$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft File: c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft (raw, json) Hash identifier: veW9FIeCz3CgohHx8wESPtIVy+TOwdOQxzbz7L7pESQ= Subject key identifier: F9:C9:CC:4F:5B:BC:C1:49:57:F7:74:DA:55:03:A8:34:A0:01:8F:00 Authority key identifier: 8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 Certificate issuer: /CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Certificate serial: 010D0C9F4328584A5FA79392B8B4373B4C4D8920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft Manifest number: 010D0C9F4328584073A851E7AB99689230705E22 Signing time: Tue 01 Jul 2025 12:00:08 +0000 Manifest this update: Tue 01 Jul 2025 12:00:08 +0000 Manifest next update: Thu 03 Jul 2025 12:00:00 +0000 Files and hashes: 1: 175a7774-3b58-3926-8574-a23f74a28ae2.roa (hash: odwAnd9vb1tTYtFItM8aAd/mAAIIclKgE2W6E2ElGPg=) 2: c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl (hash: uRrq0vMwoHjIliHkVAkABpVAimSH1tuo+evjW1UO/9o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:a7:93:92:b8:b4:37:3b:4c:4d:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c900ace0-a77f-456b-b2a7-db5e6b89e87a Validity Not Before: Jul 1 12:00:08 2025 GMT Not After : Jul 3 12:00:00 2025 GMT Subject: CN=0229f4ac-8bb2-4e5c-a6be-ec39f5600f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:b8:ac:78:09:96:47:4f:82:ac:74:39:de: 67:97:ac:bb:d8:a1:9b:00:2b:fb:db:c8:8c:29:59: a1:45:02:21:d7:40:e2:e8:4e:27:22:01:96:32:aa: b7:4c:27:40:00:6d:4f:b7:c9:12:ed:eb:7c:4e:39: b8:c2:4a:0e:63:fe:5c:8a:03:32:91:ba:32:08:63: 7d:4e:03:ce:25:6d:7f:ba:f4:f0:0f:94:88:17:b0: f6:6e:83:90:fa:1f:86:1f:f7:e5:52:e4:fc:75:20: f8:2c:69:f5:6f:7e:4b:a3:7d:2e:61:37:04:2c:ce: 0e:91:61:f8:86:0f:a3:ed:ff:d7:28:7d:f5:86:e1: ea:f2:b1:0b:97:a4:43:64:ba:a1:42:1c:c2:1e:d8: 1b:60:31:d2:21:55:43:bc:2e:50:0c:2f:e5:8b:67: e0:68:46:c6:19:5a:2f:3f:f1:9c:05:d3:27:74:ad: 0b:c7:78:4d:13:c1:90:7f:68:e8:93:d3:5b:ea:20: 93:c8:3c:99:a2:bd:32:84:6e:cc:fa:90:68:f7:fa: 02:60:fe:f8:fa:e8:50:cd:ed:93:5a:6b:9c:19:c6: 14:a3:ee:af:42:d8:07:0f:b7:ff:be:21:01:2b:b5: dd:77:7f:19:93:7f:29:c8:52:84:5c:b6:19:3c:19: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C9:CC:4F:5B:BC:C1:49:57:F7:74:DA:55:03:A8:34:A0:01:8F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a/c900ace0-a77f-456b-b2a7-db5e6b89e87a.crl X509v3 Authority Key Identifier: keyid:8B:F6:E7:60:0F:BE:E9:94:02:D6:BF:EE:BB:24:5A:C7:7D:FB:CD:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c900ace0-a77f-456b-b2a7-db5e6b89e87a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b7:5b:08:40:9d:f8:f8:50:07:5f:37:24:83:b7:8d:cd:94: