$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft File: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft (raw, json) Hash identifier: nMlQcdOqfi2HkWLOiBN1+6cav0Smh432pfeQPrsKHII= Subject key identifier: 20:3E:23:B6:38:8F:DD:1B:D2:00:D1:75:8C:05:E5:FE:82:9E:9E:6D Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 Certificate issuer: /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Certificate serial: 010D0C9F4328584A7656595F6627B521D2392E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft Manifest number: 010D0C9F4328584073A85A17F676A8EC1A31692B Signing time: Wed 09 Jul 2025 15:00:03 +0000 Manifest this update: Wed 09 Jul 2025 15:00:03 +0000 Manifest next update: Fri 11 Jul 2025 15:00:00 +0000 Files and hashes: 1: 796a8503-13ba-3800-8978-3da85e63b13a.roa (hash: fRGJ4bgIg7ayfjfgHF+d7LGh3R2dadtsWWrXgnV51MU=) 2: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl (hash: NA2XmK7FPxPB80snOJHj0aAxisUsn6vpAvqHRcLTo1g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:56:59:5f:66:27:b5:21:d2:39:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0 Validity Not Before: Jul 9 15:00:03 2025 GMT Not After : Jul 11 15:00:00 2025 GMT Subject: CN=aa949b3d-0f67-42aa-8ce3-8f32f5fa9fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:0d:d4:10:1c:5e:cf:a3:22:35:f4:49:83: c1:61:f8:04:4a:3c:a6:99:00:ff:8d:5d:be:e0:eb: 9d:2a:ba:50:a8:1d:da:50:0b:89:cd:25:a1:fe:91: f0:01:c7:db:5b:67:43:fe:de:47:82:2e:83:5a:7f: 39:79:9a:cb:80:78:45:e2:d2:77:1d:24:3e:96:1e: 5b:8a:aa:a7:d9:10:f4:9e:7a:9d:e9:48:b7:5f:3d: a7:c7:5c:0e:9b:8c:e5:55:87:d2:d9:e6:06:6b:56: 06:03:f2:eb:b8:e7:20:d6:d9:a7:be:d0:7e:a1:f8: b2:15:c4:96:2f:62:46:37:b9:be:a5:e9:90:3b:bd: e4:00:8e:95:eb:b8:90:f0:16:9b:77:32:2e:c2:d3: 76:db:c8:0f:f5:11:54:13:71:2c:60:6b:01:8e:eb: 02:e2:9f:fb:12:13:b5:0b:eb:50:f7:40:b6:84:1d: ce:40:4a:21:f6:df:3a:09:dd:cc:c9:f3:d2:18:61: ff:b8:e7:7a:46:0e:59:9e:f3:84:11:89:a9:83:48: f9:28:38:70:ad:6f:65:d1:d5:76:84:8c:92:38:9e: d1:8c:bf:45:23:da:0c:54:37:7c:0d:0f:0f:b7:63: 15:9d:f5:aa:cb:bc:83:16:7d:c4:6f:89:d0:1b:8d: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:23:B6:38:8F:DD:1B:D2:00:D1:75:8C:05:E5:FE:82:9E:9E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl X509v3 Authority Key Identifier: keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b7:01:e9:98:46:1c:cb:4e:00:63:ce:a3:48:07:ab:34:fc: d0:59:60:fb:e5:79:e4:46:67:15:21:7d:eb:15:cc:6e:e7:74: