$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft File: 9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft (raw, json) Hash identifier: qTDgsHHVoYv+6aW+V5m+oLeYQDFNW1BgjtkRJvx3etw= Subject key identifier: BF:54:46:F4:04:E7:EE:2B:28:3B:84:03:78:1A:36:B8:46:F6:5B:A3 Authority key identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED Certificate issuer: /CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f Certificate serial: 010D0C9F4328584A6324F44454BCF1D9A5700700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft Manifest number: 010D0C9F4328584989648BE86CDAB31ECAECBE4F Signing time: Wed 02 Jul 2025 18:00:10 +0000 Manifest this update: Wed 02 Jul 2025 18:00:10 +0000 Manifest next update: Sat 05 Jul 2025 18:00:00 +0000 Files and hashes: 1: 678b3993-91f5-38e4-8904-da250d8e607d.roa (hash: 2JLsUf0srPdV3azriLhbMCpT1Ln2Ye19KNqVaG7Ff4Q=) 2: 9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl (hash: C028o7UIAeJqk5J/v++4QBZ9kobZWekSfblb5TfgiQE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:24:f4:44:54:bc:f1:d9:a5:70:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f Validity Not Before: Jul 2 18:00:10 2025 GMT Not After : Jul 5 18:00:00 2025 GMT Subject: CN=097f7420-fe72-444b-bf86-07c2b435b8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1a:8c:c8:bb:9e:50:20:73:64:ef:2a:55:74: 62:61:c6:79:df:d5:00:e1:6a:93:0d:4a:45:d2:45: c5:40:71:35:a4:91:62:ad:e2:25:e5:ef:ae:23:0c: 84:ae:d9:36:7e:40:41:cf:23:8e:ff:ff:58:30:84: 63:c9:29:cb:81:d1:ee:08:29:ca:cc:e6:60:eb:b6: 55:9e:81:f9:81:2f:da:da:27:da:75:ae:ac:ad:13: 56:16:f4:ef:b6:8b:31:3e:54:f4:4d:01:9f:2c:fa: 8a:0b:1f:f2:c0:9c:a4:aa:7e:59:42:5e:ce:25:7f: ef:5b:10:38:50:c1:72:69:66:65:26:eb:45:54:09: 04:d5:ac:1c:0b:64:f1:25:d4:74:84:3f:08:ee:de: bb:1a:6e:3b:54:52:5e:b5:21:b9:6c:d2:cd:84:4f: a8:43:c5:57:8a:91:da:65:d3:ba:36:6a:be:16:a8: 2d:b6:30:d6:9f:61:83:cf:eb:76:27:06:71:7d:45: 79:6a:30:2f:de:7c:14:50:99:8d:eb:80:6b:58:2e: 7a:34:d6:af:b8:fb:37:7e:91:68:a6:f2:28:1e:8c: 94:70:6a:3b:5b:cf:24:76:96:3a:99:e3:a4:19:a9: d9:29:f1:77:8b:56:b5:12:8a:14:92:b6:ef:93:04: e8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:54:46:F4:04:E7:EE:2B:28:3B:84:03:78:1A:36:B8:46:F6:5B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl X509v3 Authority Key Identifier: keyid:E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7c:2c:44:f8:32:8d:b9:7c:83:25:d2:f8:7b:05:ed:91:58: 