$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft File: 06324afb-8064-4731-9562-bf44e53b8c45.mft (raw, json) Hash identifier: cRwkXU7tf7OWnvyMNMnBAs6lnVwMR/83OGpMLC+kqxg= Subject key identifier: A8:6E:36:43:5C:BF:5B:4C:87:0A:5C:35:CF:D6:84:20:6E:66:2C:97 Authority key identifier: 12:6D:E8:A1:5C:01:62:14:84:0B:39:B9:62:68:EE:E0:F1:09:19:BE Certificate issuer: /CN=06324afb-8064-4731-9562-bf44e53b8c45 Certificate serial: 010D0C9F4328584A627243B8928F177EC08E78A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft Manifest number: 010D0C9F43285849AD02B172992E170D60A45422 Signing time: Wed 02 Jul 2025 12:00:08 +0000 Manifest this update: Wed 02 Jul 2025 12:00:08 +0000 Manifest next update: Fri 04 Jul 2025 12:00:00 +0000 Files and hashes: 1: 06324afb-8064-4731-9562-bf44e53b8c45.crl (hash: eJsBRRWiysLdyDl3ntQNBLVVpdtqaRqBNRTI8RdTa9w=) 2: 1d8dd2e0-97c5-3ce6-9354-3c67d662f210.roa (hash: yuKhGYGZKlLZsiZhMbCd7qOI2ZbQ7SIcvlN07YlX8y8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:72:43:b8:92:8f:17:7e:c0:8e:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06324afb-8064-4731-9562-bf44e53b8c45 Validity Not Before: Jul 2 12:00:08 2025 GMT Not After : Jul 4 12:00:00 2025 GMT Subject: CN=d944b750-a8a2-4f89-9948-8e60dce92abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1e:d0:59:a3:89:6b:d9:50:09:43:d9:09:6e: 7b:f6:43:ba:e9:ce:ab:7a:52:e8:81:5f:84:94:79: f7:3e:9d:d4:4e:6e:dd:61:18:9a:5f:3e:32:95:07: 47:43:13:ae:b9:52:dc:ee:68:47:85:62:15:27:99: 53:6e:1b:cf:e9:8d:e6:12:de:b8:27:d4:a3:b7:a9: 3a:3a:22:c7:b1:b7:95:b6:e0:3f:b1:49:40:8c:47: fe:b5:7d:8b:93:62:81:0d:e0:af:b6:c8:24:bb:9a: b0:82:65:5c:e5:3e:a5:3a:87:00:a8:c0:c2:4f:b3: 5b:ce:c7:73:4b:0d:e9:a9:0b:16:0d:96:ee:c8:d4: 5d:3f:9c:33:d2:f1:9a:59:4a:47:2e:68:3f:a7:45: 9c:7c:ae:4e:45:cb:62:ab:1e:72:83:b9:b6:d9:1c: ef:9b:d3:98:f0:35:8e:4a:e1:0e:30:b2:d3:77:af: 18:0d:21:1a:07:16:8f:5b:54:86:81:a3:90:12:d7: 9a:95:7a:09:d0:08:2c:da:71:87:a1:f7:53:87:5b: c2:3c:a5:60:a8:44:df:64:82:d4:46:36:24:e6:48: 0a:bf:71:68:04:a5:b5:81:96:75:1a:8b:93:e0:fe: e0:87:2f:3a:5b:00:35:86:40:79:05:7c:2d:f6:9f: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6E:36:43:5C:BF:5B:4C:87:0A:5C:35:CF:D6:84:20:6E:66:2C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45/06324afb-8064-4731-9562-bf44e53b8c45.crl X509v3 Authority Key Identifier: keyid:12:6D:E8:A1:5C:01:62:14:84:0B:39:B9:62:68:EE:E0:F1:09:19:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/06324afb-8064-4731-9562-bf44e53b8c45.