$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft File: fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft (raw, json) Hash identifier: vfqnF+bOyj3p+Vc5yhx8qkz7BGmdOHsb0cdiI1M2IoI= Subject key identifier: 1B:8F:C8:03:72:12:E9:92:AE:7C:94:D0:3F:ED:14:85:C3:49:0A:0E Authority key identifier: D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85 Certificate issuer: /CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67 Certificate serial: 010D0C9F4328584A5AC4DFA056DE0944873BA080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft Manifest number: 010D0C9F43285843FC792FF696D3C4E6A23E9537 Signing time: Sun 29 Jun 2025 18:00:08 +0000 Manifest this update: Sun 29 Jun 2025 18:00:08 +0000 Manifest next update: Wed 02 Jul 2025 18:00:00 +0000 Files and hashes: 1: b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa (hash: tsUF/ZT1CRQTzReoSqdIP3iTEzx39ddCLA1kPGwx7pk=) 2: fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl (hash: 1HQNOz3XS7S/VXdVILxDhaFQTDVmPpk/ZNEOnwA2oXM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:c4:df:a0:56:de:09:44:87:3b:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67 Validity Not Before: Jun 29 18:00:08 2025 GMT Not After : Jul 2 18:00:00 2025 GMT Subject: CN=42610d48-31af-466b-9985-bbcdd8949f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:1d:2d:1a:69:36:b0:1c:21:c3:e8:92:9d: 85:b0:fb:13:a6:b8:c1:47:34:48:f0:ee:c3:bc:90: 1d:eb:50:83:12:07:ec:b2:eb:06:0e:3f:ec:1d:3a: 0a:47:84:d3:94:19:6d:b7:99:be:52:ee:33:dc:8a: d0:e8:8c:47:e3:02:5a:62:e4:81:9b:ac:df:9c:10: 74:60:c6:aa:8b:f5:c4:dc:a6:8f:af:b6:dd:4a:b8: 36:2d:8a:fa:1a:71:c5:90:e5:ed:ed:b2:53:48:46: 20:17:d5:33:f0:77:1b:19:85:00:83:03:49:4d:6a: 1d:f2:7b:60:36:95:53:fd:c4:f4:7f:35:0d:67:c0: 94:44:65:f1:a2:60:48:fb:13:17:a0:13:8a:f0:4b: dc:cf:5c:c1:50:db:09:dd:6b:19:62:53:fd:a5:23: 63:f7:ce:e6:ae:81:46:e7:97:b7:51:57:e3:30:bc: 72:ae:ba:ce:c3:c3:33:61:be:27:12:dc:ab:b5:55: 09:7a:87:db:d2:cd:1e:df:31:6c:ae:1a:39:96:70: 3a:65:18:75:0d:30:8b:8a:b9:ad:5f:33:17:06:8c: b9:de:de:94:9e:0c:4d:28:de:70:56:66:8c:d4:fc: 28:58:d7:b2:e8:1f:72:ff:b1:72:4a:8d:b6:4a:07: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8F:C8:03:72:12:E9:92:AE:7C:94:D0:3F:ED:14:85:C3:49:0A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl X509v3 Authority Key Identifier: keyid:D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:43:2d:ed:de:cb:a1:55:9d:2d:2e:ae:58:aa:f8:24:05:c4: 