$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft File: 2d88838e-541a-4661-8501-3c7d2eb5849d.mft (raw, json) Hash identifier: V4N5w7ZcTKjaJ/+rHkGlXzL8OJnsiOdUG1mqNaFiTI8= Subject key identifier: A4:05:16:8F:E3:0F:95:C9:4E:DE:62:F8:C0:7E:5A:0F:44:39:23:65 Authority key identifier: 4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E Certificate issuer: /CN=2d88838e-541a-4661-8501-3c7d2eb5849d Certificate serial: 010D0C9F4328584A738BB6DA78C06271F4E78290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft Manifest number: 010D0C9F43285848B22C5EC19A391EA7020C1E24 Signing time: Tue 08 Jul 2025 15:00:08 +0000 Manifest this update: Tue 08 Jul 2025 15:00:08 +0000 Manifest next update: Thu 10 Jul 2025 15:00:00 +0000 Files and hashes: 1: 2d88838e-541a-4661-8501-3c7d2eb5849d.crl (hash: aHc4YD/7CSu4z32I18W6IX4Yd3IQAzjDccyDPO1rSww=) 2: 35dd38da-ef2c-3aa2-965d-09739043ca44.roa (hash: kgMIB20TYFk4sp0mjtbPVsxl5wOiTAVG/B7q6kHQIuo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:8b:b6:da:78:c0:62:71:f4:e7:82:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d88838e-541a-4661-8501-3c7d2eb5849d Validity Not Before: Jul 8 15:00:08 2025 GMT Not After : Jul 10 15:00:00 2025 GMT Subject: CN=2fc2854d-2a21-4ef8-a444-af978ba45bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:f2:c7:8e:83:4e:06:a3:8c:a9:36:8e:85: fd:a7:f7:9a:b0:4c:8f:52:05:c8:be:86:32:31:35: ee:69:54:4f:2d:54:39:ac:b5:b1:e4:b5:a9:66:bc: bb:25:67:ba:a4:0b:ce:d3:77:1a:7b:5b:70:a8:c1: 8a:b0:03:16:50:c3:0b:be:76:58:a3:f8:3c:e2:5a: 3a:e8:f4:a9:00:42:7e:e8:50:ff:37:2a:d2:60:bb: 51:67:87:04:51:d1:2a:32:d6:8f:70:4c:ff:55:8b: 6c:bc:a4:6d:48:98:26:af:aa:04:04:6c:93:21:52: d5:c8:dd:6f:9d:bc:62:70:51:f0:c9:87:c7:da:83: a0:06:f9:91:b1:5c:c2:b9:5d:99:ec:aa:71:39:f9: a2:fa:ac:eb:36:06:54:a2:ba:63:25:99:25:7c:97: a3:ca:7e:f8:91:b6:41:f8:99:70:34:43:ca:d4:1a: fd:82:66:c3:97:75:51:e4:9e:d6:75:16:22:be:ff: 33:9c:0d:cd:a6:1c:b8:1d:4a:2b:81:87:2b:8d:16: f0:8c:55:4b:92:88:35:b7:ae:5b:d2:42:c8:08:0f: ae:3a:58:a6:4b:73:98:68:90:60:e3:d2:e4:4a:fb: 1a:bf:9b:02:f6:76:cb:b4:3e:fa:3c:90:43:c2:07: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:05:16:8F:E3:0F:95:C9:4E:DE:62:F8:C0:7E:5A:0F:44:39:23:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d/2d88838e-541a-4661-8501-3c7d2eb5849d.crl X509v3 Authority Key Identifier: