$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft File: 1d25e0e4-3256-419b-9e99-0f045d2a1125.mft (raw, json) Hash identifier: EX1KBesAPot3kYl5dC7G70fNDOjwEKGR5FSjsCK64JM= Subject key identifier: 22:C0:B5:F4:7B:54:04:9C:4B:21:D2:D9:FC:1B:51:AF:1E:98:17:58 Authority key identifier: E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F Certificate issuer: /CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Certificate serial: 010D0C9F4328584A74F109CFF4E7143873FAF1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft Manifest number: 010D0C9F4328584073A83978E201F31829BF93CA Signing time: Wed 09 Jul 2025 03:00:08 +0000 Manifest this update: Wed 09 Jul 2025 03:00:08 +0000 Manifest next update: Fri 11 Jul 2025 03:00:00 +0000 Files and hashes: 1: 1a1c8cd4-86d7-3c34-bbeb-9c1e4b632348.roa (hash: +i79RRxtmP/63Ztg1PKUVg2ZnTOkG+tCw/rPSHfBO7Y=) 2: 1d25e0e4-3256-419b-9e99-0f045d2a1125.crl (hash: QTxBokpUztFFCQu22FmMZnjVMW9vEwDqvPVQpUbhWrw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:f1:09:cf:f4:e7:14:38:73:fa:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d25e0e4-3256-419b-9e99-0f045d2a1125 Validity Not Before: Jul 9 03:00:08 2025 GMT Not After : Jul 11 03:00:00 2025 GMT Subject: CN=6e1bd3a1-476b-4304-bd33-137e59ff688f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:83:8c:0c:fc:5e:21:01:6d:83:f0:d4:e8: 1c:bd:39:5a:f4:e3:f1:ba:ec:58:1b:c1:fe:e5:48: 33:70:28:2e:c1:0d:7e:4f:67:01:6a:ea:eb:d9:21: 65:63:b8:e5:19:e9:88:9c:a4:81:d1:cf:d1:ad:70: 9c:58:47:c7:8c:80:5d:b6:22:4d:54:d1:ba:47:b3: e8:f1:38:1e:1c:fd:24:96:8e:fe:90:52:17:09:7f: da:70:ce:53:a7:4f:f8:c3:93:5a:ed:79:1f:42:57: 7f:4b:16:91:b6:0c:cd:d0:0a:8c:33:6b:bc:4f:d2: e4:8f:8d:65:e9:3e:e4:a2:e3:d7:0d:a3:34:f7:7f: 19:a7:81:05:b8:2c:51:b3:4d:2a:26:8e:0c:eb:55: 63:99:3b:3c:06:7b:eb:74:e5:f8:c9:90:85:2e:04: 8a:da:79:5f:96:62:62:d9:0e:eb:9a:e3:c1:e8:99: 84:6d:e1:4c:1d:5d:0c:45:dc:e0:7b:9a:74:5c:6c: a4:8f:f7:f6:ae:66:fa:5f:65:6d:5a:b3:52:b7:fe: 73:b9:42:1a:15:6c:10:b0:d6:5e:de:a1:a6:a5:28: 50:ec:6d:e4:6f:0d:44:15:50:df:e5:2c:00:91:17: 3b:12:88:7a:1d:19:e7:fb:d0:ec:26:dd:32:5c:4d: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C0:B5:F4:7B:54:04:9C:4B:21:D2:D9:FC:1B:51:AF:1E:98:17:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125/1d25e0e4-3256-419b-9e99-0f045d2a1125.crl X509v3 Authority Key Identifier: keyid:E0:41:83:40:9B:53:F0:4A:26:F2:03:CA:E0:7B:11:29:54:E7:A4:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d25e0e4-3256-419b-9e99-0f045d2a1125.