ff:9d:cf:74:c4:8d:f8:79:3d:45:21:26:1f:f8:8a:54:6a:51: f3:db:61:89:84:3e:5c:34:8c:47:29:55:44:c6:49:e7:d8:ce: 84:d0:5a:77:ad:17:44:a2:99:89:58:42:3a:ec:ab:db:d4:49: 2c:9a:51:29:1e:20:f6:b4:51:05:6a:cc:d0:e2:6c:b1:8d:c8: 35:a4:88:20:9f:c7:9a:11:5d:c1:d7:69:0c:ee:1e:9b:9a:20: 43:98:5d:cd:00:65:33:48:1a:56:d5:97:5c:9f:15:46:1f:88: a7:41:1c:fe:2a:b7:81:04:e2:43:82:83:02:a6:1c:4f:b8:1f: c8:a6:dc:24:05:82:0f:6c:9e:05:03:10:a4:d8:5b:d0:0b:25: 08:69:3c:df:a9:54:de:1e:d2:e6:11:f3:cc:6c:67:81:7c:7d: 85:3f:53:9a:19:30:47:ca:70:ee:e3:e9:4f:bf:3a:f3:99:87: 27:fd:04:60:4f:7f:f3:56:6e:8c:14:d1:bd:59:98:48:f4:a5: d6:e8:6e:e9:cc:4e:e0:4a:ad:64:8e:75:be:61:bf:2f:36:9d: 3a:1a:7d:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2VllfZie1IdI5LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYwZmJkMGQtMWUwYS00YjhhLWI0NjctMGI2MTk3ZDhi NWQwMB4XDTI1MDcwOTE1MDAwM1oXDTI1MDcxMTE1MDAwMFowLzEtMCsGA1UEAxMk YWE5NDliM2QtMGY2Ny00MmFhLThjZTMtOGYzMmY1ZmE5ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf4N1BAcXs+jIjX0SYPBYfgESjymmQD/jV2+ 4OudKrpQqB3aUAuJzSWh/pHwAcfbW2dD/t5Hgi6DWn85eZrLgHhF4tJ3HSQ+lh5b iqqn2RD0nnqd6Ui3Xz2nx1wOm4zlVYfS2eYGa1YGA/LruOcg1tmnvtB+ofiyFcSW L2JGN7m+pemQO73kAI6V67iQ8BabdzIuwtN228gP9RFUE3EsYGsBjusC4p/7EhO1 C+tQ90C2hB3OQEoh9t86Cd3MyfPSGGH/uOd6Rg5ZnvOEEYmpg0j5KDhwrW9l0dV2 hIySOJ7RjL9FI9oMVDd8DQ8Pt2MVnfWqy7yDFn3Eb4nQG41MIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCA+I7Y4j90b0gDRdYwF5f6Cnp5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBm YmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYxOTdkOGI1ZDAvYTYwZmJkMGQtMWUwYS00 YjhhLWI0NjctMGI2MTk3ZDhiNWQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTYwZmJkMGQtMWUwYS00YjhhLWI0 NjctMGI2MTk3ZDhiNWQwL2E2MGZiZDBkLTFlMGEtNGI4YS1iNDY3LTBiNjE5N2Q4 YjVkMC5jcmwwHwYDVR0jBBgwFoAUlQ7z/AkyQbqHL902TDItyhUVPeEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNjBmYmQwZC0xZTBhLTRiOGEtYjQ2Ny0wYjYx OTdkOGI1ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJtwHpmEYcy04AY86jSAer NPzQWWD75XnkRmcVIX3rFcxu53T/nc90xI34eT1FISYf+IpUalHz22GJhD5cNIxH KVVExknn2M6E0Fp3rRdEopmJWEI67Kvb1EksmlEpHiD2tFEFaszQ4myxjcg1pIgg n8eaEV3B12kM7h6bmiBDmF3NAGUzSBpW1ZdcnxVGH4inQRz+KreBBOJDgoMCphxP uB/IptwkBYIPbJ4FAxCk2FvQCyUIaTzfqVTeHtLmEfPMbGeBfH2FP1OaGTBHynDu 4+lPvzrzmYcn/QRgT3/zVm6MFNG9WZhI9KXW6G7pzE7gSq1kjnW+Yb8vNp06Gn3s -----END CERTIFICATE-----Generated at Thu Jul 10 11:24:45 2025 by rpki-client