$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft File: 1cf30977-73f6-4522-b061-66f0061f58dd.mft (raw, json) Hash identifier: iOlT5avcugztUjtD27xbeOKOYnCfuIj2jEBh0urEZQU= Subject key identifier: 03:DD:2D:7E:CF:3F:EA:89:52:D2:B7:6B:21:93:95:43:39:A3:59:8B Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 Certificate issuer: /CN=1cf30977-73f6-4522-b061-66f0061f58dd Certificate serial: 010D0C9F4328584A7691E88285A6479297C5B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft Manifest number: 010D0C9F432858435D3B6876837249857343829C Signing time: Wed 09 Jul 2025 17:00:03 +0000 Manifest this update: Wed 09 Jul 2025 17:00:03 +0000 Manifest next update: Fri 11 Jul 2025 17:00:00 +0000 Files and hashes: 1: 1cf30977-73f6-4522-b061-66f0061f58dd.crl (hash: 3e0KgXofEqr5BrheRC+utbxr32ZZa7wSg0yDSR2zdeg=) 2: c8823d7b-5ece-3489-b72b-ced743ec137b.roa (hash: 8VeXg61chXO3pmH6tO1HooWZ264jVUobgUpGLUmC/oE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:91:e8:82:85:a6:47:92:97:c5:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd Validity Not Before: Jul 9 17:00:03 2025 GMT Not After : Jul 11 17:00:00 2025 GMT Subject: CN=4950dc07-09a9-4479-8245-3f98a771d970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:6a:e3:74:df:a0:d2:8c:20:98:3f:22:ae: 7d:78:0a:a9:ce:4e:07:4e:3b:ee:b5:e0:db:42:68: 2b:08:e7:10:ed:b3:b2:84:f9:fc:fa:4d:13:e7:c5: 9c:75:dd:86:57:48:cf:a5:6e:37:f1:7c:83:95:f7: 8c:95:94:6d:e0:30:c0:f9:9a:cf:02:0c:f2:0d:fc: f4:84:93:45:68:8b:57:cf:62:f8:8a:dc:88:53:b2: cd:4c:5a:3a:35:2f:1c:58:99:00:a8:94:39:99:8b: 1c:0f:e6:50:37:82:20:16:7c:a3:e3:2b:21:3f:dc: 22:62:de:55:c1:27:f5:42:02:7f:38:6e:68:6c:e7: 49:9e:7b:02:4f:35:64:66:42:cc:b6:5f:ea:e9:db: fe:b3:b5:e8:0b:39:6f:5c:c3:94:58:2c:d3:3e:70: 8b:0d:d5:5e:57:b7:d0:64:ee:a0:51:88:2b:71:71: f5:a2:c8:f4:45:99:53:7e:80:87:6e:c2:48:9c:ea: d8:f1:7a:61:c7:d9:cf:da:f0:72:08:19:0e:ee:93: 08:63:cc:a9:71:83:42:ca:e7:7e:45:79:bb:e6:7a: f0:51:f7:8b:96:2a:d6:9e:54:40:7b:c3:02:f3:21: 30:97:3c:ef:3c:dd:ec:f1:91:4a:49:41:f8:cc:55: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:2D:7E:CF:3F:EA:89:52:D2:B7:6B:21:93:95:43:39:A3:59:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl X509v3 Authority Key Identifier: keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b0:9a:a5:40:54:4f:a5:30:13:7b:55:0d:74:e4:61:a3:be: d5:ff:7d:b5:39:60:10:c9:46:1a:e9:2e:dd:e1:88:5d:31:0d: de:98:8f:bb:b5:60:30:f0:20:14:64:a1:76:88:87:61:07:19: bf:e9:e7:60:8b:74:43:42:3a:f6:ec:c3:f1:ee:a8:de:4d:fa: 73:08:8d:7d:a4:f9:00:a7:c8:08:24:bf:91:f0:eb:e7:43:0d: c0:a4:8d:de:8b:f0:dc:c0:e7:29:7e:86:90:0d:63:d9:9e:be: 44:f9:75:df:56:b1:08:0a:f4:a0:89:e0:65:3f:92:eb:8e:04: 53:79:ee:34:1e:f6:7c:97:7c:8a:61:25:90:ff:f5:0c:61:19: 04:f6:0f:40:f0:2c:f3:e1:1a:63:60:34:26:34:18:7a:9c:45: d8:66:d6:b7:7e:19:81:62:74:43:39:45:7e:44:f9:3b:9b:6e: c5:ed:a8:e1:dd:25:a0:b9:75:9b:01:7e:54:fa:59:c7:10:2f: 5e:d2:cb:86:0b:b7:de:0b:e3:ac:20:c6:17:93:47:7e:65:86: f4:c7:22:43:dc:dd:8f:c3:ff:ab:db:e1:10:4c:c8:5e:3b:ac: 4b:99:24:c1:16:07:76:28:33:c5:94:ed:e1:bf:0d:52:d1:c5: c7:db:c9:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2keiChaZHkpfFtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1 OGRkMB4XDTI1MDcwOTE3MDAwM1oXDTI1MDcxMTE3MDAwMFowLzEtMCsGA1UEAxMk NDk1MGRjMDctMDlhOS00NDc5LTgyNDUtM2Y5OGE3NzFkOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcVq43TfoNKMIJg/Iq59eAqpzk4HTjvuteDb QmgrCOcQ7bOyhPn8+k0T58Wcdd2GV0jPpW438XyDlfeMlZRt4DDA+ZrPAgzyDfz0 hJNFaItXz2L4ityIU7LNTFo6NS8cWJkAqJQ5mYscD+ZQN4IgFnyj4yshP9wiYt5V wSf1QgJ/OG5obOdJnnsCTzVkZkLMtl/q6dv+s7XoCzlvXMOUWCzTPnCLDdVeV7fQ ZO6gUYgrcXH1osj0RZlTfoCHbsJInOrY8Xphx9nP2vByCBkO7pMIY8ypcYNCyud+ RXm75nrwUfeLlirWnlRAe8MC8yEwlzzvPN3s8ZFKSUH4zFXHaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAPdLX7PP+qJUtK3ayGTlUM5o1mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvMWNmMzA5NzctNzNmNi00 NTIyLWIwNjEtNjZmMDA2MWY1OGRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw MDYxZjU4ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgsJqlQFRPpTATe1UNdORh o77V/321OWAQyUYa6S7d4YhdMQ3emI+7tWAw8CAUZKF2iIdhBxm/6edgi3RDQjr2 7MPx7qjeTfpzCI19pPkAp8gIJL+R8OvnQw3ApI3ei/DcwOcpfoaQDWPZnr5E+XXf VrEICvSgieBlP5LrjgRTee40HvZ8l3yKYSWQ//UMYRkE9g9A8Czz4RpjYDQmNBh6 nEXYZta3fhmBYnRDOUV+RPk7m27F7ajh3SWguXWbAX5U+lnHEC9e0suGC7feC+Os IMYXk0d+ZYb0xyJD3N2Pw/+r2+EQTMheO6xLmSTBFgd2KDPFlO3hvw1S0cXH28k5 -----END CERTIFICATE-----Generated at Wed Jul 9 22:47:01 2025 by rpki-client