$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft File: d3de683a-04b1-4e1c-94c5-cb45e983323d.mft (raw, json) Hash identifier: 3Q4VmNYYs4izBEuFSqNEWN+Z46D9/IdoXD5JkXT3BY8= Subject key identifier: C5:85:DF:27:35:DF:1E:D2:1A:5B:01:B3:1F:87:08:28:FA:B0:C6:98 Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Certificate serial: 010D0C9F4328584A58CA985D37D8A86085348DD8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft Manifest number: 010D0C9F43285845B92379D29099F45C0092743B Signing time: Sun 29 Jun 2025 01:00:03 +0000 Manifest this update: Sun 29 Jun 2025 01:00:03 +0000 Manifest next update: Wed 02 Jul 2025 01:00:00 +0000 Files and hashes: 1: 8edc1a27-c324-3d26-be3c-15679ecee128.roa (hash: T/x9nYWIagASCQVuPYaTyybyOiJen1T22ggwA86u8Yc=) 2: d3de683a-04b1-4e1c-94c5-cb45e983323d.crl (hash: FAkBtq4TrKXQIR16EyP8U2eo3QE7hKUjtier/ALWHS8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:98:5d:37:d8:a8:60:85:34:8d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Validity Not Before: Jun 29 01:00:03 2025 GMT Not After : Jul 2 01:00:00 2025 GMT Subject: CN=85a82949-7b02-4815-ba3c-963375e75f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2c:fa:23:aa:bd:31:1f:5f:44:55:cf:f2:1d: be:f7:e1:83:be:d5:ca:e0:34:30:e0:46:c4:03:89: 61:4e:a0:ca:2a:99:51:6e:23:8a:67:c2:7d:9f:6c: 34:b2:26:a2:b9:25:1d:4c:3a:f4:04:08:8b:f4:c8: 7a:9b:70:89:a4:04:72:c0:28:95:2c:e7:77:b0:33: b9:27:ee:3c:27:aa:29:1b:2c:3c:a3:a1:46:bc:f5: 9b:ee:69:b5:22:72:57:47:13:73:e4:c3:e5:19:47: 1b:61:70:1d:9e:ba:e2:d3:5f:b3:e1:da:ff:f7:41: c7:d8:bb:8d:f8:41:74:d1:99:5f:f8:57:f0:98:46: 18:5a:b2:64:1b:35:05:b2:f1:45:57:2f:80:a6:d8: 97:8d:9c:0e:6e:39:39:d5:13:0f:fa:d4:06:32:06: 1f:c9:16:9e:d6:58:36:10:81:c6:f6:7c:09:35:26: 56:01:ca:0d:72:13:d1:89:42:ec:d4:db:2d:20:66: 05:a6:ec:29:0f:5b:7f:b9:3d:dd:97:24:9e:3a:bc: 78:cc:bc:91:25:b4:ed:27:22:95:96:55:f3:53:df: b7:8c:6c:b8:25:58:66:69:c8:eb:53:c8:8a:8c:6e: bd:51:d7:a1:f0:c0:fd:60:83:f5:08:7c:8c:59:25: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:DF:27:35:DF:1E:D2:1A:5B:01:B3:1F:87:08:28:FA:B0:C6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl X509v3 Authority Key Identifier: keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4a:b0:d9:15:ec:64:5d:11:a3:0a:d0:a9:ee:af:d1:88:ee: 7e:f3:43:45:1a:fb:4f:c5:88:c4:b6:ec:96:df:50:b4:32:f1: 0a:40:14:60:d6:cb:05:e9:b8:b0:49:9c:fb:aa:39:eb:1f:6e: 26:26:4c:96:88:16:b5:0e:08:c1:dc:aa:df:6b:4d:e6:75:11: 8c:e4:af:ac:6a:39:a7:fb:a3:a2:c3:bc:ee:f9:91:47:10:02: 70:9f:d7:ac:da:a7:26:4d:65:bf:51:0c:36:6f:df:04:41:85: 09:26:08:c8:4e:a0:48:86:87:14:6d:b2:78:e5:fb:2f:50:49: bd:2f:3e:0f:76:ec:50:81:a5:0d:da:d3:21:2f:06:3e:7b:3a: c2:eb:1e:cb:58:47:cf:a2:64:af:c1:13:d4:2b:79:16:2c:8c: e2:1c:d2:46:ae:b6:ff:2d:0a:de:d0:c2:b7:d4:9d:c9:b8:0d: 63:81:92:21:e8:aa:f9:78:80:2a:e1:a1:d1:c5:ae:3f:fa:28: 76:06:97:61:7f:7a:44:9b:3b:50:43:32:1b:94:9f:31:06:aa: e4:e7:54:0d:c5:e6:b5:c5:79:b6:19:f8:2e:26:df:39:57:09: 4b:b3:fb:5b:b5:f9:6f:a8:b6:17:c0:79:6c:7b:db:2f:c6:15: a6:72:76:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYyphdN9ioYIU0jdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMz MjNkMB4XDTI1MDYyOTAxMDAwM1oXDTI1MDcwMjAxMDAwMFowLzEtMCsGA1UEAxMk ODVhODI5NDktN2IwMi00ODE1LWJhM2MtOTYzMzc1ZTc1ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyz6I6q9MR9fRFXP8h2+9+GDvtXK4DQw4EbE A4lhTqDKKplRbiOKZ8J9n2w0siaiuSUdTDr0BAiL9Mh6m3CJpARywCiVLOd3sDO5 J+48J6opGyw8o6FGvPWb7mm1InJXRxNz5MPlGUcbYXAdnrri01+z4dr/90HH2LuN +EF00Zlf+FfwmEYYWrJkGzUFsvFFVy+AptiXjZwObjk51RMP+tQGMgYfyRae1lg2 EIHG9nwJNSZWAcoNchPRiULs1NstIGYFpuwpD1t/uT3dlySeOrx4zLyRJbTtJyKV llXzU9+3jGy4JVhmacjrU8iKjG69Udeh8MD9YIP1CHyMWSV3NQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMWF3yc13x7SGlsBsx+HCCj6sMaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kM2Rl NjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvZDNkZTY4M2EtMDRiMS00 ZTFjLTk0YzUtY2I0NWU5ODMzMjNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDNkZTY4M2EtMDRiMS00ZTFjLTk0 YzUtY2I0NWU5ODMzMjNkL2QzZGU2ODNhLTA0YjEtNGUxYy05NGM1LWNiNDVlOTgz MzIzZC5jcmwwHwYDVR0jBBgwFoAUIf0rCB2hYHaj1ZCVi5hdPuCb8aQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1 ZTk4MzMyM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnSrDZFexkXRGjCtCp7q/R iO5+80NFGvtPxYjEtuyW31C0MvEKQBRg1ssF6biwSZz7qjnrH24mJkyWiBa1DgjB 3Krfa03mdRGM5K+sajmn+6Oiw7zu+ZFHEAJwn9es2qcmTWW/UQw2b98EQYUJJgjI TqBIhocUbbJ45fsvUEm9Lz4PduxQgaUN2tMhLwY+ezrC6x7LWEfPomSvwRPUK3kW LIziHNJGrrb/LQre0MK31J3JuA1jgZIh6Kr5eIAq4aHRxa4/+ih2Bpdhf3pEmztQ QzIblJ8xBqrk51QNxea1xXm2GfguJt85VwlLs/tbtflvqLYXwHlse9svxhWmcna0 -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:15 2025 by rpki-client