$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: bIeKhKqM9fFC54CObrllLNMIrH00JwnfiICNCoM3WDs= Subject key identifier: 28:FD:77:13:4E:B1:6B:21:23:D2:30:AE:4E:A2:D6:6B:C4:3E:DA:B4 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584A5D36319E0C38AD7722103AE4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1E1C Signing time: Mon 30 Jun 2025 15:00:03 +0000 Manifest this update: Mon 30 Jun 2025 15:00:03 +0000 Manifest next update: Wed 02 Jul 2025 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: kkmQk1LCHGBsxhGcR61X/qb15+qzr1edryDTECCotIg=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: kgMIB20TYFk4sp0mjtbPVsxl5wOiTAVG/B7q6kHQIuo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:36:31:9e:0c:38:ad:77:22:10:3a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Jun 30 15:00:03 2025 GMT Not After : Jul 2 15:00:00 2025 GMT Subject: CN=22f3f18b-a932-4758-b208-509ea3cf90f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c5:a7:5b:20:aa:55:13:74:00:64:20:5b:0e: 0a:9c:9b:1e:9a:8f:6d:7b:5f:be:1b:a4:14:be:73: 45:92:96:29:6c:16:e0:ea:1a:22:9f:4f:d5:ab:64: 68:f6:47:25:61:cc:8d:92:4a:f0:fe:3c:56:3d:64: bb:5e:06:2a:3e:50:51:6b:92:1a:7b:37:0c:55:bc: 05:90:41:00:63:9a:60:1d:83:1c:e0:c5:c9:95:b0: 97:0e:7b:11:7f:e6:33:ab:44:53:2e:ef:3c:03:d2: 19:1d:5f:d8:b8:d5:12:7d:bf:5a:d3:c3:7c:8a:ff: e3:31:81:e2:45:21:d3:8f:ad:16:6e:cd:d9:10:63: 4c:98:3e:0f:a0:a2:e8:f6:f2:04:b5:85:d7:6e:22: 49:89:cc:83:7b:a2:6a:27:52:6c:f2:20:9d:c3:5b: 22:bd:59:e1:1b:bb:d2:65:a3:b0:05:8c:82:bf:b3: 13:52:ea:60:3a:12:9d:a9:c0:a6:ad:93:b7:0e:52: de:bf:27:27:28:8f:27:b2:2f:0f:0d:90:06:d1:1a: cf:22:50:18:1a:f8:fa:2c:02:cb:a8:bf:54:1e:c8: f7:6a:83:57:ac:48:c2:e4:61:36:fd:bd:27:c5:88: a4:bd:3b:b4:08:37:cb:f6:8b:1e:6c:f6:5c:52:25: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FD:77:13:4E:B1:6B:21:23:D2:30:AE:4E:A2:D6:6B:C4:3E:DA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bd:44:33:93:aa:93:aa:f4:a2:12:df:c5:ec:c6:52:c1:3d: 3e:73:78:6f:4e:8d:c5:51:2c:48:f4:aa:19:bd:2d:1e:e4:e3: d0:d1:21:9b:b1:47:f8:c2:29:f7:1e:b6:0f:f9:ee:af:05:82: 60:da:6e:fb:01:5a:a8:38:2a:1e:19:6a:6d:f9:32:94:38:56: 9a:65:ed:19:1f:09:71:dc:7e:cc:50:07:42:e6:c7:2d:9e:15: a4:8d:ac:71:77:e0:5c:32:9b:7c:be:c2:26:cb:4d:de:85:e8: eb:27:d9:d6:86:49:94:9c:79:b3:72:aa:58:87:21:f1:9d:3c: 20:99:9c:9b:0a:06:8c:3e:e4:13:fa:3a:12:59:d4:cb:9b:c4: 27:06:a0:4c:a3:9e:84:b6:f3:c7:41:7d:96:f7:cb:f8:9c:ca: 4d:63:91:78:ca:5d:b8:46:6e:9a:a3:f3:d1:29:52:94:98:df: 68:88:63:e4:1a:50:15:c2:81:1b:24:0f:e2:a1:74:f3:ff:22: 0a:96:9c:64:02:0e:96:d9:c5:63:2c:d3:6b:b7:0d:27:40:8b: 9e:e3:65:fc:ca:ee:e0:1a:90:73:06:93:82:32:80:87:31:d4: 34:fd:f2:8a:3c:52:88:e9:cd:5c:75:4b:c2:1b:69:b7:fa:ad: b8:b5:e2:27 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdNjGeDDitdyIQOuQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDYzMDE1MDAwM1oXDTI1MDcwMjE1MDAwMFowLzEtMCsGA1UEAxMk MjJmM2YxOGItYTkzMi00NzU4LWIyMDgtNTA5ZWEzY2Y5MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8WnWyCqVRN0AGQgWw4KnJsemo9te1++G6QU vnNFkpYpbBbg6hoin0/Vq2Ro9kclYcyNkkrw/jxWPWS7XgYqPlBRa5IaezcMVbwF kEEAY5pgHYMc4MXJlbCXDnsRf+Yzq0RTLu88A9IZHV/YuNUSfb9a08N8iv/jMYHi RSHTj60Wbs3ZEGNMmD4PoKLo9vIEtYXXbiJJicyDe6JqJ1Js8iCdw1sivVnhG7vS ZaOwBYyCv7MTUupgOhKdqcCmrZO3DlLevycnKI8nsi8PDZAG0RrPIlAYGvj6LALL qL9UHsj3aoNXrEjC5GE2/b0nxYikvTu0CDfL9osebPZcUiXjNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCj9dxNOsWshI9Iwrk6i1mvEPtq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlvUQzk6qTqvSiEt/F7MZS wT0+c3hvTo3FUSxI9KoZvS0e5OPQ0SGbsUf4win3HrYP+e6vBYJg2m77AVqoOCoe GWpt+TKUOFaaZe0ZHwlx3H7MUAdC5sctnhWkjaxxd+BcMpt8vsImy03ehejrJ9nW hkmUnHmzcqpYhyHxnTwgmZybCgaMPuQT+joSWdTLm8QnBqBMo56EtvPHQX2W98v4 nMpNY5F4yl24Rm6ao/PRKVKUmN9oiGPkGlAVwoEbJA/ioXTz/yIKlpxkAg6W2cVj LNNrtw0nQIue42X8yu7gGpBzBpOCMoCHMdQ0/fKKPFKI6c1cdUvCG2m3+q24teIn -----END CERTIFICATE-----Generated at Mon Jun 30 16:52:14 2025 by rpki-client