$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft File: ac870f3e-b014-4387-bb59-63f4192b5665.mft (raw, json) Hash identifier: AsCAwtGImnOfBg63zOjM8viFJMEJ2sn10HRjTLn31qg= Subject key identifier: F2:C9:CB:61:EB:40:45:40:02:C7:4A:A4:21:17:AF:C2:DB:E5:FF:0B Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 Certificate issuer: /CN=ac870f3e-b014-4387-bb59-63f4192b5665 Certificate serial: 010D0C9F4328584A612AA720ED0D5770B2A08500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft Manifest number: 010D0C9F43285843C5670C91ACAFC11981795A6D Signing time: Wed 02 Jul 2025 01:00:03 +0000 Manifest this update: Wed 02 Jul 2025 01:00:03 +0000 Manifest next update: Sat 05 Jul 2025 01:00:00 +0000 Files and hashes: 1: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (hash: 4WvM/1+vGNFkfxf/dc0/R0bXpBbRS+FD+R0L5SfIaTk=) 2: ac870f3e-b014-4387-bb59-63f4192b5665.crl (hash: LZBUy0twWu+Nu73UwHobRrniqavyhN0K7dgy+cSmmn8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2a:a7:20:ed:0d:57:70:b2:a0:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665 Validity Not Before: Jul 2 01:00:03 2025 GMT Not After : Jul 5 01:00:00 2025 GMT Subject: CN=227c25d3-65a2-4a86-9cba-ef9431d43219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:aa:25:c0:8f:c7:35:8e:f9:63:27:f5:7b: 53:9b:a1:d5:05:78:b6:66:8a:2f:79:51:99:55:53: 47:c4:8c:04:c0:77:5e:63:ed:14:ba:05:cd:88:79: 61:93:a0:c1:a9:2b:d1:85:ae:04:b6:0f:b8:ac:61: e7:85:a5:19:05:e4:65:e9:0d:43:1d:b3:6d:d4:7f: 34:1c:81:90:f9:c7:34:17:84:97:67:68:8b:08:d5: 9e:0c:53:e3:a4:c4:16:b3:ea:e1:a7:ae:31:42:63: 40:eb:29:25:e7:0a:2f:bc:23:77:0d:f3:03:69:b5: d2:37:12:d8:8d:88:bf:06:1a:7b:58:d0:66:43:b2: 9c:e6:d0:a9:6f:63:31:28:1e:7a:65:e0:cc:75:5f: 4a:eb:6f:3c:4c:46:30:17:e1:1e:ac:63:93:bb:52: 2c:ca:64:12:1f:9e:71:ef:74:91:b8:56:f5:2d:1c: ba:af:39:60:5c:9e:ab:8a:cd:ee:46:88:bf:d1:60: 7f:81:a4:75:66:fd:34:5b:fa:31:9a:d9:7d:4c:8e: 0d:1f:2a:f4:42:63:2e:a9:e3:2b:66:ea:04:19:12: 34:cf:3c:40:0e:93:75:97:bd:4f:12:10:37:af:f0: e3:bc:ad:45:47:ec:39:5d:a2:42:35:80:d2:61:31: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C9:CB:61:EB:40:45:40:02:C7:4A:A4:21:17:AF:C2:DB:E5:FF:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl X509v3 Authority Key Identifier: keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b4:06:a2:45:b0:8d:1b:bb:61:4a:4d:63:8f:4e:65:27:52: 3f:63:13:23:4b:cb:81:16:a2:4e:4c:d7:9c:0a:ff:60:80:6b: 