$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft File: dd89d034-c049-4b11-917d-e035f703312f.mft (raw, json) Hash identifier: qGzMjjDjfl/2SyHoQjvGrtZ5ihXVN8d5uF0g0CKNbM4= Subject key identifier: 49:B6:91:91:2C:E6:28:36:EF:79:72:1D:9B:F2:27:6C:1A:78:9F:94 Authority key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Certificate issuer: /CN=dd89d034-c049-4b11-917d-e035f703312f Certificate serial: 010D0C9F4328584A76AFB90A83E43D3B7CA3DF30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft Manifest number: 010D0C9F43285843C490A4BC9165FC72BE0A61F5 Signing time: Wed 09 Jul 2025 18:00:08 +0000 Manifest this update: Wed 09 Jul 2025 18:00:08 +0000 Manifest next update: Sat 12 Jul 2025 18:00:00 +0000 Files and hashes: 1: 985211db-3d6b-313f-ad01-983be935ee5a.roa (hash: nZ4Wap+rd+GWgQbfsQQj5o45JJrmqCDjPY3WvoTSk14=) 2: dd89d034-c049-4b11-917d-e035f703312f.crl (hash: 7SFJjW8o5ONjmuRgnPxB+Bni6vcyIlvHWzevIIReMbk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:af:b9:0a:83:e4:3d:3b:7c:a3:df:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd89d034-c049-4b11-917d-e035f703312f Validity Not Before: Jul 9 18:00:08 2025 GMT Not After : Jul 12 18:00:00 2025 GMT Subject: CN=41503f91-4976-4f49-bbec-525c0a84ae17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:8a:72:63:24:7d:8e:da:c0:4b:82:79:5f: eb:36:27:42:bc:4d:8d:30:80:03:28:34:ab:fa:9e: 99:c6:a4:aa:21:9a:19:c9:2d:42:1d:fc:b1:52:ec: f9:4a:39:bb:f1:5b:3b:3a:70:b2:2b:45:3a:76:1f: 05:de:4a:a3:47:d2:0c:ed:4a:ed:dc:a6:f8:ef:2d: 89:d7:9d:af:55:24:e2:be:68:77:da:b3:92:c1:7d: fe:12:45:0f:a1:4f:02:5e:07:27:61:28:dc:17:48: c9:fd:88:35:a0:1e:99:6e:02:08:ff:27:0e:23:04: 44:d0:45:84:79:a6:3e:4e:0b:15:88:c7:65:20:b3: df:b2:12:b5:cd:28:7d:47:c9:9a:54:d3:cc:ca:5c: c0:7d:95:41:98:85:83:7d:e2:00:37:c8:b4:bb:fd: 09:a5:a2:98:70:12:ff:eb:98:70:de:b5:8d:29:6d: 0a:1a:71:9e:a9:f9:97:3c:b7:e3:5f:e1:e4:bd:d5: e5:de:cf:56:a9:b5:eb:2a:e2:6f:e7:5e:fa:1f:ac: a9:57:6b:39:ce:fe:0c:0c:89:01:02:64:24:6b:a3: de:b0:13:3c:66:1c:85:ee:65:36:1d:46:17:a8:fa: 7c:8d:4b:68:08:8c:02:ce:56:fa:4c:f3:5e:57:ff: 6e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:91:91:2C:E6:28:36:EF:79:72:1D:9B:F2:27:6C:1A:78:9F:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl X509v3 Authority Key Identifier: keyid:FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:88:1f:5a:b3:b9:1c:25:f2:dc:2f:23:1b:26:c2:ce:41:6a: 