$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft File: 1dc788a1-457a-433f-af51-0da74008d8af.mft (raw, json) Hash identifier: iYXGiLjKyUL6EE1DoOFzBYHRb/WzFvU3QNp+r1O9Y0s= Subject key identifier: EA:B0:46:62:3B:F5:E6:82:2D:DC:AE:64:B3:1B:24:00:C0:62:D2:6A Authority key identifier: 9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41 Certificate issuer: /CN=1dc788a1-457a-433f-af51-0da74008d8af Certificate serial: 010D0C9F4328584A75FD0C137FBA08F372D36040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft Manifest number: 010D0C9F43285843C3DEF7501ACC71FF14CEC135 Signing time: Wed 09 Jul 2025 12:00:08 +0000 Manifest this update: Wed 09 Jul 2025 12:00:08 +0000 Manifest next update: Sat 12 Jul 2025 12:00:00 +0000 Files and hashes: 1: 1dc788a1-457a-433f-af51-0da74008d8af.crl (hash: iA6X5M8Ed4gm9iLF0dV7ossO5xQptzLcYlULMjQXVmA=) 2: f808789f-4b24-336c-b785-a0d572ba3992.roa (hash: ng4aqg0oxOBBo1r7Gkr69uRwM2RWmqrt7B6pdOIiXq0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:fd:0c:13:7f:ba:08:f3:72:d3:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dc788a1-457a-433f-af51-0da74008d8af Validity Not Before: Jul 9 12:00:08 2025 GMT Not After : Jul 12 12:00:00 2025 GMT Subject: CN=59a1d80a-d999-4aba-826a-bc2775002aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:d1:c7:ed:bf:f6:ec:57:df:1b:24:0e:89: ee:1e:15:ba:25:43:ed:86:ce:86:1c:ea:9a:0a:b0: a6:1f:9f:91:0a:01:da:32:84:44:3c:e8:9e:b1:15: ad:5b:80:17:2d:b8:ee:97:54:fc:20:f6:27:05:1c: 8f:8a:a4:c0:dd:d1:6f:1d:c0:9b:94:62:05:9f:d8: 0d:82:a9:5d:a7:90:4d:3e:33:a8:db:c1:87:5f:98: 4c:1a:e6:7d:72:cd:1a:f9:64:a3:3d:10:c9:cd:9e: 74:2c:8e:e1:30:4b:7a:94:5d:ad:a6:70:33:31:df: 7b:a9:f9:01:3c:6e:13:90:97:5d:59:83:03:94:12: 86:76:37:60:d9:69:2b:6c:de:37:2f:4a:bc:74:d4: e3:8c:00:c2:52:55:35:2e:1b:a9:44:47:d1:e1:0e: 25:53:be:80:58:eb:ae:6a:1a:10:c8:39:88:fb:3d: 25:d7:c0:3a:44:e4:5a:64:1c:16:68:4a:1b:32:f4: 24:11:ca:3d:1c:9d:10:05:5f:62:9e:2e:b3:b9:a6: 8d:69:67:b0:57:38:dc:e1:75:ab:68:2e:57:da:ef: 2c:fc:e0:79:5c:42:51:a3:5a:bf:5e:86:f1:dc:6b: d2:20:ee:a8:b9:cf:11:c5:b4:8a:03:f9:a1:9d:98: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:46:62:3B:F5:E6:82:2D:DC:AE:64:B3:1B:24:00:C0:62:D2:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.crl X509v3 Authority Key Identifier: keyid:9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3c:ad:27:56:01:d6:44:c2:a9:27:55:41:be:6c:60:61:d0: 