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:57:c0:ee:34:b0:fb:6f:17:64:14:c1:24:6b:aa:1f:b6:0f: 8c:c5:85:8c:22:ba:fa:c9:83:8a:34:9d:33:af:da:07:2a:5c: cc:30:84:43:93:94:14:f4:c0:3a:a2:7a:ff:69:d8:ea:d6:77: 5e:71:8c:0f:c2:3d:f6:5c:44:70:34:d8:75:57:dc:a8:7b:bd: ed:89:90:88:62:86:8f:44:66:3b:ed:33:20:e3:6a:29:c3:bd: 89:25:1c:1d:e3:2d:bb:3c:f5:e4:b3:d3:4b:fb:e6:ca:33:8d: 70:08:81:bb:23:c9:36:20:94:ab:f7:be:a5:24:33:84:ed:cd: 93:23:fa:79:30:0d:85:17:ec:8c:5e:64:fc:66:28:a1:60:fa: 88:27:63:ee:bf:82:c9:a9:e2:ef:4f:a9:f9:5c:79:58:10:d3: 1e:2a:4e:78:db:67:7a:25:34:ca:c7:66:9a:24:da:54:ec:3b: d3:10:ba:f5:9f:ed:cf:e9:34:4c:07:d0:51:ad:65:62:26:7f: 68:d2:99:f1:a3:c7:4a:d1:e7:71:ac:23:7f:2d:f4:d0:f0:73: e1:a8:4e:7a:46:ed:61:2e:28:04:b0:63:67:00:8a:ac:43:d2: f5:6b:7d:86:e6:3c:85:8b:59:88:77:25:c2:f6:aa:e6:7f:1c: 3b:a7:11:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp08QnP9OcUOHP68cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNWUwZTQtMzI1Ni00MTliLTllOTktMGYwNDVkMmEx MTI1MB4XDTI1MDcwOTAzMDAwOFoXDTI1MDcxMTAzMDAwMFowLzEtMCsGA1UEAxMk NmUxYmQzYTEtNDc2Yi00MzA0LWJkMzMtMTM3ZTU5ZmY2ODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTyDjAz8XiEBbYPw1OgcvTla9OPxuuxYG8H+ 5UgzcCguwQ1+T2cBaurr2SFlY7jlGemInKSB0c/RrXCcWEfHjIBdtiJNVNG6R7Po 8TgeHP0klo7+kFIXCX/acM5Tp0/4w5Na7XkfQld/SxaRtgzN0AqMM2u8T9Lkj41l 6T7kouPXDaM0938Zp4EFuCxRs00qJo4M61VjmTs8BnvrdOX4yZCFLgSK2nlflmJi 2Q7rmuPB6JmEbeFMHV0MRdzge5p0XGykj/f2rmb6X2VtWrNSt/5zuUIaFWwQsNZe 3qGmpShQ7G3kbw1EFVDf5SwAkRc7Eoh6HRnn+9DsJt0yXE1rTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCLAtfR7VAScSyHS2fwbUa8emBdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1 ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0NWQyYTExMjUvMWQyNWUwZTQtMzI1Ni00 MTliLTllOTktMGYwNDVkMmExMTI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyNWUwZTQtMzI1Ni00MTliLTll OTktMGYwNDVkMmExMTI1LzFkMjVlMGU0LTMyNTYtNDE5Yi05ZTk5LTBmMDQ1ZDJh MTEyNS5jcmwwHwYDVR0jBBgwFoAU4EGDQJtT8Eom8gPK4HsRKVTnpJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDI1ZTBlNC0zMjU2LTQxOWItOWU5OS0wZjA0 NWQyYTExMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxV8DuNLD7bxdkFMEka6of tg+MxYWMIrr6yYOKNJ0zr9oHKlzMMIRDk5QU9MA6onr/adjq1ndecYwPwj32XERw NNh1V9yoe73tiZCIYoaPRGY77TMg42opw72JJRwd4y27PPXks9NL++bKM41wCIG7 I8k2IJSr976lJDOE7c2TI/p5MA2FF+yMXmT8ZiihYPqIJ2Puv4LJqeLvT6n5XHlY ENMeKk5422d6JTTKx2aaJNpU7DvTELr1n+3P6TRMB9BRrWViJn9o0pnxo8dK0edx rCN/LfTQ8HPhqE56Ru1hLigEsGNnAIqsQ9L1a32G5jyFi1mIdyXC9qrmfxw7pxGX -----END CERTIFICATE-----Generated at Wed Jul 9 20:01:32 2025 by rpki-client