$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft (raw, json) Hash identifier: oyw0jUzX4ISrrcrGfb0E2vxm1YWbzMJAKW8VUXk1Sfg= Subject key identifier: BE:68:96:47:B9:D0:55:51:4C:EB:27:F1:D5:31:38:57:6A:C4:4C:CB Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584A648A4AC4B835B075A0EA7340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft Manifest number: 010D0C9F43285849CB146E7AB4A800E43DFE4238 Signing time: Thu 03 Jul 2025 06:00:08 +0000 Manifest this update: Thu 03 Jul 2025 06:00:08 +0000 Manifest next update: Sat 05 Jul 2025 06:00:00 +0000 Files and hashes: 1: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (hash: myVURPqdt9lxfgyFdziSBNvx/+36i/+d7lNJeqAvTbY=) 2: f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl (hash: 9G+/wlwEt7On7WVNxR/f0E8Ky2mMgHP4RubR+a1WnPs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:8a:4a:c4:b8:35:b0:75:a0:ea:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Jul 3 06:00:08 2025 GMT Not After : Jul 5 06:00:00 2025 GMT Subject: CN=f9bc90b6-3757-48b0-b0b9-9d8bbe011c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:d1:86:44:36:88:50:c7:89:92:4d:9e:e0: 21:7c:63:8b:3c:a0:bd:73:0e:31:09:c4:f0:df:96: 30:3b:a4:1c:62:d2:8a:d9:b1:a4:19:9e:ec:3f:20: b4:23:6b:44:55:d5:2f:0a:ca:64:9c:66:d9:b0:4a: ea:a2:19:1d:af:cd:58:4e:1f:3e:ca:9a:c3:ad:9c: 9a:18:ce:54:d4:7f:04:b7:e6:e6:7f:84:66:42:8a: 54:46:1b:bd:80:65:ee:50:fc:0b:bb:cf:f2:51:56: 6d:a4:49:1b:63:ad:49:a2:04:9c:dc:ab:03:08:4a: 56:c3:fa:70:6b:18:b8:97:f0:e4:a6:9e:c2:58:0c: 4b:8e:cb:65:aa:2d:a8:ed:3b:f1:0e:bf:66:31:4c: 82:63:8c:e5:99:3b:0f:06:97:76:a9:d5:74:b3:42: ba:60:c9:0c:dd:7a:35:db:61:3a:9c:a8:5d:0a:d1: d6:c7:7c:78:2b:92:74:1a:0a:c6:9b:5a:82:38:04: 0d:86:f2:dd:db:f2:c2:8e:dd:16:fe:f7:2f:97:d4: ab:ec:f4:67:ad:12:23:0a:ac:ad:f5:4a:8a:2c:9e: 0f:bc:0d:cd:24:c1:3f:0d:01:45:17:7e:d1:0c:06: 70:26:fc:1a:46:5f:e5:0a:f0:e8:9e:12:59:3c:1e: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:68:96:47:B9:D0:55:51:4C:EB:27:F1:D5:31:38:57:6A:C4:4C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ad:c1:31:a7:4c:80:41:3f:cb:9d:95:56:2f:86:e8:fe:e6: 52:ed:75:d8:e2:00:79:f8:12:32:12:74:a9:11:5a:3c:0d:5a: 3b:d3:d8:fb:c2:f0:66:98:35:f5:69:ad:21:89:c2:42:48:73: 98:29:f8:1b:16:a5:1c:1c:fe:69:c8:65:8f:3f:a6:d0:e2:c0: 12:ca:9f:40:f3:04:24:58:20:4d:8d:64:a3:7e:df:26:b1:89: 8d:fe:f1:2a:f7:83:e2:08:38:2a:0c:b0:ce:09:c9:46:b2:42: 8f:99:05:f4:e8:a1:70:f2:d9:71:22:26:3c:f0:73:a9:e6:71: 19:4a:2c:72:7c:c9:fd:1c:d9:52:5b:c8:da:5e:20:11:1d:76: 6b:86:cc:60:df:a4:87:c6:9b:a5:71:a8:d7:53:ee:f7:cc:cb: 66:54:f6:51:04:05:8a:5a:ff:a5:44:bb:72:e9:84:38:1c:e8: 9d:8a:36:3e:22:12:6f:0e:b1:0b:ef:c3:a9:ad:24:98:34:73: fb:e5:09:97:aa:68:aa:a0:a9:9c:b8:30:7f:55:bf:1f:c2:a9: 40:1f:05:ba:41:63:ea:79:ee:b6:f9:dd:9e:ae:32:e6:c7:16: b7:e2:d3:47:58:30:af:53:85:35:c6:ff:be:49:db:93:d4:9e: 46:4f:25:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpkikrEuDWwdaDqc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MDcwMzA2MDAwOFoXDTI1MDcwNTA2MDAwMFowLzEtMCsGA1UEAxMk ZjliYzkwYjYtMzc1Ny00OGIwLWIwYjktOWQ4YmJlMDExYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFnRhkQ2iFDHiZJNnuAhfGOLPKC9cw4xCcTw 35YwO6QcYtKK2bGkGZ7sPyC0I2tEVdUvCspknGbZsErqohkdr81YTh8+yprDrZya GM5U1H8Et+bmf4RmQopURhu9gGXuUPwLu8/yUVZtpEkbY61JogSc3KsDCEpWw/pw axi4l/Dkpp7CWAxLjstlqi2o7TvxDr9mMUyCY4zlmTsPBpd2qdV0s0K6YMkM3Xo1 22E6nKhdCtHWx3x4K5J0GgrGm1qCOAQNhvLd2/LCjt0W/vcvl9Sr7PRnrRIjCqyt 9UqKLJ4PvA3NJME/DQFFF37RDAZwJvwaRl/lCvDonhJZPB5eHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL5olke50FVRTOsn8dUxOFdqxEzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvZjcxZDI1MmItOWEwZS00 NDkzLWJlOTMtZTZhOGUyZmZmZWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFrcExp0yAQT/LnZVWL4bo /uZS7XXY4gB5+BIyEnSpEVo8DVo709j7wvBmmDX1aa0hicJCSHOYKfgbFqUcHP5p yGWPP6bQ4sASyp9A8wQkWCBNjWSjft8msYmN/vEq94PiCDgqDLDOCclGskKPmQX0 6KFw8tlxIiY88HOp5nEZSixyfMn9HNlSW8jaXiARHXZrhsxg36SHxpulcajXU+73 zMtmVPZRBAWKWv+lRLty6YQ4HOidijY+IhJvDrEL78OprSSYNHP75QmXqmiqoKmc uDB/Vb8fwqlAHwW6QWPqee62+d2erjLmxxa34tNHWDCvU4U1xv++SduT1J5GTyV8 -----END CERTIFICATE-----Generated at Thu Jul 3 13:15:16 2025 by rpki-client