$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft File: 1c636f45-fa6a-4556-b6ee-5189124d0893.mft (raw, json) Hash identifier: erGJtX4r48rDvo7cWoUoc5wAfTsX8950laYG1wJESSo= Subject key identifier: FA:BD:73:9A:17:0F:5E:2F:2C:60:9E:F0:5D:67:F4:E0:E9:4C:4F:57 Authority key identifier: 72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF Certificate issuer: /CN=1c636f45-fa6a-4556-b6ee-5189124d0893 Certificate serial: 010D0C9F4328584A6E31D9B4884A186819986000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft Manifest number: 010D0C9F4328584A17BB821FDEB1198EF617F220 Signing time: Sun 06 Jul 2025 17:00:03 +0000 Manifest this update: Sun 06 Jul 2025 17:00:03 +0000 Manifest next update: Tue 08 Jul 2025 17:00:00 +0000 Files and hashes: 1: 1c636f45-fa6a-4556-b6ee-5189124d0893.crl (hash: IfNX5pNEXHD4KPHW1dWKlko44SKhZ5jpUU6jyZOAlLo=) 2: b12cfdaa-6423-367c-9b22-98354d5a010c.roa (hash: S6mRrtw8QyCwirSZxpPEX9CbAtVt9IfVjEFjMvv3IjU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6e:31:d9:b4:88:4a:18:68:19:98:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c636f45-fa6a-4556-b6ee-5189124d0893 Validity Not Before: Jul 6 17:00:03 2025 GMT Not After : Jul 8 17:00:00 2025 GMT Subject: CN=de89490c-274f-4584-8a18-4281877cb24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:7f:17:65:e7:c0:91:94:29:53:90:15:d0: c1:83:06:9e:a4:cd:ef:7f:8f:6a:19:37:a6:b8:ef: 39:7a:89:17:8d:ef:fc:90:8a:a2:a0:4b:85:a6:13: e1:1d:58:a5:7d:10:8a:99:4a:39:04:d6:4f:8f:7e: ef:a2:2c:c1:c0:6b:4b:1b:ff:ea:67:d5:8f:a0:8e: 4d:cc:8c:01:93:82:5d:3a:52:c8:e9:05:b3:ef:d8: 10:35:3f:3f:87:fe:a6:5e:6a:53:71:d2:0d:1e:ea: 32:2f:bf:4a:e4:0b:27:8b:e3:c3:c8:f9:14:84:6e: e7:15:7e:7d:15:5b:f6:d7:f4:79:b8:67:bc:91:5d: 00:76:3f:b7:e3:96:ec:d9:86:63:c5:1e:db:a7:f8: f5:94:6d:9b:d9:48:d5:90:3b:4a:f6:7e:bc:79:2d: c8:1e:a1:1e:6e:47:ef:47:4e:25:d7:f3:e7:4f:6d: 1f:84:78:6e:86:f0:b8:7b:35:ab:f9:ac:c6:d5:4f: 7d:a1:9a:fc:37:9f:cd:dc:a5:4c:34:f4:c7:92:97: ff:b5:06:59:ea:b8:ae:eb:d8:f9:06:46:3e:1d:6b: 20:8c:4b:0b:9a:a6:68:d9:1f:5e:7e:ec:48:89:e7: 72:6a:09:79:62:a5:ab:39:e7:b2:0e:4c:46:96:13: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:73:9A:17:0F:5E:2F:2C:60:9E:F0:5D:67:F4:E0:E9:4C:4F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893/1c636f45-fa6a-4556-b6ee-5189124d0893.crl X509v3 Authority Key Identifier: keyid:72:7A:DF:9D:2F:2B:D4:50:C1:A9:64:C3:11:0E:90:14:88:71:B8:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1c636f45-fa6a-4556-b6ee-5189124d0893.