$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft File: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft (raw, json) Hash identifier: ffo0QEiYo625tGYRE7K1GWkqao8pK7qLrq7cSmZfQ84= Subject key identifier: 3B:C8:21:D6:30:88:2F:8D:5C:26:0C:2F:52:BB:BC:D7:E7:94:CE:D3 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584A92D6147C4BDAEDB9728A6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft Manifest number: 010D0C9F4328584073A827C096A3F2C101EAFCB6 Signing time: Sat 19 Jul 2025 20:00:03 +0000 Manifest this update: Sat 19 Jul 2025 20:00:03 +0000 Manifest next update: Tue 22 Jul 2025 20:00:00 +0000 Files and hashes: 1: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (hash: iMsm/aZ56PFPUCbTqCd2w6CpIzMise8JqJNLw9wOIxo=) 2: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl (hash: sw1Fh3z5oqWogaTRgGxhza6GZ7+GPkbb+aE1v3BCG3s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:d6:14:7c:4b:da:ed:b9:72:8a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Jul 19 20:00:03 2025 GMT Not After : Jul 22 20:00:00 2025 GMT Subject: CN=e70b01dd-64be-4313-843c-2d37967944d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:99:23:50:fa:0e:4a:86:35:fb:8b:61:90: 4b:e4:3d:7e:35:2e:b8:b5:60:95:c7:3e:59:0b:2a: b6:13:66:b3:1e:ee:69:e6:48:68:f8:34:f3:70:3a: a8:b6:b9:33:07:24:67:2c:7e:af:d3:2b:84:91:31: 0a:38:01:ae:8b:ca:ff:23:71:2c:f2:f3:ed:00:2a: 22:96:4d:34:52:73:cb:31:a4:b8:b3:c2:f6:3f:f1: 94:c6:d7:54:93:8a:64:04:33:5c:21:af:ba:18:c4: b1:00:28:94:66:04:85:0e:7c:bd:43:10:85:64:c2: d6:8e:52:b2:b2:ce:14:c2:f5:d6:6a:7b:09:bf:18: a7:ff:ca:83:7f:c6:c1:58:b7:cd:39:03:4d:77:98: 3a:b6:ec:d7:0e:82:30:db:fc:45:0f:40:f0:76:97: 42:c1:43:de:18:dc:da:24:65:68:d8:70:9a:b3:ee: 74:32:f2:0d:f9:ae:54:52:22:70:8f:81:ca:88:2e: 3b:ce:7b:3d:00:f2:fe:17:a1:c8:fb:31:54:73:da: 78:12:08:06:17:26:6d:2a:df:27:84:c1:33:b1:21: 40:24:fb:3d:1a:3e:2a:7e:df:53:bb:26:e5:3c:4f: 17:95:7b:11:be:c1:e7:cf:9d:92:5f:b0:99:32:36: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C8:21:D6:30:88:2F:8D:5C:26:0C:2F:52:BB:BC:D7:E7:94:CE:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6b:13:25:e5:80:f3:d9:95:a0:36:2c:c7:1e:d9:9f:20:54: 13:bb:9e:2f:b9:08:bb:84:fe:fa:87:ef:06:8c:4f:08:26:21: be:82:4d:71:62:69:65:bd:75:6f:4c:86:76:45:0b:a7:85:33: 1c:b1:06:d3:d8:7b:2c:45:1e:01:1a:24:a5:6a:05:a6:48:a9: 64:58:b7:14:99:bc:be:57:e1:85:c7:81:47:19:24:a7:ae:03: 8f:d2:61:a7:91:db:3d:fe:a9:00:3f:16:80:fd:4c:d5:b8:53: 00:74:2c:25:9a:0c:7d:a5:1b:d9:54:7f:3a:52:11:fc:87:0c: c5:f8:39:ec:53:31:ff:d1:50:70:6e:7d:04:95:b9:88:af:70: 6b:c9:13:7d:11:c9:f1:a8:ae:a9:c3:f8:8f:d8:7c:8b:97:88: 5e:a2:5f:37:4b:0b:be:0a:e1:60:79:47:65:c1:14:c0:1b:b8: b2:75:35:5e:55:7a:fc:e6:7f:dd:f2:0a:02:17:9b:ee:91:62: 29:f9:44:f6:25:fb:ff:e7:ba:d3:21:a7:04:a4:0e:59:69:16: 2f:3c:52:b9:fc:b3:10:f6:72:98:3a:52:ee:0c:06:05:f6:fe: 8f:72:58:d2:51:08:b3:32:0c:87:2d:54:ab:47:79:08:10:44: ba:63:0a:65 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqS1hR8S9rtuXKKYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI1MDcxOTIwMDAwM1oXDTI1MDcyMjIwMDAwMFowLzEtMCsGA1UEAxMk ZTcwYjAxZGQtNjRiZS00MzEzLTg0M2MtMmQzNzk2Nzk0NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkyZI1D6DkqGNfuLYZBL5D1+NS64tWCVxz5Z Cyq2E2azHu5p5kho+DTzcDqotrkzByRnLH6v0yuEkTEKOAGui8r/I3Es8vPtACoi lk00UnPLMaS4s8L2P/GUxtdUk4pkBDNcIa+6GMSxACiUZgSFDny9QxCFZMLWjlKy ss4UwvXWansJvxin/8qDf8bBWLfNOQNNd5g6tuzXDoIw2/xFD0DwdpdCwUPeGNza JGVo2HCas+50MvIN+a5UUiJwj4HKiC47zns9APL+F6HI+zFUc9p4EggGFyZtKt8n hMEzsSFAJPs9Gj4qft9TuyblPE8XlXsRvsHnz52SX7CZMjbfKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDvIIdYwiC+NXCYML1K7vNfnlM7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvYmQ2NTk3NWUtZDIyOS00 NWI3LWJkYmUtNDZhYjhmNWQ0ZDA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzaxMl5YDz2ZWgNizHHtmf IFQTu54vuQi7hP76h+8GjE8IJiG+gk1xYmllvXVvTIZ2RQunhTMcsQbT2HssRR4B GiSlagWmSKlkWLcUmby+V+GFx4FHGSSnrgOP0mGnkds9/qkAPxaA/UzVuFMAdCwl mgx9pRvZVH86UhH8hwzF+DnsUzH/0VBwbn0ElbmIr3BryRN9EcnxqK6pw/iP2HyL l4heol83Swu+CuFgeUdlwRTAG7iydTVeVXr85n/d8goCF5vukWIp+UT2Jfv/57rT IacEpA5ZaRYvPFK5/LMQ9nKYOlLuDAYF9v6PcljSUQizMgyHLVSrR3kIEES6Ywpl -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:06 2025 by rpki-client