$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft File: 1c3c552c-5e23-4989-8af0-9450094442e8.mft (raw, json) Hash identifier: fHnKknqYpMlpyr8yF7GxvXgtGmAqf+uyM8PD8z9f4N4= Subject key identifier: 31:99:45:AC:20:D9:6A:27:11:5B:6F:51:A1:4D:71:6F:82:C1:1B:6D Authority key identifier: 1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D Certificate issuer: /CN=1c3c552c-5e23-4989-8af0-9450094442e8 Certificate serial: 010D0C9F4328584A601EB0A8E56153F7B6A50B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft Manifest number: 010D0C9F4328584196101E433C4E6A25A741F4FD Signing time: Tue 01 Jul 2025 16:00:08 +0000 Manifest this update: Tue 01 Jul 2025 16:00:08 +0000 Manifest next update: Fri 04 Jul 2025 16:00:00 +0000 Files and hashes: 1: 04ae4b72-55bf-3cbc-af3c-1501abc5faa4.roa (hash: g9zwlOv+frWpFkdF4KtOIlCEQPpbYLtDxizpEhg7dO8=) 2: 1c3c552c-5e23-4989-8af0-9450094442e8.crl (hash: gIZgdN6aJ50JJgXbTb/4e0ewSw0tWNGyNbwlwXFXD4c=) 3: 729361f3-bbb2-328f-912c-61edcbdc24af.roa (hash: RM+5Z12pDOMF0U0qBg+oYnf5vJ8oX/iEYTPKVuwLOAc=) 4: e118b462-93ab-3146-891f-cfd3ad717961.roa (hash: sWxBOYdcSbnu/ItSVU9iJEkgwv+wVYoNT9yhryCj9Ck=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:1e:b0:a8:e5:61:53:f7:b6:a5:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c3c552c-5e23-4989-8af0-9450094442e8 Validity Not Before: Jul 1 16:00:08 2025 GMT Not After : Jul 4 16:00:00 2025 GMT Subject: CN=7f7844d9-fc11-46a7-b0fa-93623d5f66de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:19:d8:c7:f7:5b:ee:76:0a:01:90:1a:3e: f5:90:88:58:a5:8a:98:3e:a0:86:61:ce:97:a4:3e: c1:86:ed:89:96:b9:af:9d:5f:46:13:5f:c8:5e:51: 04:d6:5a:4e:bb:8e:1a:38:69:fe:9e:81:7c:3d:06: ea:a3:8e:85:60:fe:cc:f7:58:aa:a9:1b:c6:35:50: a9:51:43:22:a7:bc:5a:40:2d:9b:4c:25:dc:52:b6: e4:92:4c:db:61:a5:38:6d:34:21:2d:3d:ff:36:51: 91:d9:dc:5d:ac:87:4e:92:76:75:59:7c:e6:6d:bc: 05:ad:4e:f6:14:11:4c:64:97:a4:28:bd:66:7b:a7: 62:1e:07:cf:a9:dd:f6:00:a9:b1:cc:6e:58:b7:cc: 95:f0:e9:4f:b3:13:bf:09:af:e6:56:0c:61:a0:f3: f2:03:be:93:7d:68:d7:a8:a0:57:f9:44:83:36:97: fd:56:85:8f:90:b8:94:fe:d1:f7:38:ba:47:cb:a7: fe:76:81:20:dd:8f:c5:e1:52:2e:f4:6f:3c:31:2f: 6a:d6:b2:5a:5c:ed:b5:af:27:80:dd:93:a2:86:2b: c6:84:fa:97:4d:70:ad:51:84:ee:da:5f:0a:b6:ed: 90:c4:c8:14:ef:2f:43:b6:7e:8e:22:9c:db:0d:e4: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:99:45:AC:20:D9:6A:27:11:5B:6F:51:A1:4D:71:6F:82:C1:1B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8/1c3c552c-5e23-4989-8af0-9450094442e8.crl X509v3 Authority Key Identifier: