$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft File: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft (raw, json) Hash identifier: wsETXeyXvLo2mcQ09rIoZ1NdD6UkRSYpgHEoCGWlA68= Subject key identifier: 22:64:02:DD:AF:27:AC:CF:01:E0:5D:F9:21:A4:93:63:B4:9C:2F:33 Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Certificate issuer: /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Certificate serial: 010D0C9F4328584A62ADCF973E31113671BEEF70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft Manifest number: 010D0C9F4328584765C25479079DAD41A9178519 Signing time: Wed 02 Jul 2025 14:00:08 +0000 Manifest this update: Wed 02 Jul 2025 14:00:08 +0000 Manifest next update: Sat 05 Jul 2025 14:00:00 +0000 Files and hashes: 1: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl (hash: 0mHTy5N3wnUikqR6ZPAu31gLlyLsjeyXBENwyZawBbU=) 2: 680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (hash: 2PWJc2+j70pDXey4yIQNI6TpWviJu8pn00TViAv076s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:ad:cf:97:3e:31:11:36:71:be:ef:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Validity Not Before: Jul 2 14:00:08 2025 GMT Not After : Jul 5 14:00:00 2025 GMT Subject: CN=7786aa06-eae8-404e-8f77-d51260ac16c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:8c:15:b7:fe:d4:f5:1a:27:c1:7b:0b:ef: 74:e4:48:bb:93:1d:29:de:fc:9d:a4:51:86:93:f7: 95:ac:80:aa:28:f2:c6:eb:70:12:11:21:f0:c8:07: 0c:28:e6:7f:1a:87:a6:06:9d:bf:78:34:86:c1:83: 5a:b2:83:d2:96:cd:1b:f7:ae:67:d6:82:34:39:75: 08:a4:8c:aa:78:32:63:e6:2b:72:ce:50:f5:3c:5b: 9a:52:fc:56:d1:3a:78:a0:70:ca:cd:fb:b1:87:90: b5:47:1a:80:58:8d:6e:b4:5e:9e:5f:39:be:b2:bd: e9:f9:a4:86:18:ef:ee:d6:2e:be:17:30:66:92:41: 90:7e:02:96:c6:51:7d:40:7c:9d:c6:03:a3:f7:b0: 71:b7:60:72:3e:a8:91:62:34:76:aa:28:86:d7:a8: a5:2b:07:74:1c:14:c8:d7:33:6e:26:10:38:65:1f: 28:08:5a:09:b4:89:59:f9:2b:df:61:bc:f3:70:37: 68:a2:46:5f:2b:d0:03:41:5c:3b:77:32:f2:f3:3c: f6:4d:ad:b6:70:60:1d:bf:4b:77:8c:3e:89:a4:94: 9e:23:99:da:9b:1d:69:f2:04:68:be:23:e6:5f:a2: 70:51:18:03:a6:d8:bc:78:dc:2e:2d:5d:b8:fe:ea: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:64:02:DD:AF:27:AC:CF:01:E0:5D:F9:21:A4:93:63:B4:9C:2F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl X509v3 Authority Key Identifier: keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:41:80:00:f6:23:9f:34:04:3f:38:87:32:63:0c:80:2d:05: 2c:0d:96:71:74:7a:6c:88:c7:e7:b9:ed:a0:6a:68:44:7a:7f: bb:69:fd:64:d7:a3:e3:13:c2:f7:7d:7a:ed:4b:07:04:71:fc: dc:06:50:ee:5f:38:45:66:e2:1a:63:f4:73:57:15:3c:37:0e: 5b:19:d3:a8:c2:02:81:17:a0:33:e4:81:bb:a5:b5:e3:4b:41: 7d:b5:4e:a0:f7:98:32:53:25:17:1d:45:e6:c8:de:ef:26:db: 2e:ad:67:fe:01:3c:29:53:60:01:54:ad:22:fe:49:aa:bc:a6: 8b:07:46:87:14:e0:5b:d2:88:d9:b6:3d:5c:f2:f8:fd:1c:1d: 5e:6d:0f:65:4a:93:f8:94:61:1e:67:e8:f5:de:56:f1:81:3b: 4e:8b:41:b9:3f:4f:56:b9:8e:8e:69:90:f6:c2:c7:4a:5e:69: fd:79:83:33:d7:a0:8b:57:5e:b3:eb:bc:09:a3:b0:9c:1b:3c: 88:98:20:2f:16:e3:99:2f:09:a6:d6:0a:53:50:41:d7:d0:44: 76:d8:ff:d6:6b:44:60:f2:b2:c0:ad:d2:e4:b1:40:b6:79:7c: 2b:54:bc:e9:9f:2b:cc:c6:30:cb:f4:36:c8:db:13:2e:22:cb: 57:a1:22:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpirc+XPjERNnG+73AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMzdiN2QtMDc2NS00ZTE1LTk1NTgtYzViMzgwMGNh N2NlMB4XDTI1MDcwMjE0MDAwOFoXDTI1MDcwNTE0MDAwMFowLzEtMCsGA1UEAxMk Nzc4NmFhMDYtZWFlOC00MDRlLThmNzctZDUxMjYwYWMxNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikCMFbf+1PUaJ8F7C+905Ei7kx0p3vydpFGG k/eVrICqKPLG63ASESHwyAcMKOZ/GoemBp2/eDSGwYNasoPSls0b965n1oI0OXUI pIyqeDJj5ityzlD1PFuaUvxW0Tp4oHDKzfuxh5C1RxqAWI1utF6eXzm+sr3p+aSG GO/u1i6+FzBmkkGQfgKWxlF9QHydxgOj97Bxt2ByPqiRYjR2qiiG16ilKwd0HBTI 1zNuJhA4ZR8oCFoJtIlZ+SvfYbzzcDdookZfK9ADQVw7dzLy8zz2Ta22cGAdv0t3 jD6JpJSeI5namx1p8gRoviPmX6JwURgDpti8eNwuLV24/uq1YwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCJkAt2vJ6zPAeBd+SGkk2O0nC8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEz N2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAwY2E3Y2UvMjhhMzdiN2QtMDc2NS00 ZTE1LTk1NTgtYzViMzgwMGNhN2NlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjhhMzdiN2QtMDc2NS00ZTE1LTk1 NTgtYzViMzgwMGNhN2NlLzI4YTM3YjdkLTA3NjUtNGUxNS05NTU4LWM1YjM4MDBj YTdjZS5jcmwwHwYDVR0jBBgwFoAUGGLEvhIC8MouVlYY/vkUCpEAX08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIz ODAwY2E3Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiQYAA9iOfNAQ/OIcyYwyA LQUsDZZxdHpsiMfnue2gamhEen+7af1k16PjE8L3fXrtSwcEcfzcBlDuXzhFZuIa Y/RzVxU8Nw5bGdOowgKBF6Az5IG7pbXjS0F9tU6g95gyUyUXHUXmyN7vJtsurWf+ ATwpU2ABVK0i/kmqvKaLB0aHFOBb0ojZtj1c8vj9HB1ebQ9lSpP4lGEeZ+j13lbx gTtOi0G5P09WuY6OaZD2wsdKXmn9eYMz16CLV16z67wJo7CcGzyImCAvFuOZLwmm 1gpTUEHX0ER22P/Wa0Rg8rLArdLksUC2eXwrVLzpnyvMxjDL9DbI2xMuIstXoSJp -----END CERTIFICATE-----Generated at Thu Jul 3 09:07:13 2025 by rpki-client