$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.mft File: 2b781a21-4970-4bc0-9efe-c9029e9bc0a2.mft (raw, json) Hash identifier: /M1Ti8FXANpkPJuQlnwZw7C5ABAfos4OCK+hHgs+jiM= Subject key identifier: A8:7D:65:6F:05:44:5A:35:0D:D2:6E:97:B1:5D:BC:01:43:3B:92:2A Authority key identifier: 65:0A:8B:27:F0:79:80:32:61:F2:CF:A1:74:DD:6B:6F:C0:B6:25:79 Certificate issuer: /CN=2b781a21-4970-4bc0-9efe-c9029e9bc0a2 Certificate serial: 010D0C9F4328584A5CDCE1C34DE60B47FE3E1FB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.mft Manifest number: 010D0C9F43285849F00F05876758A7B5C573E4A8 Signing time: Mon 30 Jun 2025 12:00:08 +0000 Manifest this update: Mon 30 Jun 2025 12:00:08 +0000 Manifest next update: Wed 02 Jul 2025 12:00:00 +0000 Files and hashes: 1: 2b781a21-4970-4bc0-9efe-c9029e9bc0a2.crl (hash: 6gt33KbNgOtxtuRsDUIikNtuE+fdraIWjdFyN3e0Zuo=) 2: 8b90ee4c-0798-3dee-bacd-6934c7ee5aa8.roa (hash: DHLLQPzUABmGdLB77CZXl2QiLEtynTYpHBYktpfcz6M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:dc:e1:c3:4d:e6:0b:47:fe:3e:1f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b781a21-4970-4bc0-9efe-c9029e9bc0a2 Validity Not Before: Jun 30 12:00:08 2025 GMT Not After : Jul 2 12:00:00 2025 GMT Subject: CN=c13ae05a-bfa0-4385-9161-1d38a8030967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:40:20:39:ff:2a:9a:f4:63:09:77:67:17: c8:83:00:5c:36:03:b6:2b:f7:5d:7e:25:13:68:33: e9:7c:1a:47:25:53:f8:f3:21:4b:94:3b:df:10:7d: a3:50:14:2a:5e:6f:e4:24:e6:44:12:f0:60:71:4a: 59:19:4b:3b:68:f4:e6:f9:7b:fa:5b:96:12:7d:73: 09:06:2f:c4:00:0d:bc:8f:b4:dd:bc:88:31:d1:98: 1c:fb:a6:70:63:b1:5c:79:67:97:da:fe:b9:dc:aa: b9:80:6b:2e:2d:86:60:b5:cc:70:85:7b:30:2a:63: b3:80:6c:3c:af:40:34:27:54:5f:a8:23:f3:77:d9: 1e:b8:6e:66:6b:1d:5c:d5:e3:51:6d:26:2f:bf:81: 07:99:b6:24:5e:60:13:cd:28:46:b3:73:fe:19:2c: be:76:52:dd:94:60:bc:72:b2:3f:07:42:31:fa:78: 58:3a:45:e0:67:7d:fc:9b:d5:4c:ba:7a:dc:38:5d: 05:ac:7b:89:6f:da:96:02:ed:80:bf:28:28:68:d5: 5b:3c:1c:9a:7c:50:10:c3:7d:72:bf:83:9f:fb:f9: e7:d3:b2:e6:ee:39:04:98:5c:51:f8:7a:72:fa:c5: d2:b0:70:8e:4b:8c:b2:2f:01:a7:bf:50:51:c3:ff: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:65:6F:05:44:5A:35:0D:D2:6E:97:B1:5D:BC:01:43:3B:92:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.crl X509v3 Authority Key Identifier: keyid:65:0A:8B:27:F0:79:80:32:61:F2:CF:A1:74:DD:6B:6F:C0:B6:25:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2b781a21-4970-4bc0-9efe-c9029e9bc0a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:11:11:e3:28:32:df:21:f2:76:01:7a:a3:3a:06:b6:8f:7b: 