$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft File: 5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft (raw, json) Hash identifier: YOK8L206nnyoH+qbt9HP8cMi39r5Zt6nRM1g/cCHkM4= Subject key identifier: 34:01:14:97:9A:0C:6B:46:BB:AD:D6:52:19:D8:F0:76:99:53:6E:D5 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584A73E501697090C5F33B14EA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft Manifest number: 010D0C9F43285846DAB61A5335F382FEC1011953 Signing time: Tue 08 Jul 2025 18:00:03 +0000 Manifest this update: Tue 08 Jul 2025 18:00:03 +0000 Manifest next update: Fri 11 Jul 2025 18:00:00 +0000 Files and hashes: 1: 17073da9-1980-383a-b12c-971b97acfc86.roa (hash: 73E7PHNBS4jGPnl2vSIoEMtVLaX7hpuwoDsKrJ4joSI=) 2: 5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl (hash: XY0PP32+5nTW3iCwT2g6RbTDu0fR0iss/8OOvSKGUCQ=) 3: 5fd12087-5523-3229-876f-88f686d794a9.roa (hash: gIfbrbhFd3NZS380Whuzl1jpobGx5Ic5MMUP9hezbSg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:e5:01:69:70:90:c5:f3:3b:14:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Jul 8 18:00:03 2025 GMT Not After : Jul 11 18:00:00 2025 GMT Subject: CN=dac26060-b126-4f9b-b95d-4f6ab2c82a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:09:3a:97:7e:72:60:23:83:08:fb:03:e6: da:db:33:6a:2a:34:40:8b:70:d8:d2:e2:bd:67:f4: e7:2d:5b:07:04:74:c8:19:e5:b7:1c:8a:c6:ac:12: cb:af:80:44:df:5b:1c:d9:b8:18:b4:93:06:da:cb: d8:46:04:df:be:b1:f4:37:42:5e:ea:7f:94:6f:1d: c5:e8:0b:04:a3:e7:2a:1d:f2:35:29:6e:7c:57:50: bb:35:d3:8f:af:3c:5f:8a:64:1d:be:ee:f0:8e:c1: fa:27:58:a0:7e:48:90:5e:eb:82:09:7a:e1:6b:05: 4d:0f:a0:83:24:c8:ab:db:b5:e8:77:14:52:83:46: e0:a3:1e:c4:9c:cb:bb:a5:29:b6:48:3c:8f:5d:01: e6:9f:c5:98:b8:e1:4d:67:92:55:2c:c7:71:59:13: 5e:44:86:5a:68:04:61:22:ea:4f:2c:ad:b8:38:ac: cc:78:41:69:43:58:76:aa:e5:35:11:f0:5c:3d:d5: f1:f4:d8:3c:92:89:37:c5:9c:4c:d3:ab:0a:2c:10: 1a:a6:c5:1e:11:76:39:c3:6a:cc:af:e3:72:c1:f6: 41:9d:c1:3b:3e:02:1a:9f:d1:38:b8:b9:ae:23:46: 3c:83:47:ca:b9:72:51:82:d0:84:5a:83:fd:df:e6: 12:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:01:14:97:9A:0C:6B:46:BB:AD:D6:52:19:D8:F0:76:99:53:6E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c8:ca:1a:8d:1e:4a:00:1c:09:42:19:3d:ee:d7:af:95:cb: 12:c5:78:6e:a9:ef:04:76:e4:c1:ca:f8:4e:03:53:fd:2c:c8: e8:68:a1:4a:b6:4d:d5:4a:40:34:7f:64:74:53:f1:f3:a9:ec: fb:f5:c3:61:26:8f:c7:f0:f8:66:da:e0:a6:d7:55:88:0b:7e: 95:47:8c:15:b6:0e:ee:9e:76:42:fb:fe:39:f8:3e:c3:9f:76: 34:55:2c:e1:7e:55:54:04:a0:96:18:f3:8e:1b:3a:40:90:cf: f0:c4:e5:15:c5:6b:19:60:b3:0c:18:36:23:2d:75:b1:d3:0c: ae:f6:5f:22:7c:46:12:31:94:fb:5b:d7:91:39:68:ff:49:de: 06:12:2b:7d:a2:9c:44:a0:fa:8f:60:ec:2e:73:10:da:e2:6c: ac:2d:36:cf:8e:65:21:3f:9e:cd:77:4b:98:e7:65:db:32:48: 7a:03:1f:5d:1d:98:dc:b9:3c:f8:a7:4d:4d:fc:c5:1e:6b:16: 23:c3:62:34:cf:fe:6a:2f:e3:6a:cc:50:68:58:06:97:7f:c6: 4d:73:f8:7f:5b:80:f6:15:29:d3:1b:13:73:fc:7d:69:77:22: 40:cf:2c:8b:61:ed:5c:2b:91:22:82:50:d7:d3:42:43:fb:62: 5a:e0:c7:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpz5QFpcJDF8zsU6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDcwODE4MDAwM1oXDTI1MDcxMTE4MDAwMFowLzEtMCsGA1UEAxMk ZGFjMjYwNjAtYjEyNi00ZjliLWI5NWQtNGY2YWIyYzgyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gIJOpd+cmAjgwj7A+ba2zNqKjRAi3DY0uK9 Z/TnLVsHBHTIGeW3HIrGrBLLr4BE31sc2bgYtJMG2svYRgTfvrH0N0Je6n+Ubx3F 6AsEo+cqHfI1KW58V1C7NdOPrzxfimQdvu7wjsH6J1igfkiQXuuCCXrhawVND6CD JMir27XodxRSg0bgox7EnMu7pSm2SDyPXQHmn8WYuOFNZ5JVLMdxWRNeRIZaaARh IupPLK24OKzMeEFpQ1h2quU1EfBcPdXx9Ng8kok3xZxM06sKLBAapsUeEXY5w2rM r+NywfZBncE7PgIan9E4uLmuI0Y8g0fKuXJRgtCEWoP93+YS7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDQBFJeaDGtGu63WUhnY8HaZU27VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvNWNhZmJkMzItN2Q2ZS00 Mjk3LTlhYzUtZGMxMjBhYWE5N2RhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3yMoajR5KABwJQhk97tev lcsSxXhuqe8EduTByvhOA1P9LMjoaKFKtk3VSkA0f2R0U/Hzqez79cNhJo/H8Phm 2uCm11WIC36VR4wVtg7unnZC+/45+D7Dn3Y0VSzhflVUBKCWGPOOGzpAkM/wxOUV xWsZYLMMGDYjLXWx0wyu9l8ifEYSMZT7W9eROWj/Sd4GEit9opxEoPqPYOwucxDa 4mysLTbPjmUhP57Nd0uY52XbMkh6Ax9dHZjcuTz4p01N/MUeaxYjw2I0z/5qL+Nq zFBoWAaXf8ZNc/h/W4D2FSnTGxNz/H1pdyJAzyyLYe1cK5EiglDX00JD+2Ja4Mc9 -----END CERTIFICATE-----Generated at Tue Jul 8 22:12:48 2025 by rpki-client