$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: XoxiZQjI4piPCgHdV0oVm4W2tF6pgEWgKa/y5YQJjJI= Subject key identifier: 83:EB:75:14:3A:53:F6:D0:71:BB:DE:62:D2:E7:9E:BB:51:4E:FC:37 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584A5EB94E2D4C248815FC7E6200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF564362 Signing time: Tue 01 Jul 2025 04:00:03 +0000 Manifest this update: Tue 01 Jul 2025 04:00:03 +0000 Manifest next update: Thu 03 Jul 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: Y43GnukTszugTZNUg4is+SyshgGzRmzsJS2f1tA4i8g=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: Ln96MgxxNcIszIZmi8AxVbjXSTnQOgqb4lVlrjjaiFk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:b9:4e:2d:4c:24:88:15:fc:7e:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Jul 1 04:00:03 2025 GMT Not After : Jul 3 04:00:00 2025 GMT Subject: CN=e877c85f-bc48-4166-8d27-a15e5e67a526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:f3:fa:ff:c0:a8:6c:7f:6b:88:75:5f:6e: 96:ab:3d:a0:5f:c4:6a:8e:47:8d:62:2c:21:95:7d: 02:bb:4e:fe:2e:23:0e:39:78:ab:7c:5b:8e:d9:ad: 90:bb:3f:3f:9f:c2:e7:86:d3:38:52:ac:3c:62:c5: 34:1c:8e:91:a2:e6:b3:2a:1e:34:de:77:df:69:da: 9a:9c:7d:b1:1e:b5:56:dc:8e:f7:71:90:a3:e0:5f: 25:62:89:b8:69:c4:7e:7e:71:92:2d:e9:d3:c5:e3: d3:ba:0f:5f:e9:0d:b6:45:ba:e4:74:7c:23:d7:c6: e9:ed:90:e3:bf:a8:3a:2b:6a:03:7c:c3:dd:3d:c5: c9:f3:89:46:2f:ec:d4:f6:ed:0a:7e:60:3d:f8:df: 7a:fb:86:70:c1:91:e6:0c:8b:42:0a:3b:c3:aa:60: ed:19:58:56:87:b7:30:9a:33:e5:36:88:89:84:71: 03:4a:35:27:61:29:d8:5f:27:03:44:fa:fb:fe:57: 6a:00:59:0e:ad:74:85:37:0e:a8:9a:80:98:47:dd: 1d:fd:40:fb:20:ab:ef:b1:24:97:57:03:19:48:cd: 9a:67:b7:71:a0:b3:f9:7d:cc:4e:eb:03:c3:3b:15: b4:ec:9d:22:ae:8d:b7:e2:f4:e0:fd:b5:18:07:23: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EB:75:14:3A:53:F6:D0:71:BB:DE:62:D2:E7:9E:BB:51:4E:FC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:08:36:39:cc:c5:cb:1b:3c:60:91:11:e4:ab:8b:66:ff:9d: 1b:58:13:92:aa:6f:88:ed:45:9f:e9:55:d6:1b:c8:bd:88:f9: 8b:0a:27:45:27:e5:11:e5:82:c3:57:f4:b8:b8:55:a1:64:58: 2b:76:80:02:4a:a8:b2:43:b5:a1:ad:fe:73:5a:05:ab:b4:10: d5:5e:7b:69:ed:d0:e4:a5:a9:2e:1a:2b:81:6a:80:6b:87:ab: 5a:59:af:9e:23:77:64:db:a7:c1:45:a6:70:7b:74:e6:6f:b2: 2a:56:b7:24:7e:a9:a5:66:dd:f5:26:d7:78:ed:3b:cd:f8:53: f5:ed:e7:a4:3a:13:09:86:c7:81:aa:4d:9c:2e:ef:45:5c:a3: 92:7f:1a:6e:bf:6b:c0:cc:de:de:3c:87:e6:ce:64:c4:e0:3c: f7:c8:f2:52:50:ec:48:26:cf:b0:15:4c:2c:f6:0d:af:3c:86: 47:36:de:ea:41:9e:5f:9d:46:f0:fd:d0:96:b4:8d:6a:4e:31: d6:13:bc:db:a1:6c:43:4d:a8:a3:bd:7b:1c:9b:d6:af:e9:26: bb:e4:58:49:85:3e:90:67:d6:1d:fc:7c:19:0f:94:cc:b9:04: 5e:ce:84:62:bf:c3:e0:05:d3:e7:f1:97:1a:ae:32:c4:57:94: f0:ab:18:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeuU4tTCSIFfx+YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDcwMTA0MDAwM1oXDTI1MDcwMzA0MDAwMFowLzEtMCsGA1UEAxMk ZTg3N2M4NWYtYmM0OC00MTY2LThkMjctYTE1ZTVlNjdhNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9Tz+v/AqGx/a4h1X26Wqz2gX8RqjkeNYiwh lX0Cu07+LiMOOXirfFuO2a2Quz8/n8LnhtM4Uqw8YsU0HI6RouazKh403nffadqa nH2xHrVW3I73cZCj4F8lYom4acR+fnGSLenTxePTug9f6Q22RbrkdHwj18bp7ZDj v6g6K2oDfMPdPcXJ84lGL+zU9u0KfmA9+N96+4ZwwZHmDItCCjvDqmDtGVhWh7cw mjPlNoiJhHEDSjUnYSnYXycDRPr7/ldqAFkOrXSFNw6omoCYR90d/UD7IKvvsSSX VwMZSM2aZ7dxoLP5fcxO6wPDOxW07J0iro234vTg/bUYByNLnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIPrdRQ6U/bQcbveYtLnnrtRTvw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKCDY5zMXLGzxgkRHkq4tm /50bWBOSqm+I7UWf6VXWG8i9iPmLCidFJ+UR5YLDV/S4uFWhZFgrdoACSqiyQ7Wh rf5zWgWrtBDVXntp7dDkpakuGiuBaoBrh6taWa+eI3dk26fBRaZwe3Tmb7IqVrck fqmlZt31Jtd47TvN+FP17eekOhMJhseBqk2cLu9FXKOSfxpuv2vAzN7ePIfmzmTE 4Dz3yPJSUOxIJs+wFUws9g2vPIZHNt7qQZ5fnUbw/dCWtI1qTjHWE7zboWxDTaij vXscm9av6Sa75FhJhT6QZ9Yd/HwZD5TMuQRezoRiv8PgBdPn8ZcarjLEV5Twqxj8 -----END CERTIFICATE-----Generated at Tue Jul 1 11:36:35 2025 by rpki-client