$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft (raw, json) Hash identifier: 75B9rP/imTJnlFcYz/YpqG1bFM9BfNHsEiZIR2phEa4= Subject key identifier: 1F:D3:7D:F0:4B:83:7B:E2:C1:05:BA:3C:BE:C9:98:04:32:12:90:B0 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584A5F4E3B565E877668EDDAE700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft Manifest number: 010D0C9F4328584073A84BBB6D274A47E14402E2 Signing time: Tue 01 Jul 2025 09:00:08 +0000 Manifest this update: Tue 01 Jul 2025 09:00:08 +0000 Manifest next update: Thu 03 Jul 2025 09:00:00 +0000 Files and hashes: 1: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl (hash: ecuLYj6y4Pc1ZADS6zpJqs6EtiBAL+xydBjdJHhsqig=) 2: e6965540-cbd0-3930-b638-a04886e69eac.roa (hash: TNGjT3/jKfnn6pAZhuO3QYrXE/bJCaCZ3fc3IiXmyXg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:4e:3b:56:5e:87:76:68:ed:da:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Jul 1 09:00:08 2025 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=dc85d6e1-df1b-403c-8172-9d3aa5c1ae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:c1:81:d0:72:bb:96:00:5c:06:04:f4:36: e1:d2:55:49:26:7f:a9:4d:36:2a:d2:2a:9d:91:4a: 74:25:d5:25:f2:f7:bb:d7:02:c7:bf:5f:f0:72:ca: 60:7e:04:2c:8c:9a:fc:53:25:ed:6a:8c:9e:02:ce: 87:bb:f4:41:53:c7:b6:00:e1:30:fb:ee:b3:0c:1b: a4:b7:82:f1:0d:b3:51:fa:16:78:64:31:2b:1a:27: ba:67:f5:04:fa:e0:f5:ec:65:1d:ce:c1:b7:c9:00: 62:b0:1f:f4:27:f4:ec:1d:d4:03:80:1a:bf:a7:49: 7f:9b:9f:47:d3:ca:34:b5:29:42:21:fa:ee:f2:6c: df:52:91:43:ba:47:b3:3a:ce:64:dc:8c:f7:dc:7b: 79:73:a0:b3:32:19:10:08:42:6a:2e:97:18:37:fa: 7f:3e:20:c6:46:c8:f3:62:cb:1a:fd:61:7d:40:f1: f4:f8:0c:2a:05:3e:c1:77:a7:52:94:d9:cb:eb:4b: 7f:45:e2:cc:bc:73:3c:ff:53:95:50:06:10:a4:07: da:83:8d:d7:73:03:b3:56:ed:ed:c6:ab:f2:26:ff: 94:91:5b:fb:ce:9c:9e:da:3f:45:53:39:d0:03:99: 3a:59:c5:95:42:5e:cd:8a:99:ae:9f:f1:73:47:0e: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D3:7D:F0:4B:83:7B:E2:C1:05:BA:3C:BE:C9:98:04:32:12:90:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:90:44:de:c9:40:a3:33:0e:61:1e:3f:06:ec:7e:fe:c5:96: cc:76:cf:47:07:88:89:e2:57:7a:26:c1:79:6f:27:15:a4:4b: e3:50:7f:8e:9e:c8:48:dc:b9:ad:19:d7:81:d8:2d:46:c7:65: 01:14:0c:4b:d6:6c:9a:b0:3c:cf:2b:4b:25:ba:ae:e1:24:06: 35:89:48:69:38:d9:b8:10:2f:5d:a0:7c:58:7a:6f:f6:49:14: 74:f6:7c:a8:48:a9:ef:bc:2b:f4:52:7d:1f:f2:1a:d7:ae:46: 36:ed:8b:75:49:b4:bd:39:06:bc:d5:32:07:2f:20:94:df:b7: 20:b5:84:f2:b9:68:a3:06:f6:2e:58:c2:71:22:0c:b8:d7:49: 25:62:19:9d:87:eb:44:e2:3f:02:75:33:ae:3a:c6:42:6a:e9: 49:87:01:b9:8a:9b:d2:be:da:71:92:60:34:01:84:b0:fe:b6: ef:4c:8e:c2:a4:8b:47:ca:0e:35:e1:1c:58:06:ce:76:14:c9: ab:48:82:55:5e:3d:30:a7:bb:0a:49:49:d1:75:fd:1e:7b:d9: 88:d4:de:97:da:93:b6:d0:2d:69:b9:ce:c3:83:1d:a7:06:c8: 29:c5:2a:d6:0f:65:e6:25:65:3c:ed:e6:cd:39:92:21:fd:9f: 7c:41:91:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfTjtWXod2aO3a5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI1MDcwMTA5MDAwOFoXDTI1MDcwMzA5MDAwMFowLzEtMCsGA1UEAxMk ZGM4NWQ2ZTEtZGYxYi00MDNjLTgxNzItOWQzYWE1YzFhZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37HBgdByu5YAXAYE9Dbh0lVJJn+pTTYq0iqd kUp0JdUl8ve71wLHv1/wcspgfgQsjJr8UyXtaoyeAs6Hu/RBU8e2AOEw++6zDBuk t4LxDbNR+hZ4ZDErGie6Z/UE+uD17GUdzsG3yQBisB/0J/TsHdQDgBq/p0l/m59H 08o0tSlCIfru8mzfUpFDukezOs5k3Iz33Ht5c6CzMhkQCEJqLpcYN/p/PiDGRsjz Yssa/WF9QPH0+AwqBT7Bd6dSlNnL60t/ReLMvHM8/1OVUAYQpAfag43XcwOzVu3t xqvyJv+UkVv7zpye2j9FUznQA5k6WcWVQl7Nipmun/FzRw63lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB/TffBLg3viwQW6PL7JmAQyEpCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvNzA0YTc2MWYtYjcxYS00 ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTkETeyUCjMw5hHj8G7H7+ xZbMds9HB4iJ4ld6JsF5bycVpEvjUH+OnshI3LmtGdeB2C1Gx2UBFAxL1myasDzP K0sluq7hJAY1iUhpONm4EC9doHxYem/2SRR09nyoSKnvvCv0Un0f8hrXrkY27Yt1 SbS9OQa81TIHLyCU37cgtYTyuWijBvYuWMJxIgy410klYhmdh+tE4j8CdTOuOsZC aulJhwG5ipvSvtpxkmA0AYSw/rbvTI7CpItHyg414RxYBs52FMmrSIJVXj0wp7sK SUnRdf0ee9mI1N6X2pO20C1puc7Dgx2nBsgpxSrWD2XmJWU87ebNOZIh/Z98QZEp -----END CERTIFICATE-----Generated at Tue Jul 1 15:39:30 2025 by rpki-client