$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft File: 0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft (raw, json) Hash identifier: 0ysXpPY+i9MfG/VsE692HZeZAf84+cGYVaXJOFRgCmE= Subject key identifier: 0B:D6:51:AB:2A:4F:B3:D8:5E:E2:6A:1D:5E:77:7D:E8:73:EB:73:AD Authority key identifier: B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E Certificate issuer: /CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b Certificate serial: 010D0C9F4328584A5A8950EDF09EA148CA0C0D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft Manifest number: 010D0C9F43285841E409A4F0955ACCA1121EF81B Signing time: Sun 29 Jun 2025 16:00:08 +0000 Manifest this update: Sun 29 Jun 2025 16:00:08 +0000 Manifest next update: Wed 02 Jul 2025 16:00:00 +0000 Files and hashes: 1: 0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl (hash: +uF/f0wOtW7AwPejeXRsXs5XaMBtzZIBa1njBYkoNXU=) 2: 6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa (hash: PYS44IPvV/f9lzp8mlzE4lpwspsh1S9DVn5KIy4AS7E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:89:50:ed:f0:9e:a1:48:ca:0c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b Validity Not Before: Jun 29 16:00:08 2025 GMT Not After : Jul 2 16:00:00 2025 GMT Subject: CN=24306c50-841c-44d0-b67c-828ccfbd9c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:48:c5:c1:05:14:11:83:90:9b:db:88:c9: 2e:73:9e:17:03:b6:bb:99:3c:5e:0a:38:ee:78:5b: 58:c9:80:b0:05:82:5b:0a:81:8c:ab:58:4e:4e:26: 91:f4:4c:25:a4:2c:db:d5:f8:bc:bb:f9:f8:9f:b9: e2:69:e9:ab:48:1a:00:0a:32:31:d4:d5:ea:05:06: 20:6d:5a:3c:63:0c:4a:aa:bd:90:c5:f8:30:b6:55: 5a:79:f9:bd:b7:49:45:b8:d7:92:b0:5d:7c:ee:83: 55:c2:d8:98:30:90:e6:3b:18:5e:c3:ac:5a:b1:4c: d5:02:eb:db:58:1e:33:fa:fd:5c:d2:99:26:d8:82: da:91:33:78:31:60:21:e8:82:34:96:8e:0f:81:f0: 23:c2:57:04:41:bf:4d:15:41:ef:06:c1:5a:2c:6e: b2:a4:53:b3:85:49:da:a0:a5:a7:82:e2:5d:b1:0b: fa:c2:7b:26:17:fe:99:7a:25:7d:1b:78:13:6f:bb: ce:a5:c4:8e:c8:ab:c1:a2:b6:38:c3:03:4d:9e:87: ff:f5:a5:36:3a:78:ec:09:ce:ec:be:53:c7:0b:7d: 50:b6:86:73:c2:e6:30:4a:dd:30:09:fc:f4:b2:8b: f6:e8:5d:dc:28:3c:ef:da:9b:02:4a:1e:b7:cc:65: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D6:51:AB:2A:4F:B3:D8:5E:E2:6A:1D:5E:77:7D:E8:73:EB:73:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl X509v3 Authority Key Identifier: keyid:B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:de:f1:2b:67:c4:19:8a:20:58:27:d4:f3:0e:8a:5f:b5:1e: 