$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: TxOqJ6jQZoVfz6EgnpoN1lVhczwiXVEUKlvhp24jAgw= Subject key identifier: 53:44:79:9B:AA:0D:B0:EA:50:54:60:56:9B:9D:83:5E:5A:93:07:7D Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584A76742C40901CDA9876AC8118 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E19E Signing time: Wed 09 Jul 2025 16:00:08 +0000 Manifest this update: Wed 09 Jul 2025 16:00:08 +0000 Manifest next update: Fri 11 Jul 2025 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: lsAENLD3txme0UMDTuRma2KyqtBgVEasyHSxFg+QB0E=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: mFPVuDKac9wSqt3KhVlEyDXDF50zMa7g9K21XKiaS18=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:74:2c:40:90:1c:da:98:76:ac:81:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Jul 9 16:00:08 2025 GMT Not After : Jul 11 16:00:00 2025 GMT Subject: CN=82f28248-f95e-4e29-b34b-9b7268d11b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:3e:18:a0:5c:4c:f6:dd:4e:70:f9:8b:58: 8a:cf:35:d9:63:d5:37:1d:60:12:60:b2:d7:84:3a: 97:47:12:42:f9:a9:ad:08:5f:94:aa:d6:bc:cd:7f: 5f:6c:b3:15:37:6a:25:73:1c:fe:7f:5b:86:23:d6: 82:80:98:21:40:a5:3b:cb:b7:07:02:50:b7:0d:96: c8:92:7d:ba:86:9b:18:7e:32:ca:93:f5:c3:98:25: b5:e0:01:1b:c3:b0:a3:f1:f0:39:5f:be:6a:df:28: 8b:10:51:f0:e1:01:02:16:3d:48:05:e9:79:82:8e: 0b:d8:14:50:40:bd:66:c7:7d:b0:90:7d:ac:05:c7: 31:e2:19:d7:f6:51:6a:e8:41:c0:52:2f:d4:42:b8: 8f:79:39:34:a3:10:11:95:d1:f0:98:6d:bc:a4:1f: 97:c4:2d:df:b5:dd:19:91:c6:01:bd:81:45:0c:0c: 68:21:55:5d:11:9b:0f:cb:97:05:96:79:ba:54:49: 82:74:57:49:78:fa:cf:ee:ca:81:ef:35:d3:31:06: 00:f3:4d:45:45:65:2e:bb:2b:f0:15:3f:3e:84:d4: a8:08:d8:b9:c5:cc:5d:be:c4:3e:f5:71:42:5c:a8: 9a:12:93:3a:ae:d8:99:8f:05:d6:8d:0a:90:c8:31: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:79:9B:AA:0D:B0:EA:50:54:60:56:9B:9D:83:5E:5A:93:07:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:51:0c:5c:d3:97:12:13:fe:86:d6:d0:6b:0a:52:24:31:f0: 6e:27:ee:99:f8:b2:e0:35:fd:3b:cf:d4:87:fb:5a:af:62:43: 75:14:a5:df:31:ef:30:23:ad:46:61:93:c5:b9:48:ae:3a:8e: 40:f3:65:9c:63:3f:19:7b:8b:d5:61:66:d0:88:52:27:96:c6: 64:80:ae:30:76:84:83:b1:86:7e:33:8c:ea:96:1f:37:22:d7: de:6e:2c:ed:76:fc:46:00:a2:14:07:0b:4c:34:c1:df:85:d8: 5d:5d:21:f3:ce:c8:7b:0b:e1:b7:04:e2:86:62:a8:69:86:6c: 89:30:2f:90:74:2f:14:fb:e0:8d:85:a4:ac:6d:b9:5a:6c:ab: 98:de:c2:89:c3:c0:67:ba:a1:bd:41:a2:54:ff:89:2b:9b:32: 1e:94:d3:17:c8:d8:34:65:b4:49:22:38:6a:d1:20:e3:9c:0e: a9:10:f9:18:72:01:5a:d3:c4:f7:a0:59:15:e6:f0:50:83:b3: 11:49:ee:bb:0c:9d:19:ee:46:43:7d:2c:fa:1a:b6:be:11:89: c3:6b:57:a1:c0:59:34:90:55:7e:83:92:c8:34:5d:70:1d:01: 33:11:d5:46:30:8e:63:1c:a7:97:c6:75:36:95:c1:1d:74:56: db:bf:7f:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2dCxAkBzamHasgRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI1MDcwOTE2MDAwOFoXDTI1MDcxMTE2MDAwMFowLzEtMCsGA1UEAxMk ODJmMjgyNDgtZjk1ZS00ZTI5LWIzNGItOWI3MjY4ZDExYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldg+GKBcTPbdTnD5i1iKzzXZY9U3HWASYLLX hDqXRxJC+amtCF+Uqta8zX9fbLMVN2olcxz+f1uGI9aCgJghQKU7y7cHAlC3DZbI kn26hpsYfjLKk/XDmCW14AEbw7Cj8fA5X75q3yiLEFHw4QECFj1IBel5go4L2BRQ QL1mx32wkH2sBccx4hnX9lFq6EHAUi/UQriPeTk0oxARldHwmG28pB+XxC3ftd0Z kcYBvYFFDAxoIVVdEZsPy5cFlnm6VEmCdFdJePrP7sqB7zXTMQYA801FRWUuuyvw FT8+hNSoCNi5xcxdvsQ+9XFCXKiaEpM6rtiZjwXWjQqQyDEv7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFNEeZuqDbDqUFRgVpudg15akwd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhUQxc05cSE/6G1tBrClIk MfBuJ+6Z+LLgNf07z9SH+1qvYkN1FKXfMe8wI61GYZPFuUiuOo5A82WcYz8Ze4vV YWbQiFInlsZkgK4wdoSDsYZ+M4zqlh83ItfebiztdvxGAKIUBwtMNMHfhdhdXSHz zsh7C+G3BOKGYqhphmyJMC+QdC8U++CNhaSsbblabKuY3sKJw8BnuqG9QaJU/4kr mzIelNMXyNg0ZbRJIjhq0SDjnA6pEPkYcgFa08T3oFkV5vBQg7MRSe67DJ0Z7kZD fSz6Gra+EYnDa1ehwFk0kFV+g5LINF1wHQEzEdVGMI5jHKeXxnU2lcEddFbbv3/m -----END CERTIFICATE-----Generated at Wed Jul 9 20:02:28 2025 by rpki-client