09:2f:d3:64:7b:00:38:41:49:5f:a5:ee:ac:bb:cc:a9:4f:3c: 36:52:6a:58:6a:14:2d:a7:82:82:fe:00:a8:3c:43:23:9a:9a: 58:2e:e3:06:9f:d5:79:48:f7:81:89:55:e5:29:3c:bf:ca:eb: 2a:a4:88:5c:e8:a5:25:a2:ce:70:64:6e:59:09:7a:af:49:25: ed:b5:fc:84:98:15:ba:f9:56:2d:68:4a:fc:19:47:d2:a9:6a: c7:b8:86:36:da:bb:f6:07:a5:82:33:b4:32:8b:f2:56:00:63: e7:2c:79:cf:1e:a9:1d:e0:62:d8:d2:73:2d:66:4e:37:7a:63: 16:40:42:ca:84:82:bf:93:93:9b:4e:f2:74:37:bb:62:4a:5f: 96:56:36:a3:56:9e:fc:f6:ca:6b:98:e8:d4:f8:6e:ab:39:2a: fc:0c:dd:24:2f:4a:64:86:33:33:94:26:e1:b2:df:f5:37:47: b2:18:1e:01:61:aa:cb:da:fb:9a:e5:d3:a6:a1:6f:73:9b:cb: c4:a7:18:9f:58:a0:71:fc:6f:cd:09:06:af:84:09:d7:fe:1a: a2:8c:03:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEphKqcg7Q1XcLKghQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM4NzBmM2UtYjAxNC00Mzg3LWJiNTktNjNmNDE5MmI1 NjY1MB4XDTI1MDcwMjAxMDAwM1oXDTI1MDcwNTAxMDAwMFowLzEtMCsGA1UEAxMk MjI3YzI1ZDMtNjVhMi00YTg2LTljYmEtZWY5NDMxZDQzMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6qJcCPxzWO+WMn9XtTm6HVBXi2ZooveVGZ VVNHxIwEwHdeY+0UugXNiHlhk6DBqSvRha4Etg+4rGHnhaUZBeRl6Q1DHbNt1H80 HIGQ+cc0F4SXZ2iLCNWeDFPjpMQWs+rhp64xQmNA6ykl5wovvCN3DfMDabXSNxLY jYi/Bhp7WNBmQ7Kc5tCpb2MxKB56ZeDMdV9K6288TEYwF+EerGOTu1IsymQSH55x 73SRuFb1LRy6rzlgXJ6ris3uRoi/0WB/gaR1Zv00W/oxmtl9TI4NHyr0QmMuqeMr ZuoEGRI0zzxADpN1l71PEhA3r/DjvK1FR+w5XaJCNYDSYTHTuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPLJy2HrQEVAAsdKpCEXr8Lb5f8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3 MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0MTkyYjU2NjUvYWM4NzBmM2UtYjAxNC00 Mzg3LWJiNTktNjNmNDE5MmI1NjY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4NzBmM2UtYjAxNC00Mzg3LWJi NTktNjNmNDE5MmI1NjY1L2FjODcwZjNlLWIwMTQtNDM4Ny1iYjU5LTYzZjQxOTJi NTY2NS5jcmwwHwYDVR0jBBgwFoAUr+waQxcWVf3AqPhLqFxA+OUeicYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0 MTkyYjU2NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBstAaiRbCNG7thSk1jj05l J1I/YxMjS8uBFqJOTNecCv9ggGsJL9NkewA4QUlfpe6su8ypTzw2UmpYahQtp4KC /gCoPEMjmppYLuMGn9V5SPeBiVXlKTy/yusqpIhc6KUlos5wZG5ZCXqvSSXttfyE mBW6+VYtaEr8GUfSqWrHuIY22rv2B6WCM7Qyi/JWAGPnLHnPHqkd4GLY0nMtZk43 emMWQELKhIK/k5ObTvJ0N7tiSl+WVjajVp789sprmOjU+G6rOSr8DN0kL0pkhjMz lCbhst/1N0eyGB4BYarL2vua5dOmoW9zm8vEpxifWKBx/G/NCQavhAnX/hqijAOh -----END CERTIFICATE-----Generated at Wed Jul 2 12:23:01 2025 by rpki-client