$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft File: 9cc943d8-e468-4794-9399-2ba32cf0dad3.mft (raw, json) Hash identifier: GWKA0ZZFA72j7bBFC8ehexWZWPlvSCwHU5gAdiAPWE0= Subject key identifier: 7E:5B:C7:5B:62:84:10:56:28:C9:93:50:96:51:30:01:59:6A:04:F6 Authority key identifier: 88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48 Certificate issuer: /CN=9cc943d8-e468-4794-9399-2ba32cf0dad3 Certificate serial: 010D0C9F4328584A612AA75099FA03700BBB7470 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft Manifest number: 010D0C9F4328584073A8331F28C93F9297D885A3 Signing time: Wed 02 Jul 2025 01:00:03 +0000 Manifest this update: Wed 02 Jul 2025 01:00:03 +0000 Manifest next update: Sat 05 Jul 2025 01:00:00 +0000 Files and hashes: 1: 8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa (hash: YPViK86H3wf6LqKsngSNdqub5yF6tZBgAkZzHych1xY=) 2: 9cc943d8-e468-4794-9399-2ba32cf0dad3.crl (hash: YuEXfGH4o4SBPwlnNoVXQZcx41Zshab15Gm7QQ90Y+I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2a:a7:50:99:fa:03:70:0b:bb:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc943d8-e468-4794-9399-2ba32cf0dad3 Validity Not Before: Jul 2 01:00:03 2025 GMT Not After : Jul 5 01:00:00 2025 GMT Subject: CN=8d8ed9c4-dcc2-4f40-b273-e0cbbc5f0819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:ee:85:d6:fa:db:e3:04:82:33:bd:b7:f8: 6b:5b:38:44:ac:23:f6:ba:f2:9f:28:c3:de:c8:79: ac:d8:b2:96:50:94:cd:35:80:4c:4a:29:09:fe:14: e8:bf:c4:4e:82:de:f9:07:73:a2:46:b1:11:03:58: 0d:08:88:7c:5b:4b:01:37:05:7f:54:db:4a:f2:63: 64:08:75:49:2e:53:33:23:40:50:fd:4f:f6:aa:f8: e0:d2:dd:c7:0f:5c:4f:c7:02:44:ff:59:16:4a:1a: 71:29:51:23:ce:26:de:aa:8e:7c:c4:59:6c:6b:a6: f0:12:87:a1:2e:9d:c3:ec:58:e6:69:40:d1:3b:e0: fc:39:cc:d8:97:d0:ee:2d:8c:d1:82:7a:f8:36:3a: 1c:0d:66:54:4e:39:55:41:df:78:1c:65:fc:cd:de: 46:8f:5b:ec:72:e6:12:8a:c0:d0:b4:42:1a:4a:2a: 6a:b0:04:4a:3a:ee:c9:35:f0:e8:94:48:c7:e4:86: 57:26:e2:19:56:96:1f:a9:3a:87:c0:ab:8a:a8:e1: a3:d9:3a:a1:e9:40:ef:24:da:ec:f5:d5:a8:d2:32: 4f:78:1b:f5:cb:fc:8a:a1:bb:65:39:c7:88:f0:58: 0c:54:9f:19:08:12:21:09:d1:bf:0f:0d:32:49:15: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5B:C7:5B:62:84:10:56:28:C9:93:50:96:51:30:01:59:6A:04:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl X509v3 Authority Key Identifier: keyid:88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d4:f6:af:00:b5:7a:da:94:4a:44:d4:a1:ff:64:35:fd:d3: