$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft File: 2d00478e-6a9e-4570-970a-f0a5baefc323.mft (raw, json) Hash identifier: 64wRKfy0tSyhILtR2RAnBFRFYF+adO+h+gF8RKyqjfI= Subject key identifier: EE:D8:C7:09:CF:00:54:AB:A9:29:02:42:0C:82:9A:9A:A3:55:81:31 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584A6F211A79C46D759765FB9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft Manifest number: 010D0C9F4328584073A81EB2087DF5616A46D3BF Signing time: Mon 07 Jul 2025 01:02:08 +0000 Manifest this update: Mon 07 Jul 2025 01:02:08 +0000 Manifest next update: Tue 08 Jul 2025 18:00:00 +0000 Files and hashes: 1: 19dd8a48-a5b1-32f2-90cc-360536a432eb.roa (hash: YYd+XCB9pGJpV5DKDX37RjfNtHu+OXr9MWWbK4jHmGM=) 2: 2d00478e-6a9e-4570-970a-f0a5baefc323.crl (hash: IpgcO2jZytr2Ov6IxlvosoMa5X+5DPjV0jzXMzEKl4Q=) 3: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (hash: NA8+NiRKdpXIU4nuHjZ5lCMo60KETbIhQ2zN6t7rJxQ=) 4: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (hash: h3s0HQC+iMe/5B3L4nF6WlbNODD9A20dudTp9AIpmJ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:21:1a:79:c4:6d:75:97:65:fb:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Jul 7 01:02:08 2025 GMT Not After : Jul 8 18:00:00 2025 GMT Subject: CN=67ce8df9-bb8a-4e3e-8690-3014d14e5e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:97:30:6b:d1:75:7f:37:5e:06:ca:17:c0: 96:ef:fb:05:3f:16:be:87:cd:f8:e5:77:a8:ea:a4: 58:c0:84:18:b6:e5:cd:0c:a9:57:af:01:16:80:64: 67:17:43:ef:8d:96:e6:a8:0a:8f:a5:7e:37:54:f9: 72:f6:f1:07:40:e5:36:6c:72:2d:e5:f7:4c:0c:65: d1:4a:04:59:03:35:54:ff:4c:f4:a9:c3:41:d5:4f: 1b:fa:2a:0f:47:de:a8:7f:5b:42:32:38:78:a6:02: 2e:77:16:12:89:6f:b1:73:1b:62:1e:eb:c0:f2:68: b3:b0:b1:f2:74:ea:3c:23:c8:f1:ba:f7:2e:40:af: e9:f9:3c:fe:e1:d9:24:89:7a:4d:56:5b:3d:09:9b: 1e:05:e3:37:b2:ab:f9:4d:ba:c9:15:59:32:0f:8c: 92:37:2e:0c:66:4e:3d:14:2e:87:9e:79:b9:ca:40: 7e:fe:63:17:de:7f:bb:ab:7c:cc:52:88:65:75:1a: 9b:67:57:44:2c:e0:df:c7:f1:60:d7:ad:40:dc:4d: a0:11:7c:6f:2c:72:f0:49:e1:27:e4:56:e2:5f:b1: e0:ae:9e:6c:b8:cd:ab:9a:1c:9a:e4:58:86:2e:20: 77:1f:18:be:bc:5e:9c:04:48:65:52:ee:79:1e:bf: 7a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D8:C7:09:CF:00:54:AB:A9:29:02:42:0C:82:9A:9A:A3:55:81:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:71:76:a8:ce:1e:ab:23:09:e8:7c:3b:11:67:37:5b:2a:7c: 65:92:36:00:38:4a:c2:18:bc:22:e5:7a:6c:29:f6:28:53:f9: 76:cd:ae:1f:18:c4:53:a4:fb:d2:92:6d:ad:73:71:b9:a3:1c: e9:31:d9:e3:52:03:96:9a:6c:9b:a6:20:6c:95:3d:ae:97:cf: 95:ab:c4:87:81:40:7a:9e:d8:b3:3a:5d:08:fb:4a:5c:9b:ec: 26:99:bc:90:ae:6f:18:7c:ae:f6:0e:63:8b:5e:59:55:6f:e9: ca:cd:3d:a6:57:24:35:d1:c5:42:c3:27:87:c1:b6:c7:a1:ed: a6:72:d2:89:3a:70:3b:19:9a:1a:73:99:65:33:e4:94:4e:ed: 80:68:58:00:28:df:ae:b0:f3:c6:83:db:b6:de:f1:9d:38:b9: 9d:73:df:4e:ad:3a:a1:22:3e:2b:75:66:20:bc:ec:22:ba:a8: 82:61:82:27:a0:46:27:44:aa:65:ee:4d:c0:a7:1f:17:df:ef: 1a:26:d7:e4:3e:6c:38:76:22:4c:ab:de:d1:43:40:f2:8f:cb: f9:97:a1:18:fc:88:8e:a0:4f:77:8b:b1:7f:40:cb:32:b6:2b: 27:1d:fe:bc:2f:24:ad:c0:fd:52:65:74:6e:ad:2c:75:2e:f3: 11:1a:e3:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpvIRp5xG11l2X7kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MDcwNzAxMDIwOFoXDTI1MDcwODE4MDAwMFowLzEtMCsGA1UEAxMk NjdjZThkZjktYmI4YS00ZTNlLTg2OTAtMzAxNGQxNGU1ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo+XMGvRdX83XgbKF8CW7/sFPxa+h8345Xeo 6qRYwIQYtuXNDKlXrwEWgGRnF0PvjZbmqAqPpX43VPly9vEHQOU2bHIt5fdMDGXR SgRZAzVU/0z0qcNB1U8b+ioPR96of1tCMjh4pgIudxYSiW+xcxtiHuvA8mizsLHy dOo8I8jxuvcuQK/p+Tz+4dkkiXpNVls9CZseBeM3sqv5TbrJFVkyD4ySNy4MZk49 FC6Hnnm5ykB+/mMX3n+7q3zMUohldRqbZ1dELODfx/Fg161A3E2gEXxvLHLwSeEn 5FbiX7Hgrp5suM2rmhya5FiGLiB3Hxi+vF6cBEhlUu55Hr96dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO7YxwnPAFSrqSkCQgyCmpqjVYExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvMmQwMDQ3OGUtNmE5ZS00 NTcwLTk3MGEtZjBhNWJhZWZjMzIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhcXaozh6rIwnofDsRZzdb KnxlkjYAOErCGLwi5XpsKfYoU/l2za4fGMRTpPvSkm2tc3G5oxzpMdnjUgOWmmyb piBslT2ul8+Vq8SHgUB6ntizOl0I+0pcm+wmmbyQrm8YfK72DmOLXllVb+nKzT2m VyQ10cVCwyeHwbbHoe2mctKJOnA7GZoac5llM+SUTu2AaFgAKN+usPPGg9u23vGd OLmdc99OrTqhIj4rdWYgvOwiuqiCYYInoEYnRKpl7k3Apx8X3+8aJtfkPmw4diJM q97RQ0Dyj8v5l6EY/IiOoE93i7F/QMsytisnHf68LyStwP1SZXRurSx1LvMRGuMF -----END CERTIFICATE-----Generated at Mon Jul 7 03:26:41 2025 by rpki-client