d8:bb:05:f7:ee:8c:24:e1:e6:40:80:c2:bf:03:79:b9:48:79: 3f:eb:b0:87:c7:64:5f:7a:18:99:8c:16:c1:84:5a:58:3c:b6: b8:b5:78:12:97:44:46:02:26:a8:76:0b:11:30:5d:66:f5:e5: 09:1d:ab:45:1b:4d:8a:68:06:49:9c:7f:31:98:72:35:22:2e: 89:48:58:9d:0f:63:b6:a8:20:e4:49:e2:8d:0f:c0:7a:a8:29: 2d:ad:4e:56:b5:ee:56:13:68:15:e2:11:f7:bc:76:98:d1:2e: 46:29:ba:d2:d0:4a:4a:52:3c:03:32:93:94:98:29:f7:17:4a: cd:92:1c:7b:ff:90:7c:6c:a7:76:42:d0:1d:01:34:ec:49:09: e4:30:18:42:1a:1c:0f:7a:30:e9:6c:d2:45:10:44:b6:db:fd: 8d:8d:f8:84:01:cc:0e:c2:f5:68:4d:54:cc:58:ae:68:e8:ae: 6c:4a:e5:0b:39:cb:92:bf:d5:7a:e3:c0:fd:62:5b:4a:f1:1f: e9:91:8e:d2:fe:6e:f0:62:b1:d2:67:8f:7a:c8:b3:34:73:3d: 23:8b:fd:26:a1:25:a0:fe:6b:d2:58:23:ca:d2:6f:15:b2:1d: fc:88:4c:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfp5OSuLQ3O0xNiSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwMGFjZTAtYTc3Zi00NTZiLWIyYTctZGI1ZTZiODll ODdhMB4XDTI1MDcwMTEyMDAwOFoXDTI1MDcwMzEyMDAwMFowLzEtMCsGA1UEAxMk MDIyOWY0YWMtOGJiMi00ZTVjLWE2YmUtZWMzOWY1NjAwZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wu4rHgJlkdPgqx0Od5nl6y72KGbACv728iM KVmhRQIh10Di6E4nIgGWMqq3TCdAAG1Pt8kS7et8Tjm4wkoOY/5cigMykboyCGN9 TgPOJW1/uvTwD5SIF7D2boOQ+h+GH/flUuT8dSD4LGn1b35Lo30uYTcELM4OkWH4 hg+j7f/XKH31huHq8rELl6RDZLqhQhzCHtgbYDHSIVVDvC5QDC/li2fgaEbGGVov P/GcBdMndK0Lx3hNE8GQf2jok9Nb6iCTyDyZor0yhG7M+pBo9/oCYP74+uhQze2T WmucGcYUo+6vQtgHD7f/viEBK7Xdd38Zk38pyFKEXLYZPBmNvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPnJzE9bvMFJV/d02lUDqDSgAY8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAw YWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVlNmI4OWU4N2EvYzkwMGFjZTAtYTc3Zi00 NTZiLWIyYTctZGI1ZTZiODllODdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzkwMGFjZTAtYTc3Zi00NTZiLWIy YTctZGI1ZTZiODllODdhL2M5MDBhY2UwLWE3N2YtNDU2Yi1iMmE3LWRiNWU2Yjg5 ZTg3YS5jcmwwHwYDVR0jBBgwFoAUi/bnYA++6ZQC1r/uuyRax337zSQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jOTAwYWNlMC1hNzdmLTQ1NmItYjJhNy1kYjVl NmI4OWU4N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWt1sIQJ34+FAHXzckg7eN zZTYuwX37owk4eZAgMK/A3m5SHk/67CHx2RfehiZjBbBhFpYPLa4tXgSl0RGAiao dgsRMF1m9eUJHatFG02KaAZJnH8xmHI1Ii6JSFidD2O2qCDkSeKND8B6qCktrU5W te5WE2gV4hH3vHaY0S5GKbrS0EpKUjwDMpOUmCn3F0rNkhx7/5B8bKd2QtAdATTs SQnkMBhCGhwPejDpbNJFEES22/2NjfiEAcwOwvVoTVTMWK5o6K5sSuULOcuSv9V6 48D9YltK8R/pkY7S/m7wYrHSZ496yLM0cz0ji/0moSWg/mvSWCPK0m8Vsh38iEw3 -----END CERTIFICATE-----Generated at Tue Jul 1 15:39:21 2025 by rpki-client