$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft File: 325f62aa-b9c8-4315-87d2-409b60e8840d.mft (raw, json) Hash identifier: QIjXvddkUfDVEV9qUKR4kRkOmBnTNeZfDC05XoQoUmQ= Subject key identifier: B8:47:28:8F:77:FE:19:08:B0:D2:D3:C2:B2:19:4C:42:8D:D6:7E:54 Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F4328584A5F4E3A78122DA4866CE5B100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft Manifest number: 010D0C9F432858497A6510E20DC87663E1742094 Signing time: Tue 01 Jul 2025 09:00:08 +0000 Manifest this update: Tue 01 Jul 2025 09:00:08 +0000 Manifest next update: Fri 04 Jul 2025 09:00:00 +0000 Files and hashes: 1: 325f62aa-b9c8-4315-87d2-409b60e8840d.crl (hash: zNstZd3NoJmXW65HUjbk6QuWFocD8cKoKNzi/asm5uk=) 2: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (hash: bwxVzwbhiww0I+vyZbDmhYNTkHEO41Tg4pqfvShkLnM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:4e:3a:78:12:2d:a4:86:6c:e5:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Jul 1 09:00:08 2025 GMT Not After : Jul 4 09:00:00 2025 GMT Subject: CN=be22a497-b852-425e-b3dc-3c9a616a8392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:27:8e:e1:12:4b:f7:35:92:24:a7:ec:eb:7c: 53:4c:24:e9:92:68:40:32:63:18:bd:06:04:4a:b9: 54:b0:14:22:83:f4:54:c8:2a:83:3a:f6:92:38:ad: ad:85:5a:1f:b0:d6:0b:5b:a2:57:5e:79:ea:5e:eb: 21:f2:98:51:d9:b6:15:d0:75:fd:63:68:c5:48:52: 6c:d1:db:35:9f:f3:29:5f:47:30:c1:e3:94:f2:8d: 20:e8:5a:f9:3a:c5:e1:02:07:21:76:b9:ee:35:5b: 7b:65:1f:63:42:11:6a:95:72:03:64:2e:d9:05:2a: 1b:86:9a:5e:66:a3:0e:75:ae:ee:99:54:7b:95:73: a0:d4:f7:a7:0c:90:43:97:03:4a:14:d1:ea:ae:fb: 4d:fa:11:86:a0:bb:84:ff:cf:d3:db:f1:8c:40:b8: d8:7a:56:b8:f6:7a:5f:e8:f5:16:a8:07:bf:ea:0a: 82:e7:91:79:6d:e1:50:fa:04:10:c3:45:f9:f6:cd: 4f:2c:08:00:df:40:ba:14:58:59:31:14:07:56:7f: 05:8c:51:14:9f:db:74:87:26:cc:5f:e7:75:99:d3: f9:09:3d:82:60:61:c2:a9:c4:82:40:44:68:42:b2: 02:65:5c:57:06:44:81:47:3b:ec:4f:e9:47:f0:2a: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:47:28:8F:77:FE:19:08:B0:D2:D3:C2:B2:19:4C:42:8D:D6:7E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:20:e3:f6:52:68:80:5e:3d:f4:b3:28:a2:07:1f:32:cf:61: b8:88:2a:b7:2b:93:a0:d0:9f:20:b2:34:8b:53:67:91:fb:3a: 59:ee:69:9b:04:de:f3:a8:99:3a:9d:c6:e1:24:21:b8:60:d3: 25:09:55:0c:d2:a9:2b:1f:a7:d6:3e:fe:f5:f0:5b:63:80:d7: e5:14:e6:7d:04:99:aa:15:ca:f3:6a:a5:b5:b0:ab:aa:5d:a1: e8:13:ff:cd:02:74:f7:a6:96:77:5a:7f:99:56:00:9e:e7:0d: fa:9c:f4:4d:f0:d4:90:a5:c7:53:e0:b5:7b:40:7b:0d:ba:93: 5a:65:b4:27:e0:e2:08:2e:b8:d5:e4:52:db:3b:b9:c7:d0:6a: 80:90:f1:af:4f:f0:8e:4e:50:c8:a1:28:1f:64:ae:65:8f:e4: 06:26:f9:4f:ce:23:e2:f0:2b:24:a8:dc:4c:34:a1:e5:48:f4: 92:9e:ef:f4:4d:ff:31:a1:dd:26:1f:6e:d8:c4:a2:cb:48:cd: b1:93:12:3a:cd:38:f9:32:f5:97:71:20:ad:a2:c6:f2:eb:ed: ac:87:1a:01:9e:fe:51:3c:66:84:a6:8f:7c:32:2c:2d:1c:25: aa:cb:8e:13:b4:ef:56:e2:6d:fa:62:03:34:e6:87:85:41:ec: 93:fe:86:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfTjp4Ei2khmzlsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI1MDcwMTA5MDAwOFoXDTI1MDcwNDA5MDAwMFowLzEtMCsGA1UEAxMk YmUyMmE0OTctYjg1Mi00MjVlLWIzZGMtM2M5YTYxNmE4MzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSeO4RJL9zWSJKfs63xTTCTpkmhAMmMYvQYE SrlUsBQig/RUyCqDOvaSOK2thVofsNYLW6JXXnnqXush8phR2bYV0HX9Y2jFSFJs 0ds1n/MpX0cwweOU8o0g6Fr5OsXhAgchdrnuNVt7ZR9jQhFqlXIDZC7ZBSobhppe ZqMOda7umVR7lXOg1PenDJBDlwNKFNHqrvtN+hGGoLuE/8/T2/GMQLjYela49npf 6PUWqAe/6gqC55F5beFQ+gQQw0X59s1PLAgA30C6FFhZMRQHVn8FjFEUn9t0hybM X+d1mdP5CT2CYGHCqcSCQERoQrICZVxXBkSBRzvsT+lH8CpP3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLhHKI93/hkIsNLTwrIZTEKN1n5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvMzI1ZjYyYWEtYjljOC00 MzE1LTg3ZDItNDA5YjYwZTg4NDBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7IOP2UmiAXj30syiiBx8y z2G4iCq3K5Og0J8gsjSLU2eR+zpZ7mmbBN7zqJk6ncbhJCG4YNMlCVUM0qkrH6fW Pv718FtjgNflFOZ9BJmqFcrzaqW1sKuqXaHoE//NAnT3ppZ3Wn+ZVgCe5w36nPRN 8NSQpcdT4LV7QHsNupNaZbQn4OIILrjV5FLbO7nH0GqAkPGvT/COTlDIoSgfZK5l j+QGJvlPziPi8CskqNxMNKHlSPSSnu/0Tf8xod0mH27YxKLLSM2xkxI6zTj5MvWX cSCtosby6+2shxoBnv5RPGaEpo98MiwtHCWqy44TtO9W4m36YgM05oeFQeyT/oZj -----END CERTIFICATE-----Generated at Tue Jul 1 11:49:11 2025 by rpki-client