$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft File: 03aa7869-00ee-4a38-9822-b5f285ade0c3.mft (raw, json) Hash identifier: htq2MiZ0EA/kZ4I/Gbnzi7cOFPq0YmBuMtas8kzE5YU= Subject key identifier: 82:8E:04:FB:23:67:0B:98:DA:10:55:48:2D:1A:34:55:49:B4:30:24 Authority key identifier: B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3 Certificate issuer: /CN=03aa7869-00ee-4a38-9822-b5f285ade0c3 Certificate serial: 010D0C9F4328584A761AD4FA4ED122867379F660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft Manifest number: 010D0C9F4328584073A8551217A1309A69CD96EB Signing time: Wed 09 Jul 2025 13:00:08 +0000 Manifest this update: Wed 09 Jul 2025 13:00:08 +0000 Manifest next update: Fri 11 Jul 2025 13:00:00 +0000 Files and hashes: 1: 03aa7869-00ee-4a38-9822-b5f285ade0c3.crl (hash: LIUQMCDi5MGGrOXckIYWcvdMNjYsEmlsXZ0AQV2veP4=) 2: 736f6207-67a5-36c6-aa84-fc58d77c2dab.roa (hash: UIGq3GiLkF2sPDgexmMPg2CyJGtRmuLZOro58gZO+tc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1a:d4:fa:4e:d1:22:86:73:79:f6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03aa7869-00ee-4a38-9822-b5f285ade0c3 Validity Not Before: Jul 9 13:00:08 2025 GMT Not After : Jul 11 13:00:00 2025 GMT Subject: CN=4d2cffa1-1a70-4a49-a75e-9a1ee90847ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:6a:e4:63:bd:7e:3d:b2:5b:de:e4:36:40: 68:05:9a:e1:b7:d3:71:b3:e5:92:28:7e:6f:9c:f8: 86:f8:27:57:1e:b6:29:37:3f:3f:0b:a1:69:6d:f1: 6f:f8:7f:20:a3:91:41:03:8b:b3:40:9f:e1:de:10: 28:a4:1e:20:04:99:60:ea:ed:51:35:b5:db:97:a2: cb:87:b8:87:4f:74:c8:af:d8:4a:3b:14:2b:34:1f: 36:e5:6f:81:d1:74:7f:80:83:50:9e:fd:f0:07:43: d0:77:4e:48:ac:9b:01:95:26:17:2c:0a:14:14:26: 70:44:c5:14:54:c5:58:8b:b2:a2:2a:ad:a6:e2:dc: c1:2d:f2:59:40:b8:72:3f:a3:1f:53:18:14:47:39: a6:20:40:e0:d1:5a:b2:59:02:a1:ab:34:0e:20:ec: 4c:f1:e4:ca:bb:56:97:5a:fa:65:e8:11:fe:3d:1c: 58:37:f6:90:ee:19:00:97:88:5d:e7:c0:c0:19:0f: c3:87:fd:e2:38:56:9c:9b:e2:7c:2e:16:87:c2:44: c0:06:3b:de:03:60:99:5e:5e:01:d4:b1:e7:dd:e2: 30:ca:a6:33:4f:4e:11:12:23:8d:c3:ac:77:6d:f1: 17:cb:2d:76:25:0a:d9:16:18:c3:df:63:13:e1:0d: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8E:04:FB:23:67:0B:98:DA:10:55:48:2D:1A:34:55:49:B4:30:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3/03aa7869-00ee-4a38-9822-b5f285ade0c3.crl X509v3 Authority Key Identifier: keyid:B1:F0:4A:98:7A:73:4A:9A:E6:3F:56:04:3C:52:06:DF:A3:73:77:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/03aa7869-00ee-4a38-9822-b5f285ade0c3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:8f:75:21:1c:07:49:c0:bf:a7:82:86:40:cc:84:c2:e9:30: 