$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft File: ab0439ab-3236-4080-a238-62d21f65e1ad.mft (raw, json) Hash identifier: 3dOpQdSV2uOrukwe8hz2i9ufswxvZ/9BKt0fuVti81k= Subject key identifier: D9:C6:10:08:BB:3A:C0:08:3C:AE:F8:69:D8:BC:CD:82:F9:13:46:07 Authority key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Certificate issuer: /CN=ab0439ab-3236-4080-a238-62d21f65e1ad Certificate serial: 010D0C9F4328584A5F12A3E1D6EA852D54319280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft Manifest number: 010D0C9F4328584073A844EDAD74ADED79EBC9A2 Signing time: Tue 01 Jul 2025 07:00:03 +0000 Manifest this update: Tue 01 Jul 2025 07:00:03 +0000 Manifest next update: Thu 03 Jul 2025 07:00:00 +0000 Files and hashes: 1: 7ef25e37-4a09-3253-a970-a0546e63a3fe.roa (hash: /USRDSxN3/2v/WdVryUW18F4KHKrtzbyChxMZRMs5Es=) 2: ab0439ab-3236-4080-a238-62d21f65e1ad.crl (hash: vx55reeXV/U5ZeNE1cAiZy1uO6SaUr0TeVN03ZBhb/g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:12:a3:e1:d6:ea:85:2d:54:31:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Validity Not Before: Jul 1 07:00:03 2025 GMT Not After : Jul 3 07:00:00 2025 GMT Subject: CN=28ba80b6-2e37-4101-8114-789ca23f2403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:02:e6:4e:9a:d9:2b:d3:88:f2:bd:1b:6a: 95:e6:54:f3:f1:83:64:90:90:1a:c6:5a:bf:b1:55: bb:6e:ca:54:a5:a9:6e:db:91:b8:2c:b3:63:ff:c8: c3:82:87:4c:74:10:cd:90:ad:ad:2c:f6:e2:fc:5a: fc:95:21:d2:6f:38:19:4c:7c:6e:9d:bd:08:8a:be: a6:2e:4f:e7:ad:7a:2b:ca:ca:fe:f8:ff:d6:e2:83: 9e:c4:27:1d:d2:41:68:ad:b3:85:26:37:e8:a6:f9: ef:c8:eb:00:82:22:91:df:c6:2a:3b:fa:24:96:81: f8:34:0e:da:17:75:fa:e4:8a:4c:68:43:c5:38:2e: 46:c0:f0:f9:70:09:a5:6e:80:1f:b0:07:bb:c4:e5: f4:30:23:8f:cd:6a:4c:05:b2:99:56:ad:17:cf:fe: c0:2d:e2:32:8e:95:35:ad:b3:19:07:e5:0c:95:ad: 8b:8f:54:bc:6d:f6:99:f9:c2:8a:f1:41:02:60:19: 94:f3:30:89:f6:f6:6f:f6:72:48:d2:53:3d:51:8b: 69:df:b8:c1:a3:bf:00:14:38:07:30:75:26:fa:65: a5:89:40:77:e8:69:46:02:5a:fd:0e:26:ca:b2:73: 09:7a:01:9a:fc:a0:66:5e:41:fd:d4:f5:9f:3c:88: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C6:10:08:BB:3A:C0:08:3C:AE:F8:69:D8:BC:CD:82:F9:13:46:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.crl X509v3 Authority Key Identifier: keyid:17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ab:d5:6f:50:b2:52:be:09:ef:51:57:9b:70:d6:cd:3a:3a: b4:42:49:c8:93:1b:ff:10:f6:7c:86:20:f2:78:9e:85:0a:5c: fa:3b:22:32:38:d8:27:7d:f3:02:3a:29:c1:92:1d:17:25:c1: ff:c6:f3:05:86:47:16:62:db:d5:05:d5:2e:2a:bd:17:ea:12: a1:e4:16:a3:35:64:4e:1e:07:7f:5d:fd:17:10:82:7c:38:fa: aa:9a:0a:df:39:e9:97:67:fb:c5:e2:35:c4:9d:a6:4b:11:7a: 92:64:74:f9:a1:93:57:bc:ab:43:d9:52:22:8e:90:03:5c:51: 33:92:c6:f1:20:fd:f8:60:1d:50:88:bf:13:f5:5f:d9:50:7b: 70:d8:af:80:0a:39:77:fc:d6:1b:f0:d4:c7:7f:5d:36:31:d2: 06:91:02:9e:f9:ed:b4:56:bc:8f:de:69:03:76:e0:db:5e:c3: 6f:45:e5:7e:a8:26:d5:12:10:61:ab:b2:05:07:29:2b:43:3f: 35:f8:0d:2b:53:29:84:af:fa:14:30:8f:c4:e1:87:f8:65:f8: 0c:36:90:1e:b6:c9:c0:5f:d5:00:36:44:26:de:1a:c0:fa:3d: 8f:ce:b8:3d:c1:16:7c:dd:c7:05:f1:10:27:26:53:68:20:ca: 3a:fe:c7:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfEqPh1uqFLVQxkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVl MWFkMB4XDTI1MDcwMTA3MDAwM1oXDTI1MDcwMzA3MDAwMFowLzEtMCsGA1UEAxMk MjhiYTgwYjYtMmUzNy00MTAxLTgxMTQtNzg5Y2EyM2YyNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5YC5k6a2SvTiPK9G2qV5lTz8YNkkJAaxlq/ sVW7bspUpalu25G4LLNj/8jDgodMdBDNkK2tLPbi/Fr8lSHSbzgZTHxunb0Iir6m Lk/nrXorysr++P/W4oOexCcd0kForbOFJjfopvnvyOsAgiKR38YqO/okloH4NA7a F3X65IpMaEPFOC5GwPD5cAmlboAfsAe7xOX0MCOPzWpMBbKZVq0Xz/7ALeIyjpU1 rbMZB+UMla2Lj1S8bfaZ+cKK8UECYBmU8zCJ9vZv9nJI0lM9UYtp37jBo78AFDgH MHUm+mWliUB36GlGAlr9DibKsnMJegGa/KBmXkH91PWfPIjdlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNnGEAi7OsAIPK74adi8zYL5E0YHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0 MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvYWIwNDM5YWItMzIzNi00 MDgwLWEyMzgtNjJkMjFmNjVlMWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIwNDM5YWItMzIzNi00MDgwLWEy MzgtNjJkMjFmNjVlMWFkL2FiMDQzOWFiLTMyMzYtNDA4MC1hMjM4LTYyZDIxZjY1 ZTFhZC5jcmwwHwYDVR0jBBgwFoAUF0Cy9uReLQ26ZzruEeAYaMPwXa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQy MWY2NWUxYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBnq9VvULJSvgnvUVebcNbN Ojq0QknIkxv/EPZ8hiDyeJ6FClz6OyIyONgnffMCOinBkh0XJcH/xvMFhkcWYtvV BdUuKr0X6hKh5BajNWROHgd/Xf0XEIJ8OPqqmgrfOemXZ/vF4jXEnaZLEXqSZHT5 oZNXvKtD2VIijpADXFEzksbxIP34YB1QiL8T9V/ZUHtw2K+ACjl3/NYb8NTHf102 MdIGkQKe+e20VryP3mkDduDbXsNvReV+qCbVEhBhq7IFBykrQz81+A0rUymEr/oU MI/E4Yf4ZfgMNpAetsnAX9UANkQm3hrA+j2Pzrg9wRZ83ccF8RAnJlNoIMo6/scx -----END CERTIFICATE-----Generated at Tue Jul 1 16:05:51 2025 by rpki-client