$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft (raw, json) Hash identifier: l5Cxvabhv320jucwG4Lfeba7wJRe9Z9BNskIEXiRkvI= Subject key identifier: B7:0F:88:41:35:24:2F:80:74:51:89:23:0B:42:5E:3C:DE:7E:CE:D0 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584A5AC4E3ACD411B3C64114AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft Manifest number: 010D0C9F432858493B4550F98B85D16859A8BEAA Signing time: Sun 29 Jun 2025 18:00:08 +0000 Manifest this update: Sun 29 Jun 2025 18:00:08 +0000 Manifest next update: Tue 01 Jul 2025 18:00:00 +0000 Files and hashes: 1: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl (hash: 3LXdD9boBftqjVDx+3kU+gAEwZUIcdF2db5x1nQIKGk=) 2: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (hash: cwNtM8nipQcPGvN0ZDLiMipKC4jZxJA77FpgRSeAEm8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:c4:e3:ac:d4:11:b3:c6:41:14:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Jun 29 18:00:08 2025 GMT Not After : Jul 1 18:00:00 2025 GMT Subject: CN=2280e617-1841-4948-bbc3-c864fc6f5d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:cb:9c:cb:be:a3:9d:98:be:93:9b:28:88: 0c:49:f9:61:17:bf:39:f3:a5:02:af:4b:3e:20:67: 25:6d:fa:99:fc:e9:94:a4:b2:7c:83:86:29:ee:6a: 5d:84:dd:ea:9f:33:97:b2:59:8e:59:04:e0:8f:3d: 54:1f:ff:b1:1c:be:8a:8f:3e:21:88:5e:a7:e0:12: 1c:39:83:9f:9e:40:4b:7d:bf:67:b1:f8:8e:e2:7a: c5:57:7a:02:50:22:6e:dc:7c:1d:d2:e2:86:04:0a: 70:35:36:7c:a1:ee:86:a0:b8:f0:aa:ef:78:d4:07: 33:47:f0:3b:6e:9e:32:60:cc:eb:3b:99:82:13:dd: 84:a8:11:b3:1a:63:b3:01:dc:9e:b8:4f:65:ed:d5: 6e:03:7f:d9:db:ef:aa:be:24:71:43:7f:a0:e2:d9: 32:70:28:af:93:1b:fd:a1:18:48:b9:f2:69:4e:0c: f5:b1:6b:93:b0:da:c1:ba:13:a0:27:74:62:cb:53: c9:e5:6b:a6:91:99:7c:a0:cf:20:7b:3f:58:da:a5: 52:e5:89:e3:c6:8e:5a:6f:1e:7d:f4:23:93:97:88: b8:3d:ba:03:8c:25:bd:39:d0:1b:4f:a4:4e:d1:31: 92:fc:d1:1e:5e:d5:6a:56:81:bb:3d:e3:f5:40:43: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:88:41:35:24:2F:80:74:51:89:23:0B:42:5E:3C:DE:7E:CE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9e:62:3b:66:fc:d6:02:5d:d2:12:eb:9d:39:cb:e7:06:76: 27:a4:98:03:9f:bc:40:56:de:a6:df:97:0a:eb:b7:b2:c7:19: f4:e7:c2:ed:15:45:6e:0f:16:c2:0d:92:59:a1:95:35:f3:b0: d5:a5:07:2c:6a:83:6c:b0:d9:cb:f4:82:31:01:a8:75:ec:6e: 4c:c2:23:20:8e:44:98:03:49:39:52:28:76:99:a1:e5:eb:17: 6b:00:63:46:5b:fd:ae:c8:f2:68:27:5d:34:69:91:25:5c:3a: ab:32:5c:9c:e5:ea:24:e3:51:15:91:7f:cc:ff:39:f2:d5:c7: 92:29:12:9f:f4:ca:72:1c:2a:92:7d:25:5c:31:6b:17:32:93: 4c:39:03:51:2a:88:66:ef:55:1d:a1:12:35:b2:51:63:41:d7: db:99:e0:02:37:63:d1:fd:36:02:e3:51:b2:66:8e:e0:d6:d4: d1:7e:00:a5:30:94:9e:f8:71:17:66:c5:26:df:69:97:e0:5b: 8f:03:a8:ba:a5:23:5a:94:56:13:cf:be:98:02:3c:ef:45:3c: 73:33:fb:fc:26:52:0e:8d:66:d0:ec:ba:ce:03:de:18:8a:a8: f9:bb:7c:e3:0e:d2:a8:22:e5:e0:9f:75:3a:9f:74:c3:ae:62: 5c:d8:e9:ab -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaxOOs1BGzxkEUrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MDYyOTE4MDAwOFoXDTI1MDcwMTE4MDAwMFowLzEtMCsGA1UEAxMk MjI4MGU2MTctMTg0MS00OTQ4LWJiYzMtYzg2NGZjNmY1ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZHLnMu+o52YvpObKIgMSflhF78586UCr0s+ IGclbfqZ/OmUpLJ8g4Yp7mpdhN3qnzOXslmOWQTgjz1UH/+xHL6Kjz4hiF6n4BIc OYOfnkBLfb9nsfiO4nrFV3oCUCJu3Hwd0uKGBApwNTZ8oe6GoLjwqu941AczR/A7 bp4yYMzrO5mCE92EqBGzGmOzAdyeuE9l7dVuA3/Z2++qviRxQ3+g4tkycCivkxv9 oRhIufJpTgz1sWuTsNrBuhOgJ3Riy1PJ5WumkZl8oM8gez9Y2qVS5Ynjxo5abx59 9COTl4i4PboDjCW9OdAbT6RO0TGS/NEeXtVqVoG7PeP1QEPwTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLcPiEE1JC+AdFGJIwtCXjzefs7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMzI3OGU3MDgtZDEyOC00 NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLnmI7ZvzWAl3SEuudOcvn BnYnpJgDn7xAVt6m35cK67eyxxn058LtFUVuDxbCDZJZoZU187DVpQcsaoNssNnL 9IIxAah17G5MwiMgjkSYA0k5Uih2maHl6xdrAGNGW/2uyPJoJ100aZElXDqrMlyc 5eok41EVkX/M/zny1ceSKRKf9MpyHCqSfSVcMWsXMpNMOQNRKohm71UdoRI1slFj QdfbmeACN2PR/TYC41GyZo7g1tTRfgClMJSe+HEXZsUm32mX4FuPA6i6pSNalFYT z76YAjzvRTxzM/v8JlIOjWbQ7LrOA94Yiqj5u3zjDtKoIuXgn3U6n3TDrmJc2Omr -----END CERTIFICATE-----Generated at Mon Jun 30 16:47:42 2025 by rpki-client