$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft File: 2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft (raw, json) Hash identifier: /yDkoW3j/qfRPw877SMq4Rh7EgKq8uwWZgBR/R0lYBE= Subject key identifier: 8A:54:57:43:CF:04:0C:B1:59:BC:5A:34:70:67:88:37:9E:25:81:83 Authority key identifier: 1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC Certificate issuer: /CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Certificate serial: 010D0C9F4328584A724417BC1E173C4E4957B280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft Manifest number: 010D0C9F432858495B219973CF1EFE1C76C2F9E6 Signing time: Tue 08 Jul 2025 04:00:03 +0000 Manifest this update: Tue 08 Jul 2025 04:00:03 +0000 Manifest next update: Fri 11 Jul 2025 04:00:00 +0000 Files and hashes: 1: 15009c05-1bc4-304e-87d5-ab788644da3a.roa (hash: oasfrbOHdcrpU44NeXLhwJDxDdQqIiS6FbCZD7vZjoI=) 2: 2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl (hash: 94Uoas5KTftx9NPXaN6Ahr1u6iEhsoXFVK9Ylqqi3Kc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:72:44:17:bc:1e:17:3c:4e:49:57:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646 Validity Not Before: Jul 8 04:00:03 2025 GMT Not After : Jul 11 04:00:00 2025 GMT Subject: CN=8233ecf3-14e1-42e8-be8b-a29f7e8e166a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:9d:db:39:33:83:6f:f6:5f:42:e7:00:2f: 1c:a7:91:06:db:09:60:24:0d:fc:e0:d4:a3:d0:71: f3:06:1a:4f:21:6e:c7:a4:c9:c9:dd:59:b1:84:f6: 8d:8b:3d:d0:cf:2d:13:5f:bf:47:18:b6:d3:54:29: 47:15:0c:63:ca:a6:f1:98:fd:35:cd:6a:8e:92:7f: 61:eb:19:7a:e0:52:a2:11:99:7e:ad:5d:2e:e0:88: db:54:8d:b5:1b:43:d7:f8:b2:01:71:b5:82:f8:5e: 0a:9f:d5:df:d0:df:77:f6:fe:fa:5e:57:30:3b:43: 76:db:14:ce:5f:4d:7e:a9:c5:c7:11:45:c2:5e:95: ab:cb:84:76:17:cb:09:ba:28:f7:ca:96:a0:11:8a: 2c:cd:43:82:6c:68:99:fb:4b:5a:84:0a:4b:ec:64: 52:d1:4a:fe:65:c9:3d:5a:e0:fa:bc:91:bd:43:7b: 09:dd:b7:4a:eb:ed:11:ce:95:17:87:5c:d9:46:64: 65:54:48:49:3e:7a:6a:93:30:cd:ea:37:e3:28:dc: 71:6a:93:22:11:d4:d1:22:90:67:47:3f:47:33:89: c7:3c:50:23:ae:5e:39:fe:d9:0a:d2:ad:93:5c:88: 1d:70:43:bb:d0:66:01:ef:05:50:c1:24:43:e5:b3: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:57:43:CF:04:0C:B1:59:BC:5A:34:70:67:88:37:9E:25:81:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.crl X509v3 Authority Key Identifier: keyid:1B:9A:90:B2:B3:62:37:DB:10:B5:3D:93:6E:D5:03:59:7A:9D:2A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d536d1f-3dac-4bd5-b1b8-c8c6f8aad646.