$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft File: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft (raw, json) Hash identifier: ApexmHRGOYxy5BDpPLlaNkB1fJSNHGIGKRNuBy+pBCQ= Subject key identifier: 23:A7:EE:6E:23:79:93:F9:3D:6F:09:F2:F1:F3:06:6F:AF:37:74:AA Authority key identifier: 74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 Certificate issuer: /CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Certificate serial: 010D0C9F4328584A73E4FE8BF728CB280FE104E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft Manifest number: 010D0C9F4328584733F8223248709F44DB2106B1 Signing time: Tue 08 Jul 2025 18:00:03 +0000 Manifest this update: Tue 08 Jul 2025 18:00:03 +0000 Manifest next update: Fri 11 Jul 2025 18:00:00 +0000 Files and hashes: 1: 0545c8d8-2be5-3872-8fa1-55668d1f1902.roa (hash: yXZbvV8fbSLRAPAXcWWYza8qrx0d8MilPSJwAPWusdE=) 2: 1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl (hash: YaUg3rGXT7jo1ZpFsJtfvOROehbBfaa0T5K0F3P8Yks=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:e4:fe:8b:f7:28:cb:28:0f:e1:04:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf9e56a-5cc3-47a2-a96d-3650c4de45a7 Validity Not Before: Jul 8 18:00:03 2025 GMT Not After : Jul 11 18:00:00 2025 GMT Subject: CN=500092d1-0408-4a3a-bb22-7361c0cc2a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ce:ca:cb:5b:a5:d1:c7:cc:41:95:14:90:0b: 2b:35:f1:8e:47:e6:12:d6:63:44:49:55:02:9f:69: 83:ab:63:f9:dd:2d:a3:4f:d0:67:c4:93:b9:8c:aa: 39:ae:0d:84:48:3d:66:89:61:8e:5b:66:dd:ed:da: 2a:50:e4:12:2f:c5:03:be:0c:a6:a1:61:df:13:40: ea:38:ee:b5:4c:18:3b:5f:81:c3:84:f5:ad:7b:53: 5e:8e:26:67:bc:5d:a6:4c:4c:15:d3:d8:c5:b4:23: 4a:34:04:7f:63:ea:e0:f3:ce:8a:85:16:75:60:8b: 38:0d:51:fb:08:1d:e3:9c:d8:15:95:fb:13:d8:c9: 2b:36:d5:79:eb:ed:79:24:ae:8f:4f:88:98:1c:4d: 97:cc:37:fe:36:2f:a3:d2:e0:67:54:bb:08:3c:f1: ef:87:f8:cf:cb:34:87:18:06:bd:6d:16:38:09:c8: c6:11:21:aa:67:26:f5:8f:ea:79:9f:3a:d3:11:7f: 73:da:c6:6b:21:30:90:c6:93:49:b3:e5:19:be:f3: 47:73:26:61:00:d5:d8:96:ae:87:b3:a6:fa:2e:a1: f0:aa:c4:75:6b:b0:11:f7:56:58:8f:e7:4e:0f:c6: 0e:2e:2c:3a:59:9d:b5:74:54:f3:1d:72:f3:07:11: ff:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A7:EE:6E:23:79:93:F9:3D:6F:09:F2:F1:F3:06:6F:AF:37:74:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.crl X509v3 Authority Key Identifier: keyid:74:22:1F:E6:ED:43:72:AC:5F:84:E8:0C:58:56:B8:4A:27:56:B5:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cf9e56a-5cc3-47a2-a96d-3650c4de45a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a5:06:08:73:23:2c:07:f7:76:14:2d:a4:22:5e:0a:09:35: 