$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft File: cea06048-7bc3-4b65-8443-4c600b73bc11.mft (raw, json) Hash identifier: VBedrSXo18ZW+4euia4UtgedNurx8Gszna/MBq2hsQE= Subject key identifier: B5:9F:AB:74:92:7C:40:48:62:A3:D9:0E:0F:4A:A5:E7:A2:26:D9:56 Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Certificate issuer: /CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Certificate serial: 010D0C9F4328584A61487AE65D922B5A35C67C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft Manifest number: 010D0C9F4328584073A8389DDFFA881819A76923 Signing time: Wed 02 Jul 2025 02:00:08 +0000 Manifest this update: Wed 02 Jul 2025 02:00:08 +0000 Manifest next update: Sat 05 Jul 2025 02:00:00 +0000 Files and hashes: 1: 36273f28-a723-33e1-a389-9416819cddb6.roa (hash: abR3A28NqRzKYFLhZJdea8fFsA+3msDbaShCJzO+LGw=) 2: cea06048-7bc3-4b65-8443-4c600b73bc11.crl (hash: S1T8wz2KPujcKbTu+N+LJDOQbS4OgukDokFZ1GMCwWQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:48:7a:e6:5d:92:2b:5a:35:c6:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Validity Not Before: Jul 2 02:00:08 2025 GMT Not After : Jul 5 02:00:00 2025 GMT Subject: CN=2f4972d7-58c4-48e0-a668-214bb42f95e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:60:2e:36:39:d8:9b:48:c9:21:06:59:44: ec:be:69:3d:36:61:53:28:49:10:52:cc:c5:1f:5c: 2a:34:4b:5f:b0:ae:af:2b:cd:19:d8:77:81:69:d6: 62:ea:02:b6:d1:47:f7:ee:ba:67:ad:ca:91:73:a8: 4c:fa:61:73:30:62:ce:25:34:cc:d9:83:0d:0d:59: f1:77:36:54:b6:af:9f:ed:98:2b:96:52:db:6f:ee: c5:91:6d:e2:69:7e:b4:bf:38:1e:9e:3a:29:22:87: 22:3b:c4:3b:0c:b8:8d:09:fa:88:fa:01:e7:c2:a5: 25:a6:d8:9f:34:df:89:6d:23:a8:2d:be:92:22:b2: a9:89:e8:ca:52:2d:82:a1:1c:57:5a:b2:72:cf:a7: 69:2e:05:f3:2d:66:1b:7e:ad:a2:77:3b:c6:7a:1a: 08:4f:35:6e:2d:8d:2e:fb:ba:70:ca:6c:77:e3:ed: 7d:ac:54:1e:96:67:52:5f:bf:7f:96:42:1a:39:32: 92:ba:b8:d6:17:e6:b6:c8:31:e1:3b:3a:30:96:e2: ee:1e:70:f6:cc:40:33:5b:35:4a:ab:1f:ed:09:ec: 3d:90:bb:52:c0:26:ce:e8:d6:02:57:08:bb:c7:c9: ca:7c:10:53:d5:4c:82:47:86:46:78:3b:ce:b6:87: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:AB:74:92:7C:40:48:62:A3:D9:0E:0F:4A:A5:E7:A2:26:D9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl X509v3 Authority Key Identifier: keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8e:44:1f:1f:ef:01:60:e8:00:07:50:7f:23:ab:09:ed:9f: 86:4d:06:23:5e:2e:0d:a7:d9:38:8c:4c:2e:18:28:4e:be:74: cf:84:cb:cc:7c:2c:8e:ae:c2:f5:ea:84:6e:e8:07:24:dd:81: f9:47:49:00:08:2d:8a:5b:0e:4d:fa:d1:37:71:91:96:ac:b4: 78:f3:19:2f:14:c5:aa:4d:fa:cd:17:c2:46:c1:bf:95:55:91: 82:6f:a3:3d:f1:2f:a9:27:76:c0:21:22:0a:f0:91:08:fb:ed: 4f:8a:2a:23:05:94:5c:c6:d1:0f:d3:74:49:61:33:31:d5:fa: b1:3c:8b:54:4b:74:18:43:81:35:60:2b:53:70:ed:54:fb:00: 2b:2a:6c:46:5f:20:05:52:e5:2d:cf:ce:1d:94:dd:46:72:13: ae:ba:f9:a9:3b:d0:b8:2d:0a:91:70:78:d0:1d:04:87:4d:fe: 57:a2:6d:7c:7d:af:5f:f9:9e:98:89:ae:50:89:95:a2:3a:1a: 76:15:2c:89:0c:61:f3:7e:82:ea:ee:9c:5b:25:db:9c:51:3f: a7:99:34:8d:ed:7f:bf:4f:31:55:0e:77:16:61:9a:8e:47:50: 50:9e:c0:18:f5:b2:ea:e0:8d:c0:2b:45:c4:b6:25:01:4b:29: c2:c0:31:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEphSHrmXZIrWjXGfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNi YzExMB4XDTI1MDcwMjAyMDAwOFoXDTI1MDcwNTAyMDAwMFowLzEtMCsGA1UEAxMk MmY0OTcyZDctNThjNC00OGUwLWE2NjgtMjE0YmI0MmY5NWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTVgLjY52JtIySEGWUTsvmk9NmFTKEkQUszF H1wqNEtfsK6vK80Z2HeBadZi6gK20Uf37rpnrcqRc6hM+mFzMGLOJTTM2YMNDVnx dzZUtq+f7ZgrllLbb+7FkW3iaX60vzgenjopIociO8Q7DLiNCfqI+gHnwqUlptif NN+JbSOoLb6SIrKpiejKUi2CoRxXWrJyz6dpLgXzLWYbfq2idzvGehoITzVuLY0u +7pwymx34+19rFQelmdSX79/lkIaOTKSurjWF+a2yDHhOzowluLuHnD2zEAzWzVK qx/tCew9kLtSwCbO6NYCVwi7x8nKfBBT1UyCR4ZGeDvOtoc6RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLWfq3SSfEBIYqPZDg9KpeeiJtlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEw NjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvY2VhMDYwNDgtN2JjMy00 YjY1LTg0NDMtNGM2MDBiNzNiYzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2VhMDYwNDgtN2JjMy00YjY1LTg0 NDMtNGM2MDBiNzNiYzExL2NlYTA2MDQ4LTdiYzMtNGI2NS04NDQzLTRjNjAwYjcz YmMxMS5jcmwwHwYDVR0jBBgwFoAUcv59GQtXmt7bYV7V2MtgXR9QrtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYw MGI3M2JjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYjkQfH+8BYOgAB1B/I6sJ 7Z+GTQYjXi4Np9k4jEwuGChOvnTPhMvMfCyOrsL16oRu6Ack3YH5R0kACC2KWw5N +tE3cZGWrLR48xkvFMWqTfrNF8JGwb+VVZGCb6M98S+pJ3bAISIK8JEI++1Piioj BZRcxtEP03RJYTMx1fqxPItUS3QYQ4E1YCtTcO1U+wArKmxGXyAFUuUtz84dlN1G chOuuvmpO9C4LQqRcHjQHQSHTf5Xom18fa9f+Z6Yia5QiZWiOhp2FSyJDGHzfoLq 7pxbJducUT+nmTSN7X+/TzFVDncWYZqOR1BQnsAY9bLq4I3AK0XEtiUBSynCwDFi -----END CERTIFICATE-----Generated at Wed Jul 2 06:50:24 2025 by rpki-client