$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft File: 2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft (raw, json) Hash identifier: zVeRcmxvizfaLRPCL5umBK1RKP68wRqoM9MqnIxFMjU= Subject key identifier: 0F:0C:D1:31:28:52:24:25:EE:48:A9:22:1C:17:6F:6A:C9:7C:CA:23 Authority key identifier: 5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58 Certificate issuer: /CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1 Certificate serial: 010D0C9F4328584A605A3E5D96E15A0A67F76C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft Manifest number: 010D0C9F4328584701B9CEF460D395AD55B515EC Signing time: Tue 01 Jul 2025 18:00:08 +0000 Manifest this update: Tue 01 Jul 2025 18:00:08 +0000 Manifest next update: Thu 03 Jul 2025 18:00:00 +0000 Files and hashes: 1: 2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl (hash: gkUJGZd3lqWp9o4hf7JNglypNQrQNzdIPAeHnAiJnGE=) 2: b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa (hash: jnawabye+GUHpzSHrT2kGc8sZUX/XA1Cg+teDX8uDdQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:5a:3e:5d:96:e1:5a:0a:67:f7:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1 Validity Not Before: Jul 1 18:00:08 2025 GMT Not After : Jul 3 18:00:00 2025 GMT Subject: CN=f804d347-a4a6-4276-b024-3442e9dbe108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:c0:d4:6e:ca:26:60:02:df:d0:d5:8d:34: c4:19:0a:77:61:43:2d:0a:59:3f:2b:79:d9:10:85: 08:0f:c3:89:e3:f8:87:0e:e3:f6:23:43:df:1b:90: 76:8d:11:98:d7:d4:75:36:d0:1e:74:08:20:c8:76: 9c:2f:ca:4b:47:f8:ec:8d:f3:07:4e:30:29:39:42: 96:a5:1a:48:d4:97:ec:58:6f:6d:1b:31:99:00:08: 68:c8:ac:1b:e3:43:76:ab:bd:7c:8d:ff:18:32:52: 62:ba:17:0b:ee:83:b7:d4:f9:bc:98:00:8e:f7:20: 2f:66:b5:f3:42:74:f3:c4:63:8f:16:ce:0e:26:af: b1:a7:56:b7:e9:f0:07:cc:90:09:ab:14:9d:82:e8: d5:da:a8:30:b0:a7:d6:d0:b1:bb:ee:8c:db:71:79: 71:ee:01:6c:b3:6a:5f:8c:3f:bf:ab:8c:b3:ec:6c: 09:ea:ca:cb:b0:97:3d:65:68:6e:4e:3a:69:b1:7f: e8:87:57:82:68:44:22:c9:04:d8:67:9b:35:09:e8: c7:db:7a:32:be:26:73:cf:8b:cc:ea:65:42:c0:85: ab:42:ed:13:d9:46:cc:64:a5:ba:42:69:46:bb:99: 4e:37:ea:2b:d7:f9:7d:38:ac:af:3b:1e:af:3b:e4: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0C:D1:31:28:52:24:25:EE:48:A9:22:1C:17:6F:6A:C9:7C:CA:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl X509v3 Authority Key Identifier: keyid:5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2a:0d:0b:26:87:90:53:ea:ba:01:bf:6b:cf:59:c3:ec:ef: 