$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft File: 1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft (raw, json) Hash identifier: 4TEDP1VRQsaX35FLO1pNLTlNwdT9U5IYyT3RoJF+kVo= Subject key identifier: B2:41:C2:1A:59:70:B1:36:1A:90:E1:38:E0:EF:6D:EF:AD:38:6F:8F Authority key identifier: 97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB Certificate issuer: /CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Certificate serial: 010D0C9F4328584A7691E7748AD224B76D4855C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft Manifest number: 010D0C9F4328584433EC99232F032D209E795B4D Signing time: Wed 09 Jul 2025 17:00:03 +0000 Manifest this update: Wed 09 Jul 2025 17:00:03 +0000 Manifest next update: Sat 12 Jul 2025 17:00:00 +0000 Files and hashes: 1: 1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl (hash: +3iFnXxCsedmDOsaEA25p4vNVUZ0Y4oDcnV3Y/Y2cjE=) 2: ed318ff3-2835-3288-a505-9e112c93201b.roa (hash: oT7qqH7ReKQ4OeeTDrBol9qhvtv6BEvRyRIGIZi8aQw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:91:e7:74:8a:d2:24:b7:6d:48:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d26934e-0bbf-439c-a115-4e6f4a8d53a2 Validity Not Before: Jul 9 17:00:03 2025 GMT Not After : Jul 12 17:00:00 2025 GMT Subject: CN=5d8a372a-eefb-49ef-9b8c-3caba0421188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:0d:89:14:d0:fa:5b:6d:f0:13:41:ac:61: c8:5b:2b:4a:1c:d7:dc:c2:1f:0c:7f:1e:3d:5c:57: 6a:d2:b4:8b:b7:9d:c8:44:32:77:a4:9e:e8:e9:a4: 83:d1:3b:16:cb:66:94:d9:0f:d7:ed:d3:66:3a:2b: 56:9b:0f:cd:40:7d:e3:a9:7f:c2:62:12:bd:2b:3e: 7d:9a:c4:b4:aa:cc:97:0b:7e:b2:93:5a:12:da:19: c6:a5:dd:b8:bc:63:53:59:82:60:49:8f:bf:0e:ed: 3a:37:af:cd:c8:4a:aa:1d:af:43:6f:de:6a:ac:1b: 0c:30:46:6e:6f:9e:18:73:f9:79:75:be:0f:c3:45: c3:63:9c:a6:aa:1c:65:67:be:aa:07:d2:fb:ab:68: e9:0e:f3:95:d8:42:55:ae:9f:5c:54:47:27:39:48: 3c:84:df:ed:dc:f8:20:28:f0:25:96:44:6e:f7:db: af:84:0f:62:d8:eb:be:3f:03:08:76:29:ad:2f:68: cb:62:e7:5b:3b:a8:87:28:1e:6d:e9:a5:0d:c6:01: 9d:0d:86:7d:37:22:fc:2d:7e:32:99:b3:e0:f0:2b: ce:12:94:42:68:49:81:cd:df:3c:2b:6e:d4:27:b1: aa:4f:ed:f4:40:12:2b:e2:ac:72:95:b0:7c:a2:48: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:41:C2:1A:59:70:B1:36:1A:90:E1:38:E0:EF:6D:EF:AD:38:6F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.crl X509v3 Authority Key Identifier: keyid:97:74:18:04:15:FD:08:E1:C0:7E:49:AC:EB:3A:F8:3E:81:A9:A0:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1d26934e-0bbf-439c-a115-4e6f4a8d53a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:08:6d:0b:20:84:fc:99:c6:a0:7a:39:2c:0d:4f:de:dc:d2: b1:b5:b9:15:76:a9:63:d5:77:99:24:d7:a0:36:b0:32:9d:5f: 8f:73:4d:05:1a:0e:e5:d0:35:8a:c8:e9:eb:a2:33:ad:03:6f: bf:12:4b:e4:77:a6:48:4f:e4:ba:5a:44:28:12:1e:3a:e9:48: 29:81:5c:40:be:ac:30:50:3c:75:3b:1f:b2:d6:a7:c2:77:49: 91:ff:a2:8f:27:3c:e5:88:c7:c5:73:3c:f4:7a:ce:f8:a7:fe: 69:e0:9e:59:8a:59:76:be:74:6e:11:30:08:a7:59:16:59:b1: 5b:1d:a5:6e:d2:ab:26:fa:7b:bf:2d:69:04:b9:85:37:1a:6a: ee:3a:e2:02:c7:70:9d:61:ca:8b:07:7c:fd:8c:07:da:0d:e5: 25:c6:5c:e1:70:36:34:28:5c:6d:73:c4:20:7e:47:d6:68:74: a2:15:ef:ed:5a:94:ee:6e:66:82:21:2b:0c:d6:10:3b:ed:00: 17:0f:71:b0:36:ca:d6:fb:53:29:9c:ea:ea:f5:3b:3e:9a:cb: b1:0f:f5:7d:66:fc:77:c3:30:1c:f0:e4:4f:d7:9f:f2:7b:a3: b1:58:5e:52:2e:d5:6f:b9:fe:52:14:d9:23:d1:f9:9d:f8:32: aa:c1:14:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2ked0itIkt21IVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyNjkzNGUtMGJiZi00MzljLWExMTUtNGU2ZjRhOGQ1 M2EyMB4XDTI1MDcwOTE3MDAwM1oXDTI1MDcxMjE3MDAwMFowLzEtMCsGA1UEAxMk NWQ4YTM3MmEtZWVmYi00OWVmLTliOGMtM2NhYmEwNDIxMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG0NiRTQ+ltt8BNBrGHIWytKHNfcwh8Mfx49 XFdq0rSLt53IRDJ3pJ7o6aSD0TsWy2aU2Q/X7dNmOitWmw/NQH3jqX/CYhK9Kz59 msS0qsyXC36yk1oS2hnGpd24vGNTWYJgSY+/Du06N6/NyEqqHa9Db95qrBsMMEZu b54Yc/l5db4Pw0XDY5ymqhxlZ76qB9L7q2jpDvOV2EJVrp9cVEcnOUg8hN/t3Pgg KPAllkRu99uvhA9i2Ou+PwMIdimtL2jLYudbO6iHKB5t6aUNxgGdDYZ9NyL8LX4y mbPg8CvOEpRCaEmBzd88K27UJ7GqT+30QBIr4qxylbB8okj3FQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLJBwhpZcLE2GpDhOODvbe+tOG+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2 OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZmNGE4ZDUzYTIvMWQyNjkzNGUtMGJiZi00 MzljLWExMTUtNGU2ZjRhOGQ1M2EyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWQyNjkzNGUtMGJiZi00MzljLWEx MTUtNGU2ZjRhOGQ1M2EyLzFkMjY5MzRlLTBiYmYtNDM5Yy1hMTE1LTRlNmY0YThk NTNhMi5jcmwwHwYDVR0jBBgwFoAUl3QYBBX9COHAfkms6zr4PoGpoMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZDI2OTM0ZS0wYmJmLTQzOWMtYTExNS00ZTZm NGE4ZDUzYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCICG0LIIT8mcagejksDU/e 3NKxtbkVdqlj1XeZJNegNrAynV+Pc00FGg7l0DWKyOnrojOtA2+/Ekvkd6ZIT+S6 WkQoEh466UgpgVxAvqwwUDx1Ox+y1qfCd0mR/6KPJzzliMfFczz0es74p/5p4J5Z ill2vnRuETAIp1kWWbFbHaVu0qsm+nu/LWkEuYU3GmruOuICx3CdYcqLB3z9jAfa DeUlxlzhcDY0KFxtc8QgfkfWaHSiFe/tWpTubmaCISsM1hA77QAXD3GwNsrW+1Mp nOrq9Ts+msuxD/V9Zvx3wzAc8ORP15/ye6OxWF5SLtVvuf5SFNkj0fmd+DKqwRRZ -----END CERTIFICATE-----Generated at Wed Jul 9 19:48:38 2025 by rpki-client