2d:e8:d6:27:6d:f2:eb:21:ed:f3:f6:f1:d0:88:1d:ed:ff:50: bb:b8:c2:20:3e:5f:10:57:91:32:d8:11:5a:80:30:7b:9f:89: 1a:fb:3b:d7:00:92:eb:03:d6:fe:c3:7f:5d:f3:35:48:5b:25: 8f:62:79:98:4b:9e:bc:c5:7b:24:72:ca:0f:1e:c3:42:4b:ae: d1:c0:61:ba:35:21:50:1d:45:6c:61:96:d0:a6:cc:09:2d:08: 28:64:e6:99:3f:16:5c:99:4a:2b:85:7a:a1:91:f9:ad:08:fb: 51:da:d9:c0:9e:14:1f:e7:58:d3:d7:a9:2a:ca:5c:1a:04:9d: 03:80:7e:94:78:87:bb:31:5a:4f:69:69:b8:5c:24:f1:da:10: 2d:a7:e5:d7:17:21:48:cf:5d:96:a6:73:93:6c:7b:4b:07:83: 82:8f:9d:8a:62:5e:86:ec:a9:cf:59:8a:8d:15:61:2b:8c:2f: 16:f4:be:49:71:2e:fa:ab:5b:71:68:8b:1c:a1:15:8f:bf:9f: 08:a3:50:d3:ae:4f:85:ac:67:8e:5a:dd:0e:01:4e:51:86:19: c0:28:14:61:8b:95:f9:94:b5:fe:2b:58:d2:3f:d1:58:e8:91: 6d:5c:b2:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2GtT6TtEihnN59mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNhYTc4NjktMDBlZS00YTM4LTk4MjItYjVmMjg1YWRl MGMzMB4XDTI1MDcwOTEzMDAwOFoXDTI1MDcxMTEzMDAwMFowLzEtMCsGA1UEAxMk NGQyY2ZmYTEtMWE3MC00YTQ5LWE3NWUtOWExZWU5MDg0N2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPpq5GO9fj2yW97kNkBoBZrht9Nxs+WSKH5v nPiG+CdXHrYpNz8/C6FpbfFv+H8go5FBA4uzQJ/h3hAopB4gBJlg6u1RNbXbl6LL h7iHT3TIr9hKOxQrNB825W+B0XR/gINQnv3wB0PQd05IrJsBlSYXLAoUFCZwRMUU VMVYi7KiKq2m4tzBLfJZQLhyP6MfUxgURzmmIEDg0VqyWQKhqzQOIOxM8eTKu1aX Wvpl6BH+PRxYN/aQ7hkAl4hd58DAGQ/Dh/3iOFacm+J8LhaHwkTABjveA2CZXl4B 1LHn3eIwyqYzT04REiONw6x3bfEXyy12JQrZFhjD32MT4Q08+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIKOBPsjZwuY2hBVSC0aNFVJtDAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wM2Fh Nzg2OS0wMGVlLTRhMzgtOTgyMi1iNWYyODVhZGUwYzMvMDNhYTc4NjktMDBlZS00 YTM4LTk4MjItYjVmMjg1YWRlMGMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDNhYTc4NjktMDBlZS00YTM4LTk4 MjItYjVmMjg1YWRlMGMzLzAzYWE3ODY5LTAwZWUtNGEzOC05ODIyLWI1ZjI4NWFk ZTBjMy5jcmwwHwYDVR0jBBgwFoAUsfBKmHpzSprmP1YEPFIG36Nzd/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wM2FhNzg2OS0wMGVlLTRhMzgtOTgyMi1iNWYy ODVhZGUwYzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1j3UhHAdJwL+ngoZAzITC 6TAt6NYnbfLrIe3z9vHQiB3t/1C7uMIgPl8QV5Ey2BFagDB7n4ka+zvXAJLrA9b+ w39d8zVIWyWPYnmYS568xXskcsoPHsNCS67RwGG6NSFQHUVsYZbQpswJLQgoZOaZ PxZcmUorhXqhkfmtCPtR2tnAnhQf51jT16kqylwaBJ0DgH6UeIe7MVpPaWm4XCTx 2hAtp+XXFyFIz12WpnOTbHtLB4OCj52KYl6G7KnPWYqNFWErjC8W9L5JcS76q1tx aIscoRWPv58Io1DTrk+FrGeOWt0OAU5RhhnAKBRhi5X5lLX+K1jSP9FY6JFtXLJy -----END CERTIFICATE-----Generated at Wed Jul 9 22:28:00 2025 by rpki-client