$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: o7zqvjNxaMedqU6tVYrE9Qhp5iWi3eOc55PjD0Jxubk= Subject key identifier: D8:82:41:F8:6C:C3:AB:3D:AE:92:97:C7:0F:CB:6D:55:36:7F:0C:31 Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584A5FE322D6F30999668EA00600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB338 Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Fri 04 Jul 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: ZaFVFEJSjc0BJgh3VVF/+2+lfBO+XSXKiy84huAUHEA=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: QWPmR0soyExkBQEVIJIlUWYv/ouaDD4pZa47A6L1p+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:22:d6:f3:09:99:66:8e:a0:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 4 14:00:00 2025 GMT Subject: CN=b8f39501-3bf0-4a5d-a0cd-cf97e55177f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:0f:11:01:0c:13:03:52:86:b7:3b:3a:80: 22:b1:c9:67:1a:77:dc:53:c7:e1:a8:b9:21:be:38: 5e:ba:8e:c9:c5:5e:3f:9c:11:7e:06:45:fc:64:76: 57:c7:85:eb:f3:30:39:49:1a:5f:7e:62:bc:1b:01: 58:98:a8:83:cf:80:ff:bd:8a:38:4b:51:8a:35:0f: cc:16:29:06:34:29:a8:30:18:a3:6f:49:ba:de:f6: f0:70:ed:3d:21:cd:1a:21:d4:28:64:9c:9b:90:f8: dc:b4:8a:de:52:0d:f6:ea:0e:c2:46:c6:1a:83:1a: 66:95:fe:6c:ee:56:48:cc:8c:97:84:79:f0:cf:6a: 7d:7d:a2:e3:e3:93:bc:f3:7c:9b:04:21:54:41:7e: 81:4d:7e:73:36:69:21:ed:7c:d9:a5:89:3e:cb:14: 3a:e7:68:cf:03:2e:63:9e:d3:7c:6a:47:b0:88:90: aa:87:85:78:d2:d5:52:16:9f:88:98:ea:f5:eb:d5: 75:47:9e:d6:b7:f7:56:92:35:42:c4:14:92:64:04: cb:4b:64:1b:81:bb:72:ff:0d:6a:8d:30:e1:c2:33: 1c:29:f9:b4:71:01:64:32:06:7d:db:d6:8d:0b:03: d3:0b:93:ae:0b:fc:82:5a:d2:20:26:7d:6c:1b:c2: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:82:41:F8:6C:C3:AB:3D:AE:92:97:C7:0F:CB:6D:55:36:7F:0C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a4:12:90:fc:62:08:7a:b2:5c:fb:fc:e6:48:8c:72:55:f4: 94:52:9f:cf:49:c0:20:ea:58:02:bb:35:67:8a:fe:6b:c7:fb: 5f:5b:fa:2c:36:5d:86:3f:45:3f:68:ee:f0:b5:49:bb:43:a5: 0e:d1:4f:ff:54:5d:81:28:2d:51:e9:02:7a:81:43:be:ef:50: db:c4:ca:82:0a:9a:d1:44:4d:f8:a0:13:de:33:ab:33:ed:13: df:fb:17:aa:22:4f:ba:0d:e6:40:0e:90:b2:a1:41:1b:8c:7d: e8:66:42:45:48:bc:32:da:76:25:dc:f6:04:35:2c:e9:e9:85: 57:20:b8:f9:30:4d:e3:36:d9:7f:55:99:97:32:44:05:7d:41: 18:d7:9a:99:90:14:42:f1:e5:72:5f:8e:b8:8d:5b:de:0c:6d: dc:3f:d9:b2:57:df:42:4c:39:51:51:87:79:80:13:a9:82:f5: 78:9d:c6:0d:f2:1a:2a:73:3b:db:d6:2b:1b:e2:14:fc:9d:5e: 66:79:3f:f3:e2:b3:b0:94:20:72:ac:01:7f:8b:5f:80:a4:ef: 57:1e:04:27:f8:36:80:ab:d8:1a:1d:88:db:ff:d9:d3:dd:08: 2a:a6:d7:7e:3d:96:c4:75:29:0f:1b:a3:0f:86:c3:cf:ac:ab: 13:00:c6:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4yLW8wmZZo6gBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwNDE0MDAwMFowLzEtMCsGA1UEAxMk YjhmMzk1MDEtM2JmMC00YTVkLWEwY2QtY2Y5N2U1NTE3N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicAPEQEMEwNShrc7OoAisclnGnfcU8fhqLkh vjheuo7JxV4/nBF+BkX8ZHZXx4Xr8zA5SRpffmK8GwFYmKiDz4D/vYo4S1GKNQ/M FikGNCmoMBijb0m63vbwcO09Ic0aIdQoZJybkPjctIreUg326g7CRsYagxpmlf5s 7lZIzIyXhHnwz2p9faLj45O883ybBCFUQX6BTX5zNmkh7XzZpYk+yxQ652jPAy5j ntN8akewiJCqh4V40tVSFp+ImOr169V1R57Wt/dWkjVCxBSSZATLS2Qbgbty/w1q jTDhwjMcKfm0cQFkMgZ929aNCwPTC5OuC/yCWtIgJn1sG8J7TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNiCQfhsw6s9rpKXxw/LbVU2fwwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3pBKQ/GIIerJc+/zmSIxy VfSUUp/PScAg6lgCuzVniv5rx/tfW/osNl2GP0U/aO7wtUm7Q6UO0U//VF2BKC1R 6QJ6gUO+71DbxMqCCprRRE34oBPeM6sz7RPf+xeqIk+6DeZADpCyoUEbjH3oZkJF SLwy2nYl3PYENSzp6YVXILj5ME3jNtl/VZmXMkQFfUEY15qZkBRC8eVyX464jVve DG3cP9myV99CTDlRUYd5gBOpgvV4ncYN8hoqczvb1isb4hT8nV5meT/z4rOwlCBy rAF/i1+ApO9XHgQn+DaAq9gaHYjb/9nT3Qgqptd+PZbEdSkPG6MPhsPPrKsTAMZW -----END CERTIFICATE-----Generated at Tue Jul 1 17:08:13 2025 by rpki-client