$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft File: 20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft (raw, json) Hash identifier: UjQZvADLgErDfO2eAPLISQVnIh5R5fcAkpjzNXp9a9g= Subject key identifier: 5D:77:A1:83:6F:4F:BA:FC:0D:DD:60:68:AA:8D:13:D2:80:28:E4:B3 Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Certificate serial: 010D0C9F4328584A5D5404994F740486D538FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft Manifest number: 010D0C9F43285846F34E448B9B2956572632EA47 Signing time: Mon 30 Jun 2025 16:00:08 +0000 Manifest this update: Mon 30 Jun 2025 16:00:08 +0000 Manifest next update: Wed 02 Jul 2025 16:00:00 +0000 Files and hashes: 1: 20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl (hash: WOYTuUDW80Sfcka9+w5Hc7VKI0SqbRoYbX6rx54993g=) 2: d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa (hash: 9TJEGBPya5Mo4ecs69g74omB1QG88+IS288s3+q4a9Q=) 3: e6589685-287e-39e0-a7eb-0aa709e301c6.roa (hash: 8IsJO1PNq80WKWj54Pv1uNvdcJiT1xy3FLKLmukcp/g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:54:04:99:4f:74:04:86:d5:38:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e Validity Not Before: Jun 30 16:00:08 2025 GMT Not After : Jul 2 16:00:00 2025 GMT Subject: CN=b7b42d3f-bf35-47ce-8c9e-2b37f5d9e5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:25:72:31:79:39:82:37:52:60:87:87:7a: 3f:5e:06:ee:3f:9b:87:28:9d:7f:ca:d8:26:57:a3: 51:9f:42:d7:36:b0:10:fc:7f:8b:48:15:bf:b6:54: 72:f4:f0:65:8d:6e:0f:26:45:4f:91:f5:03:06:f3: 35:71:9d:6c:64:1c:88:0b:17:cd:1c:1c:19:0d:dc: 8c:77:07:c2:2d:3a:44:c0:f1:b3:47:e3:67:08:9e: 85:4a:ec:8f:13:3b:f0:18:71:5b:f0:ac:c7:77:65: 6f:b5:cb:a6:bf:c0:4c:6d:e4:4d:8f:99:91:0a:9b: 1b:35:54:d3:b5:d8:14:8e:fc:cf:ea:a7:53:48:af: 3a:34:1f:ba:72:9e:92:a0:4c:9b:a0:20:59:a6:9e: d9:81:8c:e6:22:7e:9c:eb:e1:5e:01:bb:dd:ee:04: 19:ee:5a:e3:a8:ed:c0:0d:a3:d1:b1:59:f9:24:f0: 41:3b:b2:b4:26:0f:17:8e:14:5d:31:a8:6b:3f:69: 4e:d5:85:5b:88:e1:9f:31:42:47:d3:89:1e:c9:89: 95:20:4c:2f:24:da:eb:16:25:76:7f:de:40:44:7c: fe:f1:2b:87:c6:4a:ac:bc:6f:2a:24:06:a4:f8:f5: 86:38:33:c4:52:3b:94:52:99:b1:0a:69:5e:a8:ab: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:77:A1:83:6F:4F:BA:FC:0D:DD:60:68:AA:8D:13:D2:80:28:E4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl X509v3 Authority Key Identifier: keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:6a:0e:65:44:ab:4b:08:b6:2d:51:6d:f2:9f:d7:f5:db:d4: 