44:02:2b:ed:0a:2d:8d:55:ff:90:88:5d:99:de:ae:ce:62:75: 34:a6:a9:4b:4d:bb:96:c5:32:16:03:2b:b0:dc:30:1b:8a:c7: a3:ee:95:95:b5:20:47:b3:10:87:d3:50:0c:c4:91:45:8a:1f: f2:c0:ba:48:dd:fa:9a:ec:25:b9:15:95:35:fc:95:97:17:39: a4:24:3a:dc:35:83:0c:68:5c:09:1d:d4:e4:63:c9:23:3c:79: 69:e5:f8:2f:b3:5b:66:42:b0:65:cb:8d:a7:f7:9a:96:22:13: 09:f7:e7:1c:77:89:eb:f1:03:4f:d9:75:16:0e:06:7f:23:78: ae:5a:a7:34:de:46:33:9c:1d:b0:84:ef:9b:72:05:a7:2c:9d: 60:e0:a1:b2:ab:77:0d:cb:18:07:54:01:e9:53:38:06:de:5f: c2:a6:bd:8d:32:d4:83:71:40:c9:98:b2:ff:09:9c:ce:6c:5e: 6b:7d:85:0b:a3:fa:d1:7f:1d:27:97:e3:3d:75:d2:2c:5c:b9: 56:f1:77:52:a2:dd:d6:98:67:94:5c:74:bc:b8:96:d9:fa:00: 22:97:47:d7:f2:63:a1:72:15:14:96:c9:be:86:9c:eb:5d:ea: e1:af:79:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpc3OHDTeYLR/4+H7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI3ODFhMjEtNDk3MC00YmMwLTllZmUtYzkwMjllOWJj MGEyMB4XDTI1MDYzMDEyMDAwOFoXDTI1MDcwMjEyMDAwMFowLzEtMCsGA1UEAxMk YzEzYWUwNWEtYmZhMC00Mzg1LTkxNjEtMWQzOGE4MDMwOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz5AIDn/Kpr0Ywl3ZxfIgwBcNgO2K/ddfiUT aDPpfBpHJVP48yFLlDvfEH2jUBQqXm/kJOZEEvBgcUpZGUs7aPTm+Xv6W5YSfXMJ Bi/EAA28j7TdvIgx0Zgc+6ZwY7FceWeX2v653Kq5gGsuLYZgtcxwhXswKmOzgGw8 r0A0J1RfqCPzd9keuG5max1c1eNRbSYvv4EHmbYkXmATzShGs3P+GSy+dlLdlGC8 crI/B0Ix+nhYOkXgZ338m9VMunrcOF0FrHuJb9qWAu2AvygoaNVbPByafFAQw31y v4Of+/nn07Lm7jkEmFxR+Hpy+sXSsHCOS4yyLwGnv1BRw/+1JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKh9ZW8FRFo1DdJul7FdvAFDO5IqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYjc4 MWEyMS00OTcwLTRiYzAtOWVmZS1jOTAyOWU5YmMwYTIvMmI3ODFhMjEtNDk3MC00 YmMwLTllZmUtYzkwMjllOWJjMGEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmI3ODFhMjEtNDk3MC00YmMwLTll ZmUtYzkwMjllOWJjMGEyLzJiNzgxYTIxLTQ5NzAtNGJjMC05ZWZlLWM5MDI5ZTli YzBhMi5jcmwwHwYDVR0jBBgwFoAUZQqLJ/B5gDJh8s+hdN1rb8C2JXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYjc4MWEyMS00OTcwLTRiYzAtOWVmZS1jOTAy OWU5YmMwYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKERHjKDLfIfJ2AXqjOga2 j3tEAivtCi2NVf+QiF2Z3q7OYnU0pqlLTbuWxTIWAyuw3DAbisej7pWVtSBHsxCH 01AMxJFFih/ywLpI3fqa7CW5FZU1/JWXFzmkJDrcNYMMaFwJHdTkY8kjPHlp5fgv s1tmQrBly42n95qWIhMJ9+ccd4nr8QNP2XUWDgZ/I3iuWqc03kYznB2whO+bcgWn LJ1g4KGyq3cNyxgHVAHpUzgG3l/Cpr2NMtSDcUDJmLL/CZzObF5rfYULo/rRfx0n l+M9ddIsXLlW8XdSot3WmGeUXHS8uJbZ+gAil0fX8mOhchUUlsm+hpzrXerhr3nj -----END CERTIFICATE-----Generated at Tue Jul 1 09:10:10 2025 by rpki-client