$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: sYoPeIjSmdRUo4IJGk9a3CD+fUN9DjsMg6flqIuncbU= Subject key identifier: A9:69:CE:E1:C0:EA:43:D3:28:07:FD:14:F5:BB:F4:A1:C9:1E:08:1A Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584A597D4EBCD8F79587E7483780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA983393700605D5 Signing time: Sun 29 Jun 2025 07:00:08 +0000 Manifest this update: Sun 29 Jun 2025 07:00:08 +0000 Manifest next update: Wed 02 Jul 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: lLvztz3FxXHQlAry6HC5Ef2DRhpiQYrYQBRZN8RClDE=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: 3kkPrzXKGeAUhO7s7yJrjRnUR0t78S80nRsGqPdRs6o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:7d:4e:bc:d8:f7:95:87:e7:48:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Jun 29 07:00:08 2025 GMT Not After : Jul 2 07:00:00 2025 GMT Subject: CN=a83591e4-2d73-4ba2-8df9-79fa1e49bff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:90:e8:04:bc:0d:5c:85:95:71:f5:c3:6c: ac:31:30:bb:c4:11:09:2c:75:42:e4:6f:cb:67:22: 08:a0:f9:8a:80:cf:17:5f:2f:4e:ad:d9:36:d3:aa: 2e:21:a3:77:46:8f:54:fd:b1:6e:af:cc:97:dd:e5: 20:2b:36:c0:1e:78:86:48:75:07:69:80:97:87:96: b5:f4:d3:55:12:77:93:fa:40:62:ae:e3:f3:dc:65: c5:d1:66:d3:b5:54:fb:a0:96:52:80:bb:76:d2:76: 19:2a:de:a9:62:aa:9d:e1:20:6c:f9:89:1d:46:fc: 87:17:e5:59:4d:f5:2d:40:45:6f:3f:56:60:9a:0f: 58:32:f2:59:a7:44:93:a3:63:fd:66:08:37:1b:27: d8:79:3c:13:cf:e7:18:d0:e4:55:a7:2f:da:58:c6: a9:b8:07:6c:f9:ea:42:c1:ac:f8:41:3f:32:96:f2: 1e:5c:e0:b6:97:85:2a:47:60:5b:57:a8:62:7f:2d: 53:d4:cd:77:9b:be:1a:01:3d:bb:41:c5:b1:80:0f: 94:14:72:4c:95:be:5f:98:c9:df:b7:14:11:70:25: d1:c7:ad:dd:63:c6:01:7e:61:80:16:73:03:2e:ad: e7:da:63:22:c2:db:01:61:40:cf:86:97:0c:f9:7f: 8e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:69:CE:E1:C0:EA:43:D3:28:07:FD:14:F5:BB:F4:A1:C9:1E:08:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:56:e4:c9:60:2e:63:85:45:58:e9:24:01:c2:a9:76:84:1e: 7b:51:a8:f9:2e:7a:92:87:25:15:0b:9e:86:7d:dd:e1:f9:8d: cd:fc:8a:40:54:4e:37:54:22:8f:2a:0f:44:fb:f4:e3:3b:ea: be:45:1f:41:c5:9e:40:3d:04:13:24:73:1c:04:e2:0c:5e:db: 22:0c:1c:a1:db:e1:1d:16:3e:0f:4a:47:20:29:03:c1:cd:99: 8b:1d:b1:4c:62:39:eb:39:51:6e:63:2d:54:bf:de:fd:59:58: 75:79:85:50:3b:ec:27:f0:ff:b6:8e:4c:7b:6f:aa:52:55:d0: de:4a:ff:95:2a:84:8a:8c:f7:57:73:f8:97:ae:0a:dc:94:b7: 43:de:d0:6d:41:dc:9d:c7:30:01:2e:d5:a3:a3:71:b7:a9:38: e3:c8:4f:36:b3:71:5e:0e:81:56:d3:5a:de:65:b8:77:bd:fb: c0:fd:20:40:26:51:88:5e:b6:c8:9f:57:f0:c1:9a:80:ab:38: ad:db:c4:3f:3e:4b:2b:33:e6:bd:df:ba:95:68:96:e9:ad:89: c4:c3:c1:77:97:47:58:db:3d:b5:2c:d2:28:1b:3a:f8:34:d8: b1:96:4a:7d:c6:7e:42:6f:e9:bc:ca:5b:44:20:1e:08:af:92: b8:97:df:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZfU682PeVh+dIN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MDYyOTA3MDAwOFoXDTI1MDcwMjA3MDAwMFowLzEtMCsGA1UEAxMk YTgzNTkxZTQtMmQ3My00YmEyLThkZjktNzlmYTFlNDliZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM6Q6AS8DVyFlXH1w2ysMTC7xBEJLHVC5G/L ZyIIoPmKgM8XXy9Ordk206ouIaN3Ro9U/bFur8yX3eUgKzbAHniGSHUHaYCXh5a1 9NNVEneT+kBiruPz3GXF0WbTtVT7oJZSgLt20nYZKt6pYqqd4SBs+YkdRvyHF+VZ TfUtQEVvP1Zgmg9YMvJZp0STo2P9Zgg3GyfYeTwTz+cY0ORVpy/aWMapuAds+epC waz4QT8ylvIeXOC2l4UqR2BbV6hify1T1M13m74aAT27QcWxgA+UFHJMlb5fmMnf txQRcCXRx63dY8YBfmGAFnMDLq3n2mMiwtsBYUDPhpcM+X+ObwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKlpzuHA6kPTKAf9FPW79KHJHggaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMVuTJYC5jhUVY6SQBwql2 hB57Uaj5LnqShyUVC56Gfd3h+Y3N/IpAVE43VCKPKg9E+/TjO+q+RR9BxZ5APQQT JHMcBOIMXtsiDByh2+EdFj4PSkcgKQPBzZmLHbFMYjnrOVFuYy1Uv979WVh1eYVQ O+wn8P+2jkx7b6pSVdDeSv+VKoSKjPdXc/iXrgrclLdD3tBtQdydxzABLtWjo3G3 qTjjyE82s3FeDoFW01reZbh3vfvA/SBAJlGIXrbIn1fwwZqAqzit28Q/PksrM+a9 37qVaJbprYnEw8F3l0dY2z21LNIoGzr4NNixlkp9xn5Cb+m8yltEIB4Ir5K4l99g -----END CERTIFICATE-----Generated at Mon Jun 30 07:19:04 2025 by rpki-client