70:5e:de:1d:da:74:60:e5:99:aa:e1:4d:ab:d0:93:39:dd:d2: 8a:6c:c1:8c:68:42:96:a8:7d:46:85:11:83:83:14:bd:93:47: 8f:81:43:b3:e1:b2:89:c0:a7:b7:b3:bb:da:e0:d8:53:65:4d: bc:75:90:b8:8e:9f:9e:d6:80:da:ec:53:19:f6:58:b6:4f:02: 32:c2:4c:d9:d5:a0:84:a9:90:70:cf:53:c8:d6:6e:f3:16:fb: 4c:6c:cb:ef:fd:1e:83:4e:d5:fc:33:d1:89:1a:44:56:7d:6e: b8:5e:3b:08:fc:d2:de:92:3a:27:81:9d:be:53:bb:87:e0:eb: 2f:6f:ae:ba:f9:22:bb:39:1d:9c:0d:96:42:ab:75:fd:03:7c: 30:d5:b1:b2:f4:41:0e:cb:92:81:b7:2a:c9:ba:31:95:bb:a3: 2d:fd:5c:93:31:39:a9:98:1c:b3:3a:41:af:eb:e7:fe:25:b4: e2:e1:15:2d:1a:07:94:27:1d:66:1e:16:98:71:0d:4d:c4:73: b5:f7:11:64:e7:d5:77:8f:49:b4:7a:44:81:c0:a2:3b:b4:3d: 2f:dd:90:23:17:fd:ea:14:7d:4d:e3:a6:f5:d4:d7:ea:74:fd: e2:2e:f5:e1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdVASZT3QEhtU4/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBmOGJjZTYtZTMzZS00MGU4LWJmYjMtYzRiNWIyMTU5 YTdlMB4XDTI1MDYzMDE2MDAwOFoXDTI1MDcwMjE2MDAwMFowLzEtMCsGA1UEAxMk YjdiNDJkM2YtYmYzNS00N2NlLThjOWUtMmIzN2Y1ZDllNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHolcjF5OYI3UmCHh3o/XgbuP5uHKJ1/ytgm V6NRn0LXNrAQ/H+LSBW/tlRy9PBljW4PJkVPkfUDBvM1cZ1sZByICxfNHBwZDdyM dwfCLTpEwPGzR+NnCJ6FSuyPEzvwGHFb8KzHd2Vvtcumv8BMbeRNj5mRCpsbNVTT tdgUjvzP6qdTSK86NB+6cp6SoEyboCBZpp7ZgYzmIn6c6+FeAbvd7gQZ7lrjqO3A DaPRsVn5JPBBO7K0Jg8XjhRdMahrP2lO1YVbiOGfMUJH04keyYmVIEwvJNrrFiV2 f95ARHz+8SuHxkqsvG8qJAak+PWGODPEUjuUUpmxCmleqKsyLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF13oYNvT7r8Dd1gaKqNE9KAKOSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4 YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1YjIxNTlhN2UvMjBmOGJjZTYtZTMzZS00 MGU4LWJmYjMtYzRiNWIyMTU5YTdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBmOGJjZTYtZTMzZS00MGU4LWJm YjMtYzRiNWIyMTU5YTdlLzIwZjhiY2U2LWUzM2UtNDBlOC1iZmIzLWM0YjViMjE1 OWE3ZS5jcmwwHwYDVR0jBBgwFoAUs53Dj4IeklhrrH5gM4UTNFGTo1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGY4YmNlNi1lMzNlLTQwZTgtYmZiMy1jNGI1 YjIxNTlhN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjag5lRKtLCLYtUW3yn9f1 29RwXt4d2nRg5Zmq4U2r0JM53dKKbMGMaEKWqH1GhRGDgxS9k0ePgUOz4bKJwKe3 s7va4NhTZU28dZC4jp+e1oDa7FMZ9li2TwIywkzZ1aCEqZBwz1PI1m7zFvtMbMvv /R6DTtX8M9GJGkRWfW64XjsI/NLekjongZ2+U7uH4Osvb666+SK7OR2cDZZCq3X9 A3ww1bGy9EEOy5KBtyrJujGVu6Mt/VyTMTmpmByzOkGv6+f+JbTi4RUtGgeUJx1m HhaYcQ1NxHO19xFk59V3j0m0ekSBwKI7tD0v3ZAjF/3qFH1N46b11NfqdP3iLvXh -----END CERTIFICATE-----Generated at Tue Jul 1 11:38:05 2025 by rpki-client