90:83:ab:0d:27:64:fa:fc:4d:19:1a:16:48:88:44:4e:71:5a: 82:58:03:c1:7f:f8:27:30:87:55:b8:f1:1a:d5:07:a7:94:f9: 13:a4:64:25:c1:9b:0c:7b:78:fd:bb:77:94:7a:2f:3b:46:1a: 9d:46:c3:dd:b4:39:20:6b:cd:69:0b:2d:d0:31:e3:d6:31:94: c1:49:1f:0c:52:82:b7:7c:2d:94:e5:b3:8d:61:22:12:7d:3a: 89:0d:88:fd:1f:f1:66:55:ca:c9:7d:0c:e9:e0:73:a5:5d:0a: 6b:7b:c6:97:a2:de:4f:b4:85:4e:b8:dd:e4:9a:a6:90:b1:99: 32:1f:ed:8d:96:ed:be:97:dd:77:5a:6c:62:bc:92:07:a3:95: 63:b6:f4:95:02:fa:0c:c5:8c:c6:06:6d:a6:1c:ff:95:8b:f1: c7:3e:53:7c:dc:0f:03:4a:36:9f:ab:3b:86:bd:6b:e2:f6:21: 08:45:f8:0c:b6:ce:05:72:02:6d:10:d6:6c:92:ca:3a:9e:d9: d1:9b:e8:67:56:e9:f9:91:d5:cb:c2:eb:5b:6c:1c:da:c2:71: 8e:ee:7e:3f:23:97:fa:8d:b5:8a:bf:ad:f6:2d:ae:41:04:2e: 4b:8e:26:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2r7kKg+Q9O3yj3zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMz MTJmMB4XDTI1MDcwOTE4MDAwOFoXDTI1MDcxMjE4MDAwMFowLzEtMCsGA1UEAxMk NDE1MDNmOTEtNDk3Ni00ZjQ5LWJiZWMtNTI1YzBhODRhZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WCKcmMkfY7awEuCeV/rNidCvE2NMIADKDSr +p6ZxqSqIZoZyS1CHfyxUuz5Sjm78Vs7OnCyK0U6dh8F3kqjR9IM7Urt3Kb47y2J 152vVSTivmh32rOSwX3+EkUPoU8CXgcnYSjcF0jJ/Yg1oB6ZbgII/ycOIwRE0EWE eaY+TgsViMdlILPfshK1zSh9R8maVNPMylzAfZVBmIWDfeIAN8i0u/0JpaKYcBL/ 65hw3rWNKW0KGnGeqfmXPLfjX+HkvdXl3s9WqbXrKuJv5176H6ypV2s5zv4MDIkB AmQka6PesBM8ZhyF7mU2HUYXqPp8jUtoCIwCzlb6TPNeV/9udwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEm2kZEs5ig273lyHZvyJ2waeJ+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5 ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvZGQ4OWQwMzQtYzA0OS00 YjExLTkxN2QtZTAzNWY3MDMzMTJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQ4OWQwMzQtYzA0OS00YjExLTkx N2QtZTAzNWY3MDMzMTJmL2RkODlkMDM0LWMwNDktNGIxMS05MTdkLWUwMzVmNzAz MzEyZi5jcmwwHwYDVR0jBBgwFoAU/S02zOzuANwpZCaofC+s5h8OsfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1 ZjcwMzMxMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAniB9as7kcJfLcLyMbJsLO QWqQg6sNJ2T6/E0ZGhZIiEROcVqCWAPBf/gnMIdVuPEa1QenlPkTpGQlwZsMe3j9 u3eUei87RhqdRsPdtDkga81pCy3QMePWMZTBSR8MUoK3fC2U5bONYSISfTqJDYj9 H/FmVcrJfQzp4HOlXQpre8aXot5PtIVOuN3kmqaQsZkyH+2Nlu2+l913WmxivJIH o5VjtvSVAvoMxYzGBm2mHP+Vi/HHPlN83A8DSjafqzuGvWvi9iEIRfgMts4FcgJt ENZskso6ntnRm+hnVun5kdXLwutbbBzawnGO7n4/I5f6jbWKv632La5BBC5LjiYp -----END CERTIFICATE-----Generated at Wed Jul 9 19:52:12 2025 by rpki-client