$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft File: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft (raw, json) Hash identifier: d0hRuz+u9DkrnxkUY1d3DL3fwWJEEV/RhOv4TJNLK3w= Subject key identifier: 59:2B:53:55:9A:37:B3:E2:5C:2D:6B:85:51:43:B1:6D:44:14:7B:23 Authority key identifier: 92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F Certificate issuer: /CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Certificate serial: 010D0C9F4328584A5F306938DE47F2F593D79180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft Manifest number: 010D0C9F4328584A21C7587CA6AD09944CFCDE96 Signing time: Tue 01 Jul 2025 08:00:03 +0000 Manifest this update: Tue 01 Jul 2025 08:00:03 +0000 Manifest next update: Fri 04 Jul 2025 08:00:00 +0000 Files and hashes: 1: 79a68e4a-63c9-343a-a4c3-0a5e94130274.roa (hash: ZWMCDRTzzONSpdbpkYQ7cowm69mMTrmW0k0vbaLDLwA=) 2: c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl (hash: QKhKGonc9diFQgzVex/1xFXQgOJFrpXdFUAiI837e3I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:30:69:38:de:47:f2:f5:93:d7:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28 Validity Not Before: Jul 1 08:00:03 2025 GMT Not After : Jul 4 08:00:00 2025 GMT Subject: CN=5a762569-4a07-41a7-991f-eef90513ef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7d:13:6a:de:60:1e:ab:c7:5c:45:4c:f5:fd: 66:76:16:ef:0c:b0:ec:f6:2b:53:3c:72:dd:28:48: 58:7f:33:70:4b:52:88:c5:ab:43:b2:96:55:16:5a: 3a:59:13:a9:90:c9:1b:d4:d5:15:04:dd:6a:fa:f9: b2:eb:75:01:6f:92:fe:7d:82:9f:1c:88:ac:a6:de: 1e:ee:0a:74:42:b1:af:77:51:41:cc:9d:10:a7:0b: 4a:88:57:b8:d5:24:02:35:e6:3d:d6:cc:0d:bd:dd: 9f:fe:68:a2:35:44:72:f2:cc:2b:3f:41:8a:e7:10: f2:85:82:a9:af:ff:40:22:57:9a:88:ca:c5:57:5b: 7f:dc:6b:44:81:3d:69:bc:ba:17:76:09:a4:5b:2c: 7a:f3:0a:46:fb:d2:de:85:bd:83:8d:86:0b:7b:fb: 3a:c3:65:ea:2f:4e:e4:21:86:ef:59:74:99:45:32: 34:c5:97:26:f9:4a:9e:9e:1b:e3:83:54:ce:35:b1: e1:e8:03:3d:21:39:fa:e8:e8:91:47:12:6d:cc:11: 79:38:52:40:f4:d3:65:15:95:30:f0:e3:ef:23:b7: 80:c4:57:d1:5b:95:18:b5:69:e1:1d:3e:dc:c0:f7: 7e:6e:23:38:cb:e3:f4:30:b1:57:3c:1e:c6:55:97: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:53:55:9A:37:B3:E2:5C:2D:6B:85:51:43:B1:6D:44:14:7B:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.crl X509v3 Authority Key Identifier: keyid:92:05:22:28:30:D4:2C:71:D9:BE:0D:86:21:84:45:65:3F:28:88:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c8720e13-8cf6-4bd7-8b4e-8dd3ff862f28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:59:93:1f:d8:8b:0c:a7:e9:a7:34:bc:e2:73:80:c1:01:ba: