$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft File: 2bc7e484-64e7-46cb-a15c-360a60b362d4.mft (raw, json) Hash identifier: iqXS1OYr4iOJd9G+F8zNnuzIWo9F02IX9L4x4EIlwNQ= Subject key identifier: 6D:3E:12:9E:67:30:8C:DC:A0:DF:98:2F:1C:78:93:92:C7:DA:22:4D Authority key identifier: 85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F Certificate issuer: /CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Certificate serial: 010D0C9F4328584A997770DC9803E13917CAEE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft Manifest number: 010D0C9F43285849EC71F2215FA457AA7D9E2DBE Signing time: Tue 22 Jul 2025 05:00:03 +0000 Manifest this update: Tue 22 Jul 2025 05:00:03 +0000 Manifest next update: Fri 25 Jul 2025 05:00:00 +0000 Files and hashes: 1: 2bc7e484-64e7-46cb-a15c-360a60b362d4.crl (hash: K+Ci1P6xT/VVdyBkIOIDnnRHP4qENBLyluZ8pvTYRnI=) 2: 7722b6fa-bf13-3492-9f48-6ac6ae976b84.roa (hash: KKxtSPr7tTe+nnPB6NYMtUBb8e3flm+uWzd9ndmPb2o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:77:70:dc:98:03:e1:39:17:ca:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7e484-64e7-46cb-a15c-360a60b362d4 Validity Not Before: Jul 22 05:00:03 2025 GMT Not After : Jul 25 05:00:00 2025 GMT Subject: CN=3eecbb3d-8200-4890-8de2-a939e7f6f40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f5:a9:47:3d:1f:24:9a:f1:6c:26:2b:8d:0d: d4:5e:a3:77:1e:2d:70:e2:b0:52:a9:6e:c2:f1:47: 3e:d4:5a:9d:c9:2d:e4:6d:c1:29:8b:6d:33:82:58: 51:07:cf:29:6e:0f:21:7f:cf:a4:ee:47:3e:f5:50: 5e:7f:e0:cf:d6:99:4a:dd:d6:85:ac:c8:ce:7b:91: c1:7d:21:2e:f1:8c:a0:eb:41:46:13:68:7d:bf:ee: 18:c3:78:16:26:df:b7:0f:6c:f4:91:f8:46:8e:58: 08:5b:2a:f2:44:31:36:d7:25:26:7b:3c:e6:d7:6d: db:db:52:62:36:47:59:1e:3f:06:2a:bd:b8:d1:08: 61:10:95:bc:1d:5b:47:2b:22:03:b9:b3:cc:1b:91: 1b:f0:39:2b:98:a3:21:17:a5:08:c0:f1:91:28:75: aa:44:81:96:91:c8:94:f1:3d:2c:c8:a5:05:78:95: c6:f1:12:f5:2a:8e:a7:53:c2:60:1f:ed:81:dc:62: 32:bb:ac:df:fd:05:1b:4c:64:bf:53:e4:c7:4e:6b: e3:e0:55:ec:0b:49:78:95:e8:b6:21:2e:d8:ca:36: b7:63:76:a3:a4:fe:50:9f:b5:76:72:c8:2a:ec:f1: 96:fa:66:eb:6d:c6:b8:11:bc:32:de:d3:0b:b9:45: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3E:12:9E:67:30:8C:DC:A0:DF:98:2F:1C:78:93:92:C7:DA:22:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4/2bc7e484-64e7-46cb-a15c-360a60b362d4.crl X509v3 Authority Key Identifier: keyid:85:02:7D:88:55:CD:52:14:0B:80:1D:0B:92:F7:82:74:C0:2A:5A:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc7e484-64e7-46cb-a15c-360a60b362d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:12:4b:19:86:b5:16:55:ce:9b:c0:1c:5f:89:f7:fc:e4:4a: e2:97:16:dc:d5:82:7d:72:b8:d1:f2:b8:65:8c:f8:66:df:9f: d3:d8:27:b0:3d:93:e4:de:86:39:55:95:86:ad:dc:23:43:88: c4:52:92:5e:a7:6d:6e:ae:82:fe:db:64:e9:11:37:55:41:e4: b0:ec:85:e1:70:8c:36:65:7f:ad:4f:c5:9f:eb:b3:3b:b0:ab: de:98:6e:bb:97:60:1f:5d:53:fe:71:dc:52:15:1f:45:ff:59: 4d:27:bf:f7:1e:f8:ee:99:ae:e1:b7:ee:6d:6c:0c:93:59:62: 21:bd:03:71:49:98:a0:98:9a:a4:23:10:56:c4:92:4b:d0:88: f1:0f:8f:0a:4b:44:5b:e0:96:fe:93:4f:c4:09:b8:e9:7e:7b: 25:5f:c4:44:c1:a5:30:7b:86:07:e1:11:d8:d4:82:bf:0e:88: 54:f7:a5:b8:67:78:c6:55:94:21:8f:b4:e9:ba:a6:7d:d3:92: 96:9b:b8:50:8b:76:d6:df:32:5a:ed:62:fe:d7:d8:d3:db:48: af:0e:b6:70:c7:60:1a:bf:d7:33:8a:12:06:aa:54:92:71:e9: 49:cf:2f:23:33:41:d4:2d:63:57:d7:29:4b:e6:23:7b:3c:b4: a3:f0:79:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqZd3DcmAPhORfK7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjN2U0ODQtNjRlNy00NmNiLWExNWMtMzYwYTYwYjM2 MmQ0MB4XDTI1MDcyMjA1MDAwM1oXDTI1MDcyNTA1MDAwMFowLzEtMCsGA1UEAxMk M2VlY2JiM2QtODIwMC00ODkwLThkZTItYTkzOWU3ZjZmNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfWpRz0fJJrxbCYrjQ3UXqN3Hi1w4rBSqW7C 8Uc+1FqdyS3kbcEpi20zglhRB88pbg8hf8+k7kc+9VBef+DP1plK3daFrMjOe5HB fSEu8Yyg60FGE2h9v+4Yw3gWJt+3D2z0kfhGjlgIWyryRDE21yUmezzm123b21Ji NkdZHj8GKr240QhhEJW8HVtHKyIDubPMG5Eb8DkrmKMhF6UIwPGRKHWqRIGWkciU 8T0syKUFeJXG8RL1Ko6nU8JgH+2B3GIyu6zf/QUbTGS/U+THTmvj4FXsC0l4lei2 IS7Yyja3Y3ajpP5Qn7V2csgq7PGW+mbrbca4Ebwy3tMLuUXlZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG0+Ep5nMIzcoN+YLxx4k5LH2iJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3 ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBhNjBiMzYyZDQvMmJjN2U0ODQtNjRlNy00 NmNiLWExNWMtMzYwYTYwYjM2MmQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjN2U0ODQtNjRlNy00NmNiLWEx NWMtMzYwYTYwYjM2MmQ0LzJiYzdlNDg0LTY0ZTctNDZjYi1hMTVjLTM2MGE2MGIz NjJkNC5jcmwwHwYDVR0jBBgwFoAUhQJ9iFXNUhQLgB0LkveCdMAqWk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM3ZTQ4NC02NGU3LTQ2Y2ItYTE1Yy0zNjBh NjBiMzYyZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDEksZhrUWVc6bwBxfiff8 5Erilxbc1YJ9crjR8rhljPhm35/T2CewPZPk3oY5VZWGrdwjQ4jEUpJep21uroL+ 22TpETdVQeSw7IXhcIw2ZX+tT8Wf67M7sKvemG67l2AfXVP+cdxSFR9F/1lNJ7/3 Hvjuma7ht+5tbAyTWWIhvQNxSZigmJqkIxBWxJJL0IjxD48KS0Rb4Jb+k0/ECbjp fnslX8REwaUwe4YH4RHY1IK/DohU96W4Z3jGVZQhj7TpuqZ905KWm7hQi3bW3zJa 7WL+19jT20ivDrZwx2Aav9czihIGqlSScelJzy8jM0HULWNX1ylL5iN7PLSj8HlD -----END CERTIFICATE-----Generated at Tue Jul 22 19:30:39 2025 by rpki-client