23:45:e0:f2:a7:26:3b:21:b8:a6:3a:10:3a:97:34:1d:12:35: c1:1c:e0:8d:c6:70:77:33:77:ef:a6:ac:3a:5c:d0:21:a8:86: 14:03:47:de:db:e2:11:e8:78:41:04:93:a5:d8:ba:d9:c9:c2: 34:f7:30:fd:6a:10:f3:32:d9:d3:af:1b:35:aa:a4:13:2c:93: 2c:0b:15:59:3a:6f:db:f8:d2:ae:fb:94:3b:ea:09:b2:6c:40: 4f:3a:08:e7:e6:7c:28:80:cc:71:dc:f5:23:dc:a5:7b:7e:eb: 42:17:a9:39:bf:d4:e4:cc:c0:81:30:41:e9:ab:1a:57:b3:a2: c3:6c:9f:f5:d4:03:a0:88:e0:1c:86:a7:10:dd:0c:2d:8a:33: 14:c6:8a:ad:ac:84:b0:8f:25:91:26:f0:b4:b8:5c:c5:4f:c7: d3:c5:2c:7f:bb:45:73:da:d8:a5:2c:d3:3d:39:ea:56:1c:f3: 13:86:31:6b:24:bd:7f:da:c5:f5:b2:58:96:ec:55:02:93:c0: 23:60:f9:51:de:97:55:56:6e:64:4e:4f:92:3e:c3:d2:8a:36: e8:4a:6c:ea:22:a0:7f:e0:cc:0d:1d:51:17:24:0e:c7:d2:5d: d9:7b:8d:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1/QwTf7oI83LTYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRjNzg4YTEtNDU3YS00MzNmLWFmNTEtMGRhNzQwMDhk OGFmMB4XDTI1MDcwOTEyMDAwOFoXDTI1MDcxMjEyMDAwMFowLzEtMCsGA1UEAxMk NTlhMWQ4MGEtZDk5OS00YWJhLTgyNmEtYmMyNzc1MDAyYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisrRx+2/9uxX3xskDonuHhW6JUPths6GHOqa CrCmH5+RCgHaMoREPOiesRWtW4AXLbjul1T8IPYnBRyPiqTA3dFvHcCblGIFn9gN gqldp5BNPjOo28GHX5hMGuZ9cs0a+WSjPRDJzZ50LI7hMEt6lF2tpnAzMd97qfkB PG4TkJddWYMDlBKGdjdg2WkrbN43L0q8dNTjjADCUlU1LhupREfR4Q4lU76AWOuu ahoQyDmI+z0l18A6RORaZBwWaEobMvQkEco9HJ0QBV9ini6zuaaNaWewVzjc4XWr aC5X2u8s/OB5XEJRo1q/Xobx3GvSIO6ouc8RxbSKA/mhnZhXVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOqwRmI79eaCLdyuZLMbJADAYtJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZGM3 ODhhMS00NTdhLTQzM2YtYWY1MS0wZGE3NDAwOGQ4YWYvMWRjNzg4YTEtNDU3YS00 MzNmLWFmNTEtMGRhNzQwMDhkOGFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWRjNzg4YTEtNDU3YS00MzNmLWFm NTEtMGRhNzQwMDhkOGFmLzFkYzc4OGExLTQ1N2EtNDMzZi1hZjUxLTBkYTc0MDA4 ZDhhZi5jcmwwHwYDVR0jBBgwFoAUmr9pYk7B77WSfYb0cfO2Ai1CpkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZGM3ODhhMS00NTdhLTQzM2YtYWY1MS0wZGE3 NDAwOGQ4YWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUPK0nVgHWRMKpJ1VBvmxg YdAjReDypyY7IbimOhA6lzQdEjXBHOCNxnB3M3fvpqw6XNAhqIYUA0fe2+IR6HhB BJOl2LrZycI09zD9ahDzMtnTrxs1qqQTLJMsCxVZOm/b+NKu+5Q76gmybEBPOgjn 5nwogMxx3PUj3KV7futCF6k5v9TkzMCBMEHpqxpXs6LDbJ/11AOgiOAchqcQ3Qwt ijMUxoqtrISwjyWRJvC0uFzFT8fTxSx/u0Vz2tilLNM9OepWHPMThjFrJL1/2sX1 sliW7FUCk8AjYPlR3pdVVm5kTk+SPsPSijboSmzqIqB/4MwNHVEXJA7H0l3Ze425 -----END CERTIFICATE-----Generated at Wed Jul 9 20:05:16 2025 by rpki-client