1a:1f:f9:4c:d4:c6:fa:4c:41:29:57:ba:25:1b:bc:20:3e:ec: 8b:2e:34:81:a2:81:53:73:56:48:35:5a:35:83:cc:73:20:e9: 41:a2:97:f3:2f:a3:aa:2d:13:5d:7b:d8:32:34:fd:a7:7c:f7: 6b:8f:b4:c0:19:9a:ba:3d:75:76:7b:b5:85:43:d9:44:bb:d9: a6:5b:9b:f7:ba:c3:91:e2:4a:77:97:93:79:5d:dc:8a:2c:6f: 42:60:df:4a:21:79:38:64:5d:d8:d6:db:12:48:ca:97:3a:fe: b9:d8:0e:d4:67:dd:98:a5:b3:5a:19:2b:74:5b:61:4b:8f:56: 6f:ae:2a:aa:53:da:36:b7:0a:bb:74:d2:74:9a:4f:a6:90:ef: 2d:81:f5:0e:b1:b0:6b:5d:d2:51:2f:00:e6:50:ef:93:97:7e: aa:b4:64:a9:18:61:b5:d8:5a:2b:bc:ec:f0:89:bc:1d:1a:ec: b7:dc:a5:39:00:d0:19:d1:f1:a7:91:99:c9:9e:1c:b9:1a:57: be:c1:d0:63:9e:87:60:5c:78:08:61:67:28:0a:2d:08:83:ef: 70:25:2a:fe:81:e6:00:f8:91:d0:64:fa:9a:c5:e9:3b:0f:cb: aa:0f:1d:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaxN+gVt4JRIc7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzZTQzZjEtNzAzNi00NmUxLTk0NmEtYzllN2E2N2Vm YTY3MB4XDTI1MDYyOTE4MDAwOFoXDTI1MDcwMjE4MDAwMFowLzEtMCsGA1UEAxMk NDI2MTBkNDgtMzFhZi00NjZiLTk5ODUtYmJjZGQ4OTQ5ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjgdLRppNrAcIcPokp2FsPsTprjBRzRI8O7D vJAd61CDEgfssusGDj/sHToKR4TTlBltt5m+Uu4z3IrQ6IxH4wJaYuSBm6zfnBB0 YMaqi/XE3KaPr7bdSrg2LYr6GnHFkOXt7bJTSEYgF9Uz8HcbGYUAgwNJTWod8ntg NpVT/cT0fzUNZ8CURGXxomBI+xMXoBOK8Evcz1zBUNsJ3WsZYlP9pSNj987mroFG 55e3UVfjMLxyrrrOw8MzYb4nEtyrtVUJeofb0s0e3zFsrho5lnA6ZRh1DTCLirmt XzMXBoy53t6UngxNKN5wVmaM1PwoWNey6B9y/7FySo22SgebRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBuPyANyEumSrnyU0D/tFIXDSQoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYzNl NDNmMS03MDM2LTQ2ZTEtOTQ2YS1jOWU3YTY3ZWZhNjcvZmMzZTQzZjEtNzAzNi00 NmUxLTk0NmEtYzllN2E2N2VmYTY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmMzZTQzZjEtNzAzNi00NmUxLTk0 NmEtYzllN2E2N2VmYTY3L2ZjM2U0M2YxLTcwMzYtNDZlMS05NDZhLWM5ZTdhNjdl ZmE2Ny5jcmwwHwYDVR0jBBgwFoAU0GJTSPfb5BBkM77DKwKTwWxTtIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mYzNlNDNmMS03MDM2LTQ2ZTEtOTQ2YS1jOWU3 YTY3ZWZhNjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANQy3t3suhVZ0tLq5Yqvgk BcQaH/lM1Mb6TEEpV7olG7wgPuyLLjSBooFTc1ZINVo1g8xzIOlBopfzL6OqLRNd e9gyNP2nfPdrj7TAGZq6PXV2e7WFQ9lEu9mmW5v3usOR4kp3l5N5XdyKLG9CYN9K IXk4ZF3Y1tsSSMqXOv652A7UZ92YpbNaGSt0W2FLj1ZvriqqU9o2twq7dNJ0mk+m kO8tgfUOsbBrXdJRLwDmUO+Tl36qtGSpGGG12ForvOzwibwdGuy33KU5ANAZ0fGn kZnJnhy5Gle+wdBjnodgXHgIYWcoCi0Ig+9wJSr+geYA+JHQZPqaxek7D8uqDx0L -----END CERTIFICATE-----Generated at Mon Jun 30 11:16:44 2025 by rpki-client