$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft File: 3e43e154-e174-4a6b-a09a-e289bd92a034.mft (raw, json) Hash identifier: kjBaoOWA78dOm9Y2hA9QT/eno8LjzGVG1V35P5CMBFQ= Subject key identifier: 6B:0A:57:C2:D1:1C:4B:BB:9B:71:49:29:78:4C:D6:DC:5E:4C:A8:2E Authority key identifier: 97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 Certificate issuer: /CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Certificate serial: 010D0C9F4328584A639BFE4B91BFA7296C7A9C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft Manifest number: 010D0C9F4328584944138B300DF9C4D02E8D3B2C Signing time: Wed 02 Jul 2025 22:00:03 +0000 Manifest this update: Wed 02 Jul 2025 22:00:03 +0000 Manifest next update: Fri 04 Jul 2025 22:00:00 +0000 Files and hashes: 1: 3e43e154-e174-4a6b-a09a-e289bd92a034.crl (hash: 3TJN5Fr47iHVVEU4zwm1nno5Wc4zLsH5KNZh/alNtMI=) 2: bdc78d67-27a7-3f7e-ae1f-f0278af87586.roa (hash: h95Q309pT8aDr8nT9rurHLv4FVFVjcAjG6q8TfQHb6g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:9b:fe:4b:91:bf:a7:29:6c:7a:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43e154-e174-4a6b-a09a-e289bd92a034 Validity Not Before: Jul 2 22:00:03 2025 GMT Not After : Jul 4 22:00:00 2025 GMT Subject: CN=f9e02980-b813-4380-bb3a-e7994dd373e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:44:13:a7:d0:ad:05:e2:0f:12:a7:ec:8e: 50:31:59:9e:13:32:6a:6e:d4:6d:af:a0:34:62:a2: af:23:3a:94:ba:af:89:41:0e:f0:a1:a5:86:43:31: 51:a5:6f:5a:db:23:24:b0:b4:fd:3d:ce:34:53:82: 80:f8:93:d5:54:4c:8f:f5:2f:3e:5f:0a:b5:71:e5: c9:c5:0b:0d:4c:e2:59:bf:5f:24:8b:76:36:36:f7: b7:f8:a5:d1:34:23:ba:e4:c4:77:8e:4d:93:81:59: 3d:49:cc:1e:da:c9:b3:3e:2d:ae:53:00:ac:b7:db: c2:23:17:11:28:b9:58:c6:3c:37:1d:f4:26:93:93: 2b:f5:a6:b7:21:7c:fd:1a:87:25:d5:db:33:f5:59: 11:e7:37:56:8c:95:d6:2e:48:dd:0b:92:72:17:31: 7f:af:3d:3f:11:f1:d5:ee:04:a5:3b:b6:c2:5e:db: c5:d6:85:1c:2b:d5:ac:a5:e1:0c:75:4e:fd:e8:86: 56:16:57:d6:72:22:d8:fd:72:1c:6c:33:d1:bb:6f: 00:2e:c0:fc:ff:3b:6c:ee:1c:58:67:46:43:87:28: f9:c7:5b:50:48:aa:5f:a4:23:95:7c:fe:fd:f5:37: 19:64:29:87:ca:ac:91:17:35:e9:ba:1e:95:60:90: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0A:57:C2:D1:1C:4B:BB:9B:71:49:29:78:4C:D6:DC:5E:4C:A8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034/3e43e154-e174-4a6b-a09a-e289bd92a034.crl X509v3 Authority Key Identifier: keyid:97:96:02:D9:DB:30:9E:19:CF:D3:9E:A5:42:80:AE:FE:8F:F9:9B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3e43e154-e174-4a6b-a09a-e289bd92a034.