$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.mft (raw, json) Hash identifier: Qmp3bNcKc0upPGwzjQPteF0vT7bjFLm2NResXXz+OIk= Subject key identifier: BE:28:FD:DF:EF:98:E6:E5:F9:0B:01:1C:CB:66:70:8B:90:A7:6A:38 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584A736DE059353ED2B600AD9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft Manifest number: 010D0C9F4328584812E7A32F35C9A24960EDDD7F Signing time: Tue 08 Jul 2025 14:00:03 +0000 Manifest this update: Tue 08 Jul 2025 14:00:03 +0000 Manifest next update: Fri 11 Jul 2025 14:00:00 +0000 Files and hashes: 1: 2a85a41a-8114-4e04-abdb-a3a032b37a04.crl (hash: JeNSjv+X93Xg1kgqvvWnsRAXUc+ozrhZ5Y9dyW2kS+Q=) 2: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (hash: YlnGOvodzogucK3AAKARSaWW5Z4fk77aniGy1UQw8cE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:6d:e0:59:35:3e:d2:b6:00:ad:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Jul 8 14:00:03 2025 GMT Not After : Jul 11 14:00:00 2025 GMT Subject: CN=25c0132b-85a2-4060-adc4-c1471270feb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:d0:e8:c9:f5:cc:bc:31:08:24:bf:87:01: 4c:16:2d:9f:2a:64:11:22:59:a8:90:6f:40:f6:cb: 78:60:e9:63:20:8c:05:26:95:3b:cb:72:d2:af:2c: 13:2d:e6:4e:9f:39:5e:f7:12:bf:a1:d3:02:64:d3: 5c:c5:14:5f:d6:ba:b0:9c:04:67:3e:78:3d:e3:72: 5e:0e:ce:48:45:68:6a:f0:89:84:c5:67:5e:3f:63: 89:b8:77:b3:f3:00:fe:1b:43:38:aa:6b:6e:46:98: 04:4a:6a:d6:8b:d5:4e:4a:e0:11:b4:0c:f9:dd:8f: 64:62:d8:6c:9b:b8:10:d3:a3:a0:3c:d3:ec:b3:39: b5:64:67:e9:f5:f9:1b:5f:41:5f:d0:46:11:99:78: 1c:aa:28:8c:c4:a5:d8:aa:5b:d1:f7:94:b0:18:d2: 59:66:de:fa:34:03:ee:89:80:01:69:bd:9b:77:c4: 1b:92:1b:c5:43:d5:c9:9c:37:aa:d8:57:48:9b:a8: 4e:a2:74:fe:e0:7e:78:c9:c5:17:36:be:46:d4:62: 82:5f:f4:66:b7:fc:0d:27:26:03:08:47:df:51:30: 05:79:93:bb:65:cb:6b:48:e3:4e:14:bc:45:05:e1: a4:c7:f8:bd:b1:03:59:0c:28:91:ac:6d:c8:6c:52: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:28:FD:DF:EF:98:E6:E5:F9:0B:01:1C:CB:66:70:8B:90:A7:6A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5d:c4:71:5d:bf:3a:90:27:63:09:fa:7b:f9:70:22:50:c4: 63:c7:89:11:57:c6:7e:a9:d7:37:72:21:68:55:9a:51:c7:ce: bf:6f:cb:94:cb:64:67:df:af:9a:43:49:8c:78:33:3c:5b:06: 5d:00:43:fe:7d:26:81:e9:4a:cb:f5:56:5f:ec:5c:d7:4d:0e: 66:02:b0:22:0e:87:fe:a5:9e:7e:6c:67:f5:5a:57:7e:da:ad: e1:37:5e:49:49:e0:84:07:4e:86:24:af:bc:58:15:1c:37:eb: 67:8a:15:1c:e3:9f:cf:de:4b:55:d7:08:e9:1b:f9:a8:4b:55: 10:df:60:16:6b:74:52:0c:72:94:73:f7:9b:08:72:c0:1d:79: 11:d3:57:d2:5d:96:00:bd:8c:07:c0:b2:cf:3d:1c:2d:5c:2f: bf:fe:e9:b1:cf:d4:32:bb:0a:fd:99:f5:10:df:0e:42:89:3d: d4:fc:04:4a:6e:53:f4:4c:ee:da:9d:56:18:83:59:2a:fd:93: 0f:b4:dc:eb:7c:8c:e2:bf:46:44:1e:a2:6d:34:f4:37:11:1a: 51:1b:e3:dc:6e:16:53:01:43:f8:b0:e0:26:9d:72:ed:59:73: eb:3e:e2:c2:be:4d:93:f0:d6:ea:79:47:76:db:67:69:a9:c3: 0a:9f:86:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzbeBZNT7StgCtkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MDcwODE0MDAwM1oXDTI1MDcxMTE0MDAwMFowLzEtMCsGA1UEAxMk MjVjMDEzMmItODVhMi00MDYwLWFkYzQtYzE0NzEyNzBmZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EzQ6Mn1zLwxCCS/hwFMFi2fKmQRIlmokG9A 9st4YOljIIwFJpU7y3LSrywTLeZOnzle9xK/odMCZNNcxRRf1rqwnARnPng943Je Ds5IRWhq8ImExWdeP2OJuHez8wD+G0M4qmtuRpgESmrWi9VOSuARtAz53Y9kYths m7gQ06OgPNPsszm1ZGfp9fkbX0Ff0EYRmXgcqiiMxKXYqlvR95SwGNJZZt76NAPu iYABab2bd8QbkhvFQ9XJnDeq2FdIm6hOonT+4H54ycUXNr5G1GKCX/Rmt/wNJyYD CEffUTAFeZO7ZctrSONOFLxFBeGkx/i9sQNZDCiRrG3IbFINWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL4o/d/vmObl+QsBHMtmcIuQp2o4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMmE4NWE0MWEtODExNC00 ZTA0LWFiZGItYTNhMDMyYjM3YTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJXcRxXb86kCdjCfp7+XAi UMRjx4kRV8Z+qdc3ciFoVZpRx86/b8uUy2Rn36+aQ0mMeDM8WwZdAEP+fSaB6UrL 9VZf7FzXTQ5mArAiDof+pZ5+bGf1Wld+2q3hN15JSeCEB06GJK+8WBUcN+tnihUc 45/P3ktV1wjpG/moS1UQ32AWa3RSDHKUc/ebCHLAHXkR01fSXZYAvYwHwLLPPRwt XC+//umxz9Qyuwr9mfUQ3w5CiT3U/ARKblP0TO7anVYYg1kq/ZMPtNzrfIziv0ZE HqJtNPQ3ERpRG+PcbhZTAUP4sOAmnXLtWXPrPuLCvk2T8NbqeUd222dpqcMKn4aN -----END CERTIFICATE-----Generated at Tue Jul 8 18:07:07 2025 by rpki-client