$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft File: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft (raw, json) Hash identifier: Q+25kmit+c9dYvRQcmlWN3gWN4dOpPF60Lk9hpdyINE= Subject key identifier: 0B:B8:B1:BE:7A:BA:ED:2E:50:CD:39:77:9E:85:2C:3F:7C:6D:61:C4 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F4328584A5E9B85267B641F4ADD8E2980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft Manifest number: 010D0C9F4328584073A83A5B787AC8596C7E258D Signing time: Tue 01 Jul 2025 03:00:03 +0000 Manifest this update: Tue 01 Jul 2025 03:00:03 +0000 Manifest next update: Thu 03 Jul 2025 03:00:00 +0000 Files and hashes: 1: 5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (hash: rHrMHgcOHt69yGjOsI1TR8wdJbAM6oDe+HFpwHPNe14=) 2: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl (hash: msmtpK8heJ75h8t7fRK6DIbp2VaGQ9q+A1Zh8hVn970=) 3: d83b099f-7012-3a33-a612-37aa394fe4f5.roa (hash: ctoPF/xWJRzAO7tVKdL+PQVyL083eomsshwVXMs92/w=) 4: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (hash: J9n3tYzLfigqO9qj7GYaxNb7ATeEVodju33Alfq4GBo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:9b:85:26:7b:64:1f:4a:dd:8e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Jul 1 03:00:03 2025 GMT Not After : Jul 3 03:00:00 2025 GMT Subject: CN=373ac8f8-4013-41b6-a7d7-0fcb9a65ff92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:28:b1:c9:72:7f:a0:b2:77:0f:3a:d1:f9: 40:ad:ea:d5:77:2c:df:3c:d5:9e:7d:22:c2:66:f3: 23:ca:6f:8e:65:7f:f1:35:95:3f:ee:8b:37:72:53: 54:d8:77:42:00:f8:a4:aa:73:eb:18:00:a8:51:39: 15:0a:c0:99:33:ec:d3:14:14:6d:a0:5f:d9:7d:96: 64:fe:f8:1d:d0:1f:c4:8f:6a:be:77:16:2f:08:41: ba:fd:33:83:fd:0c:56:d0:26:44:7a:e5:20:ab:06: 91:60:dc:86:f8:9c:e9:92:d7:0c:5a:88:a3:1d:34: c0:6b:c1:ab:d3:bf:36:f7:33:90:b3:65:27:bd:2e: 0b:77:e6:24:2d:4c:00:1b:31:cd:f3:2f:91:83:e2: ad:e2:9f:47:7d:7c:d7:f7:23:1b:c7:b3:7c:4b:4b: 6c:e1:3b:7e:65:2f:bd:50:c6:c8:1b:64:89:c6:d6: d4:b6:c5:63:ff:70:c5:b4:1d:29:f3:1a:32:d4:a1: 6c:7a:4d:4e:03:4e:56:bb:8b:67:72:ed:e5:be:ef: 56:b9:05:e0:bb:01:fd:c9:56:06:dd:fb:6c:06:38: fb:37:d3:94:cb:07:05:90:7f:2c:59:e9:2b:d0:41: e6:8c:a0:07:31:88:c3:8d:d5:19:a3:e7:f6:6c:99: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B8:B1:BE:7A:BA:ED:2E:50:CD:39:77:9E:85:2C:3F:7C:6D:61:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:2d:f9:75:b4:5d:7f:37:82:d0:aa:5c:19:7d:ac:52:67:83: 02:0e:e8:ff:6a:f8:1f:5a:51:d3:60:fb:49:33:2c:10:61:0f: 4d:c3:30:fb:99:b9:0c:21:63:5a:b6:5f:ba:4f:44:5d:9d:cb: e1:ca:69:a5:5e:ee:cf:45:b0:27:63:8d:81:3d:9d:84:10:02: 43:30:f3:29:02:ac:1d:83:8a:9a:08:8d:a4:fe:24:04:17:54: f0:a4:52:20:21:2a:51:4b:cd:69:14:dc:5e:24:76:4e:33:57: 3f:c9:21:ed:dc:a1:bf:e2:b0:b0:b7:c2:ba:c9:3f:cd:e1:2d: 87:c6:7d:ec:03:db:1a:9c:e7:5b:e1:e6:77:94:a8:12:c5:ce: 4d:0f:d5:a6:be:27:d3:39:a8:5a:65:c9:dc:c7:f4:61:88:e8: 6c:b6:61:fd:da:d7:77:f1:10:be:4c:18:33:7c:20:7c:d1:b8: 64:f4:8d:63:a5:ad:5f:d3:05:c4:27:f5:e4:65:d8:e3:20:e2: 06:0e:a4:d2:72:6c:f8:5d:87:e0:f9:8a:db:47:96:f5:68:80: 3c:a0:6d:4c:76:9e:15:d0:ad:9b:9b:aa:5b:cc:36:f5:02:aa: 40:0f:e8:f2:09:1b:54:d5:5d:a1:fd:02:1c:de:25:4f:5f:b8: 91:e1:d5:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpem4Ume2QfSt2OKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MDcwMTAzMDAwM1oXDTI1MDcwMzAzMDAwMFowLzEtMCsGA1UEAxMk MzczYWM4ZjgtNDAxMy00MWI2LWE3ZDctMGZjYjlhNjVmZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKYosclyf6Cydw860flArerVdyzfPNWefSLC ZvMjym+OZX/xNZU/7os3clNU2HdCAPikqnPrGACoUTkVCsCZM+zTFBRtoF/ZfZZk /vgd0B/Ej2q+dxYvCEG6/TOD/QxW0CZEeuUgqwaRYNyG+JzpktcMWoijHTTAa8Gr 07829zOQs2UnvS4Ld+YkLUwAGzHN8y+Rg+Kt4p9HfXzX9yMbx7N8S0ts4Tt+ZS+9 UMbIG2SJxtbUtsVj/3DFtB0p8xoy1KFsek1OA05Wu4tncu3lvu9WuQXguwH9yVYG 3ftsBjj7N9OUywcFkH8sWekr0EHmjKAHMYjDjdUZo+f2bJl7NwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAu4sb56uu0uUM05d56FLD98bWHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvYzA1N2Q5YTctOGYzZi00 Yzk3LTk1MDMtZTJhOTM2YzI3YzdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYLfl1tF1/N4LQqlwZfaxS Z4MCDuj/avgfWlHTYPtJMywQYQ9NwzD7mbkMIWNatl+6T0RdncvhymmlXu7PRbAn Y42BPZ2EEAJDMPMpAqwdg4qaCI2k/iQEF1TwpFIgISpRS81pFNxeJHZOM1c/ySHt 3KG/4rCwt8K6yT/N4S2Hxn3sA9sanOdb4eZ3lKgSxc5ND9WmvifTOahaZcncx/Rh iOhstmH92td38RC+TBgzfCB80bhk9I1jpa1f0wXEJ/XkZdjjIOIGDqTScmz4XYfg +YrbR5b1aIA8oG1Mdp4V0K2bm6pbzDb1AqpAD+jyCRtU1V2h/QIc3iVPX7iR4dWA -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:44 2025 by rpki-client