$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft File: 25393f82-9e95-47aa-9897-0027f6c5e3d4.mft (raw, json) Hash identifier: S1IXvIg9/arqa4KKYuagHRzcYo4hUcQHuKax08YOObE= Subject key identifier: 17:27:E5:1E:8A:8A:72:0F:54:BD:1F:A8:6D:C6:24:35:40:45:0E:95 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F4328584A6430E32BF4E46FE642677400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft Manifest number: 010D0C9F43285846E41B34F5F05C912653C095EB Signing time: Thu 03 Jul 2025 03:00:03 +0000 Manifest this update: Thu 03 Jul 2025 03:00:03 +0000 Manifest next update: Sat 05 Jul 2025 03:00:00 +0000 Files and hashes: 1: 25393f82-9e95-47aa-9897-0027f6c5e3d4.crl (hash: IDi5LvM1+KTtLx2z0QyzaVVed21aSaFQIgKoawePTuw=) 2: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (hash: ymBjkyaWl6nGmXTATvXOHnAEjY/yVkYVK/BQolLF6uE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:30:e3:2b:f4:e4:6f:e6:42:67:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Jul 3 03:00:03 2025 GMT Not After : Jul 5 03:00:00 2025 GMT Subject: CN=408fcbd0-874f-4eac-83eb-7cf912dcfac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:43:ed:d4:fe:4d:de:a2:e4:6e:d2:90:58: c5:ec:68:9c:30:3c:ba:71:72:2e:67:57:fe:12:32: 79:88:17:0c:b3:6d:eb:eb:6e:64:d2:80:2b:01:40: f1:03:a7:77:3c:7a:25:27:c8:b0:e2:cf:0a:df:17: 97:77:54:9f:e2:5b:1e:c2:65:73:7d:6b:7c:e0:17: 45:c6:e1:a1:2c:21:e0:2b:ba:c1:8d:a3:e1:99:c5: 28:b0:61:82:8d:ca:25:95:41:c3:bb:c3:55:0c:e5: 60:3b:fe:3a:e0:41:25:97:05:ac:0b:ca:b0:f5:fc: 84:67:d3:83:c0:0b:b4:d4:af:80:79:f9:de:5a:2a: f1:be:4a:5c:ef:e3:02:ac:34:89:87:c6:fb:e2:6b: 28:42:99:59:a5:68:66:a9:a4:a2:04:49:76:32:a1: 16:a4:17:2a:14:a0:72:36:e6:fa:b1:c5:00:58:6d: 7d:a1:d4:22:a4:df:f2:c8:59:e0:4c:77:68:f4:72: c6:ef:34:4e:30:81:0b:bb:ff:fd:94:69:dc:15:7d: ca:7d:44:d1:8b:53:cd:eb:40:46:d5:2d:6a:0a:c4: 61:4d:fc:70:1b:40:16:c3:bb:55:3a:c4:cf:92:85: 0f:14:60:3c:8b:0e:39:3b:15:a0:57:13:f4:1e:ce: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:E5:1E:8A:8A:72:0F:54:BD:1F:A8:6D:C6:24:35:40:45:0E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:40:51:f1:15:db:4c:a7:2c:27:13:80:0c:04:05:69:c6:bd: 92:17:4a:bb:54:81:cc:77:52:a7:00:90:0d:31:38:01:41:2d: d2:32:04:64:29:ba:38:ca:75:fa:52:6d:9b:e2:e3:5a:e0:5f: cf:4b:89:97:03:a5:bd:f9:c9:35:87:b9:b2:0e:d9:e4:f5:7a: ba:bb:b5:dc:24:13:ca:11:ea:ab:94:92:9b:39:39:2b:25:9d: 79:c6:14:a1:2d:af:e5:b2:a8:64:36:8c:18:3f:21:3d:e8:54: ff:36:64:a0:99:97:d1:22:cb:1b:3c:c6:9d:c6:4c:55:27:95: 7b:fe:35:0e:bf:8a:f7:a0:49:21:1e:16:c1:9c:b1:97:0d:bb: 9b:0d:0c:96:7d:63:b9:c2:f3:2c:4e:ff:bc:9b:60:a5:33:db: df:8d:8c:8c:a9:20:5b:66:9e:53:21:61:99:da:f1:14:1f:99: 66:4e:80:ec:75:b5:e4:a5:39:72:74:07:75:75:a5:7c:12:df: 7d:85:aa:1c:b2:c8:22:3d:82:71:46:f3:2d:4d:6a:56:e8:fc: 5d:24:6c:5e:81:b3:f7:71:22:86:99:e3:18:49:d8:fb:e4:c8: ff:52:02:c4:36:ce:10:51:c4:94:93:ab:89:5d:ea:60:00:83: 54:e1:c4:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpkMOMr9ORv5kJndAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI1MDcwMzAzMDAwM1oXDTI1MDcwNTAzMDAwMFowLzEtMCsGA1UEAxMk NDA4ZmNiZDAtODc0Zi00ZWFjLTgzZWItN2NmOTEyZGNmYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApslD7dT+Td6i5G7SkFjF7GicMDy6cXIuZ1f+ EjJ5iBcMs23r625k0oArAUDxA6d3PHolJ8iw4s8K3xeXd1Sf4lsewmVzfWt84BdF xuGhLCHgK7rBjaPhmcUosGGCjcollUHDu8NVDOVgO/464EEllwWsC8qw9fyEZ9OD wAu01K+AefneWirxvkpc7+MCrDSJh8b74msoQplZpWhmqaSiBEl2MqEWpBcqFKBy Nub6scUAWG19odQipN/yyFngTHdo9HLG7zROMIELu//9lGncFX3KfUTRi1PN60BG 1S1qCsRhTfxwG0AWw7tVOsTPkoUPFGA8iw45OxWgVxP0Hs7AvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBcn5R6KinIPVL0fqG3GJDVARQ6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMjUzOTNmODItOWU5NS00 N2FhLTk4OTctMDAyN2Y2YzVlM2Q0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgQFHxFdtMpywnE4AMBAVp xr2SF0q7VIHMd1KnAJANMTgBQS3SMgRkKbo4ynX6Um2b4uNa4F/PS4mXA6W9+ck1 h7myDtnk9Xq6u7XcJBPKEeqrlJKbOTkrJZ15xhShLa/lsqhkNowYPyE96FT/NmSg mZfRIssbPMadxkxVJ5V7/jUOv4r3oEkhHhbBnLGXDbubDQyWfWO5wvMsTv+8m2Cl M9vfjYyMqSBbZp5TIWGZ2vEUH5lmToDsdbXkpTlydAd1daV8Et99haocssgiPYJx RvMtTWpW6PxdJGxegbP3cSKGmeMYSdj75Mj/UgLENs4QUcSUk6uJXepgAINU4cRG -----END CERTIFICATE-----Generated at Thu Jul 3 10:40:27 2025 by rpki-client