$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft File: 7cfe4957-5dcc-4e3d-8c92-31413817894b.mft (raw, json) Hash identifier: cXiANedU6X9deGx5BHBnIELUtulL3S38qRqthXZMJgE= Subject key identifier: 96:6C:86:5A:40:FE:00:DD:7B:F1:3D:8B:43:40:84:DD:AF:68:04:64 Authority key identifier: D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE Certificate issuer: /CN=7cfe4957-5dcc-4e3d-8c92-31413817894b Certificate serial: 010D0C9F4328584A63607DF0DCC0147D25A8F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft Manifest number: 010D0C9F43285847BA436B6B73E16C808D49EA3A Signing time: Wed 02 Jul 2025 20:00:08 +0000 Manifest this update: Wed 02 Jul 2025 20:00:08 +0000 Manifest next update: Sat 05 Jul 2025 20:00:00 +0000 Files and hashes: 1: 7cfe4957-5dcc-4e3d-8c92-31413817894b.crl (hash: U3SFBf/i6N/LSmSYCo2mVAseqbxbA8TjG2lpZrGpY+E=) 2: 8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa (hash: xznkbhiPwRBg07ZmwDqNMwUNFUVe5MKgxRy0iwR+UPg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:60:7d:f0:dc:c0:14:7d:25:a8:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfe4957-5dcc-4e3d-8c92-31413817894b Validity Not Before: Jul 2 20:00:08 2025 GMT Not After : Jul 5 20:00:00 2025 GMT Subject: CN=7bb8ffd5-a89a-4665-8326-45ad3bcd039b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:28:fd:1e:74:8d:b7:8f:10:00:0b:ab:ad: cb:5a:70:5b:22:dd:7e:3d:29:7a:23:9a:1f:3b:af: 9a:31:be:1d:5b:2d:5c:50:b7:bb:76:2f:e3:bf:31: c8:00:86:66:55:5c:b3:46:c3:67:2e:bf:d8:3f:80: 98:04:80:f4:50:cd:e3:5d:e6:56:63:db:4e:23:23: 8c:c4:47:e5:d3:d3:da:9c:7c:f9:e0:af:fb:21:5a: 69:af:5c:cd:fe:90:f6:08:af:9c:a9:c4:40:aa:46: e4:bc:ce:a3:43:cf:3d:9b:65:24:4c:e8:b8:c0:8e: 6e:0a:cd:05:75:86:01:c2:a0:be:fe:3a:39:7b:be: fc:0e:33:c2:28:15:2d:85:5a:7b:b0:c8:ca:f8:97: 25:a2:e8:42:a2:5b:c8:40:c7:af:b0:8f:47:40:c8: 00:5c:82:60:14:92:c8:ab:61:43:04:5e:6d:9b:48: e0:29:84:e7:1f:89:3d:9f:6d:30:14:c5:88:f8:44: c0:19:c2:b8:7b:2e:3e:53:23:ba:4b:74:cd:64:1c: 4b:9d:43:b5:ee:ee:02:94:6a:c4:89:f3:04:e4:8c: 5e:bb:ce:93:7c:8f:03:f0:94:38:a2:11:4f:19:0d: 19:69:43:a0:a9:57:8a:07:1d:d7:b9:15:75:71:81: 47:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6C:86:5A:40:FE:00:DD:7B:F1:3D:8B:43:40:84:DD:AF:68:04:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl X509v3 Authority Key Identifier: keyid:D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:16:64:96:24:ed:27:eb:84:d2:3d:5c:e8:4f:dd:9f:cb:19: af:38:1f:08:06:1c:86:b0:f9:7b:97:52:0f:e6:0c:db:8c:57: 69:df:d4:50:d1:59:7a:62:bb:44:0f:53:a0:76:7e:44:4e:df: 04:2b:3e:48:56:8c:7c:30:17:10:d3:fb:d6:9c:8d:cb:bc:c5: 3a:6d:dc:6a:d2:43:a0:f1:64:b9:08:e3:b6:84:c0:62:3b:ab: dc:08:cd:27:fe:86:ce:f5:2d:f7:a2:f9:5e:6c:db:2b:70:3b: 5f:26:56:82:fd:86:47:9c:36:cd:0e:90:e5:70:4a:03:12:a6: 5e:8a:7f:21:c3:69:e0:f2:80:f1:07:a4:75:39:73:ff:16:64: e4:ff:d4:b2:7a:5b:ea:97:c5:97:ae:49:bb:7c:e0:5b:aa:1e: 68:72:da:71:9d:7e:87:d3:f9:4a:4e:17:15:e3:a2:c6:33:60: 88:2d:85:94:cc:61:1f:00:fd:c9:22:bb:e9:15:7e:81:4b:59: f8:1f:a8:a8:89:2f:2c:a4:9c:b3:48:f3:f0:b6:af:55:3f:f1: 00:d8:d2:f1:84:8b:d1:82:b6:38:61:f4:f3:a9:bd:86:59:22: ab:d9:1d:11:a0:3e:52:ab:bc:e0:b9:75:7b:fe:83:45:a6:01: d5:7f:74:b2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjYH3w3MAUfSWo8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2NmZTQ5NTctNWRjYy00ZTNkLThjOTItMzE0MTM4MTc4 OTRiMB4XDTI1MDcwMjIwMDAwOFoXDTI1MDcwNTIwMDAwMFowLzEtMCsGA1UEAxMk N2JiOGZmZDUtYTg5YS00NjY1LTgzMjYtNDVhZDNiY2QwMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne8o/R50jbePEAALq63LWnBbIt1+PSl6I5of O6+aMb4dWy1cULe7di/jvzHIAIZmVVyzRsNnLr/YP4CYBID0UM3jXeZWY9tOIyOM xEfl09PanHz54K/7IVppr1zN/pD2CK+cqcRAqkbkvM6jQ889m2UkTOi4wI5uCs0F dYYBwqC+/jo5e778DjPCKBUthVp7sMjK+JclouhColvIQMevsI9HQMgAXIJgFJLI q2FDBF5tm0jgKYTnH4k9n20wFMWI+ETAGcK4ey4+UyO6S3TNZBxLnUO17u4ClGrE ifME5Ixeu86TfI8D8JQ4ohFPGQ0ZaUOgqVeKBx3XuRV1cYFHAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJZshlpA/gDde/E9i0NAhN2vaARkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83Y2Zl NDk1Ny01ZGNjLTRlM2QtOGM5Mi0zMTQxMzgxNzg5NGIvN2NmZTQ5NTctNWRjYy00 ZTNkLThjOTItMzE0MTM4MTc4OTRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2NmZTQ5NTctNWRjYy00ZTNkLThj OTItMzE0MTM4MTc4OTRiLzdjZmU0OTU3LTVkY2MtNGUzZC04YzkyLTMxNDEzODE3 ODk0Yi5jcmwwHwYDVR0jBBgwFoAU0BI1Abxh7vgoThb/36AodeDbY84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83Y2ZlNDk1Ny01ZGNjLTRlM2QtOGM5Mi0zMTQx MzgxNzg5NGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIFmSWJO0n64TSPVzoT92f yxmvOB8IBhyGsPl7l1IP5gzbjFdp39RQ0Vl6YrtED1Ogdn5ETt8EKz5IVox8MBcQ 0/vWnI3LvMU6bdxq0kOg8WS5COO2hMBiO6vcCM0n/obO9S33ovlebNsrcDtfJlaC /YZHnDbNDpDlcEoDEqZein8hw2ng8oDxB6R1OXP/FmTk/9Syelvql8WXrkm7fOBb qh5octpxnX6H0/lKThcV46LGM2CILYWUzGEfAP3JIrvpFX6BS1n4H6ioiS8spJyz SPPwtq9VP/EA2NLxhIvRgrY4YfTzqb2GWSKr2R0RoD5Sq7zguXV7/oNFpgHVf3Sy -----END CERTIFICATE-----Generated at Thu Jul 3 02:03:32 2025 by rpki-client