0b:94:5c:82:3c:b7:f9:85:df:49:c4:68:fe:b0:c5:1a:e5:b9: 11:c1:47:67:eb:11:b9:4d:13:9d:04:37:51:b9:21:e3:71:76: 86:95:38:10:d3:75:07:0d:11:b0:16:5f:1e:03:7b:be:0a:a7: f3:18:9c:ec:1f:0f:ce:9d:fe:0e:3f:45:03:ff:e7:4c:61:7b: 8b:c7:42:ed:13:92:c8:e4:66:08:49:65:3d:f1:ea:79:32:76: 8b:b2:e6:6d:a9:70:e3:46:52:c4:2c:55:1a:12:aa:e2:53:54: 54:45:05:77:b1:d7:5c:a1:93:3c:a5:3e:63:ae:85:02:51:c6: e8:bc:d5:52:1c:1b:d9:33:a3:23:64:f3:1a:d0:d3:0e:f0:de: 35:fa:2b:9c:de:54:97:65:3d:7c:d1:e3:d2:25:c9:91:d6:71: 36:a2:42:f9:7d:db:1f:10:47:8a:43:9f:32:28:58:8a:ec:e0: a4:09:6c:93:c0:22:8a:5d:99:36:23:3d:96:38:12:0a:e3:ad: 5f:1e:3c:8a:c6:d4:e8:51:e6:c0:29:7f:a1:56:55:f1:a5:62: 4d:70:a7:7b:c0:f8:d8:f6:cc:1d:d3:bb:f3:5a:d9:e4:4e:3f: f9:79:99:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpz5P6L9yjLKA/hBOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmOWU1NmEtNWNjMy00N2EyLWE5NmQtMzY1MGM0ZGU0 NWE3MB4XDTI1MDcwODE4MDAwM1oXDTI1MDcxMTE4MDAwMFowLzEtMCsGA1UEAxMk NTAwMDkyZDEtMDQwOC00YTNhLWJiMjItNzM2MWMwY2MyYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7Ky1ul0cfMQZUUkAsrNfGOR+YS1mNESVUC n2mDq2P53S2jT9BnxJO5jKo5rg2ESD1miWGOW2bd7doqUOQSL8UDvgymoWHfE0Dq OO61TBg7X4HDhPWte1NejiZnvF2mTEwV09jFtCNKNAR/Y+rg886KhRZ1YIs4DVH7 CB3jnNgVlfsT2MkrNtV56+15JK6PT4iYHE2XzDf+Ni+j0uBnVLsIPPHvh/jPyzSH GAa9bRY4CcjGESGqZyb1j+p5nzrTEX9z2sZrITCQxpNJs+UZvvNHcyZhANXYlq6H s6b6LqHwqsR1a7AR91ZYj+dOD8YOLiw6WZ21dFTzHXLzBxH/iwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCOn7m4jeZP5PW8J8vHzBm+vN3SqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5 ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUwYzRkZTQ1YTcvMWNmOWU1NmEtNWNjMy00 N2EyLWE5NmQtMzY1MGM0ZGU0NWE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNmOWU1NmEtNWNjMy00N2EyLWE5 NmQtMzY1MGM0ZGU0NWE3LzFjZjllNTZhLTVjYzMtNDdhMi1hOTZkLTM2NTBjNGRl NDVhNy5jcmwwHwYDVR0jBBgwFoAUdCIf5u1DcqxfhOgMWFa4SidWtfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Y5ZTU2YS01Y2MzLTQ3YTItYTk2ZC0zNjUw YzRkZTQ1YTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcpQYIcyMsB/d2FC2kIl4K CTULlFyCPLf5hd9JxGj+sMUa5bkRwUdn6xG5TROdBDdRuSHjcXaGlTgQ03UHDRGw Fl8eA3u+CqfzGJzsHw/Onf4OP0UD/+dMYXuLx0LtE5LI5GYISWU98ep5MnaLsuZt qXDjRlLELFUaEqriU1RURQV3sddcoZM8pT5jroUCUcbovNVSHBvZM6MjZPMa0NMO 8N41+iuc3lSXZT180ePSJcmR1nE2okL5fdsfEEeKQ58yKFiK7OCkCWyTwCKKXZk2 Iz2WOBIK461fHjyKxtToUebAKX+hVlXxpWJNcKd7wPjY9swd07vzWtnkTj/5eZlo -----END CERTIFICATE-----Generated at Tue Jul 8 20:56:08 2025 by rpki-client