$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft File: 0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft (raw, json) Hash identifier: 9sauePl0S6dzPWOr9Sti/Vp9Fjappw7K8+jyk7Ig89U= Subject key identifier: A3:4E:ED:23:8C:FA:C2:AD:B3:26:E2:0E:1A:6C:B6:01:F4:F7:94:37 Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Certificate serial: 010D0C9F4328584A5E5FF6D03982C7BFD8AF1C20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft Manifest number: 010D0C9F4328584073A8337A340EB376B1F8F778 Signing time: Tue 01 Jul 2025 01:00:03 +0000 Manifest this update: Tue 01 Jul 2025 01:00:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: 0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl (hash: XKPBh25h9yihVUwVwqtKUcQs0fIqd/L3UKZoYd9batI=) 2: 896bba77-8553-37ca-90e0-b8ef42e49c98.roa (hash: sZcJQBQkVDlmUyir+qa9j9wW89zAUokgEHQLEa+wQ8Y=) 3: a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (hash: t1pcpjLEadT4QmhUfhDcpXpIDBMjRO7FIiKh/qzOS8U=) 4: de1340c7-c065-3ffc-b8a2-c28d45a357e5.roa (hash: kOyXcvmYj5//p87/x19PZMbP3B//Bp9UGewvF4Dpl8w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:5f:f6:d0:39:82:c7:bf:d8:af:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e Validity Not Before: Jul 1 01:00:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=a3b82ef8-ee88-4a52-b7c5-9fe77ae236ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:fa:3b:4f:4b:be:d6:f1:b5:51:43:b9:e6: 41:57:37:8e:83:70:18:5f:47:56:df:19:b3:15:24: 8d:11:28:27:b4:8e:43:35:51:1d:de:43:24:84:f2: 0d:7b:ab:67:30:43:92:00:ec:93:88:8a:3f:c0:80: 36:bb:9a:29:9f:2c:45:69:42:a0:8d:b4:b7:b9:c8: f8:9c:a0:16:91:ff:06:ec:66:44:47:b4:1c:ed:ca: 70:95:8d:fc:9a:53:77:42:b6:ac:14:17:57:cf:e0: be:fa:bf:56:fd:d2:ca:28:20:8e:56:c0:ef:cb:ef: d9:8a:f4:63:ad:56:69:0d:75:62:9f:06:68:6b:c1: 81:fe:68:bb:0c:24:d9:e5:26:c9:9b:09:55:c7:15: 18:24:0b:58:47:a5:3c:49:0b:77:d1:d3:b0:f0:b9: 94:d0:aa:3d:df:48:3b:6d:7b:ec:ee:47:da:26:98: b1:f7:cb:da:67:f5:78:cc:b1:fa:76:09:01:aa:85: dd:66:47:24:ac:99:0d:32:ee:64:b3:f6:ce:c9:ed: 1d:c8:11:b9:4b:95:0a:ae:61:12:b0:dd:95:76:52: 52:3a:bd:b4:ee:d5:b6:80:38:56:31:71:9d:d0:f0: 8e:53:c9:f8:0f:f3:45:da:17:24:ce:91:03:c3:45: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4E:ED:23:8C:FA:C2:AD:B3:26:E2:0E:1A:6C:B6:01:F4:F7:94:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl X509v3 Authority Key Identifier: keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:de:39:e4:9e:e1:06:6d:ac:c7:0f:8a:e9:cd:39:42:12:3e: 