$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft File: ff223998-3819-4b72-ade1-eec292b0a8d0.mft (raw, json) Hash identifier: 3hUIoimgnpyCcfUVvp6eM/Uj9pryx2zIvInLLyZtPDg= Subject key identifier: AA:D5:23:CC:7B:F0:BF:EB:C7:6E:E9:FC:60:96:5A:B1:8F:32:D8:03 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584A6596473BFE0D778D70F5DDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft Manifest number: 010D0C9F4328584A520E74690BAECAAA28A4777F Signing time: Thu 03 Jul 2025 15:00:08 +0000 Manifest this update: Thu 03 Jul 2025 15:00:08 +0000 Manifest next update: Sat 05 Jul 2025 15:00:00 +0000 Files and hashes: 1: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (hash: GTQNMvP5+m3uE8hwXTy9m9vItEc+sBnx/uBniu44/C8=) 2: ff223998-3819-4b72-ade1-eec292b0a8d0.crl (hash: gq8pw6DtC1n7PiGTAeb9QSxR4bvtub8zVZjJY2pDAe4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:96:47:3b:fe:0d:77:8d:70:f5:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: Jul 3 15:00:08 2025 GMT Not After : Jul 5 15:00:00 2025 GMT Subject: CN=d9916087-fda2-4f08-8bf6-f703295138b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:b9:1b:1c:53:05:c0:78:60:d9:28:e0:07: d5:e9:23:44:72:83:91:b1:ab:ca:e7:e1:d5:a1:62: 5e:97:38:72:a3:41:43:17:48:ff:b3:c2:c0:44:7d: ae:19:56:27:99:2c:81:68:c9:73:66:1c:f6:aa:93: 29:7d:a0:ca:5d:e9:71:bc:c4:fb:e9:93:c5:ca:2a: a9:a8:00:ca:1d:c6:09:8a:83:01:b8:1c:d6:6c:c9: f2:86:1e:45:76:1a:89:a6:95:fb:6c:9e:4a:a8:9c: 17:37:8d:c8:57:14:43:1b:4e:42:e6:58:f7:22:9e: 60:cb:6c:9b:2f:13:54:29:7a:b9:5c:50:40:90:b3: b7:ff:93:ea:92:bd:98:75:5a:c2:88:e8:cd:92:3a: 4a:da:46:7a:8b:3d:3c:1b:06:02:a7:44:8c:d9:a0: a6:f0:ac:d7:d0:1b:ed:92:23:76:41:d2:30:e8:4e: e5:88:39:5f:c6:d4:71:7e:7e:c7:0a:62:74:5d:93: 8c:41:ff:61:82:20:25:9e:74:bf:57:c6:d0:9b:64: 15:85:2f:b5:e0:6d:81:69:5e:40:59:ff:5a:e1:59: b4:49:77:97:2e:2f:3c:ef:43:97:c0:e9:6b:1e:17: 1e:6a:0c:d7:30:50:d8:78:94:97:77:b4:ec:51:ab: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D5:23:CC:7B:F0:BF:EB:C7:6E:E9:FC:60:96:5A:B1:8F:32:D8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4b:26:26:b8:61:49:6f:b5:e9:7f:e7:bd:68:ce:37:fc:50: 2c:d4:81:e7:4c:a9:c9:bd:88:c8:65:74:50:1c:56:87:c2:7d: 2e:b9:ce:8a:cb:d4:8f:31:e9:da:8c:65:7b:28:71:0f:b8:1b: 74:b0:de:c2:18:25:aa:db:3f:84:3e:95:64:09:34:db:f7:80: f6:22:65:08:6d:21:f9:f5:bd:3f:bb:e6:dd:62:17:c7:fd:e2: ba:93:39:1c:b4:a0:66:92:61:b0:4b:0a:35:9f:69:8f:f8:2e: 57:af:20:45:fa:b5:b8:bf:91:fb:47:f2:0f:86:76:c0:79:84: 30:e1:b4:53:1c:bb:8f:ad:eb:65:97:bb:0d:4f:fb:eb:b7:c9: dd:ca:9a:1d:ee:c1:8f:e3:71:97:4e:ea:45:4e:1d:22:e2:30: 5c:25:17:94:d4:58:aa:b5:a9:d3:a9:9a:8c:b2:55:c0:fb:f4: 0e:91:ef:6c:97:e9:12:91:75:8f:5c:d5:71:d8:16:b1:aa:a6: f7:87:80:99:46:79:12:c2:b3:e5:43:be:d0:3c:27:0d:ec:49: 4c:55:40:13:9a:64:c8:3b:34:80:30:10:b4:af:78:9b:38:b9: e5:a8:37:6a:8f:44:04:6a:d7:75:b9:6c:c1:fb:a4:c6:81:0a: 25:57:ab:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpllkc7/g13jXD13cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI1MDcwMzE1MDAwOFoXDTI1MDcwNTE1MDAwMFowLzEtMCsGA1UEAxMk ZDk5MTYwODctZmRhMi00ZjA4LThiZjYtZjcwMzI5NTEzOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAi5GxxTBcB4YNko4AfV6SNEcoORsavK5+HV oWJelzhyo0FDF0j/s8LARH2uGVYnmSyBaMlzZhz2qpMpfaDKXelxvMT76ZPFyiqp qADKHcYJioMBuBzWbMnyhh5FdhqJppX7bJ5KqJwXN43IVxRDG05C5lj3Ip5gy2yb LxNUKXq5XFBAkLO3/5Pqkr2YdVrCiOjNkjpK2kZ6iz08GwYCp0SM2aCm8KzX0Bvt kiN2QdIw6E7liDlfxtRxfn7HCmJ0XZOMQf9hgiAlnnS/V8bQm2QVhS+14G2BaV5A Wf9a4Vm0SXeXLi8870OXwOlrHhceagzXMFDYeJSXd7TsUaswzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKrVI8x78L/rx27p/GCWWrGPMtgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvZmYyMjM5OTgtMzgxOS00 YjcyLWFkZTEtZWVjMjkyYjBhOGQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUSyYmuGFJb7Xpf+e9aM43 /FAs1IHnTKnJvYjIZXRQHFaHwn0uuc6Ky9SPMenajGV7KHEPuBt0sN7CGCWq2z+E PpVkCTTb94D2ImUIbSH59b0/u+bdYhfH/eK6kzkctKBmkmGwSwo1n2mP+C5XryBF +rW4v5H7R/IPhnbAeYQw4bRTHLuPretll7sNT/vrt8ndypod7sGP43GXTupFTh0i 4jBcJReU1FiqtanTqZqMslXA+/QOke9sl+kSkXWPXNVx2Baxqqb3h4CZRnkSwrPl Q77QPCcN7ElMVUATmmTIOzSAMBC0r3ibOLnlqDdqj0QEatd1uWzB+6TGgQolV6sf -----END CERTIFICATE-----Generated at Fri Jul 4 00:45:12 2025 by rpki-client