$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft File: 3b78e0f0-5f02-4f2e-a084-899096441110.mft (raw, json) Hash identifier: 5PW+hZr9jjitU0+SjGmclPB5BB5FzF66alQqiXlGook= Subject key identifier: D9:59:8A:A0:50:E5:E4:50:36:A9:03:EE:F4:D1:27:00:8A:02:1D:8D Authority key identifier: 02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED Certificate issuer: /CN=3b78e0f0-5f02-4f2e-a084-899096441110 Certificate serial: 010D0C9F4328584A6342B5BFA0D279760B65CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft Manifest number: 010D0C9F4328584A44A1FB667AD11522617B3AEC Signing time: Wed 02 Jul 2025 19:00:08 +0000 Manifest this update: Wed 02 Jul 2025 19:00:08 +0000 Manifest next update: Fri 04 Jul 2025 19:00:00 +0000 Files and hashes: 1: 3b78e0f0-5f02-4f2e-a084-899096441110.crl (hash: WRluX8J7MHB0R/4vRtTCHUzmtiTTOuwBzWZGn81FW9o=) 2: 860b20cf-76ac-3497-b0c1-607d390e67dd.roa (hash: +kf5Ec37oJzXOCXMEXhQdkobiH89okSCBA0QC095QDU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:42:b5:bf:a0:d2:79:76:0b:65:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b78e0f0-5f02-4f2e-a084-899096441110 Validity Not Before: Jul 2 19:00:08 2025 GMT Not After : Jul 4 19:00:00 2025 GMT Subject: CN=4205ba2f-004e-4903-8807-46ac1f074c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:03:18:31:52:53:ca:91:63:44:14:29:dd: 29:62:88:61:04:a8:21:4b:12:e1:e2:18:4a:b3:e0: 0b:fb:cf:9c:07:6b:09:bb:57:3d:13:a3:58:0a:c4: 73:f5:a7:53:c8:65:39:3c:95:96:c9:99:b9:91:cc: db:94:39:d2:40:d4:37:ad:84:4f:ff:b2:ce:63:05: 25:6b:5b:2e:8b:7f:7d:48:c2:bf:96:f2:70:f6:00: 5a:8f:90:57:74:f9:b1:88:93:b3:29:6a:e7:06:83: a7:57:f5:83:0d:8f:44:0a:03:cd:d8:4c:d2:c4:ae: ed:03:7a:89:11:d5:6f:ea:10:39:25:89:da:9c:35: c0:1d:a7:57:7e:9a:46:c4:4f:64:1f:af:79:87:37: f1:61:a3:1f:b3:0a:72:58:9b:2a:59:57:07:60:a8: d3:40:d8:12:25:59:e2:82:49:35:52:1c:32:88:ff: 28:cc:33:ac:28:fa:2d:7b:d2:99:63:d1:b5:c4:4b: d2:28:26:68:f4:96:e5:f0:e4:40:d7:dc:aa:49:19: 13:3f:35:17:6c:aa:79:86:86:a1:3a:f3:9b:dc:56: ba:2b:37:e1:f3:59:ad:7f:31:8c:db:4e:f6:fb:4b: 46:02:04:55:14:2b:0c:fd:83:34:ad:29:12:b2:cf: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:59:8A:A0:50:E5:E4:50:36:A9:03:EE:F4:D1:27:00:8A:02:1D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110/3b78e0f0-5f02-4f2e-a084-899096441110.crl X509v3 Authority Key Identifier: keyid:02:2D:13:A8:2D:54:AA:5A:DA:B4:6B:3B:7D:83:A3:A1:FA:73:2A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b78e0f0-5f02-4f2e-a084-899096441110.