$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: 8AI5O3aA92Fb8TE3iq6pZzLucLS0gCrloAELrEOZzqE= Subject key identifier: B3:1C:DF:14:98:1F:A6:87:CE:FB:80:09:F4:9C:C4:A5:B9:75:A2:98 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584A62CB90A8E0056E292EB70080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A4777E Signing time: Wed 02 Jul 2025 15:00:03 +0000 Manifest this update: Wed 02 Jul 2025 15:00:03 +0000 Manifest next update: Sat 05 Jul 2025 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: GTQNMvP5+m3uE8hwXTy9m9vItEc+sBnx/uBniu44/C8=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: 9TeOjumHROSA6rp5oe9BBuHluNIpp4Dof/U3Ih0O2nI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:cb:90:a8:e0:05:6e:29:2e:b7:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Jul 2 15:00:03 2025 GMT Not After : Jul 5 15:00:00 2025 GMT Subject: CN=59bc7622-b6b5-4caf-ad12-e098bac65602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:69:22:b7:aa:af:0c:ec:9e:36:d3:33:fb: 06:af:8c:e0:64:7d:7c:d8:01:09:25:d3:70:38:ef: bf:52:47:13:eb:fe:5b:4c:7e:11:89:62:72:e6:20: 60:71:b1:53:bb:aa:9d:bb:83:f6:83:f3:b5:db:2b: e7:a5:13:0f:b0:77:5a:f1:e8:4d:df:1d:95:e9:cb: 0c:1b:f0:13:f0:71:ae:7a:2b:47:9f:3f:11:68:94: 66:e5:96:2c:f5:54:73:57:f9:29:f1:e5:5f:b3:bc: 54:c9:73:11:49:19:8c:56:4b:6e:ae:5b:aa:59:4f: ae:1b:27:42:0b:76:92:7b:f0:0c:b4:75:0f:54:d8: ce:4b:e4:1f:96:30:23:9b:0c:78:84:7a:5d:54:35: 49:b3:b9:16:82:32:09:b9:05:20:11:f9:8b:54:82: f6:8d:c9:ad:0e:ba:62:a1:2f:e9:20:33:2a:94:03: 26:07:ad:e0:10:9e:a8:9f:3f:02:8f:ec:90:74:5d: 83:8f:a6:0a:0d:ba:16:83:ba:2a:16:b7:4e:2f:51: c7:d9:69:5f:b2:cd:2c:20:05:f9:17:6c:18:c0:6f: d9:9f:56:21:ee:00:2c:c0:07:c0:1a:f9:f0:5f:f6: cb:72:88:6e:b5:a7:5a:df:fc:24:b7:da:b5:4d:80: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1C:DF:14:98:1F:A6:87:CE:FB:80:09:F4:9C:C4:A5:B9:75:A2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:75:3e:19:5d:89:2f:87:33:fd:58:a4:44:ac:94:e1:6b:a5: 0d:8f:70:67:c6:d7:fa:ce:51:ea:82:25:36:5c:1f:30:a2:96: 11:c3:dd:f5:8b:c5:3d:0e:32:3d:3a:08:86:3a:06:8e:97:65: eb:42:c5:56:a0:fa:4e:a0:c0:3f:56:21:be:1d:57:3f:b2:f7: b7:8d:cb:f9:4b:25:58:16:10:f5:d3:7c:f6:56:97:98:e0:c6: eb:05:3a:63:0d:68:85:16:25:9a:e6:38:e4:2a:c1:6e:a4:b9: 35:73:33:5a:30:1d:bf:f9:6d:a2:12:a8:49:90:28:ff:4e:c7: 15:ce:0e:3e:a2:a3:5d:f8:e1:43:6f:c4:7a:d1:2f:52:57:32: 0e:4d:f6:7b:44:aa:dc:94:f9:80:26:fc:47:93:f4:35:5c:8f: 19:1b:db:6f:de:a5:a8:7e:fa:37:78:e2:07:a4:d1:88:51:8a: c3:4c:c5:ef:09:f3:b5:f0:2d:3d:60:40:58:33:68:b2:50:63: ea:8a:10:45:54:b5:e7:4b:5d:67:0b:f7:4b:4d:81:6e:b1:98: c6:79:18:b9:32:c8:03:90:e7:8c:d6:9d:bc:57:5a:a4:9e:8d: d5:9a:b9:8b:3d:5e:16:b3:3d:f6:4a:3f:66:b1:58:4a:1d:17: 83:05:ac:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpiy5Co4AVuKS63AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI1MDcwMjE1MDAwM1oXDTI1MDcwNTE1MDAwMFowLzEtMCsGA1UEAxMk NTliYzc2MjItYjZiNS00Y2FmLWFkMTItZTA5OGJhYzY1NjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkStpIreqrwzsnjbTM/sGr4zgZH182AEJJdNw OO+/UkcT6/5bTH4RiWJy5iBgcbFTu6qdu4P2g/O12yvnpRMPsHda8ehN3x2V6csM G/AT8HGueitHnz8RaJRm5ZYs9VRzV/kp8eVfs7xUyXMRSRmMVkturluqWU+uGydC C3aSe/AMtHUPVNjOS+QfljAjmwx4hHpdVDVJs7kWgjIJuQUgEfmLVIL2jcmtDrpi oS/pIDMqlAMmB63gEJ6onz8Cj+yQdF2Dj6YKDboWg7oqFrdOL1HH2Wlfss0sIAX5 F2wYwG/Zn1Yh7gAswAfAGvnwX/bLcohutada3/wkt9q1TYBlTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMc3xSYH6aHzvuACfScxKW5daKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBdT4ZXYkvhzP9WKRErJTh a6UNj3Bnxtf6zlHqgiU2XB8wopYRw931i8U9DjI9OgiGOgaOl2XrQsVWoPpOoMA/ ViG+HVc/sve3jcv5SyVYFhD103z2VpeY4MbrBTpjDWiFFiWa5jjkKsFupLk1czNa MB2/+W2iEqhJkCj/TscVzg4+oqNd+OFDb8R60S9SVzIOTfZ7RKrclPmAJvxHk/Q1 XI8ZG9tv3qWofvo3eOIHpNGIUYrDTMXvCfO18C09YEBYM2iyUGPqihBFVLXnS11n C/dLTYFusZjGeRi5MsgDkOeM1p28V1qkno3VmrmLPV4Wsz32Sj9msVhKHReDBazc -----END CERTIFICATE-----Generated at Thu Jul 3 03:50:32 2025 by rpki-client