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:74:21:04:ad:65:e6:f5:c3:b7:ac:2a:48:26:d5:ca:d0:95: 4a:5c:fd:4a:e1:46:7d:6a:cc:bf:fc:06:6f:db:d4:99:5f:76: fb:4d:36:44:46:2e:c4:24:6c:1c:fa:28:10:b2:45:dd:3e:a3: 51:2f:f2:a1:b6:d2:d7:49:fa:83:9c:c6:92:0b:bc:d5:65:19: fc:a0:8d:4c:4b:26:f5:0a:1a:14:aa:5f:b7:32:dd:e8:df:89: d1:38:c9:a8:88:7d:4e:f5:bb:37:ed:7a:5e:51:b3:40:a4:b8: 28:8d:af:42:26:39:da:60:50:1a:4e:22:9f:73:79:73:cf:c6: 12:7a:d4:bf:fb:1b:b8:c2:03:d1:5f:7b:eb:6f:26:96:6b:5b: a1:1b:78:80:8d:b0:44:fe:6e:07:b6:9c:89:76:3f:0e:5d:00: 9a:5b:7a:9d:cb:6e:86:fd:a1:31:67:3c:c0:0a:80:7a:e1:df: 35:06:56:92:fb:4e:94:77:5a:aa:f0:bb:d6:dc:2c:49:2a:ac: 05:52:fb:d3:7b:e2:da:21:98:db:5e:11:57:5d:d5:94:51:07: 13:9b:b7:12:5e:0f:c8:65:e9:c4:82:45:e7:d3:83:58:cf:99: 2a:c8:bf:c8:bb:e0:5d:05:96:26:7a:77:65:86:14:89:56:ba: dd:8b:87:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpuMdm0iEoYaBmYYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM2MzZmNDUtZmE2YS00NTU2LWI2ZWUtNTE4OTEyNGQw ODkzMB4XDTI1MDcwNjE3MDAwM1oXDTI1MDcwODE3MDAwMFowLzEtMCsGA1UEAxMk ZGU4OTQ5MGMtMjc0Zi00NTg0LThhMTgtNDI4MTg3N2NiMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVJ/F2XnwJGUKVOQFdDBgwaepM3vf49qGTem uO85eokXje/8kIqioEuFphPhHVilfRCKmUo5BNZPj37voizBwGtLG//qZ9WPoI5N zIwBk4JdOlLI6QWz79gQNT8/h/6mXmpTcdINHuoyL79K5Asni+PDyPkUhG7nFX59 FVv21/R5uGe8kV0Adj+345bs2YZjxR7bp/j1lG2b2UjVkDtK9n68eS3IHqEebkfv R04l1/PnT20fhHhuhvC4ezWr+azG1U99oZr8N5/N3KVMNPTHkpf/tQZZ6riu69j5 BkY+HWsgjEsLmqZo2R9efuxIiedyagl5YqWrOeeyDkxGlhO+fwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPq9c5oXD14vLGCe8F1n9ODpTE9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYz NmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5MTI0ZDA4OTMvMWM2MzZmNDUtZmE2YS00 NTU2LWI2ZWUtNTE4OTEyNGQwODkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWM2MzZmNDUtZmE2YS00NTU2LWI2 ZWUtNTE4OTEyNGQwODkzLzFjNjM2ZjQ1LWZhNmEtNDU1Ni1iNmVlLTUxODkxMjRk MDg5My5jcmwwHwYDVR0jBBgwFoAUcnrfnS8r1FDBqWTDEQ6QFIhxuP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xYzYzNmY0NS1mYTZhLTQ1NTYtYjZlZS01MTg5 MTI0ZDA4OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBadCEErWXm9cO3rCpIJtXK 0JVKXP1K4UZ9asy//AZv29SZX3b7TTZERi7EJGwc+igQskXdPqNRL/KhttLXSfqD nMaSC7zVZRn8oI1MSyb1ChoUql+3Mt3o34nROMmoiH1O9bs37XpeUbNApLgoja9C JjnaYFAaTiKfc3lzz8YSetS/+xu4wgPRX3vrbyaWa1uhG3iAjbBE/m4HtpyJdj8O XQCaW3qdy26G/aExZzzACoB64d81BlaS+06Ud1qq8LvW3CxJKqwFUvvTe+LaIZjb XhFXXdWUUQcTm7cSXg/IZenEgkXn04NYz5kqyL/Iu+BdBZYmendlhhSJVrrdi4dq -----END CERTIFICATE-----Generated at Mon Jul 7 08:37:38 2025 by rpki-client