af:82:77:ff:bf:d3:a4:a8:7b:1d:77:55:61:06:83:b9:8b:32: 01:8b:3a:d4:10:c0:70:10:b4:22:a9:66:40:e4:93:2f:eb:18: ce:4f:48:ec:bc:65:5b:83:5f:3f:91:97:87:b7:af:84:c4:e0: 93:95:ac:4c:5f:d3:bb:e4:0f:57:c8:0a:2a:f9:ad:08:5e:8b: cb:30:13:13:6e:9a:31:6d:c9:c7:88:ec:91:8a:49:90:da:66: 11:02:28:1c:77:b3:b5:97:fa:1d:bf:9c:ee:c0:d6:62:af:08: 58:ee:dd:a7:d0:0c:e7:ee:30:bc:f9:7c:30:44:02:7a:19:22: fb:82:27:7a:bd:ba:04:ae:24:d1:f0:8d:17:ed:48:39:fe:63: 25:59:8a:34:a2:e3:a8:3d:dc:28:45:e1:fc:fc:78:9c:f9:36: 60:f5:cf:9c:63:c7:89:3f:72:18:d2:61:da:50:4c:83:82:2a: a5:fa:b3:4f:29:f7:58:de:4b:92:fd:2d:a6:ca:1f:2d:53:db: 0f:50:44:6e:64:22:10:74:72:f2:72:5c:d4:92:9e:30:65:7b: bb:0d:9d:ae:be:ad:de:e1:7e:a5:f1:82:16:2d:e7:21:19:f8: 2e:5f:f2:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfMGk43kfy9ZPXkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg3MjBlMTMtOGNmNi00YmQ3LThiNGUtOGRkM2ZmODYy ZjI4MB4XDTI1MDcwMTA4MDAwM1oXDTI1MDcwNDA4MDAwMFowLzEtMCsGA1UEAxMk NWE3NjI1NjktNGEwNy00MWE3LTk5MWYtZWVmOTA1MTNlZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX0Tat5gHqvHXEVM9f1mdhbvDLDs9itTPHLd KEhYfzNwS1KIxatDspZVFlo6WROpkMkb1NUVBN1q+vmy63UBb5L+fYKfHIispt4e 7gp0QrGvd1FBzJ0QpwtKiFe41SQCNeY91swNvd2f/miiNURy8swrP0GK5xDyhYKp r/9AIleaiMrFV1t/3GtEgT1pvLoXdgmkWyx68wpG+9Lehb2DjYYLe/s6w2XqL07k IYbvWXSZRTI0xZcm+Uqenhvjg1TONbHh6AM9ITn66OiRRxJtzBF5OFJA9NNlFZUw 8OPvI7eAxFfRW5UYtWnhHT7cwPd+biM4y+P0MLFXPB7GVZer0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFkrU1WaN7PiXC1rhVFDsW1EFHsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jODcy MGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQzZmY4NjJmMjgvYzg3MjBlMTMtOGNmNi00 YmQ3LThiNGUtOGRkM2ZmODYyZjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzg3MjBlMTMtOGNmNi00YmQ3LThi NGUtOGRkM2ZmODYyZjI4L2M4NzIwZTEzLThjZjYtNGJkNy04YjRlLThkZDNmZjg2 MmYyOC5jcmwwHwYDVR0jBBgwFoAUkgUiKDDULHHZvg2GIYRFZT8oiH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jODcyMGUxMy04Y2Y2LTRiZDctOGI0ZS04ZGQz ZmY4NjJmMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3WZMf2IsMp+mnNLzic4DB Abqvgnf/v9OkqHsdd1VhBoO5izIBizrUEMBwELQiqWZA5JMv6xjOT0jsvGVbg18/ kZeHt6+ExOCTlaxMX9O75A9XyAoq+a0IXovLMBMTbpoxbcnHiOyRikmQ2mYRAigc d7O1l/odv5zuwNZirwhY7t2n0Azn7jC8+XwwRAJ6GSL7gid6vboEriTR8I0X7Ug5 /mMlWYo0ouOoPdwoReH8/Hic+TZg9c+cY8eJP3IY0mHaUEyDgiql+rNPKfdY3kuS /S2myh8tU9sPUERuZCIQdHLyclzUkp4wZXu7DZ2uvq3e4X6l8YIWLechGfguX/KS -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:38 2025 by rpki-client