$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft File: 25422be5-720b-40bc-8a4d-02579ec1bead.mft (raw, json) Hash identifier: ulLRJKeV9+KRjTMHG4AAcRoQTlchTsD9JEFNSkp3A4Y= Subject key identifier: 1C:72:D9:60:A0:BC:23:4F:FC:37:B1:49:71:9B:79:4C:D0:F7:EF:10 Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584A5F4E3A77904099188A39C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft Manifest number: 010D0C9F4328584073A84B9C832FD0665142AA02 Signing time: Tue 01 Jul 2025 09:00:08 +0000 Manifest this update: Tue 01 Jul 2025 09:00:08 +0000 Manifest next update: Thu 03 Jul 2025 09:00:00 +0000 Files and hashes: 1: 25422be5-720b-40bc-8a4d-02579ec1bead.crl (hash: dg9y+Yeb7d7JlBI69cKC6PBWYtwkv1zukSLWDd9kLpM=) 2: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (hash: BYh8e1DvJIZm+gMQf1eqHSVSCMWsb6dwZH+sDp9WoTU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:4e:3a:77:90:40:99:18:8a:39:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Jul 1 09:00:08 2025 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=9d0a9749-b7a2-47c9-8d11-7232ed084b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:8d:c1:27:dd:81:db:26:ab:0f:c5:34:d9: bc:dd:2e:f8:cc:4c:7d:ec:58:80:26:83:6f:11:fa: 44:7b:ad:2f:49:e0:96:2d:7f:18:50:ae:81:2a:80: 64:cf:37:14:44:47:1d:d1:fa:0c:5b:6b:a5:b0:33: db:5f:01:ec:ae:82:82:79:81:c0:22:a6:01:a3:aa: 8e:37:ae:0b:4c:aa:7a:97:bd:88:c1:5e:9c:0a:41: 2c:8c:2e:fa:7c:9a:ca:69:87:01:d3:33:6b:c3:61: ac:86:7d:e2:db:50:00:7d:a9:c0:03:82:a7:00:8b: 9d:e6:92:95:e9:02:ad:14:de:bf:1d:4c:8c:a2:b8: 95:d2:71:53:9d:e7:26:30:8e:3e:84:43:89:e4:91: 6b:28:40:ec:b8:ef:30:82:21:dd:11:7a:f1:54:6f: c9:7c:ef:7c:a7:1c:1c:bf:3e:8e:ab:ba:04:08:cf: 50:4c:5a:d4:61:02:e7:29:43:e8:31:f9:fa:99:4f: 66:40:9e:c3:17:7a:12:34:8d:37:f5:a6:fc:8c:45: 9b:db:4f:fc:4b:c9:d9:f0:de:29:dc:89:f4:1e:bc: a7:f2:5e:4a:cc:a7:e2:a8:95:56:15:35:ff:fc:9d: fe:6e:9c:6d:81:1b:18:07:86:05:b7:ff:e9:ce:58: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:D9:60:A0:BC:23:4F:FC:37:B1:49:71:9B:79:4C:D0:F7:EF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:87:08:1e:df:50:45:54:f4:08:48:30:6b:51:0e:63:c1:3d: d5:c3:bb:c0:15:98:6a:c2:1a:59:4a:03:07:99:38:32:10:e0: 64:36:a0:8f:ac:cf:eb:c0:54:33:80:82:32:37:d1:b1:ba:36: d8:a3:0f:5b:ac:91:45:18:21:12:c8:d7:57:d8:fa:c4:12:20: 51:90:8f:ce:2a:db:c5:65:f6:cd:af:15:b0:d7:9f:cf:4f:74: 6f:58:ee:f7:68:a3:64:29:9b:ab:c9:da:64:cc:cd:23:a1:4d: 6e:55:63:3d:a6:2d:e9:a2:53:a4:86:45:22:86:64:73:a5:80: fb:96:a5:8a:16:c2:59:cb:4e:f5:cb:37:9e:60:af:10:47:fa: 8f:e2:fc:91:b5:1b:7a:ad:1c:ad:ee:2c:f3:59:c4:a4:04:1c: b4:be:8b:f8:a6:32:2f:66:1b:59:57:b3:80:6f:56:36:2c:57: ef:46:25:19:50:e3:84:49:2b:fd:bd:26:37:39:82:c5:a1:ff: 9b:2d:21:6f:6b:ae:ee:ca:97:a6:5b:41:1d:30:66:e5:3f:71: 3a:a3:01:18:4c:68:77:08:ff:da:f0:f0:1c:c6:da:15:ef:5b: fc:3f:5f:b1:1d:14:84:32:33:ca:4c:1f:10:63:a9:68:c3:c9: 71:c2:75:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfTjp3kECZGIo5wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI1MDcwMTA5MDAwOFoXDTI1MDcwMzA5MDAwMFowLzEtMCsGA1UEAxMk OWQwYTk3NDktYjdhMi00N2M5LThkMTEtNzIzMmVkMDg0YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+NwSfdgdsmqw/FNNm83S74zEx97FiAJoNv EfpEe60vSeCWLX8YUK6BKoBkzzcUREcd0foMW2ulsDPbXwHsroKCeYHAIqYBo6qO N64LTKp6l72IwV6cCkEsjC76fJrKaYcB0zNrw2Gshn3i21AAfanAA4KnAIud5pKV 6QKtFN6/HUyMoriV0nFTnecmMI4+hEOJ5JFrKEDsuO8wgiHdEXrxVG/JfO98pxwc vz6Oq7oECM9QTFrUYQLnKUPoMfn6mU9mQJ7DF3oSNI039ab8jEWb20/8S8nZ8N4p 3In0Hryn8l5KzKfiqJVWFTX//J3+bpxtgRsYB4YFt//pzlgs1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBxy2WCgvCNP/DexSXGbeUzQ9+8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMjU0MjJiZTUtNzIwYi00 MGJjLThhNGQtMDI1NzllYzFiZWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBghwge31BFVPQISDBrUQ5j wT3Vw7vAFZhqwhpZSgMHmTgyEOBkNqCPrM/rwFQzgIIyN9GxujbYow9brJFFGCES yNdX2PrEEiBRkI/OKtvFZfbNrxWw15/PT3RvWO73aKNkKZurydpkzM0joU1uVWM9 pi3polOkhkUihmRzpYD7lqWKFsJZy071yzeeYK8QR/qP4vyRtRt6rRyt7izzWcSk BBy0vov4pjIvZhtZV7OAb1Y2LFfvRiUZUOOESSv9vSY3OYLFof+bLSFva67uypem W0EdMGblP3E6owEYTGh3CP/a8PAcxtoV71v8P1+xHRSEMjPKTB8QY6low8lxwnXq -----END CERTIFICATE-----Generated at Tue Jul 1 20:59:41 2025 by rpki-client