$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: 6IFLZwnzzdpBHobKs/UEr8Ei4Nma5zGt6RQeWOvAFEc= Subject key identifier: 8A:56:21:E2:DE:96:6A:F1:86:70:7C:10:B7:61:7C:91:FD:A1:AF:5F Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584A7497A983D17AD75938BE3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACCFA Signing time: Wed 09 Jul 2025 00:00:03 +0000 Manifest this update: Wed 09 Jul 2025 00:00:03 +0000 Manifest next update: Fri 11 Jul 2025 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: 5hBFoU/iRBmbyCHhkgDFluOio+sjJlt0Gb9v757B+cA=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: cEJ/LdYVGKusHo1rx1wCkp8kwDK3MHeS8v7K5IkVqOU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:97:a9:83:d1:7a:d7:59:38:be:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Jul 9 00:00:03 2025 GMT Not After : Jul 11 00:00:00 2025 GMT Subject: CN=710ae9f8-f869-493d-bc79-900622ef1ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:03:52:a5:15:24:e1:d4:bd:fc:14:b5:36:a7: 38:06:17:23:71:ab:af:67:68:56:d0:d1:d3:ed:39: 8e:7d:94:89:9c:a7:ca:30:2d:57:bd:09:01:5b:9d: e4:72:a8:06:60:38:36:b8:15:e7:56:35:5a:cf:c0: 72:4b:ce:88:02:d0:92:94:05:ae:0c:81:48:76:33: 0d:a6:bc:ec:7c:e6:63:bf:fe:c5:52:1e:30:7f:5c: f1:58:3a:8f:5a:2a:66:94:ec:4f:aa:32:d9:c5:3e: b8:74:a6:aa:2d:b4:7b:c0:2a:dd:44:f5:1f:21:78: ca:e1:03:24:f6:9d:0d:cd:44:95:a8:96:e2:e9:36: 98:cc:c8:cf:a5:43:ad:35:39:ed:a1:e3:e1:a8:b3: 10:53:ef:33:1c:97:4b:87:5a:20:b2:97:d3:b3:7b: 46:eb:6d:e9:fb:ca:54:ff:a2:ae:b1:51:1d:5e:63: ae:87:59:44:e9:19:51:e8:ca:1b:87:5d:2e:61:59: 2b:79:b2:07:2f:57:40:b5:4e:0c:b5:df:4b:e7:9b: d5:2f:7c:db:ab:ab:2c:d0:14:0b:c1:c9:94:c8:11: 57:da:8b:da:20:ec:96:45:22:83:13:64:58:85:6a: 83:06:70:98:ad:9d:14:54:7b:57:f5:08:d5:3c:cd: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:56:21:E2:DE:96:6A:F1:86:70:7C:10:B7:61:7C:91:FD:A1:AF:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:49:bd:d5:05:59:e4:c7:d8:a9:85:ad:9d:f7:02:bf:e7:08: 35:cb:90:2c:3c:e0:f9:ac:1f:d8:9a:13:19:46:c5:dd:f1:85: 6e:eb:a1:a4:64:63:33:5b:bc:4d:fd:36:8c:27:10:2e:4d:d4: ac:ae:cd:cb:84:fb:2e:66:fb:c7:ae:c3:09:0e:ea:ba:2e:f5: 67:5c:e9:d3:00:6f:ce:db:33:09:f5:4c:cd:e4:69:a6:b5:2c: e0:d8:03:95:6f:15:a3:bf:e7:dd:fb:3c:4d:26:4e:a6:08:1f: 41:a9:89:f7:5f:87:c5:f7:39:15:80:af:91:27:7e:63:fd:4d: b6:5c:a6:e9:64:2d:44:68:20:32:16:63:75:f0:c1:e1:79:c6: 77:1d:76:17:21:11:4c:af:36:19:13:97:b7:58:33:b5:59:56: c5:8d:65:27:6c:27:4c:e4:ec:34:07:d4:54:f4:b7:9b:25:39: e7:f0:69:e9:09:c6:71:63:36:f7:e7:58:d9:ae:02:d9:39:a0: 3d:00:27:ef:f2:64:f0:ac:c4:3f:39:c6:f0:b4:6a:52:d3:d5: 9c:d0:8b:71:6f:ac:49:d8:9d:7c:f6:a7:02:ca:01:ec:f9:07: 99:3c:71:50:fb:f4:e4:38:2a:e4:ba:67:93:ed:17:5e:2d:8a: d3:f9:ce:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0l6mD0XrXWTi+OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI1MDcwOTAwMDAwM1oXDTI1MDcxMTAwMDAwMFowLzEtMCsGA1UEAxMk NzEwYWU5ZjgtZjg2OS00OTNkLWJjNzktOTAwNjIyZWYxYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQNSpRUk4dS9/BS1Nqc4BhcjcauvZ2hW0NHT 7TmOfZSJnKfKMC1XvQkBW53kcqgGYDg2uBXnVjVaz8ByS86IAtCSlAWuDIFIdjMN przsfOZjv/7FUh4wf1zxWDqPWipmlOxPqjLZxT64dKaqLbR7wCrdRPUfIXjK4QMk 9p0NzUSVqJbi6TaYzMjPpUOtNTntoePhqLMQU+8zHJdLh1ogspfTs3tG623p+8pU /6KusVEdXmOuh1lE6RlR6Mobh10uYVkrebIHL1dAtU4Mtd9L55vVL3zbq6ss0BQL wcmUyBFX2ovaIOyWRSKDE2RYhWqDBnCYrZ0UVHtX9QjVPM0tRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIpWIeLelmrxhnB8ELdhfJH9oa9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCSb3VBVnkx9ipha2d9wK/ 5wg1y5AsPOD5rB/YmhMZRsXd8YVu66GkZGMzW7xN/TaMJxAuTdSsrs3LhPsuZvvH rsMJDuq6LvVnXOnTAG/O2zMJ9UzN5GmmtSzg2AOVbxWjv+fd+zxNJk6mCB9BqYn3 X4fF9zkVgK+RJ35j/U22XKbpZC1EaCAyFmN18MHhecZ3HXYXIRFMrzYZE5e3WDO1 WVbFjWUnbCdM5Ow0B9RU9LebJTnn8GnpCcZxYzb351jZrgLZOaA9ACfv8mTwrMQ/ OcbwtGpS09Wc0Itxb6xJ2J189qcCygHs+QeZPHFQ+/TkOCrkumeT7RdeLYrT+c5A -----END CERTIFICATE-----Generated at Wed Jul 9 22:26:57 2025 by rpki-client