDE0Uc0Z62osyc4r9gWahZYs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:5a:3b:01:cf:7a:f5:90:b7:91:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Jul 1 18:00:08 2025 GMT Not After : Jul 4 18:00:00 2025 GMT Subject: CN=c691e766-77ed-4d84-afb5-93167c6e3b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:48:82:11:f7:05:69:84:9c:dd:9b:ea:87:78: 90:fd:7e:e7:d4:f1:39:57:ab:a8:87:e7:07:ed:48: ba:85:7e:05:16:c1:21:04:6e:86:f1:4b:0f:e3:a6: 04:17:42:d9:5a:89:85:9b:f6:bd:86:e6:88:e2:98: cb:d6:58:8c:24:f1:56:18:ba:48:f9:c8:bb:c4:e8: aa:46:84:80:77:11:85:5d:4f:1c:f4:e5:18:6b:8c: e6:ec:2b:c4:5f:26:00:eb:99:8a:d6:3a:23:44:ec: 70:d2:63:0c:af:1a:f2:74:52:28:78:d2:72:8c:51: 62:02:ca:7c:82:35:8c:60:67:bd:9b:c9:22:99:a8: bb:58:74:9b:95:40:41:dd:ae:0e:15:83:43:f6:63: 2d:01:cb:68:59:95:26:32:24:84:e1:e7:07:5d:91: dd:1f:d7:38:cf:1f:d1:b0:6d:26:4f:98:cf:41:59: ab:c7:54:05:4e:a1:2f:3a:2c:95:fe:07:33:08:21: bb:ea:2e:8a:12:ab:0d:c4:15:48:29:bd:0e:59:2f: e6:6e:1c:c1:2e:ba:34:09:37:e3:96:fa:d9:95:a3: 5a:f4:de:80:e6:86:99:f8:fd:ff:92:a1:f0:bc:b2: e3:84:3d:c4:7a:a4:02:7e:b1:39:32:c7:79:0a:bf: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:CD:08:59:36:EC:9E:F0:88:66:A5:C7:5D:40:31:75:C6:DD:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:24:ff:b5:bb:3b:6d:43:e6:eb:c8:40:4a:e6:af:d8:59:16: 95:5b:9d:84:7d:82:3e:4c:3b:ea:f3:67:ac:f5:f3:fc:c9:39: 17:00:b2:c5:d0:9d:63:87:3b:0a:da:1a:06:70:da:ae:5f:44: d9:90:44:ec:59:8c:1f:6f:ee:34:08:d7:e3:83:71:d7:d2:69: 9a:4b:9b:3c:b7:c7:83:d7:bd:b0:43:11:20:a6:d6:64:4a:24: 4b:2e:d7:28:68:a9:3f:bf:5d:f1:f2:93:04:e8:ab:e1:84:af: 20:bc:eb:51:52:e9:41:b2:69:83:05:44:1b:a4:4b:79:84:b1: 36:0c:3f:3e:3e:1b:fa:7f:83:91:44:ea:96:c3:8a:8c:53:83: 86:fe:fc:fa:66:2e:4e:4e:a8:13:1f:dc:fa:1e:70:bc:05:74: 8e:50:c3:50:4e:3b:8a:10:58:0f:12:e0:db:c1:79:5a:15:f7: 86:46:26:7a:27:d4:a1:3d:42:3e:3d:43:a5:10:79:90:10:99: 2a:61:2a:00:c9:a9:88:52:f2:dd:c9:91:03:72:51:a0:f9:f2: a0:15:5b:65:9e:9c:62:16:ba:4c:66:c9:90:01:8b:fa:2d:cd: 5d:97:2e:87:49:80:6c:1a:f1:9c:37:93:91:13:4a:34:f7:98: e4:22:3c:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgWjsBz3r1kLeRSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI1MDcwMTE4MDAwOFoXDTI1MDcwNDE4MDAwMFowLzEtMCsGA1UEAxMk YzY5MWU3NjYtNzdlZC00ZDg0LWFmYjUtOTMxNjdjNmUzYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEiCEfcFaYSc3Zvqh3iQ/X7n1PE5V6uoh+cH 7Ui6hX4FFsEhBG6G8UsP46YEF0LZWomFm/a9huaI4pjL1liMJPFWGLpI+ci7xOiq RoSAdxGFXU8c9OUYa4zm7CvEXyYA65mK1jojROxw0mMMrxrydFIoeNJyjFFiAsp8 gjWMYGe9m8kimai7WHSblUBB3a4OFYND9mMtActoWZUmMiSE4ecHXZHdH9c4zx/R sG0mT5jPQVmrx1QFTqEvOiyV/gczCCG76i6KEqsNxBVIKb0OWS/mbhzBLro0CTfj lvrZlaNa9N6A5oaZ+P3/kqHwvLLjhD3EeqQCfrE5Msd5Cr85TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKDHzQhZNuye8IhmpcddQDF1xt30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVJP+1uzttQ+bryEBK5q/Y WRaVW52EfYI+TDvq82es9fP8yTkXALLF0J1jhzsK2hoGcNquX0TZkETsWYwfb+40 CNfjg3HX0mmaS5s8t8eD172wQxEgptZkSiRLLtcoaKk/v13x8pME6KvhhK8gvOtR UulBsmmDBUQbpEt5hLE2DD8+Phv6f4ORROqWw4qMU4OG/vz6Zi5OTqgTH9z6HnC8 BXSOUMNQTjuKEFgPEuDbwXlaFfeGRiZ6J9ShPUI+PUOlEHmQEJkqYSoAyamIUvLd yZEDclGg+fKgFVtlnpxiFrpMZsmQAYv6Lc1dly6HSYBsGvGcN5ORE0o095jkIjyO -----END CERTIFICATE-----Generated at Wed Jul 2 14:45:36 2025 by rpki-client