$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: icnY6FIgxX3AEQAQBE7y5omZ50MPCyzQHVNFsuRk8Ms= Subject key identifier: A6:25:A8:68:A5:A0:71:8F:C5:08:D0:9D:EA:FB:BE:C7:25:F7:95:97 Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584A5E42309EC9CEB9A5B54EA880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BED975 Signing time: Tue 01 Jul 2025 00:00:03 +0000 Manifest this update: Tue 01 Jul 2025 00:00:03 +0000 Manifest next update: Fri 04 Jul 2025 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: HD38mmWxbxj3ZhtXqR99UIhCaIt2NzcA2gOYjM8V6aQ=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: w23w7zFUMlIIc03Yj7T6o7qbcVSDyG++IwvDJMiI38k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:42:30:9e:c9:ce:b9:a5:b5:4e:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Jul 1 00:00:03 2025 GMT Not After : Jul 4 00:00:00 2025 GMT Subject: CN=27a494a9-1c5d-4964-9f63-b6b63b5a048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fb:db:9d:53:26:ff:4a:e2:1e:e7:24:a3:d3: f4:17:07:c9:e4:88:01:51:f8:ab:93:bc:96:c7:a9: 0b:ed:c3:e4:8a:5b:5b:22:b7:65:0e:db:9d:9b:98: 34:1c:a9:59:34:02:9d:40:ca:8c:57:d0:ef:e9:37: e4:85:89:66:2d:54:c1:91:10:a9:dd:e1:0e:a7:14: a3:1b:fc:9f:db:de:8a:a5:46:9a:6c:15:ed:d7:bf: a2:57:10:70:01:5a:fa:c4:6a:a8:1a:73:ea:cd:0c: 8d:13:b6:e5:a5:95:aa:d8:32:bb:32:9c:1c:87:40: fa:da:95:74:8f:3a:f1:84:74:85:f8:16:2e:bc:6e: 49:73:12:0b:c3:05:47:55:2a:9a:f0:dd:02:2a:5e: aa:37:76:b4:54:4c:9f:95:81:7e:a0:eb:53:df:33: f0:99:c7:02:a3:44:97:d9:f8:d4:1a:50:71:c2:27: ef:84:47:b0:03:e0:cb:dc:08:2a:dd:fa:82:d5:01: 2e:84:e7:3b:cd:5d:f3:8a:33:6a:85:f7:7f:4b:cf: 53:58:75:fb:82:3a:59:e1:04:0f:57:22:b8:75:2e: 47:bb:60:03:d6:9f:24:60:8c:b5:0b:20:f6:4a:76: c9:69:d2:08:23:3b:91:03:95:b4:a1:94:38:c3:a5: 1b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:25:A8:68:A5:A0:71:8F:C5:08:D0:9D:EA:FB:BE:C7:25:F7:95:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6b:de:c3:c4:90:3f:46:92:94:65:5e:9e:2c:38:cf:2a:80: c5:19:51:bc:cf:f3:bf:61:06:0e:cc:67:b2:fa:b9:8b:5f:a6: 97:a8:7c:99:07:dd:22:8c:bd:77:80:75:c2:72:21:08:89:89: 53:fe:65:68:84:59:6b:24:e0:8b:85:16:f6:2d:80:03:37:54: d9:a4:99:0a:49:e5:9a:11:19:74:e0:29:44:c5:a4:21:ce:50: 0e:39:2c:b0:65:19:c3:21:be:fc:a2:c6:d7:d3:a9:55:2d:09: 3e:6e:84:a8:f1:6e:e5:d9:e3:0a:3d:4f:d7:bc:c8:04:28:ac: 70:84:34:e4:f6:d5:d7:32:37:2d:cf:7b:90:b9:4b:d2:fb:e2: cc:fd:6c:68:8b:a7:24:d1:62:18:26:ef:84:2d:e7:d3:3c:2a: 14:25:ed:0b:5a:78:1a:7d:36:2d:c4:d2:e4:d1:6c:0f:6e:dd: 9d:15:84:96:dc:0f:7c:7b:19:d3:4f:35:78:8c:ae:84:35:77: 56:07:9f:da:8a:3f:11:ab:32:b2:24:a0:06:f9:95:cb:0d:10: 8a:13:10:da:48:be:18:59:3a:89:da:eb:c4:a7:f1:48:cb:78: be:29:0d:c7:f1:f5:48:5d:b4:42:c0:3c:01:eb:ed:67:40:8d: e2:dc:8f:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeQjCeyc65pbVOqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI1MDcwMTAwMDAwM1oXDTI1MDcwNDAwMDAwMFowLzEtMCsGA1UEAxMk MjdhNDk0YTktMWM1ZC00OTY0LTlmNjMtYjZiNjNiNWEwNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/vbnVMm/0riHucko9P0FwfJ5IgBUfirk7yW x6kL7cPkiltbIrdlDtudm5g0HKlZNAKdQMqMV9Dv6TfkhYlmLVTBkRCp3eEOpxSj G/yf296KpUaabBXt17+iVxBwAVr6xGqoGnPqzQyNE7blpZWq2DK7Mpwch0D62pV0 jzrxhHSF+BYuvG5JcxILwwVHVSqa8N0CKl6qN3a0VEyflYF+oOtT3zPwmccCo0SX 2fjUGlBxwifvhEewA+DL3Agq3fqC1QEuhOc7zV3zijNqhfd/S89TWHX7gjpZ4QQP VyK4dS5Hu2AD1p8kYIy1CyD2SnbJadIIIzuRA5W0oZQ4w6UbJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKYlqGiloHGPxQjQner7vscl95WXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYa97DxJA/RpKUZV6eLDjP KoDFGVG8z/O/YQYOzGey+rmLX6aXqHyZB90ijL13gHXCciEIiYlT/mVohFlrJOCL hRb2LYADN1TZpJkKSeWaERl04ClExaQhzlAOOSywZRnDIb78osbX06lVLQk+boSo 8W7l2eMKPU/XvMgEKKxwhDTk9tXXMjctz3uQuUvS++LM/Wxoi6ck0WIYJu+ELefT PCoUJe0LWngafTYtxNLk0WwPbt2dFYSW3A98exnTTzV4jK6ENXdWB5/aij8RqzKy JKAG+ZXLDRCKExDaSL4YWTqJ2uvEp/FIy3i+KQ3H8fVIXbRCwDwB6+1nQI3i3I+D -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:31 2025 by rpki-client