$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft File: acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft (raw, json) Hash identifier: aq+G6cUqDXMS+nnbsVsKTyRLNIwlS7KKarAGaynX6HY= Subject key identifier: 64:80:88:B4:7E:0C:AC:38:47:67:8E:25:FB:24:0B:E2:6B:19:54:E0 Authority key identifier: 0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05 Certificate issuer: /CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3 Certificate serial: 010D0C9F4328584A5D36327F06614BA99434C410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft Manifest number: 010D0C9F43285847C75E7603E3E465F720678876 Signing time: Mon 30 Jun 2025 15:00:03 +0000 Manifest this update: Mon 30 Jun 2025 15:00:03 +0000 Manifest next update: Wed 02 Jul 2025 15:00:00 +0000 Files and hashes: 1: 510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa (hash: krYe2I+Hx0neTYbhC3bR4desBo9JYkYnFxoitFtDwlc=) 2: acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl (hash: wDPfk6KhawLUxfu67KekTgR8gqxALYocS+GK+6oAEWM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:36:32:7f:06:61:4b:a9:94:34:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3 Validity Not Before: Jun 30 15:00:03 2025 GMT Not After : Jul 2 15:00:00 2025 GMT Subject: CN=e83d7b50-b978-4029-a132-2877384f5b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ec:b3:e2:1a:da:30:29:4f:80:da:f8:10:3b: 3f:90:ae:cb:6c:b6:fd:05:6e:9b:4f:ee:51:9b:ab: 1d:6b:c7:cb:ef:32:6f:e6:52:cc:ae:48:b8:c9:fd: 08:51:ea:f7:8f:b3:14:11:87:b4:1c:bf:7f:ef:10: 3d:f7:72:32:81:78:06:c2:7d:35:e6:17:8f:26:40: 4c:ca:9e:70:aa:05:49:1c:17:8b:4b:c4:2e:af:ed: 0d:24:4a:a6:4b:18:c6:60:6c:7f:1b:9a:28:85:8d: 42:6a:55:34:76:f0:ef:18:a5:43:5a:d9:ef:de:40: b3:c5:f1:95:e8:59:87:23:dc:e9:40:d5:08:5b:eb: 07:89:5b:d0:57:91:59:35:d4:94:34:8c:75:f6:6e: de:ca:4f:a1:03:d1:d6:7c:1e:53:7e:1a:eb:f2:e3: f1:b6:9c:92:86:c1:30:49:a7:e0:5f:c2:31:c5:80: 69:8f:12:32:8e:dc:1f:95:8a:2d:07:05:13:47:b1: 12:ae:49:7d:00:e3:eb:1e:d5:8c:bc:ac:e3:84:13: d0:69:f4:f9:c8:bc:7c:60:f8:99:86:7b:54:00:e3: 60:c8:9a:b5:d3:31:03:3f:ee:36:d5:88:9f:48:35: 1d:bd:82:e2:f1:3a:2e:1e:d2:fa:61:14:6d:7a:cb: 02:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:80:88:B4:7E:0C:AC:38:47:67:8E:25:FB:24:0B:E2:6B:19:54:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl X509v3 Authority Key Identifier: keyid:0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:78:5b:be:84:b2:e2:bb:f7:62:d4:86:29:57:b1:03:5d:d8: 69:cc:66:95:81:8a:9e:ae:dd:cf:b5:eb:65:eb:82:66:2d:28: 67:5a:cd:01:79:d7:af:6d:d8:4d:d2:de:f1:bf:b0:2f:5c:ba: f2:6e:42:1c:9a:88:f2:27:17:49:2a:d6:cb:ff:68:22:08:cc: 94:90:4f:e6:b0:46:b8:7f:dd:cd:cd:fd:db:d2:5f:46:dd:98: b8:0b:be:58:67:ad:00:47:2e:93:07:17:f4:1b:69:b0:d0:e0: 87:bb:1a:c2:c2:29:15:49:15:6b:90:c4:75:76:1b:b7:c8:59: e5:15:a0:57:80:ef:95:47:7b:ce:cb:c9:9f:a7:54:7c:f8:e2: 56:92:ae:01:a4:df:0e:30:18:44:1b:ad:92:37:0b:ac:cf:d0: 22:eb:61:40:bc:61:de:4c:b1:0a:ad:a7:19:c5:df:4d:86:dc: c2:3e:0a:5d:a4:30:99:45:d7:40:e6:b5:c0:60:c6:40:91:11: bc:73:c4:5d:84:01:3b:83:e6:9f:12:0c:3e:8b:64:01:eb:ab: 5b:00:8d:32:db:4a:2b:d8:3c:96:20:81:57:41:07:f5:20:70: cf:f0:16:a4:41:21:91:a1:46:44:db:0d:29:70:20:30:b2:9c: 1c:d6:e2:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdNjJ/BmFLqZQ0xBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmMjFiZmEtOWIwNC00YjUyLThhZjAtZTBiY2M5OTEy OGQzMB4XDTI1MDYzMDE1MDAwM1oXDTI1MDcwMjE1MDAwMFowLzEtMCsGA1UEAxMk ZTgzZDdiNTAtYjk3OC00MDI5LWExMzItMjg3NzM4NGY1YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeyz4hraMClPgNr4EDs/kK7LbLb9BW6bT+5R m6sda8fL7zJv5lLMrki4yf0IUer3j7MUEYe0HL9/7xA993IygXgGwn015hePJkBM yp5wqgVJHBeLS8Qur+0NJEqmSxjGYGx/G5oohY1CalU0dvDvGKVDWtnv3kCzxfGV 6FmHI9zpQNUIW+sHiVvQV5FZNdSUNIx19m7eyk+hA9HWfB5Tfhrr8uPxtpyShsEw SafgX8IxxYBpjxIyjtwflYotBwUTR7ESrkl9AOPrHtWMvKzjhBPQafT5yLx8YPiZ hntUAONgyJq10zEDP+421YifSDUdvYLi8TouHtL6YRRtessCLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGSAiLR+DKw4R2eOJfskC+JrGVTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hY2Yy MWJmYS05YjA0LTRiNTItOGFmMC1lMGJjYzk5MTI4ZDMvYWNmMjFiZmEtOWIwNC00 YjUyLThhZjAtZTBiY2M5OTEyOGQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWNmMjFiZmEtOWIwNC00YjUyLThh ZjAtZTBiY2M5OTEyOGQzL2FjZjIxYmZhLTliMDQtNGI1Mi04YWYwLWUwYmNjOTkx MjhkMy5jcmwwHwYDVR0jBBgwFoAUC5YR7naTygov1+mx2PUBpLDN7gUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hY2YyMWJmYS05YjA0LTRiNTItOGFmMC1lMGJj Yzk5MTI4ZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJeFu+hLLiu/di1IYpV7ED XdhpzGaVgYqert3Ptetl64JmLShnWs0BedevbdhN0t7xv7AvXLrybkIcmojyJxdJ KtbL/2giCMyUkE/msEa4f93Nzf3b0l9G3Zi4C75YZ60ARy6TBxf0G2mw0OCHuxrC wikVSRVrkMR1dhu3yFnlFaBXgO+VR3vOy8mfp1R8+OJWkq4BpN8OMBhEG62SNwus z9Ai62FAvGHeTLEKracZxd9NhtzCPgpdpDCZRddA5rXAYMZAkRG8c8RdhAE7g+af Egw+i2QB66tbAI0y20or2DyWIIFXQQf1IHDP8BakQSGRoUZE2w0pcCAwspwc1uIP -----END CERTIFICATE-----Generated at Tue Jul 1 01:57:32 2025 by rpki-client