46:dd:8d:42:73:c1:18:39:43:10:17:23:6c:7c:c7:89:b7:e7: 66:04:9e:8b:4a:75:bb:dc:25:84:82:20:4d:97:5f:87:1d:9b: 26:d6:1f:e0:d7:c2:48:fc:5e:c0:12:e9:75:14:a9:ca:a0:10: a6:bb:30:3a:c9:b9:eb:aa:95:d3:10:aa:3d:a3:84:58:5b:d1: 93:5f:78:65:bf:29:26:f6:d1:73:53:33:01:b3:e0:74:07:67: 11:9c:02:26:0a:13:e8:ed:be:eb:53:13:74:b8:ca:28:7a:98: 1d:6d:47:32:5b:b0:ef:e2:7e:8f:6e:62:c6:36:cb:79:8c:9a: af:da:b0:19:04:93:bd:12:84:52:02:c7:eb:5a:e8:8a:19:b8: 7e:ec:b5:d2:cc:1c:b7:c5:9d:d5:f7:ca:bc:06:3c:5b:e2:47: 69:3d:95:ec:06:25:fc:25:c7:c7:ba:fd:1e:a2:51:72:22:3e: da:07:8d:61:1c:8c:11:3d:79:1c:cc:ab:8c:2e:06:81:18:15: a2:e7:f4:ef:43:b4:f9:d8:23:c9:ae:2e:4e:0f:1e:c1:b0:b3: 07:f1:1c:92:e5:b6:a2:6d:18:3e:1b:93:ef:40:31:84:89:1a: eb:9d:4f:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgWj5dluFaCmf3bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjc0NWU5Y2MtNjdmZC00NDAwLWExZDAtZDFjOTA1NjVh MGYxMB4XDTI1MDcwMTE4MDAwOFoXDTI1MDcwMzE4MDAwMFowLzEtMCsGA1UEAxMk ZjgwNGQzNDctYTRhNi00Mjc2LWIwMjQtMzQ0MmU5ZGJlMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12vA1G7KJmAC39DVjTTEGQp3YUMtClk/K3nZ EIUID8OJ4/iHDuP2I0PfG5B2jRGY19R1NtAedAggyHacL8pLR/jsjfMHTjApOUKW pRpI1JfsWG9tGzGZAAhoyKwb40N2q718jf8YMlJiuhcL7oO31Pm8mACO9yAvZrXz QnTzxGOPFs4OJq+xp1a36fAHzJAJqxSdgujV2qgwsKfW0LG77ozbcXlx7gFss2pf jD+/q4yz7GwJ6srLsJc9ZWhuTjppsX/oh1eCaEQiyQTYZ5s1CejH23oyviZzz4vM 6mVCwIWrQu0T2UbMZKW6QmlGu5lON+or1/l9OKyvOx6vO+SX4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA8M0TEoUiQl7kipIhwXb2rJfMojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNzQ1 ZTljYy02N2ZkLTQ0MDAtYTFkMC1kMWM5MDU2NWEwZjEvMjc0NWU5Y2MtNjdmZC00 NDAwLWExZDAtZDFjOTA1NjVhMGYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjc0NWU5Y2MtNjdmZC00NDAwLWEx ZDAtZDFjOTA1NjVhMGYxLzI3NDVlOWNjLTY3ZmQtNDQwMC1hMWQwLWQxYzkwNTY1 YTBmMS5jcmwwHwYDVR0jBBgwFoAUWj9DLKDBnO58oLQANKOiEe/3KVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNzQ1ZTljYy02N2ZkLTQ0MDAtYTFkMC1kMWM5 MDU2NWEwZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbKg0LJoeQU+q6Ab9rz1nD 7O9G3Y1Cc8EYOUMQFyNsfMeJt+dmBJ6LSnW73CWEgiBNl1+HHZsm1h/g18JI/F7A Eul1FKnKoBCmuzA6ybnrqpXTEKo9o4RYW9GTX3hlvykm9tFzUzMBs+B0B2cRnAIm ChPo7b7rUxN0uMooepgdbUcyW7Dv4n6PbmLGNst5jJqv2rAZBJO9EoRSAsfrWuiK Gbh+7LXSzBy3xZ3V98q8Bjxb4kdpPZXsBiX8JcfHuv0eolFyIj7aB41hHIwRPXkc zKuMLgaBGBWi5/TvQ7T52CPJri5ODx7BsLMH8RyS5baibRg+G5PvQDGEiRrrnU8J -----END CERTIFICATE-----Generated at Tue Jul 1 19:36:21 2025 by rpki-client