0c:95:45:23:46:f2:e4:30:01:36:a4:19:d8:cc:a7:c2:36:1a: 1e:b4:6b:5f:b1:a7:2b:54:dd:02:06:c0:6e:d7:8c:15:56:b6: 57:37:fe:27:32:08:7a:29:39:51:0b:90:ee:f4:30:6a:2d:5c: 85:33:55:16:aa:51:3a:25:87:c6:f7:b5:c4:9a:73:0b:73:80: 00:30:11:31:dd:53:11:70:a3:05:4c:cd:42:40:73:27:0d:1b: 69:73:86:a7:f2:df:5f:6c:d1:75:db:ee:b1:e4:01:71:91:bc: 1e:de:e2:ac:33:34:26:8e:cd:42:62:07:09:da:b0:1c:68:c2: 0a:dc:0d:25:3e:f9:98:d3:67:d1:c3:16:36:c5:41:09:25:cb: 9c:2e:1f:82:71:30:44:38:e4:4f:be:a5:9b:38:08:c4:cc:93: af:c7:ea:c6:b6:68:29:73:6c:a6:33:6b:e3:69:b7:f0:46:02: af:d9:74:b6:74:45:7e:df:27:ad:d8:9d:31:b1:64:b4:0b:5f: c6:b4:0c:49:bb:7c:31:b9:0c:50:36:6a:66:b5:10:42:d5:62: e6:11:cc:75:8c:83:f1:14:0c:c5:c4:46:88:38:fe:72:b0:9f: 64:fe:fc:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaiVDt8J6hSMoMDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0MDNmNmItMGY2MS00ZGI0LWE4ZmYtMGI0YWRjNmEz MTNiMB4XDTI1MDYyOTE2MDAwOFoXDTI1MDcwMjE2MDAwMFowLzEtMCsGA1UEAxMk MjQzMDZjNTAtODQxYy00NGQwLWI2N2MtODI4Y2NmYmQ5YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnJIxcEFFBGDkJvbiMkuc54XA7a7mTxeCjju eFtYyYCwBYJbCoGMq1hOTiaR9EwlpCzb1fi8u/n4n7niaemrSBoACjIx1NXqBQYg bVo8YwxKqr2QxfgwtlVaefm9t0lFuNeSsF187oNVwtiYMJDmOxhew6xasUzVAuvb WB4z+v1c0pkm2ILakTN4MWAh6II0lo4PgfAjwlcEQb9NFUHvBsFaLG6ypFOzhUna oKWnguJdsQv6wnsmF/6ZeiV9G3gTb7vOpcSOyKvBorY4wwNNnof/9aU2OnjsCc7s vlPHC31QtoZzwuYwSt0wCfz0sov26F3cKDzv2psCSh63zGVOgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAvWUasqT7PYXuJqHV53fehz63OtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYTQw M2Y2Yi0wZjYxLTRkYjQtYThmZi0wYjRhZGM2YTMxM2IvMGE0MDNmNmItMGY2MS00 ZGI0LWE4ZmYtMGI0YWRjNmEzMTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGE0MDNmNmItMGY2MS00ZGI0LWE4 ZmYtMGI0YWRjNmEzMTNiLzBhNDAzZjZiLTBmNjEtNGRiNC1hOGZmLTBiNGFkYzZh MzEzYi5jcmwwHwYDVR0jBBgwFoAUtwSvZEYejiLcHL8DKDfVy8CMyA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYTQwM2Y2Yi0wZjYxLTRkYjQtYThmZi0wYjRh ZGM2YTMxM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC3vErZ8QZiiBYJ9TzDopf tR4MlUUjRvLkMAE2pBnYzKfCNhoetGtfsacrVN0CBsBu14wVVrZXN/4nMgh6KTlR C5Du9DBqLVyFM1UWqlE6JYfG97XEmnMLc4AAMBEx3VMRcKMFTM1CQHMnDRtpc4an 8t9fbNF12+6x5AFxkbwe3uKsMzQmjs1CYgcJ2rAcaMIK3A0lPvmY02fRwxY2xUEJ JcucLh+CcTBEOORPvqWbOAjEzJOvx+rGtmgpc2ymM2vjabfwRgKv2XS2dEV+3yet 2J0xsWS0C1/GtAxJu3wxuQxQNmpmtRBC1WLmEcx1jIPxFAzFxEaIOP5ysJ9k/vzW -----END CERTIFICATE-----Generated at Sun Jun 29 18:23:26 2025 by rpki-client