4f:a0:ea:20:b0:e9:1d:50:40:a2:09:c9:2b:5a:1b:ef:0a:38: ef:01:b6:13:c0:3d:df:32:73:86:74:94:76:68:b3:30:8b:e7: 51:2f:64:fe:13:7c:3d:a7:0a:95:da:e2:9b:38:30:09:0e:53: 20:b1:84:1f:56:cb:83:b6:2c:1a:48:59:52:67:ff:a4:07:27: 91:52:b7:73:33:ad:2e:74:ba:52:8c:a6:a0:fa:1e:86:ac:28: a3:a4:31:81:94:6e:21:00:5b:5f:42:6a:fd:99:1f:34:ff:e6: 7d:7d:68:01:71:62:e7:84:c3:8e:63:e5:11:63:0c:57:ac:41: 93:f3:b1:d5:cb:47:7b:11:b4:8f:80:97:0d:2d:8c:2b:1e:4e: 42:da:a2:86:04:05:07:4f:5d:04:0b:2c:c4:72:a1:f6:df:e7: 74:76:a5:7f:1e:49:a8:38:13:31:be:ea:3b:58:6b:70:66:3a: 0a:de:a1:ab:f0:1c:38:3d:61:af:e1:23:75:8d:30:28:3c:c1: e3:87:d4:86:07:f3:1c:1c:6a:03:a4:1c:fe:24:8d:8b:ae:60: 55:cd:0f:af:96:a9:42:97:0e:14:f3:d1:e0:58:df:7d:fc:4a: 98:c9:df:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjJPREVLzx2aVwBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUyYjdkYzQtMTg0NC00ZTcwLTk4OWItNWU0NDZmOGNj NzBmMB4XDTI1MDcwMjE4MDAxMFoXDTI1MDcwNTE4MDAwMFowLzEtMCsGA1UEAxMk MDk3Zjc0MjAtZmU3Mi00NDRiLWJmODYtMDdjMmI0MzViOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BqMyLueUCBzZO8qVXRiYcZ539UA4WqTDUpF 0kXFQHE1pJFireIl5e+uIwyErtk2fkBBzyOO//9YMIRjySnLgdHuCCnKzOZg67ZV noH5gS/a2ifada6srRNWFvTvtosxPlT0TQGfLPqKCx/ywJykqn5ZQl7OJX/vWxA4 UMFyaWZlJutFVAkE1awcC2TxJdR0hD8I7t67Gm47VFJetSG5bNLNhE+oQ8VXipHa ZdO6Nmq+FqgttjDWn2GDz+t2JwZxfUV5ajAv3nwUUJmN64BrWC56NNavuPs3fpFo pvIoHoyUcGo7W88kdpY6meOkGanZKfF3i1a1EooUkrbvkwToJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL9URvQE5+4rKDuEA3gaNrhG9lujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ZTJi N2RjNC0xODQ0LTRlNzAtOTg5Yi01ZTQ0NmY4Y2M3MGYvOWUyYjdkYzQtMTg0NC00 ZTcwLTk4OWItNWU0NDZmOGNjNzBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOWUyYjdkYzQtMTg0NC00ZTcwLTk4 OWItNWU0NDZmOGNjNzBmLzllMmI3ZGM0LTE4NDQtNGU3MC05ODliLTVlNDQ2Zjhj YzcwZi5jcmwwHwYDVR0jBBgwFoAU59U8Yifdy4Nh1UDtLpLAVjhjpO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ZTJiN2RjNC0xODQ0LTRlNzAtOTg5Yi01ZTQ0 NmY4Y2M3MGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlfCxE+DKNuXyDJdL4ewXt kVhPoOogsOkdUECiCckrWhvvCjjvAbYTwD3fMnOGdJR2aLMwi+dRL2T+E3w9pwqV 2uKbODAJDlMgsYQfVsuDtiwaSFlSZ/+kByeRUrdzM60udLpSjKag+h6GrCijpDGB lG4hAFtfQmr9mR80/+Z9fWgBcWLnhMOOY+URYwxXrEGT87HVy0d7EbSPgJcNLYwr Hk5C2qKGBAUHT10ECyzEcqH23+d0dqV/HkmoOBMxvuo7WGtwZjoK3qGr8Bw4PWGv 4SN1jTAoPMHjh9SGB/McHGoDpBz+JI2LrmBVzQ+vlqlClw4U89HgWN99/EqYyd9V -----END CERTIFICATE-----Generated at Thu Jul 3 16:38:15 2025 by rpki-client