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:94:2b:62:57:ec:52:ba:28:ad:80:a2:5b:fa:80:f7:4f:59: 25:90:e2:37:d5:15:27:c1:db:81:3a:92:2b:b2:76:54:a2:2a: fe:e2:5f:d1:35:a2:bb:4c:d1:f9:6d:5c:f6:78:6a:58:66:71: e0:ca:ac:d4:53:70:f1:fb:6f:64:a4:83:3b:33:6d:49:5c:9e: cf:2a:e2:31:a8:ca:78:8b:71:6f:9b:67:fd:c2:25:00:cb:dd: 47:fb:25:e8:53:c5:37:b4:68:a4:6d:54:93:51:60:92:75:94: e3:e0:7c:93:76:6b:ea:0f:28:09:12:1d:86:22:a7:23:b1:26: c8:ec:89:cd:47:b3:f9:ed:55:c8:d0:65:f5:95:01:ff:02:97: a0:9d:ae:72:92:d4:92:80:4f:2a:c3:96:73:a7:32:f8:33:15: b9:34:28:eb:bf:78:98:24:41:09:dd:40:44:49:6c:59:fa:a7: 71:15:7f:0b:53:90:67:8f:bf:e7:bd:e0:c2:88:da:77:55:4e: 14:1a:bc:c7:e7:45:12:b4:b9:f4:c4:b2:22:57:a7:39:ca:b4: fd:5e:e5:61:5e:87:ac:6f:59:85:ad:60:e2:8a:62:2b:2a:56: be:7c:04:81:36:c8:67:d7:a0:11:62:07:44:bb:9a:78:8f:77: 0c:83:e4:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjm/5Lkb+nKWx6nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U0M2UxNTQtZTE3NC00YTZiLWEwOWEtZTI4OWJkOTJh MDM0MB4XDTI1MDcwMjIyMDAwM1oXDTI1MDcwNDIyMDAwMFowLzEtMCsGA1UEAxMk ZjllMDI5ODAtYjgxMy00MzgwLWJiM2EtZTc5OTRkZDM3M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnREE6fQrQXiDxKn7I5QMVmeEzJqbtRtr6A0 YqKvIzqUuq+JQQ7woaWGQzFRpW9a2yMksLT9Pc40U4KA+JPVVEyP9S8+Xwq1ceXJ xQsNTOJZv18ki3Y2Nve3+KXRNCO65MR3jk2TgVk9Scwe2smzPi2uUwCst9vCIxcR KLlYxjw3HfQmk5Mr9aa3IXz9Gocl1dsz9VkR5zdWjJXWLkjdC5JyFzF/rz0/EfHV 7gSlO7bCXtvF1oUcK9WspeEMdU796IZWFlfWciLY/XIcbDPRu28ALsD8/zts7hxY Z0ZDhyj5x1tQSKpfpCOVfP799TcZZCmHyqyRFzXpuh6VYJBxnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGsKV8LRHEu7m3FJKXhM1txeTKguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQz ZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5YmQ5MmEwMzQvM2U0M2UxNTQtZTE3NC00 YTZiLWEwOWEtZTI4OWJkOTJhMDM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2U0M2UxNTQtZTE3NC00YTZiLWEw OWEtZTI4OWJkOTJhMDM0LzNlNDNlMTU0LWUxNzQtNGE2Yi1hMDlhLWUyODliZDky YTAzNC5jcmwwHwYDVR0jBBgwFoAUl5YC2dswnhnP056lQoCu/o/5m8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZTQzZTE1NC1lMTc0LTRhNmItYTA5YS1lMjg5 YmQ5MmEwMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXlCtiV+xSuiitgKJb+oD3 T1klkOI31RUnwduBOpIrsnZUoir+4l/RNaK7TNH5bVz2eGpYZnHgyqzUU3Dx+29k pIM7M21JXJ7PKuIxqMp4i3Fvm2f9wiUAy91H+yXoU8U3tGikbVSTUWCSdZTj4HyT dmvqDygJEh2GIqcjsSbI7InNR7P57VXI0GX1lQH/Apegna5yktSSgE8qw5ZzpzL4 MxW5NCjrv3iYJEEJ3UBESWxZ+qdxFX8LU5Bnj7/nveDCiNp3VU4UGrzH50UStLn0 xLIiV6c5yrT9XuVhXoesb1mFrWDiimIrKla+fASBNshn16ARYgdEu5p4j3cMg+Tl -----END CERTIFICATE-----Generated at Thu Jul 3 13:08:19 2025 by rpki-client