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0b:e9:22:7b:1e:f3:5e:3d:f8:13:b0:e0:b6:7b:44:4a:1b: 22:9d:84:c5:58:c1:0c:61:33:a4:04:f3:cb:4c:bd:be:8c:54: 5e:d5:80:f8:fd:39:19:f9:33:b7:7d:90:f1:22:25:61:af:ac: ae:31:a3:1d:1a:d5:19:13:09:b6:26:7a:0f:6b:cf:3e:d9:d6: be:e9:04:90:ce:2c:f3:ad:95:42:68:a4:a3:cf:5f:16:0e:a6: e1:7a:7e:37:9c:5c:9e:26:44:78:57:c2:bd:03:f3:d7:e0:f5: 19:08:74:6f:b6:80:6a:fb:38:40:60:9b:ce:52:3e:3e:01:cc: a0:c3:4e:b8:28:90:8d:46:f8:05:56:ad:71:6f:cc:42:e8:71: 37:4e:22:27:c4:79:70:80:08:82:75:76:06:8a:c8:39:fa:10: 5b:c9:52:3a:95:37:64:5c:97:88:22:44:9a:9e:1e:8e:26:ef: bb:2c:7f:66:94:51:6e:57:0b:25:80:71:d6:be:d5:16:ec:9e: 45:00:61:dc:98:09:06:5a:31:24:e6:be:0b:83:03:f5:3e:96: f9:cd:52:53:a9:cc:c9:80:ce:21:10:e2:2c:ee:8d:2f:f2:cb: de:0b:6d:e3:31:55:51:1f:77:35:9c:a0:9a:57:fa:22:1e:18: ad:b9:c1:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpickO4ko8XfsCOeKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzMjRhZmItODA2NC00NzMxLTk1NjItYmY0NGU1M2I4 YzQ1MB4XDTI1MDcwMjEyMDAwOFoXDTI1MDcwNDEyMDAwMFowLzEtMCsGA1UEAxMk ZDk0NGI3NTAtYThhMi00Zjg5LTk5NDgtOGU2MGRjZTkyYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx7QWaOJa9lQCUPZCW579kO66c6relLogV+E lHn3Pp3UTm7dYRiaXz4ylQdHQxOuuVLc7mhHhWIVJ5lTbhvP6Y3mEt64J9Sjt6k6 OiLHsbeVtuA/sUlAjEf+tX2Lk2KBDeCvtsgku5qwgmVc5T6lOocAqMDCT7Nbzsdz Sw3pqQsWDZbuyNRdP5wz0vGaWUpHLmg/p0WcfK5ORctiqx5yg7m22Rzvm9OY8DWO SuEOMLLTd68YDSEaBxaPW1SGgaOQEtealXoJ0Ags2nGHofdTh1vCPKVgqETfZILU RjYk5kgKv3FoBKW1gZZ1GouT4P7ghy86WwA1hkB5BXwt9p+vxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKhuNkNcv1tMhwpcNc/WhCBuZiyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNjMy NGFmYi04MDY0LTQ3MzEtOTU2Mi1iZjQ0ZTUzYjhjNDUvMDYzMjRhZmItODA2NC00 NzMxLTk1NjItYmY0NGU1M2I4YzQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDYzMjRhZmItODA2NC00NzMxLTk1 NjItYmY0NGU1M2I4YzQ1LzA2MzI0YWZiLTgwNjQtNDczMS05NTYyLWJmNDRlNTNi OGM0NS5jcmwwHwYDVR0jBBgwFoAUEm3ooVwBYhSECzm5Ymju4PEJGb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNjMyNGFmYi04MDY0LTQ3MzEtOTU2Mi1iZjQ0 ZTUzYjhjNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHC+kiex7zXj34E7DgtntE ShsinYTFWMEMYTOkBPPLTL2+jFRe1YD4/TkZ+TO3fZDxIiVhr6yuMaMdGtUZEwm2 JnoPa88+2da+6QSQzizzrZVCaKSjz18WDqbhen43nFyeJkR4V8K9A/PX4PUZCHRv toBq+zhAYJvOUj4+Acygw064KJCNRvgFVq1xb8xC6HE3TiInxHlwgAiCdXYGisg5 +hBbyVI6lTdkXJeIIkSanh6OJu+7LH9mlFFuVwslgHHWvtUW7J5FAGHcmAkGWjEk 5r4LgwP1Ppb5zVJTqczJgM4hEOIs7o0v8sveC23jMVVRH3c1nKCaV/oiHhitucF1 -----END CERTIFICATE-----Generated at Wed Jul 2 19:27:34 2025 by rpki-client