$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft File: 669f938e-8371-4220-9059-9081449ba23b.mft (raw, json) Hash identifier: bAPY5rNRFgH+F7xSbHYJC+pbqyNHPtJs33VsxBL2MYs= Subject key identifier: 8C:29:51:A1:2D:0C:76:F1:19:53:2F:22:D5:5F:70:BC:AC:B7:7C:57 Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F4328584A60D1597404A53B9223679580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft Manifest number: 010D0C9F43285842BEAA5742CB07D41B9A242F0D Signing time: Tue 01 Jul 2025 22:00:08 +0000 Manifest this update: Tue 01 Jul 2025 22:00:08 +0000 Manifest next update: Fri 04 Jul 2025 22:00:00 +0000 Files and hashes: 1: 669f938e-8371-4220-9059-9081449ba23b.crl (hash: Ot6tQKOuEMbOW6U5ddeDGer8MsKH055xsXpygPOE08A=) 2: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (hash: bHUCYgukhzbYmrNFE7+ohoqIIYICMAhwJkG4qz38KSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:d1:59:74:04:a5:3b:92:23:67:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: Jul 1 22:00:08 2025 GMT Not After : Jul 4 22:00:00 2025 GMT Subject: CN=d9113b02-07f7-4c96-9a0d-86302459b961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c4:21:bc:f8:70:d5:a7:2a:26:0c:7a:0a:97: 7a:b7:f5:21:9a:a9:b8:bb:51:5a:1b:53:f4:7d:8a: f4:af:24:ca:7f:6a:d3:5d:e5:ca:7d:d7:1c:70:33: 38:8a:c2:88:dd:37:04:c1:5e:c2:dd:df:6f:9d:1d: 1e:0e:c5:d6:1c:af:ab:9e:1f:1c:36:5b:ab:84:77: cc:eb:a6:9d:a3:9d:b1:fb:ea:8b:f1:09:3c:3a:3a: 3e:66:d8:fe:ec:d9:16:f4:f3:d3:53:8f:ba:0e:21: 52:ff:ef:8f:ee:d7:4c:79:cc:61:58:b3:e2:12:0a: 0c:ff:7f:09:26:13:b3:f7:30:80:6d:9a:aa:5b:1b: c9:02:0f:79:49:b6:97:6e:17:12:22:95:f0:12:05: 83:b4:47:45:f0:e6:43:bf:25:df:a7:98:62:0f:53: f1:1a:7f:52:40:cb:a5:04:27:22:e0:c5:67:2b:3d: 85:86:bc:2d:7f:0e:1c:df:ac:19:48:5e:79:fb:6e: ae:8d:b7:e1:e7:14:ba:8b:44:de:e7:95:24:48:24: 23:a2:d4:4e:e9:21:bf:3b:b8:da:76:61:32:35:ec: 53:d4:65:d6:74:c5:9b:15:6f:95:36:c2:ff:f7:ce: 08:5a:e0:50:79:97:0b:7d:97:15:f8:15:a0:76:1d: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:51:A1:2D:0C:76:F1:19:53:2F:22:D5:5F:70:BC:AC:B7:7C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b2:56:da:99:ae:62:d7:5b:68:1e:5a:11:e3:54:43:1f:de: b2:2c:e4:4f:aa:1e:d8:41:ad:b3:f7:c1:bf:5d:a2:f4:ff:e0: 01:5f:1e:21:dd:87:b1:7b:6f:42:d4:f0:d5:39:a1:03:92:f2: d6:72:d2:cc:04:3b:8a:6a:f1:f6:03:60:6f:7f:05:e2:6f:0a: 45:13:55:09:66:a5:99:31:b5:6b:e1:f7:4e:e8:6b:64:f7:42: dc:1f:3a:ca:bc:3e:c8:a5:ef:50:b2:2b:97:a5:30:07:f2:68: 57:4d:71:3e:40:31:38:7e:8f:e0:aa:0c:e5:3a:c1:e8:a6:5d: fc:98:ba:00:ba:5b:71:1c:ba:9b:72:94:ee:1c:ec:19:03:4a: c6:2b:27:ae:bb:a4:78:a9:76:82:dc:72:fd:76:0b:70:df:9d: 8c:08:f9:af:28:2d:a2:a5:6c:43:1c:47:3c:b6:c9:79:14:6e: a2:48:54:48:f5:82:46:5e:98:84:7f:dc:5b:4f:31:99:86:3b: 00:e9:dd:0d:c6:5d:5d:cb:07:67:a3:ef:fa:7a:33:55:f7:50: 77:45:4b:40:99:fb:8f:68:c1:da:ff:ca:8c:cb:1f:fa:28:ab: 9d:3a:ce:34:7c:4a:e9:49:1b:30:a8:27:e5:9e:f1:60:4c:04: 50:96:fe:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpg0Vl0BKU7kiNnlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI1MDcwMTIyMDAwOFoXDTI1MDcwNDIyMDAwMFowLzEtMCsGA1UEAxMk ZDkxMTNiMDItMDdmNy00Yzk2LTlhMGQtODYzMDI0NTliOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8QhvPhw1acqJgx6Cpd6t/Uhmqm4u1FaG1P0 fYr0ryTKf2rTXeXKfdcccDM4isKI3TcEwV7C3d9vnR0eDsXWHK+rnh8cNlurhHfM 66ado52x++qL8Qk8Ojo+Ztj+7NkW9PPTU4+6DiFS/++P7tdMecxhWLPiEgoM/38J JhOz9zCAbZqqWxvJAg95SbaXbhcSIpXwEgWDtEdF8OZDvyXfp5hiD1PxGn9SQMul BCci4MVnKz2Fhrwtfw4c36wZSF55+26ujbfh5xS6i0Te55UkSCQjotRO6SG/O7ja dmEyNexT1GXWdMWbFW+VNsL/984IWuBQeZcLfZcV+BWgdh3B1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIwpUaEtDHbxGVMvItVfcLyst3xXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjY5ZjkzOGUtODM3MS00 MjIwLTkwNTktOTA4MTQ0OWJhMjNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmslbama5i11toHloR41RD H96yLORPqh7YQa2z98G/XaL0/+ABXx4h3Yexe29C1PDVOaEDkvLWctLMBDuKavH2 A2BvfwXibwpFE1UJZqWZMbVr4fdO6Gtk90LcHzrKvD7Ipe9QsiuXpTAH8mhXTXE+ QDE4fo/gqgzlOsHopl38mLoAultxHLqbcpTuHOwZA0rGKyeuu6R4qXaC3HL9dgtw 352MCPmvKC2ipWxDHEc8tsl5FG6iSFRI9YJGXpiEf9xbTzGZhjsA6d0Nxl1dywdn o+/6ejNV91B3RUtAmfuPaMHa/8qMyx/6KKudOs40fErpSRswqCflnvFgTARQlv4H -----END CERTIFICATE-----Generated at Wed Jul 2 15:16:53 2025 by rpki-client