74:90:42:d8:63:99:99:a4:39:a3:62:8a:90:c3:fb:d3:03:47: 3c:08:01:66:df:90:d4:e4:a1:18:4c:90:74:9e:65:80:05:69: 13:91:2e:d6:05:c5:55:ed:5d:78:45:8a:04:9a:a4:3b:11:27: a8:65:f4:66:ec:d0:5c:30:fb:9c:01:9e:39:4f:df:ae:11:0a: 11:31:e3:d0:fe:24:12:4b:62:22:e3:d7:41:c6:a1:1b:9f:26: 99:c0:e8:f8:8a:db:ff:67:4a:51:b7:d9:43:97:e7:22:8d:d5: c3:6d:3f:4a:64:20:a2:b3:46:18:d0:2a:c3:ed:ce:9e:46:a4: d2:46:56:3d:57:ff:8d:08:d8:44:6d:70:a8:34:2f:c9:9f:5f: ba:4f:77:74:9c:e7:cb:1f:bf:e3:07:37:32:a5:41:fa:ae:03: f9:07:5f:07:ff:c0:61:f6:05:0b:3b:83:09:bb:72:1a:51:a0: 2f:db:99:63:34:bf:4f:e2:28:7a:ab:da:5c:48:15:72:73:cf: 2f:4a:40:c0:aa:83:57:80:9d:80:d8:a7:b6:fb:e3:02:f2:6c: 51:9a:77:62:55:df:60:3e:69:73:6b:2b:b8:40:d8:e7:a5:78: 67:2e:f8:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeX/bQOYLHv9ivHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxZmNhNzgtOWQ5OC00NTU5LWJkNTEtODBhNmM0N2Jh MDFlMB4XDTI1MDcwMTAxMDAwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk YTNiODJlZjgtZWU4OC00YTUyLWI3YzUtOWZlNzdhZTIzNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20H6O09LvtbxtVFDueZBVzeOg3AYX0dW3xmz FSSNESgntI5DNVEd3kMkhPINe6tnMEOSAOyTiIo/wIA2u5opnyxFaUKgjbS3ucj4 nKAWkf8G7GZER7Qc7cpwlY38mlN3QrasFBdXz+C++r9W/dLKKCCOVsDvy+/ZivRj rVZpDXVinwZoa8GB/mi7DCTZ5SbJmwlVxxUYJAtYR6U8SQt30dOw8LmU0Ko930g7 bXvs7kfaJpix98vaZ/V4zLH6dgkBqoXdZkckrJkNMu5ks/bOye0dyBG5S5UKrmES sN2VdlJSOr207tW2gDhWMXGd0PCOU8n4D/NF2hckzpEDw0ULewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKNO7SOM+sKtsybiDhpstgH095Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFm Y2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2YzQ3YmEwMWUvMGQxZmNhNzgtOWQ5OC00 NTU5LWJkNTEtODBhNmM0N2JhMDFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGQxZmNhNzgtOWQ5OC00NTU5LWJk NTEtODBhNmM0N2JhMDFlLzBkMWZjYTc4LTlkOTgtNDU1OS1iZDUxLTgwYTZjNDdi YTAxZS5jcmwwHwYDVR0jBBgwFoAUymGb6KykOgfQv2pfW6o/1CDpWtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZDFmY2E3OC05ZDk4LTQ1NTktYmQ1MS04MGE2 YzQ3YmEwMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh3jnknuEGbazHD4rpzTlC Ej50kELYY5mZpDmjYoqQw/vTA0c8CAFm35DU5KEYTJB0nmWABWkTkS7WBcVV7V14 RYoEmqQ7ESeoZfRm7NBcMPucAZ45T9+uEQoRMePQ/iQSS2Ii49dBxqEbnyaZwOj4 itv/Z0pRt9lDl+cijdXDbT9KZCCis0YY0CrD7c6eRqTSRlY9V/+NCNhEbXCoNC/J n1+6T3d0nOfLH7/jBzcypUH6rgP5B18H/8Bh9gULO4MJu3IaUaAv25ljNL9P4ih6 q9pcSBVyc88vSkDAqoNXgJ2A2Ke2++MC8mxRmndiVd9gPmlzayu4QNjnpXhnLvho -----END CERTIFICATE-----Generated at Tue Jul 1 02:04:08 2025 by rpki-client