$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: HYtZyHexBkoa1pZdHNUSXqFh0o73UwiT3gdD6hdbtP8= Subject key identifier: 39:98:E0:75:7F:8B:29:D6:3F:D4:1C:08:A2:8D:60:E9:B5:60:1F:22 Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584A936AF758120C9B6703C0AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684BE0 Signing time: Sun 20 Jul 2025 01:00:03 +0000 Manifest this update: Sun 20 Jul 2025 01:00:03 +0000 Manifest next update: Tue 22 Jul 2025 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: REVeQotpfr12QeJ7MlvD1dB1ztnb7KzB4iIDMutrY3Q=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: 0Fjcvt4pouKg74pCoS8rvkPKKcq07vE6hVmGAFwgXDM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:6a:f7:58:12:0c:9b:67:03:c0:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: Jul 20 01:00:03 2025 GMT Not After : Jul 22 01:00:00 2025 GMT Subject: CN=8b5a9ad5-7f4e-4822-817b-0ddc82656fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:fb:79:aa:0c:79:61:73:1b:ba:6b:07:6f: 08:65:c9:2f:27:ac:89:46:d9:d9:0d:9d:f4:32:55: 18:13:15:8c:cf:ae:a6:da:bc:16:7b:0b:0a:30:40: 93:72:29:a4:8d:cf:3e:0c:4d:eb:dd:04:3e:12:f9: ba:58:bd:40:c8:a3:68:ca:e4:82:e4:e5:59:25:4d: 59:3b:5b:da:0c:b0:ab:ac:4c:c2:dc:29:ac:7b:f5: 80:7f:09:65:9b:b6:bc:02:11:ba:a4:8c:13:88:3a: 86:99:f3:00:20:a2:8b:b3:f8:f4:20:0e:72:51:41: 53:0a:a3:55:48:4a:e7:0a:5a:02:21:0d:78:19:73: 42:e0:89:95:b7:5c:14:87:5d:eb:71:29:a5:34:1e: 0b:fb:1f:9c:bb:20:9c:10:37:45:44:99:43:33:44: 9a:16:38:f6:ba:38:8c:62:02:69:37:ce:ec:44:4e: 2f:8d:7f:8a:eb:58:5e:30:c4:38:04:b6:6f:a0:7a: 82:e1:c6:0e:06:1b:b4:4f:e5:ac:13:ac:6d:8a:2c: dd:40:68:71:e1:cc:7e:9f:53:75:d9:07:20:db:db: 0a:5f:d5:88:13:16:b6:f7:21:a5:ad:77:95:98:3c: 19:b5:98:99:21:2a:d4:39:7a:7c:1f:25:5a:6a:72: ba:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:98:E0:75:7F:8B:29:D6:3F:D4:1C:08:A2:8D:60:E9:B5:60:1F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:64:2e:c7:c5:68:df:a1:43:43:3b:1e:a7:72:23:f8:88:30: 24:44:d3:4d:dd:fa:28:c9:6a:3d:ff:d7:10:aa:97:cc:36:82: c1:b5:e8:7e:d2:c1:4c:c5:90:c1:de:99:69:08:87:86:07:a2: 78:9d:06:1a:98:56:5e:ff:52:a7:93:df:77:19:65:41:fb:1d: ad:6c:84:8b:43:30:b7:1d:b0:b3:83:31:ba:25:3e:ca:d7:06: 23:00:60:80:47:c2:dd:00:53:6c:e6:3b:8a:e2:0d:23:62:b0: 07:8b:84:63:1d:1b:24:db:e6:02:70:a1:3a:3a:23:90:dd:bb: e1:a1:01:91:be:f1:4f:0e:65:a7:c9:1b:01:14:5b:2a:2b:72: b6:2e:51:46:d0:b8:32:e1:e0:52:d2:f4:1b:f5:c5:bc:42:75: 9f:b2:4f:40:ad:69:ec:32:f7:e9:d4:49:3a:a8:03:c3:06:d0: 75:68:a0:f6:86:26:e1:88:17:66:5d:0b:39:ba:3f:1b:70:3c: a3:91:78:ce:9a:5f:e3:ff:12:3b:42:13:19:71:1a:4e:31:be: 63:09:11:5d:88:93:c8:00:8b:82:31:19:6d:42:65:bd:06:85: ac:0d:0a:63:00:fc:48:12:c4:27:ee:24:7f:70:ea:51:6c:16: d3:44:ac:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqTavdYEgybZwPAr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MDcyMDAxMDAwM1oXDTI1MDcyMjAxMDAwMFowLzEtMCsGA1UEAxMk OGI1YTlhZDUtN2Y0ZS00ODIyLTgxN2ItMGRkYzgyNjU2ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3P7eaoMeWFzG7prB28IZckvJ6yJRtnZDZ30 MlUYExWMz66m2rwWewsKMECTcimkjc8+DE3r3QQ+Evm6WL1AyKNoyuSC5OVZJU1Z O1vaDLCrrEzC3Cmse/WAfwllm7a8AhG6pIwTiDqGmfMAIKKLs/j0IA5yUUFTCqNV SErnCloCIQ14GXNC4ImVt1wUh13rcSmlNB4L+x+cuyCcEDdFRJlDM0SaFjj2ujiM YgJpN87sRE4vjX+K61heMMQ4BLZvoHqC4cYOBhu0T+WsE6xtiizdQGhx4cx+n1N1 2Qcg29sKX9WIExa29yGlrXeVmDwZtZiZISrUOXp8HyVaanK62wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDmY4HV/iynWP9QcCKKNYOm1YB8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGZC7HxWjfoUNDOx6nciP4 iDAkRNNN3fooyWo9/9cQqpfMNoLBteh+0sFMxZDB3plpCIeGB6J4nQYamFZe/1Kn k993GWVB+x2tbISLQzC3HbCzgzG6JT7K1wYjAGCAR8LdAFNs5juK4g0jYrAHi4Rj HRsk2+YCcKE6OiOQ3bvhoQGRvvFPDmWnyRsBFFsqK3K2LlFG0Lgy4eBS0vQb9cW8 QnWfsk9ArWnsMvfp1Ek6qAPDBtB1aKD2hibhiBdmXQs5uj8bcDyjkXjOml/j/xI7 QhMZcRpOMb5jCRFdiJPIAIuCMRltQmW9BoWsDQpjAPxIEsQn7iR/cOpRbBbTRKxD -----END CERTIFICATE-----Generated at Sun Jul 20 18:55:58 2025 by rpki-client