$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.mft File: fcd6fa28-75d7-4873-b7e1-ef017bc15387.mft (raw, json) Hash identifier: aMmM1J5gKE81g6nHW9pgGK+tkZw6rxIfz5MPc7IuC+I= Subject key identifier: FD:7F:CF:09:71:3C:60:81:74:45:56:21:96:66:47:19:8B:72:36:45 Authority key identifier: D2:05:22:93:1C:31:FF:C4:77:0C:53:D8:1A:D0:DB:7A:C4:E0:56:50 Certificate issuer: /CN=fcd6fa28-75d7-4873-b7e1-ef017bc15387 Certificate serial: 010D0C9F4328584A625479964983E1ACBE7C9600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.mft Manifest number: 010D0C9F4328584A144314D2A6725D5C288756DC Signing time: Wed 02 Jul 2025 11:00:08 +0000 Manifest this update: Wed 02 Jul 2025 11:00:08 +0000 Manifest next update: Sat 05 Jul 2025 11:00:00 +0000 Files and hashes: 1: 3018c49f-10ed-3a88-88a8-7e37d3780a5a.roa (hash: U/hZ4z48s2sZ5cgzRAucbEAT6sIogSimBJXQEzfdUaU=) 2: fcd6fa28-75d7-4873-b7e1-ef017bc15387.crl (hash: 5PFyaGXIRpkK2G0dCEOQyn9Gg3I0HkApEfLLG2rWk+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:54:79:96:49:83:e1:ac:be:7c:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd6fa28-75d7-4873-b7e1-ef017bc15387 Validity Not Before: Jul 2 11:00:08 2025 GMT Not After : Jul 5 11:00:00 2025 GMT Subject: CN=357f372a-f592-4020-9742-dfa70ffeac72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:e1:9e:09:6f:12:b7:11:f4:04:f4:db:72: 7e:64:13:47:ef:c7:dd:fb:67:9e:74:d8:1b:ad:fa: 3d:2d:ee:73:80:a2:14:cc:d0:90:47:9d:e6:0c:ed: 9e:99:9e:f2:4e:23:f9:19:5b:e5:81:ca:3c:b6:60: 4f:ee:6f:68:9b:7a:43:0e:1a:37:8f:fc:62:2c:68: e8:76:be:d7:4f:c7:d2:4c:d7:34:b3:96:c1:ec:ce: 21:2e:43:22:ec:17:ca:6a:84:f8:c5:0d:3d:87:02: 65:39:54:3c:67:a3:f4:cc:28:55:40:5c:e2:55:10: ec:27:d1:27:35:06:49:a8:b1:51:41:3e:ae:03:55: ea:08:c3:b2:07:69:87:17:9b:98:b2:04:ac:0f:80: 4b:97:23:f0:6e:5b:d4:32:ff:10:66:2e:18:0a:db: e2:38:97:e9:7f:5b:a8:5d:b6:f0:24:bc:d0:d2:64: d6:52:4e:36:1f:86:87:5e:f8:56:21:1a:89:98:72: a9:b1:3e:04:a8:ea:50:27:6e:5d:d9:49:de:14:09: cd:53:ee:5b:cc:44:bd:6b:f7:47:ab:74:df:dd:ab: 17:8c:e2:c1:23:8a:75:60:63:fa:54:39:a1:31:e8: 95:4d:c3:79:4f:ab:23:b3:20:cc:41:a7:bc:e0:b0: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:CF:09:71:3C:60:81:74:45:56:21:96:66:47:19:8B:72:36:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387/fcd6fa28-75d7-4873-b7e1-ef017bc15387.crl X509v3 Authority Key Identifier: keyid:D2:05:22:93:1C:31:FF:C4:77:0C:53:D8:1A:D0:DB:7A:C4:E0:56:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fcd6fa28-75d7-4873-b7e1-ef017bc15387.