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7a:a5:66:4b:cb:6e:d2:f8:e5:15:79:24:79:b6:95:87:83: de:16:78:5f:de:22:a6:3c:8c:65:1a:84:bb:6e:e6:eb:22:92: c5:18:79:00:2d:b6:8e:15:f2:18:c5:c6:b0:8d:50:7c:71:53: 87:31:66:c2:85:1a:66:be:60:26:61:f2:70:a7:dc:59:cc:d8: f6:95:e6:18:8b:83:8f:10:06:71:a5:18:4b:31:23:11:b4:fd: b9:04:a9:71:94:69:ac:1e:6d:de:6d:31:44:a8:6f:0b:9b:d1: 3d:ff:f1:d8:30:42:d1:3e:7f:59:a7:c4:95:6f:f4:62:cc:ab: a3:bf:f3:1e:45:77:a0:dd:16:5d:f5:96:c4:64:06:5e:49:3a: 0a:17:e3:18:92:80:4c:88:fb:cc:c0:fd:ea:d1:af:2e:68:e8: cb:76:af:1f:5e:a0:d5:ea:fb:24:e0:1a:d2:74:2b:2a:4c:9f: c8:03:ee:ad:39:ff:13:1e:d1:57:26:c0:15:e7:5d:89:ec:87: 22:9f:f2:58:61:0f:f4:e1:fd:f8:b1:96:d6:cf:28:f9:da:eb: fb:35:b0:1b:f3:ba:18:79:97:d0:50:03:9e:c3:a2:f2:8d:86: c3:3b:c9:fc:c0:b0:fb:f2:25:32:bf:74:ee:7d:8d:eb:6e:6e: b2:04:a8:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjQrW/oNJ5dgtly4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3OGUwZjAtNWYwMi00ZjJlLWEwODQtODk5MDk2NDQx MTEwMB4XDTI1MDcwMjE5MDAwOFoXDTI1MDcwNDE5MDAwMFowLzEtMCsGA1UEAxMk NDIwNWJhMmYtMDA0ZS00OTAzLTg4MDctNDZhYzFmMDc0YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDoDGDFSU8qRY0QUKd0pYohhBKghSxLh4hhK s+AL+8+cB2sJu1c9E6NYCsRz9adTyGU5PJWWyZm5kczblDnSQNQ3rYRP/7LOYwUl a1sui399SMK/lvJw9gBaj5BXdPmxiJOzKWrnBoOnV/WDDY9ECgPN2EzSxK7tA3qJ EdVv6hA5JYnanDXAHadXfppGxE9kH695hzfxYaMfswpyWJsqWVcHYKjTQNgSJVni gkk1UhwyiP8ozDOsKPote9KZY9G1xEvSKCZo9Jbl8ORA19yqSRkTPzUXbKp5hoah OvOb3Fa6Kzfh81mtfzGM2072+0tGAgRVFCsM/YM0rSkSss9sTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNlZiqBQ5eRQNqkD7vTRJwCKAh2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjc4 ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkwOTY0NDExMTAvM2I3OGUwZjAtNWYwMi00 ZjJlLWEwODQtODk5MDk2NDQxMTEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I3OGUwZjAtNWYwMi00ZjJlLWEw ODQtODk5MDk2NDQxMTEwLzNiNzhlMGYwLTVmMDItNGYyZS1hMDg0LTg5OTA5NjQ0 MTExMC5jcmwwHwYDVR0jBBgwFoAUAi0TqC1UqlratGs7fYOjofpzKu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjc4ZTBmMC01ZjAyLTRmMmUtYTA4NC04OTkw OTY0NDExMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAleqVmS8tu0vjlFXkkebaV h4PeFnhf3iKmPIxlGoS7bubrIpLFGHkALbaOFfIYxcawjVB8cVOHMWbChRpmvmAm YfJwp9xZzNj2leYYi4OPEAZxpRhLMSMRtP25BKlxlGmsHm3ebTFEqG8Lm9E9//HY MELRPn9Zp8SVb/RizKujv/MeRXeg3RZd9ZbEZAZeSToKF+MYkoBMiPvMwP3q0a8u aOjLdq8fXqDV6vsk4BrSdCsqTJ/IA+6tOf8THtFXJsAV512J7Icin/JYYQ/04f34 sZbWzyj52uv7NbAb87oYeZfQUAOew6LyjYbDO8n8wLD78iUyv3TufY3rbm6yBKj0 -----END CERTIFICATE-----Generated at Thu Jul 3 13:15:12 2025 by rpki-client