$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: lb1knOTX6i2+p1fHUxx58eH1NFz6ofc6MxrV5zNhCpc= Subject key identifier: 17:BD:1C:DE:B6:F4:35:79:19:9D:6B:F6:1C:AD:3D:21:5A:33:15:28 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584A5C47F30C53FB7C0B6045F320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3322 Signing time: Mon 30 Jun 2025 07:00:03 +0000 Manifest this update: Mon 30 Jun 2025 07:00:03 +0000 Manifest next update: Thu 03 Jul 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: fXpFuLOxrKf3G3jytIUInemtnxTtEVnjA4Y6JNfJZ8g=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: LAsvUDbURHC+rQRgxpQmFJNu9xKDzJ2bHJlBKiwQ++U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:47:f3:0c:53:fb:7c:0b:60:45:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jun 30 07:00:03 2025 GMT Not After : Jul 3 07:00:00 2025 GMT Subject: CN=2500d4b9-746c-40ff-b31e-673d57972c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:68:92:f4:ce:10:14:f9:46:34:36:c2:0b: de:03:c5:cf:42:fd:30:4d:c0:da:44:74:93:dc:85: e9:b9:81:c6:29:ce:38:44:57:44:48:40:21:2f:bd: 64:8a:c5:8b:6d:d0:10:2f:e7:60:f0:9d:7d:bb:c2: 0b:f7:83:4e:e7:4e:e7:3a:d2:20:8f:39:14:ca:54: 2e:b9:9a:86:67:38:73:c0:ae:30:f4:bf:18:55:d7: bc:9e:0c:09:fb:29:65:5b:3b:86:6d:cc:5c:60:9d: 07:81:30:39:b0:9b:81:09:1d:51:ea:84:67:63:44: 9a:97:32:3e:18:f3:fd:86:9d:9a:86:65:3f:9d:a8: 70:c2:25:16:71:67:dc:dd:a3:f9:ac:b1:16:f4:24: 90:1c:60:7b:83:47:ae:3a:fe:f9:90:9e:bb:b9:63: 82:9a:a4:86:e1:87:24:24:b8:a9:3f:3a:5f:56:2c: 47:80:cd:b1:02:d3:5c:b2:88:ca:67:9c:f4:b0:a8: 0d:73:b8:49:2a:1c:7d:38:ed:17:6f:c7:ac:79:3f: 53:d1:d0:fd:1e:64:00:a5:0e:b7:54:f7:b0:fa:dd: 6f:52:2f:f9:41:f0:9b:2c:b7:a4:17:43:45:86:51: c6:9b:d1:00:1b:51:4d:1e:f8:4d:b5:70:ab:29:04: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BD:1C:DE:B6:F4:35:79:19:9D:6B:F6:1C:AD:3D:21:5A:33:15:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:da:20:dc:27:2d:20:e5:75:21:68:30:67:78:03:24:81:5c: c9:ff:e9:62:45:11:19:9f:0e:e0:13:24:e1:f1:d7:8b:ed:27: 22:f6:be:ce:39:f0:39:27:aa:78:3e:ce:52:20:53:85:ce:36: cb:73:7b:55:d3:2e:43:39:be:81:f0:df:b2:9d:c3:dd:63:1e: e9:26:1a:70:58:30:08:03:de:2a:9b:58:27:29:7f:81:54:11: 9c:b3:7c:f9:13:50:32:fd:56:14:38:52:6a:16:ed:4c:8c:d6: 52:08:1c:40:53:12:ca:c7:dc:d9:83:8b:f9:79:62:37:5c:6e: 44:34:62:5b:46:f3:a6:26:db:79:c2:84:55:41:1b:9d:7b:31: 91:ad:c4:9c:85:65:99:e9:9f:ad:ad:79:f2:a7:62:6b:fd:6c: f5:09:3d:d7:1e:a2:09:e4:b5:22:6c:a6:04:5e:39:3d:50:91: 93:2e:51:1e:19:be:c7:00:dc:9c:84:3d:5a:e7:0d:7c:bf:53: 9e:e0:bf:93:7e:b4:2e:80:4f:cb:a1:ec:b3:94:77:5c:cb:e4: 50:24:7d:55:bf:1c:ba:63:ed:a6:58:26:ee:3c:0d:23:13:a0: 1c:5d:21:4a:58:54:86:52:9a:2e:1b:75:08:1e:1e:51:24:a8: d5:c5:29:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpcR/MMU/t8C2BF8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDYzMDA3MDAwM1oXDTI1MDcwMzA3MDAwMFowLzEtMCsGA1UEAxMk MjUwMGQ0YjktNzQ2Yy00MGZmLWIzMWUtNjczZDU3OTcyYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLFokvTOEBT5RjQ2wgveA8XPQv0wTcDaRHST 3IXpuYHGKc44RFdESEAhL71kisWLbdAQL+dg8J19u8IL94NO507nOtIgjzkUylQu uZqGZzhzwK4w9L8YVde8ngwJ+yllWzuGbcxcYJ0HgTA5sJuBCR1R6oRnY0SalzI+ GPP9hp2ahmU/nahwwiUWcWfc3aP5rLEW9CSQHGB7g0euOv75kJ67uWOCmqSG4Yck JLipPzpfVixHgM2xAtNcsojKZ5z0sKgNc7hJKhx9OO0Xb8eseT9T0dD9HmQApQ63 VPew+t1vUi/5QfCbLLekF0NFhlHGm9EAG1FNHvhNtXCrKQRUtwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBe9HN629DV5GZ1r9hytPSFaMxUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN2iDcJy0g5XUhaDBneAMk gVzJ/+liRREZnw7gEyTh8deL7Sci9r7OOfA5J6p4Ps5SIFOFzjbLc3tV0y5DOb6B 8N+yncPdYx7pJhpwWDAIA94qm1gnKX+BVBGcs3z5E1Ay/VYUOFJqFu1MjNZSCBxA UxLKx9zZg4v5eWI3XG5ENGJbRvOmJtt5woRVQRudezGRrcSchWWZ6Z+trXnyp2Jr /Wz1CT3XHqIJ5LUibKYEXjk9UJGTLlEeGb7HANychD1a5w18v1Oe4L+TfrQugE/L oeyzlHdcy+RQJH1Vvxy6Y+2mWCbuPA0jE6AcXSFKWFSGUpouG3UIHh5RJKjVxSmE -----END CERTIFICATE-----Generated at Mon Jun 30 16:28:06 2025 by rpki-client