keyid:1A:93:B0:E0:60:7D:5D:45:A7:A5:FE:02:0C:FB:19:86:20:FE:CC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1c3c552c-5e23-4989-8af0-9450094442e8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b5:08:0e:fc:ab:da:06:a7:c0:e2:72:bb:72:c1:ec:70:7f: 19:ef:ca:44:d1:08:a9:b5:00:83:04:33:80:74:47:7f:5b:2f: 00:a3:03:63:36:51:cd:07:ce:d0:08:15:8d:74:a6:16:10:5b: 66:d0:63:92:53:b0:f3:1a:e0:42:3c:37:24:16:a2:08:af:5f: aa:7d:ab:0b:1c:89:3f:86:81:54:7d:11:ab:54:c8:4e:01:97: 56:99:18:7a:4c:d1:34:31:d1:a4:7d:a4:0f:c1:97:6d:ac:9b: a5:b5:2c:8c:ab:c9:0b:aa:40:de:89:cb:dd:21:24:68:76:dc: 5b:9b:e4:d4:c4:7b:4d:1b:51:a7:4b:a1:93:30:c6:7a:d4:be: 17:79:0d:f8:1f:a9:36:d2:7c:0a:e2:4a:46:1d:88:ef:dd:cf: e9:ed:f1:a1:c3:69:17:c8:e3:55:2c:89:3c:58:12:87:03:08: 80:ea:65:36:66:69:f6:ab:6b:cd:bd:7c:bf:ff:b4:fe:7f:50: fa:fb:0f:e3:bd:3b:b3:92:54:a7:7f:90:ff:05:54:60:0f:19: e8:0c:ac:fb:0e:5f:dd:81:80:27:11:c8:60:f1:3a:c4:d3:12: b1:02:30:2b:fd:58:0b:0d:01:ea:a2:cd:dd:bb:43:9a:32:3a: cd:23:0d:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgHrCo5WFT97alCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMzYzU1MmMtNWUyMy00OTg5LThhZjAtOTQ1MDA5NDQ0 MmU4MB4XDTI1MDcwMTE2MDAwOFoXDTI1MDcwNDE2MDAwMFowLzEtMCsGA1UEAxMk N2Y3ODQ0ZDktZmMxMS00NmE3LWIwZmEtOTM2MjNkNWY2NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv8Z2Mf3W+52CgGQGj71kIhYpYqYPqCGYc6X pD7Bhu2JlrmvnV9GE1/IXlEE1lpOu44aOGn+noF8PQbqo46FYP7M91iqqRvGNVCp UUMip7xaQC2bTCXcUrbkkkzbYaU4bTQhLT3/NlGR2dxdrIdOknZ1WXzmbbwFrU72 FBFMZJekKL1me6diHgfPqd32AKmxzG5Yt8yV8OlPsxO/Ca/mVgxhoPPyA76TfWjX qKBX+USDNpf9VoWPkLiU/tH3OLpHy6f+doEg3Y/F4VIu9G88MS9q1rJaXO21ryeA 3ZOihivGhPqXTXCtUYTu2l8Ktu2QxMgU7y9Dtn6OIpzbDeQ2QQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDGZRawg2WonEVtvUaFNcW+CwRttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNj NTUyYy01ZTIzLTQ5ODktOGFmMC05NDUwMDk0NDQyZTgvMWMzYzU1MmMtNWUyMy00 OTg5LThhZjAtOTQ1MDA5NDQ0MmU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWMzYzU1MmMtNWUyMy00OTg5LThh ZjAtOTQ1MDA5NDQ0MmU4LzFjM2M1NTJjLTVlMjMtNDk4OS04YWYwLTk0NTAwOTQ0 NDJlOC5jcmwwHwYDVR0jBBgwFoAUGpOw4GB9XUWnpf4CDPsZhiD+zJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYzNjNTUyYy01ZTIzLTQ5ODktOGFmMC05NDUw MDk0NDQyZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTtQgO/KvaBqfA4nK7csHs cH8Z78pE0QiptQCDBDOAdEd/Wy8AowNjNlHNB87QCBWNdKYWEFtm0GOSU7DzGuBC PDckFqIIr1+qfasLHIk/hoFUfRGrVMhOAZdWmRh6TNE0MdGkfaQPwZdtrJultSyM q8kLqkDeicvdISRodtxbm+TUxHtNG1GnS6GTMMZ61L4XeQ34H6k20nwK4kpGHYjv 3c/p7fGhw2kXyONVLIk8WBKHAwiA6mU2Zmn2q2vNvXy//7T+f1D6+w/jvTuzklSn f5D/BVRgDxnoDKz7Dl/dgYAnEchg8TrE0xKxAjAr/VgLDQHqos3du0OaMjrNIw2B -----END CERTIFICATE-----Generated at Wed Jul 2 05:14:53 2025 by rpki-client