$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft File: da61f786-99c2-4468-90f7-0b35abd168e5.mft (raw, json) Hash identifier: E4/WQwlJmMKxk+xqPJT7oYozg1KlvyXYLCQjroYMPkg= Subject key identifier: 4D:54:88:E5:87:84:E2:F5:F7:CD:93:F8:6D:9A:CB:D9:4A:7C:21:3F Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584A6A5B30CB8D5BDA5DBB0D72F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft Manifest number: 010D0C9F4328584073A846655D9F3F36F9E9D027 Signing time: Sat 05 Jul 2025 08:00:08 +0000 Manifest this update: Sat 05 Jul 2025 08:00:08 +0000 Manifest next update: Mon 07 Jul 2025 08:00:00 +0000 Files and hashes: 1: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (hash: SOD87n6zFTGx2Co8P2oxeCYjO08kR9Y2aYNl6+z0LM8=) 2: da61f786-99c2-4468-90f7-0b35abd168e5.crl (hash: hcrd1ZWx9o8kRrlHi9bFjDv46RchXa/y5fcI63Vgon0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:5b:30:cb:8d:5b:da:5d:bb:0d:72:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Jul 5 08:00:08 2025 GMT Not After : Jul 7 08:00:00 2025 GMT Subject: CN=f3d7bd63-28dc-4912-a257-403fe1054050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:f3:c3:d7:4a:c1:71:87:2e:44:84:70:c9: 2d:9a:c2:8a:16:93:4d:d1:a3:b7:78:bd:e2:92:02: 1c:64:61:06:46:e9:0a:46:b9:98:8f:a7:58:60:bc: 92:03:25:5c:c6:ca:d2:dc:22:5d:96:ce:02:0c:9b: 3b:51:df:07:ee:db:67:56:14:f8:db:bc:ab:79:33: 5d:41:cf:ad:50:1e:51:b2:50:63:6b:86:09:8e:d3: a6:a8:8d:c2:c7:f3:4b:24:d3:a8:f2:32:08:fd:7a: 68:15:18:c6:eb:c9:e9:a9:af:f7:c2:20:08:84:ae: d2:77:33:b3:34:48:34:b3:b6:47:80:eb:26:be:3b: a8:92:51:7c:24:dc:9a:75:c2:94:14:1d:b9:12:55: df:90:c9:05:64:d1:fd:45:94:74:4f:1e:5a:2b:00: 7d:23:6e:cd:3b:bc:6a:1f:cd:f6:52:63:2c:15:28: 23:ca:20:69:e8:9d:c6:29:cf:5d:ec:4d:94:a9:90: 37:b9:24:69:e1:b1:cc:4b:2b:3a:3f:9c:ca:e6:65: 35:38:03:f1:3b:b9:68:b2:c8:77:b1:53:c0:b8:d1: 49:e7:0a:ed:b8:44:99:27:2f:05:4a:26:0e:85:3e: d2:7b:d9:a5:e7:00:61:b7:5b:59:64:03:a2:76:40: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:54:88:E5:87:84:E2:F5:F7:CD:93:F8:6D:9A:CB:D9:4A:7C:21:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b4:65:6f:4c:f5:e3:7b:e9:9d:3b:d9:60:0c:df:61:f6:b7: 15:69:fa:a4:a7:cb:37:7a:3e:87:79:98:a4:20:35:67:83:e0: 21:c2:ed:69:1f:61:3c:c7:4f:a8:dd:41:93:f6:5f:e4:ad:c7: 95:33:c9:99:c0:aa:6c:6e:d5:22:b1:10:34:d5:06:99:15:f4: b7:af:e4:41:4b:bf:e1:a8:ec:f5:d3:e3:a9:0c:92:20:da:94: 79:60:35:30:28:00:ad:6a:f5:0e:98:26:9f:f6:b4:8a:ac:3f: a5:70:83:25:2e:3b:07:0f:4f:33:9b:c8:d3:73:04:74:33:d6: 58:01:0c:3a:03:aa:ad:d1:cc:7d:1f:03:f5:61:bf:39:56:02: ce:c6:28:bb:f4:60:8e:4d:99:93:46:e6:e8:7d:53:a2:8c:34: f8:4d:f9:b5:67:ff:3e:67:69:62:94:3b:a6:fd:4b:77:eb:8d: de:e1:41:d9:23:82:cd:60:f6:66:27:bb:6a:3b:1f:5b:c3:0e: 63:4e:99:4c:0d:42:1d:f4:aa:e9:2c:fc:86:a3:22:e3:65:90: 72:84:13:8c:4a:5f:98:45:bc:06:65:16:94:bd:e3:46:69:74: fe:5d:79:93:05:4f:c8:3a:aa:40:0d:c8:33:7b:df:95:a9:3a: 5e:37:21:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpqWzDLjVvaXbsNcvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI1MDcwNTA4MDAwOFoXDTI1MDcwNzA4MDAwMFowLzEtMCsGA1UEAxMk ZjNkN2JkNjMtMjhkYy00OTEyLWEyNTctNDAzZmUxMDU0MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVjzw9dKwXGHLkSEcMktmsKKFpNN0aO3eL3i kgIcZGEGRukKRrmYj6dYYLySAyVcxsrS3CJdls4CDJs7Ud8H7ttnVhT427yreTNd Qc+tUB5RslBja4YJjtOmqI3Cx/NLJNOo8jII/XpoFRjG68npqa/3wiAIhK7SdzOz NEg0s7ZHgOsmvjuoklF8JNyadcKUFB25ElXfkMkFZNH9RZR0Tx5aKwB9I27NO7xq H832UmMsFSgjyiBp6J3GKc9d7E2UqZA3uSRp4bHMSys6P5zK5mU1OAPxO7lossh3 sVPAuNFJ5wrtuESZJy8FSiYOhT7Se9ml5wBht1tZZAOidkDkvwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE1UiOWHhOL1982T+G2ay9lKfCE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvZGE2MWY3ODYtOTljMi00 NDY4LTkwZjctMGIzNWFiZDE2OGU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6tGVvTPXje+mdO9lgDN9h 9rcVafqkp8s3ej6HeZikIDVng+Ahwu1pH2E8x0+o3UGT9l/krceVM8mZwKpsbtUi sRA01QaZFfS3r+RBS7/hqOz10+OpDJIg2pR5YDUwKACtavUOmCaf9rSKrD+lcIMl LjsHD08zm8jTcwR0M9ZYAQw6A6qt0cx9HwP1Yb85VgLOxii79GCOTZmTRubofVOi jDT4Tfm1Z/8+Z2lilDum/Ut3643e4UHZI4LNYPZmJ7tqOx9bww5jTplMDUId9Krp LPyGoyLjZZByhBOMSl+YRbwGZRaUveNGaXT+XXmTBU/IOqpADcgze9+VqTpeNyH3 -----END CERTIFICATE-----Generated at Sun Jul 6 08:47:19 2025 by rpki-client