ca:55:45:24:bb:aa:9a:f9:a2:b4:3c:70:2f:59:e6:d4:c2:d3: da:22:51:dc:13:b2:e7:ed:9c:52:62:60:03:33:b5:75:85:5e: cf:60:1a:25:8f:ae:65:ca:77:6d:2e:10:3b:4a:c6:56:89:34: 95:45:4c:12:74:7d:a2:37:a9:f5:a1:c7:20:5a:6c:62:22:f0: 80:de:bd:b8:89:3b:df:2d:02:d7:26:fc:00:02:4b:e0:c5:a0: 7a:13:a5:1c:9e:a2:b5:3f:98:2d:3a:1a:24:65:e3:fa:6a:a2: d9:62:9b:ff:7b:a6:33:34:c5:50:08:45:4a:13:89:99:d0:41: 5e:5a:f9:41:02:f7:28:80:20:45:54:64:8c:f4:70:a9:80:98: e9:0a:12:d6:09:e1:30:49:ff:1c:b1:25:5a:34:80:c7:ba:7c: 68:14:04:2b:2e:49:91:68:8b:54:0c:1e:c8:d1:ca:bf:ff:1b: ef:5d:32:11:69:39:40:a2:c0:be:47:e2:6c:49:de:1a:59:ee: 09:f4:25:1f:90:ac:56:e4:09:53:31:90:7a:ce:9d:c7:5a:37: 62:b8:f2:b4:02:71:eb:cf:f2:67:7e:34:f9:80:ce:29:38:95: 3a:5a:57:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEphKqdQmfoDcAu7dHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNjOTQzZDgtZTQ2OC00Nzk0LTkzOTktMmJhMzJjZjBk YWQzMB4XDTI1MDcwMjAxMDAwM1oXDTI1MDcwNTAxMDAwMFowLzEtMCsGA1UEAxMk OGQ4ZWQ5YzQtZGNjMi00ZjQwLWIyNzMtZTBjYmJjNWYwODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqLuhdb62+MEgjO9t/hrWzhErCP2uvKfKMPe yHms2LKWUJTNNYBMSikJ/hTov8ROgt75B3OiRrERA1gNCIh8W0sBNwV/VNtK8mNk CHVJLlMzI0BQ/U/2qvjg0t3HD1xPxwJE/1kWShpxKVEjzibeqo58xFlsa6bwEoeh Lp3D7FjmaUDRO+D8OczYl9DuLYzRgnr4NjocDWZUTjlVQd94HGX8zd5Gj1vscuYS isDQtEIaSipqsARKOu7JNfDolEjH5IZXJuIZVpYfqTqHwKuKqOGj2Tqh6UDvJNrs 9dWo0jJPeBv1y/yKobtlOceI8FgMVJ8ZCBIhCdG/Dw0ySRVv9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH5bx1tihBBWKMmTUJZRMAFZagT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M5 NDNkOC1lNDY4LTQ3OTQtOTM5OS0yYmEzMmNmMGRhZDMvOWNjOTQzZDgtZTQ2OC00 Nzk0LTkzOTktMmJhMzJjZjBkYWQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWNjOTQzZDgtZTQ2OC00Nzk0LTkz OTktMmJhMzJjZjBkYWQzLzljYzk0M2Q4LWU0NjgtNDc5NC05Mzk5LTJiYTMyY2Yw ZGFkMy5jcmwwHwYDVR0jBBgwFoAUiGuZiyQsap+C5Ec3oioG09VNT0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M5NDNkOC1lNDY4LTQ3OTQtOTM5OS0yYmEz MmNmMGRhZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA31PavALV62pRKRNSh/2Q1 /dPKVUUku6qa+aK0PHAvWebUwtPaIlHcE7Ln7ZxSYmADM7V1hV7PYBolj65lyndt LhA7SsZWiTSVRUwSdH2iN6n1occgWmxiIvCA3r24iTvfLQLXJvwAAkvgxaB6E6Uc nqK1P5gtOhokZeP6aqLZYpv/e6YzNMVQCEVKE4mZ0EFeWvlBAvcogCBFVGSM9HCp gJjpChLWCeEwSf8csSVaNIDHunxoFAQrLkmRaItUDB7I0cq//xvvXTIRaTlAosC+ R+JsSd4aWe4J9CUfkKxW5AlTMZB6zp3HWjdiuPK0AnHrz/JnfjT5gM4pOJU6Wlfj -----END CERTIFICATE-----Generated at Wed Jul 2 12:29:25 2025 by rpki-client