$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft File: f0ba84c0-5d44-4547-a368-e574b20611e4.mft (raw, json) Hash identifier: 3Qi5L6hmBC8AWDptcB6YaRExjuN9dljpG696Mv6dN8U= Subject key identifier: 3E:A8:F1:0B:4E:11:DD:62:48:67:69:B3:F5:CD:42:05:89:C9:D3:6D Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584A5F4E3D7AF1951D53E2C9E760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft Manifest number: 010D0C9F4328584073A84A8F170EC439FD54A212 Signing time: Tue 01 Jul 2025 09:00:08 +0000 Manifest this update: Tue 01 Jul 2025 09:00:08 +0000 Manifest next update: Thu 03 Jul 2025 09:00:00 +0000 Files and hashes: 1: f0ba84c0-5d44-4547-a368-e574b20611e4.crl (hash: tOSlevMVOFZ1i/U3CmU5CNeuHcHpVbxnNbKoQhZc+pM=) 2: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (hash: XIdkrNH4FFGvRS2pPh1PjWVuWL+QkdGbI7JuRcZkuGs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:4e:3d:7a:f1:95:1d:53:e2:c9:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Jul 1 09:00:08 2025 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=6dcdd4d0-7c69-410d-849e-ab905cde7b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:23:7f:2a:2b:82:66:30:34:46:7c:5b:79: 67:2f:fa:90:80:2a:99:45:3e:9f:e5:d7:5b:1f:45: e2:1f:df:76:7c:06:72:ac:20:97:c9:74:5b:a5:ef: f7:77:d1:a0:58:41:0d:c0:ee:e2:84:38:0f:10:af: e3:8d:45:05:6e:bc:0d:bf:2c:39:32:05:bd:ec:11: 3b:79:bf:5a:4c:cc:ed:b9:09:26:fb:74:ce:9e:02: 16:91:9a:1d:95:57:9e:5a:13:dd:a0:f4:cf:6b:91: 04:32:bd:0a:dc:3f:49:47:a2:d1:f1:b6:76:e8:25: df:ba:4d:7e:ef:b7:98:aa:90:14:bd:f0:9d:70:dc: 32:1d:70:5d:09:31:7a:96:bb:8a:ac:9c:fd:1c:ff: a2:56:ee:6c:51:94:90:c5:38:10:0d:7c:bd:92:91: 3e:0e:e9:4b:2b:f0:94:55:b1:a9:50:1f:41:5e:a4: 8a:c8:2a:95:18:25:bf:c1:97:d7:1a:c7:b1:78:d9: 29:86:ca:ae:00:cb:20:4e:ff:09:9c:3e:5e:bc:e3: 6e:a6:03:47:d8:d4:2c:90:b0:a7:c6:33:c5:c2:64: 14:90:df:c0:fa:c4:3d:02:cc:01:ff:bc:e4:5f:83: 01:f7:5b:54:9d:70:7a:9e:b5:73:af:82:0e:2e:6d: 33:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A8:F1:0B:4E:11:DD:62:48:67:69:B3:F5:CD:42:05:89:C9:D3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b5:16:e1:c3:db:69:d9:c8:74:a8:c1:5d:d0:83:66:f3:2e: 0f:bc:9a:32:e2:19:9d:80:68:fd:05:fc:01:e3:a5:8c:c1:b4: 3a:aa:8b:f5:b4:e2:3e:cc:7f:f6:00:0a:33:1b:79:d7:55:eb: b2:7b:26:8d:4f:6d:5e:83:78:49:4c:e9:c0:02:45:bb:a9:66: ac:ca:66:ff:ff:40:8d:5d:1e:35:36:cf:20:4f:de:4c:ea:31: b0:55:1a:83:85:e8:25:52:80:56:da:38:97:3d:91:50:bf:48: 00:d9:09:31:72:22:0b:e6:52:ac:ce:01:60:a8:85:3c:03:ea: cc:14:5b:88:15:88:ff:9c:e5:2f:58:78:92:94:ca:7f:9e:bb: 83:b9:77:cf:02:f0:c9:c4:a1:6d:bc:81:ea:de:ee:6a:f3:27: ba:9e:8a:ae:a1:95:44:a9:60:a8:ab:b2:ce:95:01:1f:9c:3c: f7:db:19:14:4c:e0:d2:89:12:af:8a:a3:5d:63:dd:f1:4e:24: 26:be:3c:66:33:8e:12:24:21:6e:e0:bd:33:8c:29:de:3d:57: e7:ff:23:c3:48:5b:bc:dc:1d:f0:a8:28:89:c4:92:da:5f:b8: 5a:53:bb:d1:70:fe:2f:2e:3b:54:fe:32:b0:50:9c:eb:4e:18: 0b:20:8e:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfTj168ZUdU+LJ52AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MDcwMTA5MDAwOFoXDTI1MDcwMzA5MDAwMFowLzEtMCsGA1UEAxMk NmRjZGQ0ZDAtN2M2OS00MTBkLTg0OWUtYWI5MDVjZGU3YjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj0jfyorgmYwNEZ8W3lnL/qQgCqZRT6f5ddb H0XiH992fAZyrCCXyXRbpe/3d9GgWEENwO7ihDgPEK/jjUUFbrwNvyw5MgW97BE7 eb9aTMztuQkm+3TOngIWkZodlVeeWhPdoPTPa5EEMr0K3D9JR6LR8bZ26CXfuk1+ 77eYqpAUvfCdcNwyHXBdCTF6lruKrJz9HP+iVu5sUZSQxTgQDXy9kpE+DulLK/CU VbGpUB9BXqSKyCqVGCW/wZfXGsexeNkphsquAMsgTv8JnD5evONupgNH2NQskLCn xjPFwmQUkN/A+sQ9AswB/7zkX4MB91tUnXB6nrVzr4IOLm0zZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD6o8QtOEd1iSGdps/XNQgWJydNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjBiYTg0YzAtNWQ0NC00 NTQ3LWEzNjgtZTU3NGIyMDYxMWU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAtRbhw9tp2ch0qMFd0INm 8y4PvJoy4hmdgGj9BfwB46WMwbQ6qov1tOI+zH/2AAozG3nXVeuyeyaNT21eg3hJ TOnAAkW7qWasymb//0CNXR41Ns8gT95M6jGwVRqDheglUoBW2jiXPZFQv0gA2Qkx ciIL5lKszgFgqIU8A+rMFFuIFYj/nOUvWHiSlMp/nruDuXfPAvDJxKFtvIHq3u5q 8ye6noquoZVEqWCoq7LOlQEfnDz32xkUTODSiRKviqNdY93xTiQmvjxmM44SJCFu 4L0zjCnePVfn/yPDSFu83B3wqCiJxJLaX7haU7vRcP4vLjtU/jKwUJzrThgLII6I -----END CERTIFICATE-----Generated at Tue Jul 1 16:04:17 2025 by rpki-client