$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft File: 43d85349-fcc3-4834-8564-24f8a824b0cd.mft (raw, json) Hash identifier: e5u7F7pAMePzkieCR8umfsP6Suc6PjbVe+oXYcAjOzA= Subject key identifier: 72:1A:75:BC:DE:E1:94:D1:D7:65:AD:61:F9:B2:25:A9:2E:11:68:7A Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F4328584A60EF167E818EC7AA26B8DA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft Manifest number: 010D0C9F43285849766F9B3881ED30AF4E950B56 Signing time: Tue 01 Jul 2025 23:00:03 +0000 Manifest this update: Tue 01 Jul 2025 23:00:03 +0000 Manifest next update: Fri 04 Jul 2025 23:00:00 +0000 Files and hashes: 1: 43d85349-fcc3-4834-8564-24f8a824b0cd.crl (hash: J7WY2BiMhmKOAzIyQ+OQvHBbVBHv+HTsdgEnxtRNAdU=) 2: da0869fc-7a2f-3359-ac12-16c14348d383.roa (hash: cjO09nFV4LiUV1vqOeaxlvisA2DC8IKjFXDUTCiTwV0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:ef:16:7e:81:8e:c7:aa:26:b8:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: Jul 1 23:00:03 2025 GMT Not After : Jul 4 23:00:00 2025 GMT Subject: CN=dd06be55-a64d-4f2a-9cb1-1117a2b3f416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:b9:5c:25:39:c3:46:45:be:8b:cf:a6:ed: 66:7e:c4:70:6c:9f:55:3c:9c:4f:74:75:92:14:26: 64:0c:ec:f0:6a:ca:0f:f2:09:51:5d:72:9b:d9:c4: 54:ed:c3:a8:cb:8a:b7:29:0d:42:7c:72:3d:3c:5f: b0:20:f1:5a:93:a5:09:08:49:ea:1f:05:0e:26:76: 68:8b:f8:a8:2d:05:3c:71:d3:da:6b:e3:d0:21:43: 0a:28:b1:bb:a5:69:71:93:e9:3f:83:53:01:9e:9c: ba:f4:51:2f:2d:52:62:e8:5b:45:fb:43:74:5c:81: db:75:03:e1:75:b8:57:c0:a6:de:69:c9:16:1d:75: fa:92:b0:a1:34:b7:59:e3:a7:06:61:08:13:4f:fb: d3:16:87:ea:ee:58:38:da:5a:0e:76:32:78:b2:39: da:fb:1b:05:f1:ad:c8:53:86:8c:1e:63:df:01:fb: 1a:b8:cc:30:98:f9:b7:54:8f:da:e8:50:60:b4:38: b8:d6:74:c9:2a:fd:d6:39:48:c9:04:e5:d1:21:da: 7d:fd:d2:40:d7:d6:54:eb:0d:e2:fd:f9:51:97:35: 6f:78:56:81:5b:c4:1d:e8:07:30:33:73:a0:e3:41: 2d:9f:00:1e:1a:81:a4:37:09:c7:87:9b:2a:4a:fd: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1A:75:BC:DE:E1:94:D1:D7:65:AD:61:F9:B2:25:A9:2E:11:68:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:2e:4e:ea:f6:16:11:0f:0b:bf:2c:75:cc:4f:25:cd:c9:be: 74:ba:00:1d:86:f6:17:5d:07:f9:d4:23:0f:47:24:e5:46:5c: 26:8e:12:c9:da:5c:9f:e8:a4:f5:c5:a1:69:14:a7:4f:1c:0d: 79:3c:3c:73:33:27:e0:be:3c:d3:60:eb:f0:77:87:13:2f:fd: ac:10:61:bc:4f:29:b0:be:08:7c:6d:34:4c:37:2b:f9:f2:9e: d2:92:48:ea:a6:6c:bc:d9:88:58:54:0b:b8:05:04:03:49:6b: 86:31:3e:31:e0:9e:42:a8:bb:44:b8:21:a8:fb:2a:7a:1d:73: 7e:67:46:05:e7:a0:b2:4f:26:9e:0b:df:32:d0:7c:05:60:6c: 4f:f1:4c:22:08:37:bb:25:8f:d1:41:70:55:d0:81:fd:16:38: 50:8e:4e:fa:f5:bc:4d:0d:07:ab:76:9f:67:57:f7:8f:ad:28: 48:cb:56:3d:c7:e4:d2:90:ff:18:37:4c:25:80:86:68:f2:2b: f9:ce:2b:68:c1:0c:72:dc:2b:8a:9e:dc:41:45:14:80:b8:81: a0:12:22:01:8f:4e:7b:cb:50:df:3a:3b:a5:ad:e5:6a:41:eb: 24:0b:70:91:64:35:b5:a7:9d:b4:fa:bb:7c:f0:95:a1:22:38: 4d:27:ce:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpg7xZ+gY7Hqia42kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI1MDcwMTIzMDAwM1oXDTI1MDcwNDIzMDAwMFowLzEtMCsGA1UEAxMk ZGQwNmJlNTUtYTY0ZC00ZjJhLTljYjEtMTExN2EyYjNmNDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstO5XCU5w0ZFvovPpu1mfsRwbJ9VPJxPdHWS FCZkDOzwasoP8glRXXKb2cRU7cOoy4q3KQ1CfHI9PF+wIPFak6UJCEnqHwUOJnZo i/ioLQU8cdPaa+PQIUMKKLG7pWlxk+k/g1MBnpy69FEvLVJi6FtF+0N0XIHbdQPh dbhXwKbeackWHXX6krChNLdZ46cGYQgTT/vTFofq7lg42loOdjJ4sjna+xsF8a3I U4aMHmPfAfsauMwwmPm3VI/a6FBgtDi41nTJKv3WOUjJBOXRIdp9/dJA19ZU6w3i /flRlzVveFaBW8Qd6AcwM3Og40EtnwAeGoGkNwnHh5sqSv1c5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHIadbze4ZTR12WtYfmyJakuEWh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvNDNkODUzNDktZmNjMy00 ODM0LTg1NjQtMjRmOGE4MjRiMGNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1Lk7q9hYRDwu/LHXMTyXN yb50ugAdhvYXXQf51CMPRyTlRlwmjhLJ2lyf6KT1xaFpFKdPHA15PDxzMyfgvjzT YOvwd4cTL/2sEGG8Tymwvgh8bTRMNyv58p7Skkjqpmy82YhYVAu4BQQDSWuGMT4x 4J5CqLtEuCGo+yp6HXN+Z0YF56CyTyaeC98y0HwFYGxP8UwiCDe7JY/RQXBV0IH9 FjhQjk769bxNDQerdp9nV/ePrShIy1Y9x+TSkP8YN0wlgIZo8iv5zitowQxy3CuK ntxBRRSAuIGgEiIBj057y1DfOjulreVqQeskC3CRZDW1p520+rt88JWhIjhNJ841 -----END CERTIFICATE-----Generated at Wed Jul 2 03:33:40 2025 by rpki-client