$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft File: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft (raw, json) Hash identifier: 0ohTWCgNIEji6EaxeDyiQheNrddvSDkG94WMgRUklJs= Subject key identifier: A3:42:5B:74:7E:77:C7:AF:D4:83:7D:DD:A4:ED:9D:69:2B:0D:B8:37 Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Certificate issuer: /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Certificate serial: 010D0C9F4328584A743E5FC0B966AE657C3A4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft Manifest number: 010D0C9F4328584426A4E2EADBA377D65CF196F1 Signing time: Tue 08 Jul 2025 21:00:08 +0000 Manifest this update: Tue 08 Jul 2025 21:00:08 +0000 Manifest next update: Fri 11 Jul 2025 21:00:00 +0000 Files and hashes: 1: 088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (hash: WoTCrGKeVG7CZl31LQgnokzBpyiPDeTwhgkaeAf1Iks=) 2: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl (hash: FvWySRO7DPj6FFOLfkq9Rq8SPBiNWmEDP3uVEALxTok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:3e:5f:c0:b9:66:ae:65:7c:3a:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Validity Not Before: Jul 8 21:00:08 2025 GMT Not After : Jul 11 21:00:00 2025 GMT Subject: CN=a83167e1-a9f5-4ee4-b1db-22d9c325c179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cb:b3:51:38:c1:bc:38:21:19:6c:86:b5:20: 42:94:60:c6:cd:f1:73:2f:c0:f7:66:93:08:8e:15: c6:2d:ee:fd:15:0b:dc:13:7d:c1:5b:bc:44:f7:c5: 3d:23:27:ae:ae:df:71:32:92:1d:f2:aa:b5:d2:b4: 58:c5:00:cb:ec:5d:98:45:13:e6:d7:e0:dc:c2:3d: b8:ef:f0:d8:39:68:f4:30:10:53:76:8d:77:0d:9b: 9b:86:19:67:81:ed:f8:e9:73:21:79:5b:bd:ae:51: ba:d4:96:37:3c:97:42:29:82:d9:42:38:b2:1a:03: d6:b8:8b:b6:b5:07:b4:31:2b:7f:93:34:a8:89:0f: c5:10:5c:ef:ec:a6:e7:c7:24:99:69:47:06:3c:5c: 3b:f9:97:62:d9:79:1e:7b:69:d1:9d:6a:0d:ec:3a: c9:eb:e4:65:87:a0:10:0a:0e:bc:12:80:97:ab:4b: 69:7c:32:19:ba:e2:35:f7:26:2e:84:ae:1e:e5:e1: 9a:2f:a6:d4:c0:c8:7f:cf:fd:35:84:4a:e7:e9:ae: 51:8b:e8:16:3f:70:c4:90:f1:8d:93:43:5b:fb:8a: 74:36:35:70:bf:ed:77:6b:5f:9d:27:b7:05:4a:ed: b8:21:ba:7b:62:f9:fc:d5:48:5a:f1:b4:97:67:81: 13:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:42:5B:74:7E:77:C7:AF:D4:83:7D:DD:A4:ED:9D:69:2B:0D:B8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl X509v3 Authority Key Identifier: keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:73:b9:77:69:36:92:25:ad:72:f3:c5:ec:ec:67:d6:a1:db: 12:7e:32:1a:c6:6f:c2:2d:e7:98:05:24:17:6c:46:44:df:f6: 9c:e1:85:65:69:0f:31:25:61:69:61:c5:f9:1d:17:7d:3a:b1: f7:73:7e:44:6c:22:3b:a8:3d:cb:f7:62:83:f2:a5:7f:1b:b2: 78:47:9f:21:52:35:94:b9:00:c9:d7:eb:2f:a3:32:9e:6e:0f: 7e:08:81:32:fa:bc:fb:5b:c5:10:0c:47:4e:d9:ae:fc:4d:5d: 2b:43:75:d0:85:74:d0:61:82:97:97:72:66:b7:7d:9a:f2:c8: c7:ea:9c:64:78:56:34:88:29:94:35:4c:db:43:d5:0e:10:62: 14:56:fc:8d:ad:e0:95:5c:11:1c:bd:15:a0:2b:f8:b7:ec:69: 1e:56:f2:d2:e3:62:7e:ba:70:00:f5:fd:1e:65:94:e8:06:d5: ee:57:c8:33:c1:6f:78:0b:ef:9c:63:11:4b:4a:4f:e0:c1:3e: 03:e4:15:74:9e:59:20:4f:86:78:64:b9:79:d1:f3:6a:ce:2c: f8:9a:93:90:12:1b:72:12:d8:97:58:34:29:0f:4a:9d:67:13: 37:bd:97:50:c9:9f:6a:fe:9d:67:02:ce:c0:b3:4a:8a:ad:ae: cc:89:cb:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0Pl/AuWauZXw6SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFm MDE3MB4XDTI1MDcwODIxMDAwOFoXDTI1MDcxMTIxMDAwMFowLzEtMCsGA1UEAxMk YTgzMTY3ZTEtYTlmNS00ZWU0LWIxZGItMjJkOWMzMjVjMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8uzUTjBvDghGWyGtSBClGDGzfFzL8D3ZpMI jhXGLe79FQvcE33BW7xE98U9Iyeurt9xMpId8qq10rRYxQDL7F2YRRPm1+Dcwj24 7/DYOWj0MBBTdo13DZubhhlnge346XMheVu9rlG61JY3PJdCKYLZQjiyGgPWuIu2 tQe0MSt/kzSoiQ/FEFzv7KbnxySZaUcGPFw7+Zdi2Xkee2nRnWoN7DrJ6+Rlh6AQ Cg68EoCXq0tpfDIZuuI19yYuhK4e5eGaL6bUwMh/z/01hErn6a5Ri+gWP3DEkPGN k0Nb+4p0NjVwv+13a1+dJ7cFSu24Ibp7Yvn81Uha8bSXZ4ET/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKNCW3R+d8ev1IN93aTtnWkrDbg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIw ZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMjhiMGUyZTQtNWYyYS00 ZWNkLWFkNmItOTc0MTY5NTFmMDE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjhiMGUyZTQtNWYyYS00ZWNkLWFk NmItOTc0MTY5NTFmMDE3LzI4YjBlMmU0LTVmMmEtNGVjZC1hZDZiLTk3NDE2OTUx ZjAxNy5jcmwwHwYDVR0jBBgwFoAUeOCFNnhwP8lrznn8nzJY9P8yAlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQx Njk1MWYwMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYc7l3aTaSJa1y88Xs7GfW odsSfjIaxm/CLeeYBSQXbEZE3/ac4YVlaQ8xJWFpYcX5HRd9OrH3c35EbCI7qD3L 92KD8qV/G7J4R58hUjWUuQDJ1+svozKebg9+CIEy+rz7W8UQDEdO2a78TV0rQ3XQ hXTQYYKXl3Jmt32a8sjH6pxkeFY0iCmUNUzbQ9UOEGIUVvyNreCVXBEcvRWgK/i3 7GkeVvLS42J+unAA9f0eZZToBtXuV8gzwW94C++cYxFLSk/gwT4D5BV0nlkgT4Z4 ZLl50fNqziz4mpOQEhtyEtiXWDQpD0qdZxM3vZdQyZ9q/p1nAs7As0qKra7Micte -----END CERTIFICATE-----Generated at Wed Jul 9 12:25:23 2025 by rpki-client