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5f:a4:31:48:2c:e4:f0:d1:1c:62:36:0f:42:91:03:e6:5f: ad:29:15:19:4e:20:67:a4:29:ab:95:30:6c:7a:40:f9:ca:9a: a3:da:a0:89:b2:e9:4a:3d:57:6b:27:e2:2e:64:8b:47:a9:43: e0:62:9f:a7:7f:a1:bd:6d:4e:a1:d0:68:6c:6f:a0:97:e5:d9: 44:e3:71:c7:bc:66:00:10:47:07:12:55:44:33:18:d3:13:f2: 5c:3e:06:ac:e3:ef:93:1d:7c:3a:ca:52:af:af:e8:d3:0f:06: ca:8c:66:ac:33:a1:47:e4:7d:75:02:b9:00:25:49:70:db:83: de:3c:87:70:66:f7:da:86:e6:d9:89:30:fd:2f:bb:45:e4:bd: 2d:9c:2d:ae:05:f1:8a:2f:c1:5d:be:f1:ee:65:12:f1:ae:0d: 40:df:7c:f4:c9:f5:17:27:6f:40:ce:fa:c6:3e:b4:60:47:70: aa:d7:a0:f4:b2:a6:38:16:e6:ed:c6:54:5d:cb:52:3c:ca:e0: 6b:b2:a2:70:99:48:fd:8e:a4:b7:c8:2f:55:41:2d:65:a3:ed: eb:05:99:40:3f:46:52:05:9c:06:2d:75:60:73:f4:1a:d3:79: fd:68:78:ae:eb:58:2b:fe:03:1a:af:36:a8:80:74:b2:58:98: e0:21:ab:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpyRBe8Hhc8TklXsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ1MzZkMWYtM2RhYy00YmQ1LWIxYjgtYzhjNmY4YWFk NjQ2MB4XDTI1MDcwODA0MDAwM1oXDTI1MDcxMTA0MDAwMFowLzEtMCsGA1UEAxMk ODIzM2VjZjMtMTRlMS00MmU4LWJlOGItYTI5ZjdlOGUxNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj2d2zkzg2/2X0LnAC8cp5EG2wlgJA384NSj 0HHzBhpPIW7HpMnJ3VmxhPaNiz3Qzy0TX79HGLbTVClHFQxjyqbxmP01zWqOkn9h 6xl64FKiEZl+rV0u4IjbVI21G0PX+LIBcbWC+F4Kn9Xf0N939v76XlcwO0N22xTO X01+qcXHEUXCXpWry4R2F8sJuij3ypagEYoszUOCbGiZ+0tahApL7GRS0Ur+Zck9 WuD6vJG9Q3sJ3bdK6+0RzpUXh1zZRmRlVEhJPnpqkzDN6jfjKNxxapMiEdTRIpBn Rz9HM4nHPFAjrl45/tkK0q2TXIgdcEO70GYB7wVQwSRD5bOzbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIpUV0PPBAyxWbxaNHBniDeeJYGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDUz NmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2ZjhhYWQ2NDYvMmQ1MzZkMWYtM2RhYy00 YmQ1LWIxYjgtYzhjNmY4YWFkNjQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ1MzZkMWYtM2RhYy00YmQ1LWIx YjgtYzhjNmY4YWFkNjQ2LzJkNTM2ZDFmLTNkYWMtNGJkNS1iMWI4LWM4YzZmOGFh ZDY0Ni5jcmwwHwYDVR0jBBgwFoAUG5qQsrNiN9sQtT2TbtUDWXqdKuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDUzNmQxZi0zZGFjLTRiZDUtYjFiOC1jOGM2 ZjhhYWQ2NDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZX6QxSCzk8NEcYjYPQpED 5l+tKRUZTiBnpCmrlTBsekD5ypqj2qCJsulKPVdrJ+IuZItHqUPgYp+nf6G9bU6h 0Ghsb6CX5dlE43HHvGYAEEcHElVEMxjTE/JcPgas4++THXw6ylKvr+jTDwbKjGas M6FH5H11ArkAJUlw24PePIdwZvfahubZiTD9L7tF5L0tnC2uBfGKL8FdvvHuZRLx rg1A33z0yfUXJ29AzvrGPrRgR3Cq16D0sqY4FubtxlRdy1I8yuBrsqJwmUj9jqS3 yC9VQS1lo+3rBZlAP0ZSBZwGLXVgc/Qa03n9aHiu61gr/gMarzaogHSyWJjgIatm -----END CERTIFICATE-----Generated at Tue Jul 8 18:30:44 2025 by rpki-client