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4f:3d:91:b5:57:04:4c:5e:23:bf:38:3e:ec:1f:ad:dc:a0: b0:8f:50:d3:75:60:64:3b:d9:1d:a5:fc:97:c6:81:a1:5d:ee: 7a:9d:39:32:e9:c5:c3:ca:e8:5c:19:2c:54:19:05:c5:05:0a: 21:53:ea:c3:e2:4c:cd:99:38:db:7d:60:5f:6b:8f:e7:93:96: b4:91:97:51:a9:63:5c:b5:d2:7b:1e:7c:b5:b7:9d:18:4c:4b: 71:87:9e:41:a7:c5:e5:6d:d1:3c:e0:c9:21:13:f9:41:14:6b: ed:28:76:d6:21:b6:b1:75:58:fd:76:13:23:91:5b:67:01:70: 34:c8:e6:21:89:c1:4e:75:51:36:54:91:32:ca:e7:39:bd:1b: b1:2d:18:c3:e2:fd:36:26:56:95:d5:b6:9f:67:87:a7:c5:9c: 7c:37:b8:18:30:ea:21:75:1a:e5:a4:c5:0d:bc:be:32:86:3a: 07:1b:05:d5:dd:61:b5:f9:60:ea:fc:42:77:85:80:94:46:94: 25:03:e0:24:84:2d:12:37:0a:4d:d1:9d:e0:83:1d:57:3c:8b: f3:e9:d4:f7:80:99:d6:f7:88:62:b4:6d:81:2b:e4:05:dc:47: 9f:b5:44:d5:cf:85:6c:b0:ef:df:be:75:19:da:58:cc:cd:35: 80:e0:24:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpiVHmWSYPhrL58lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkNmZhMjgtNzVkNy00ODczLWI3ZTEtZWYwMTdiYzE1 Mzg3MB4XDTI1MDcwMjExMDAwOFoXDTI1MDcwNTExMDAwMFowLzEtMCsGA1UEAxMk MzU3ZjM3MmEtZjU5Mi00MDIwLTk3NDItZGZhNzBmZmVhYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcLhnglvErcR9AT023J+ZBNH78fd+2eedNgb rfo9Le5zgKIUzNCQR53mDO2emZ7yTiP5GVvlgco8tmBP7m9om3pDDho3j/xiLGjo dr7XT8fSTNc0s5bB7M4hLkMi7BfKaoT4xQ09hwJlOVQ8Z6P0zChVQFziVRDsJ9En NQZJqLFRQT6uA1XqCMOyB2mHF5uYsgSsD4BLlyPwblvUMv8QZi4YCtviOJfpf1uo XbbwJLzQ0mTWUk42H4aHXvhWIRqJmHKpsT4EqOpQJ25d2UneFAnNU+5bzES9a/dH q3Tf3asXjOLBI4p1YGP6VDmhMeiVTcN5T6sjsyDMQae84LB6EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP1/zwlxPGCBdEVWIZZmRxmLcjZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mY2Q2 ZmEyOC03NWQ3LTQ4NzMtYjdlMS1lZjAxN2JjMTUzODcvZmNkNmZhMjgtNzVkNy00 ODczLWI3ZTEtZWYwMTdiYzE1Mzg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmNkNmZhMjgtNzVkNy00ODczLWI3 ZTEtZWYwMTdiYzE1Mzg3L2ZjZDZmYTI4LTc1ZDctNDg3My1iN2UxLWVmMDE3YmMx NTM4Ny5jcmwwHwYDVR0jBBgwFoAU0gUikxwx/8R3DFPYGtDbesTgVlAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mY2Q2ZmEyOC03NWQ3LTQ4NzMtYjdlMS1lZjAx N2JjMTUzODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnTz2RtVcETF4jvzg+7B+t 3KCwj1DTdWBkO9kdpfyXxoGhXe56nTky6cXDyuhcGSxUGQXFBQohU+rD4kzNmTjb fWBfa4/nk5a0kZdRqWNctdJ7Hny1t50YTEtxh55Bp8XlbdE84MkhE/lBFGvtKHbW IbaxdVj9dhMjkVtnAXA0yOYhicFOdVE2VJEyyuc5vRuxLRjD4v02JlaV1bafZ4en xZx8N7gYMOohdRrlpMUNvL4yhjoHGwXV3WG1+WDq/EJ3hYCURpQlA+AkhC0SNwpN 0Z3ggx1XPIvz6dT3gJnW94hitG2BK+QF3EeftUTVz4VssO/fvnUZ2ljMzTWA4CSQ -----END CERTIFICATE-----Generated at Thu Jul 3 06:02:55 2025 by rpki-client