$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft File: 943895ce-649a-4937-9d38-a57b20ee748f.mft (raw, json) Hash identifier: +0N+y1uhEXP4EMAJyH3YeUgQWEzmgo1LXTCVeUcMEgQ= Subject key identifier: 4A:FD:F3:32:84:13:7C:94:C6:C5:9E:18:9E:46:08:8E:99:85:6F:2E Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 Certificate issuer: /CN=943895ce-649a-4937-9d38-a57b20ee748f Certificate serial: 010D0C9F4328584A5FE31F7DDFC15CA349919B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft Manifest number: 010D0C9F4328584409FC745ADDA95964181E4154 Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: 1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (hash: ibhHzwI54uIPjdMYUvD219xKopl56dDQH6BuxFd8JWM=) 2: 943895ce-649a-4937-9d38-a57b20ee748f.crl (hash: dEu38hLXzH9/UK6PduFFj+SkWNj0XDY88hGufCkO72I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:1f:7d:df:c1:5c:a3:49:91:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=297829de-dd92-4cb6-af58-e6c815cf65c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7e:fe:a5:da:b2:a7:b9:3a:fb:76:4f:49:32: 0f:7a:a8:31:e5:10:b0:d9:8a:c2:d4:37:4b:a3:cb: a2:58:ab:5c:23:31:cd:c5:56:a9:d6:6c:9b:bf:00: 29:1a:fe:86:ba:fc:2b:73:48:53:4c:37:c6:04:b6: 5d:70:8b:02:2c:ea:2b:f6:c1:ec:6d:35:ec:13:5e: 28:18:38:c6:b4:7e:e5:87:0a:07:ff:89:0e:88:6d: 01:bc:d2:00:16:c6:2a:b2:84:5f:f0:82:dc:8c:65: 22:d1:60:14:19:a7:4d:d3:df:04:dc:90:a9:2a:0d: 58:66:7c:67:96:a4:39:5a:22:92:ed:a9:57:29:96: bd:ec:0c:de:cf:a1:e0:2e:bc:fd:a1:6c:d0:fb:77: 06:37:bb:d7:d5:df:b9:4b:cf:45:f9:cb:3e:de:22: 2f:d4:d7:8b:fa:08:b3:a6:d8:93:15:db:94:19:94: 53:14:38:9b:89:f8:11:e8:4c:3b:91:2a:ca:e3:4f: d0:88:35:1e:f9:ed:fe:7a:84:8a:ae:63:d3:a1:f3: 8b:4f:f2:fc:c1:7a:04:b7:92:0b:76:fb:e8:ee:40: d1:c3:5b:7f:ba:87:51:53:3f:2b:57:fd:0e:76:65: c6:9a:8a:73:82:18:d3:bf:5b:85:97:dc:b3:24:4f: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FD:F3:32:84:13:7C:94:C6:C5:9E:18:9E:46:08:8E:99:85:6F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl X509v3 Authority Key Identifier: keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1a:b2:78:82:e4:ba:14:ce:34:33:97:93:a8:05:58:79:ed: 5c:89:01:6d:a5:39:2f:ed:0e:1f:e7:53:e7:fd:a8:c7:fb:d3: a3:35:58:30:1a:31:da:ea:89:95:22:7a:96:67:19:5e:d1:14: 2c:6f:d5:b0:f4:c2:36:38:55:0d:05:48:8c:0a:94:07:c1:6c: c4:54:33:25:92:c9:39:58:ae:99:0d:57:bb:92:d9:ea:81:46: 83:54:57:73:4f:37:a2:5d:0c:5c:72:43:a6:42:4e:f0:e7:05: dc:6c:df:ec:d1:37:5d:18:7e:74:90:0a:a6:3e:85:93:22:32: b4:84:e6:5a:b9:7f:2f:5c:21:a1:cc:37:f2:5e:b0:4c:f2:81: b5:30:c7:d2:7c:32:02:ee:7a:df:4f:f0:48:72:3c:d9:78:5e: 77:98:cf:11:08:2e:35:80:08:00:ad:7c:e4:19:84:75:9f:bb: 6e:90:b3:4f:72:f2:c0:38:96:6a:3c:99:0c:1c:20:c4:05:bf: dc:48:70:0e:33:fd:c4:fb:7e:28:f5:fd:33:73:00:e3:73:f1: 13:fb:47:23:14:de:39:fb:ab:14:dc:96:1f:42:4b:24:b8:32: e0:b6:6b:53:ec:39:13:88:d2:1f:5d:bb:a1:45:e7:86:19:4f: eb:8c:6c:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4x9938Fco0mRm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQzODk1Y2UtNjQ5YS00OTM3LTlkMzgtYTU3YjIwZWU3 NDhmMB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk Mjk3ODI5ZGUtZGQ5Mi00Y2I2LWFmNTgtZTZjODE1Y2Y2NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH7+pdqyp7k6+3ZPSTIPeqgx5RCw2YrC1DdL o8uiWKtcIzHNxVap1mybvwApGv6Guvwrc0hTTDfGBLZdcIsCLOor9sHsbTXsE14o GDjGtH7lhwoH/4kOiG0BvNIAFsYqsoRf8ILcjGUi0WAUGadN098E3JCpKg1YZnxn lqQ5WiKS7alXKZa97Azez6HgLrz9oWzQ+3cGN7vX1d+5S89F+cs+3iIv1NeL+giz ptiTFduUGZRTFDibifgR6Ew7kSrK40/QiDUe+e3+eoSKrmPTofOLT/L8wXoEt5IL dvvo7kDRw1t/uodRUz8rV/0OdmXGmopzghjTv1uFl9yzJE+hqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEr98zKEE3yUxsWeGJ5GCI6ZhW8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4 OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdiMjBlZTc0OGYvOTQzODk1Y2UtNjQ5YS00 OTM3LTlkMzgtYTU3YjIwZWU3NDhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQzODk1Y2UtNjQ5YS00OTM3LTlk MzgtYTU3YjIwZWU3NDhmLzk0Mzg5NWNlLTY0OWEtNDkzNy05ZDM4LWE1N2IyMGVl NzQ4Zi5jcmwwHwYDVR0jBBgwFoAU6SQM4RQvHB0Xd/sQjKTKGzJNiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdi MjBlZTc0OGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkGrJ4guS6FM40M5eTqAVY ee1ciQFtpTkv7Q4f51Pn/ajH+9OjNVgwGjHa6omVInqWZxle0RQsb9Ww9MI2OFUN BUiMCpQHwWzEVDMlksk5WK6ZDVe7ktnqgUaDVFdzTzeiXQxcckOmQk7w5wXcbN/s 0TddGH50kAqmPoWTIjK0hOZauX8vXCGhzDfyXrBM8oG1MMfSfDIC7nrfT/BIcjzZ eF53mM8RCC41gAgArXzkGYR1n7tukLNPcvLAOJZqPJkMHCDEBb/cSHAOM/3E+34o 9f0zcwDjc/ET+0cjFN45+6sU3JYfQkskuDLgtmtT7DkTiNIfXbuhReeGGU/rjGyX -----END CERTIFICATE-----Generated at Tue Jul 1 20:02:07 2025 by rpki-client