$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft File: a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft (raw, json) Hash identifier: cRkewWSCDEXfxPr14oYOgGb24YS8vjoXscE7u8KYzzQ= Subject key identifier: F4:2B:44:73:68:BE:A0:3C:DD:31:F0:11:13:74:15:AB:C9:9D:90:B3 Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 Certificate issuer: /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Certificate serial: 010D0C9F4328584A6000DFCF92271C6AA563AB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft Manifest number: 010D0C9F43285840A300F28F0AD1D480874592C7 Signing time: Tue 01 Jul 2025 15:00:03 +0000 Manifest this update: Tue 01 Jul 2025 15:00:03 +0000 Manifest next update: Thu 03 Jul 2025 15:00:00 +0000 Files and hashes: 1: a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl (hash: lAY8yfIkiLF2i2K+VXFdduMycIIOsvtga2Ez/TYPq0I=) 2: ca62f1a5-5ecb-3040-85f3-1f8b6ccad50f.roa (hash: DDWlTm1yX2UEtu6dM/jHlZk5wlQODrCvR9kBKMIX1hM=) 3: d1c8dec1-cf4c-3500-a840-366e754a8c33.roa (hash: c2TRZjzFyT9CLI2dW3xi/5ap7bWwGwNbAR5UZA4XsAI=) 4: f0c4693c-151f-3745-b1ce-9d65b68b967e.roa (hash: k1CooBIVT8GBNjqP3g98LWrMwTV3oAR5Y+A0BgmIUvI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:00:df:cf:92:27:1c:6a:a5:63:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e Validity Not Before: Jul 1 15:00:03 2025 GMT Not After : Jul 3 15:00:00 2025 GMT Subject: CN=189a2897-6eb5-4612-95a0-ef9ce16c7e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:47:a7:68:c9:7f:b8:f7:d7:49:69:c3:3a: ee:34:b5:87:b1:40:75:e2:ec:77:2a:07:14:b9:60: 23:8c:4d:06:41:a1:1c:06:01:83:98:e0:04:da:14: ff:86:02:26:58:88:80:32:4b:f5:ad:81:de:06:e8: 2e:fb:a6:dd:55:92:c7:33:c7:d7:11:ad:78:a4:5e: e8:bd:fd:f4:5d:40:59:d7:d0:48:9f:6f:92:9a:29: 1a:cd:0b:c4:c5:83:97:ec:f0:83:63:e0:9a:81:38: 97:4f:2d:63:87:45:11:f6:f8:27:84:0d:b2:aa:06: 37:10:aa:04:97:02:ea:62:d5:ff:43:bb:9a:6c:eb: 29:a9:67:1a:07:1c:67:c3:1a:1c:08:71:43:58:fb: b7:2b:35:c8:a8:42:3f:42:de:07:c4:a5:e5:46:8d: a8:7c:6d:cf:15:39:09:5c:04:30:9d:42:e5:46:a2: 49:a1:45:0e:65:be:c4:4a:ab:3e:4d:32:90:72:70: d9:d4:ab:63:e6:96:8d:65:38:aa:2e:e6:8a:0e:c2: dc:07:3f:8a:5b:72:fa:1e:fe:c9:45:78:40:ad:08: 8d:fd:65:88:e8:aa:31:bf:b2:9b:87:81:d8:c1:72: 86:49:0e:03:e5:bd:76:0f:8e:bd:48:c8:82:21:38: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2B:44:73:68:BE:A0:3C:DD:31:F0:11:13:74:15:AB:C9:9D:90:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl X509v3 Authority Key Identifier: keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:5c:ab:97:8c:95:af:df:c0:e9:26:f8:c2:37:fc:7a:2e:2d: 40:f1:d6:22:ff:24:03:12:56:0a:e8:e7:60:17:cd:71:76:c4: 3d:d1:50:1e:af:79:6d:b5:9c:9e:e8:9c:eb:d2:9d:2e:58:66: c3:7c:7c:8b:a1:86:e8:57:6b:33:00:cd:4c:57:af:aa:be:09: e7:66:cf:4b:09:60:08:ac:dd:09:9a:74:fa:37:ad:a4:a7:16: ca:6d:9a:20:45:96:4e:33:a1:2a:6b:39:28:03:b0:28:6d:6c: e0:de:03:ce:80:d5:30:34:be:de:24:3d:ca:eb:0a:bc:03:41: 74:57:ad:81:14:39:a9:74:0a:e9:ee:12:66:5e:a2:07:46:63: 09:9f:0c:a1:01:0e:28:46:f1:3d:38:d9:80:41:df:ae:c2:c6: 05:e8:0e:8a:ae:af:20:83:30:fd:f4:bb:4b:d3:b8:aa:50:a1: a3:57:87:3c:83:c2:3a:85:d8:c3:e7:33:55:73:e1:94:22:e4: ee:8c:56:34:14:03:4d:89:39:51:30:1c:1e:6a:f9:e6:42:e0: 62:90:ed:90:05:06:2a:e5:43:17:4f:b5:4b:87:da:30:36:55: 20:b6:e2:00:a2:01:90:67:c8:3d:4d:32:b2:71:92:d5:80:4f: a5:d4:35:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgAN/PkiccaqVjq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc0YmIyZjEtNTk2Ni00YzRhLWE1ZTQtYWNlNTllMWZh MjdlMB4XDTI1MDcwMTE1MDAwM1oXDTI1MDcwMzE1MDAwMFowLzEtMCsGA1UEAxMk MTg5YTI4OTctNmViNS00NjEyLTk1YTAtZWY5Y2UxNmM3ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF5Hp2jJf7j310lpwzruNLWHsUB14ux3KgcU uWAjjE0GQaEcBgGDmOAE2hT/hgImWIiAMkv1rYHeBugu+6bdVZLHM8fXEa14pF7o vf30XUBZ19BIn2+SmikazQvExYOX7PCDY+CagTiXTy1jh0UR9vgnhA2yqgY3EKoE lwLqYtX/Q7uabOspqWcaBxxnwxocCHFDWPu3KzXIqEI/Qt4HxKXlRo2ofG3PFTkJ XAQwnULlRqJJoUUOZb7ESqs+TTKQcnDZ1Ktj5paNZTiqLuaKDsLcBz+KW3L6Hv7J RXhArQiN/WWI6Koxv7Kbh4HYwXKGSQ4D5b12D469SMiCIThyqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPQrRHNovqA83THwERN0FavJnZCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzRi YjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1OWUxZmEyN2UvYTc0YmIyZjEtNTk2Ni00 YzRhLWE1ZTQtYWNlNTllMWZhMjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTc0YmIyZjEtNTk2Ni00YzRhLWE1 ZTQtYWNlNTllMWZhMjdlL2E3NGJiMmYxLTU5NjYtNGM0YS1hNWU0LWFjZTU5ZTFm YTI3ZS5jcmwwHwYDVR0jBBgwFoAUjywaXYc3fEchHhd6esViwQde3lgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNzRiYjJmMS01OTY2LTRjNGEtYTVlNC1hY2U1 OWUxZmEyN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCYXKuXjJWv38DpJvjCN/x6 Li1A8dYi/yQDElYK6OdgF81xdsQ90VAer3lttZye6Jzr0p0uWGbDfHyLoYboV2sz AM1MV6+qvgnnZs9LCWAIrN0JmnT6N62kpxbKbZogRZZOM6EqazkoA7AobWzg3gPO gNUwNL7eJD3K6wq8A0F0V62BFDmpdArp7hJmXqIHRmMJnwyhAQ4oRvE9ONmAQd+u wsYF6A6Krq8ggzD99LtL07iqUKGjV4c8g8I6hdjD5zNVc+GUIuTujFY0FANNiTlR MBweavnmQuBikO2QBQYq5UMXT7VLh9owNlUgtuIAogGQZ8g9TTKycZLVgE+l1DVZ -----END CERTIFICATE-----Generated at Tue Jul 1 20:12:31 2025 by rpki-client