$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft File: de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft (raw, json) Hash identifier: KNIqLj9ZJiysSbru7rWVj6u04bOtCSpb5Pu76+Hc2bw= Subject key identifier: 11:DA:97:6A:19:06:46:2E:70:EA:67:DE:DD:11:29:22:DE:00:26:2C Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F4328584A605A3BA2CD16D44183F04400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft Manifest number: 010D0C9F432858418B0E1501B4C6C9598914557E Signing time: Tue 01 Jul 2025 18:00:08 +0000 Manifest this update: Tue 01 Jul 2025 18:00:08 +0000 Manifest next update: Fri 04 Jul 2025 18:00:00 +0000 Files and hashes: 1: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (hash: McsaqheoGcxdJb4et6OacDbxy4e3+tsNv7GFHvO0UR4=) 2: de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl (hash: k/iWCNOiPi0LCGZvj7v9mNYIH+wdP2ozo9j7b6Mh1DQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:5a:3b:a2:cd:16:d4:41:83:f0:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Jul 1 18:00:08 2025 GMT Not After : Jul 4 18:00:00 2025 GMT Subject: CN=2a3bda63-7761-4852-930c-0cfbea449769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:bc:f3:5a:f8:87:b4:df:4b:59:28:03:b3: 68:33:6b:69:5d:80:e3:ee:6a:db:c4:cb:30:1a:5f: 17:c2:81:35:bd:f7:70:d8:76:25:fb:dd:48:0a:aa: f8:43:95:d9:7d:e2:dd:6b:1a:fe:91:5c:66:b8:f3: 80:b8:cc:f7:12:fb:70:e2:82:9f:f8:1d:51:6a:72: 58:7b:79:91:29:d9:c4:bc:42:f8:73:d3:a3:23:8d: 71:2b:3d:4c:98:36:1f:8d:c3:3b:f4:5c:3b:30:04: a6:0c:fa:03:1c:da:4f:c5:51:32:73:b9:10:91:11: 6c:f3:a6:75:86:ae:63:e0:fc:b6:8e:9c:14:5b:c5: a2:b1:df:d2:59:81:8a:ed:24:c9:44:02:3c:ba:ab: 19:7f:1f:9d:b0:5a:8f:e3:58:98:9d:2f:48:f0:02: 82:09:92:74:1a:a8:69:0b:1c:e8:f8:40:7d:bc:e2: b1:f1:48:a4:bc:f0:86:e9:b5:b6:52:14:4b:78:d2: a9:56:36:69:09:e6:36:fb:0e:7d:2d:b4:a5:94:b1: b2:94:56:78:4e:25:a3:c8:a4:b3:1a:61:4a:c4:47: 95:b9:11:f8:57:19:f2:a0:73:0d:df:a0:dc:58:6d: 82:17:d4:d2:f2:83:9b:b8:1b:ac:6e:88:7d:ea:be: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DA:97:6A:19:06:46:2E:70:EA:67:DE:DD:11:29:22:DE:00:26:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:08:d3:54:bf:4e:81:fc:6b:8a:5f:01:ab:22:68:c0:2c:7e: 47:51:85:44:78:54:41:5f:48:48:41:7c:ed:89:03:b2:0a:3e: 9b:6c:ef:02:99:b2:df:a7:ed:2b:85:a4:14:91:ad:93:e7:b9: 90:6d:df:26:7f:de:83:7b:8c:16:6a:5c:a7:90:b6:67:36:5c: fd:db:a7:4d:a7:42:ab:12:51:32:de:d7:6a:b4:ee:0c:6b:58: 2d:0b:b6:69:c7:eb:33:38:fc:d5:14:73:19:f9:0c:34:9a:c8: cd:0f:e7:44:41:73:9f:1a:64:dd:21:fb:d9:48:02:4d:be:f3: 37:e1:a0:78:d0:c6:8a:89:9f:5a:cc:c9:28:d1:ea:ea:3e:09: f6:3c:9f:f0:d4:76:3e:83:6a:17:73:3e:36:7c:70:71:77:62: 20:20:9f:1e:ef:07:b9:3e:57:5f:b6:37:bc:3c:5f:57:a7:ac: 78:a7:de:e3:b5:62:6b:88:64:f1:7f:23:ac:9c:15:98:9d:9f: f2:1b:6a:a5:36:90:c4:2f:70:af:64:6c:00:a9:1a:1a:51:3d: e3:82:c8:58:de:8d:42:c0:46:8b:14:cd:39:29:79:f9:1b:8e: 68:43:ca:95:52:3c:17:66:75:69:80:eb:fa:bd:86:bb:41:e6: 32:aa:d3:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgWjuizRbUQYPwRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MDcwMTE4MDAwOFoXDTI1MDcwNDE4MDAwMFowLzEtMCsGA1UEAxMk MmEzYmRhNjMtNzc2MS00ODUyLTkzMGMtMGNmYmVhNDQ5NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIe881r4h7TfS1koA7NoM2tpXYDj7mrbxMsw Gl8XwoE1vfdw2HYl+91ICqr4Q5XZfeLdaxr+kVxmuPOAuMz3Evtw4oKf+B1RanJY e3mRKdnEvEL4c9OjI41xKz1MmDYfjcM79Fw7MASmDPoDHNpPxVEyc7kQkRFs86Z1 hq5j4Py2jpwUW8Wisd/SWYGK7STJRAI8uqsZfx+dsFqP41iYnS9I8AKCCZJ0Gqhp Cxzo+EB9vOKx8UikvPCG6bW2UhRLeNKpVjZpCeY2+w59LbSllLGylFZ4TiWjyKSz GmFKxEeVuRH4VxnyoHMN36DcWG2CF9TS8oObuBusboh96r595QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBHal2oZBkYucOpn3t0RKSLeACYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvZGU4ZTYwYWYtODU3Ny00 YmI3LThlM2UtMjhlNGVjODhiNzI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4CNNUv06B/GuKXwGrImjA LH5HUYVEeFRBX0hIQXztiQOyCj6bbO8CmbLfp+0rhaQUka2T57mQbd8mf96De4wW alynkLZnNlz926dNp0KrElEy3tdqtO4Ma1gtC7Zpx+szOPzVFHMZ+Qw0msjND+dE QXOfGmTdIfvZSAJNvvM34aB40MaKiZ9azMko0erqPgn2PJ/w1HY+g2oXcz42fHBx d2IgIJ8e7we5Pldftje8PF9Xp6x4p97jtWJriGTxfyOsnBWYnZ/yG2qlNpDEL3Cv ZGwAqRoaUT3jgshY3o1CwEaLFM05KXn5G45oQ8qVUjwXZnVpgOv6vYa7QeYyqtPr -----END CERTIFICATE-----Generated at Wed Jul 2 11:34:32 2025 by rpki-client