keyid:4E:9D:73:3B:F6:0F:5A:F6:9E:37:46:28:53:09:C4:7A:42:49:58:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2d88838e-541a-4661-8501-3c7d2eb5849d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:3d:ca:6f:1f:96:2a:62:80:68:47:bd:82:4e:97:53:40:71: 85:50:00:9f:45:cf:06:1e:45:4f:e7:72:4a:76:f4:10:b7:e7: a0:d8:ae:9d:63:62:ec:d4:04:4f:a3:0c:36:38:6c:24:90:28: 47:6b:91:5c:31:7f:5a:55:8a:6b:36:10:4c:41:c4:4d:88:e3: a8:e7:5e:e6:2c:55:36:fa:b4:96:8e:5c:e5:49:d1:2f:67:8b: a8:3b:c1:21:8d:04:ba:d0:5f:40:0c:ac:22:b2:9a:6d:1a:95: 38:12:80:34:fe:84:db:d0:8c:bc:ea:32:86:5d:c9:18:b6:6c: 96:7c:2a:2b:d5:1e:97:4b:45:90:f2:d4:1c:6c:03:9d:88:7c: 07:f8:3d:bf:be:e3:f8:5d:b4:be:ef:7e:3c:4a:70:24:55:b7: bd:65:aa:82:11:a2:30:b9:1a:18:e5:4c:ab:bb:c7:25:f2:f3: 14:4b:c0:96:2f:f2:93:71:7a:ad:01:26:97:db:8d:73:ae:82: cd:71:ae:74:72:e8:ab:ee:d8:e4:9c:1a:9d:cc:3c:52:a6:ba: 0d:db:f7:b5:61:43:5d:6d:97:53:0c:e1:49:4b:e2:5d:c9:20: 77:d0:ce:4e:d8:3b:a6:34:34:ab:de:db:e6:a4:2e:6e:2d:94: 37:3d:31:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzi7baeMBicfTngpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ4ODgzOGUtNTQxYS00NjYxLTg1MDEtM2M3ZDJlYjU4 NDlkMB4XDTI1MDcwODE1MDAwOFoXDTI1MDcxMDE1MDAwMFowLzEtMCsGA1UEAxMk MmZjMjg1NGQtMmEyMS00ZWY4LWE0NDQtYWY5NzhiYTQ1YmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI7yx46DTgajjKk2joX9p/easEyPUgXIvoYy MTXuaVRPLVQ5rLWx5LWpZry7JWe6pAvO03cae1twqMGKsAMWUMMLvnZYo/g84lo6 6PSpAEJ+6FD/NyrSYLtRZ4cEUdEqMtaPcEz/VYtsvKRtSJgmr6oEBGyTIVLVyN1v nbxicFHwyYfH2oOgBvmRsVzCuV2Z7KpxOfmi+qzrNgZUorpjJZklfJejyn74kbZB +JlwNEPK1Br9gmbDl3VR5J7WdRYivv8znA3Nphy4HUorgYcrjRbwjFVLkog1t65b 0kLICA+uOlimS3OYaJBg49LkSvsav5sC9nbLtD76PJBDwgdUIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKQFFo/jD5XJTt5i+MB+Wg9EOSNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4 ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdkMmViNTg0OWQvMmQ4ODgzOGUtNTQxYS00 NjYxLTg1MDEtM2M3ZDJlYjU4NDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmQ4ODgzOGUtNTQxYS00NjYxLTg1 MDEtM2M3ZDJlYjU4NDlkLzJkODg4MzhlLTU0MWEtNDY2MS04NTAxLTNjN2QyZWI1 ODQ5ZC5jcmwwHwYDVR0jBBgwFoAUTp1zO/YPWvaeN0YoUwnEekJJWC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZDg4ODM4ZS01NDFhLTQ2NjEtODUwMS0zYzdk MmViNTg0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZPcpvH5YqYoBoR72CTpdT QHGFUACfRc8GHkVP53JKdvQQt+eg2K6dY2Ls1ARPoww2OGwkkChHa5FcMX9aVYpr NhBMQcRNiOOo517mLFU2+rSWjlzlSdEvZ4uoO8EhjQS60F9ADKwispptGpU4EoA0 /oTb0Iy86jKGXckYtmyWfCor1R6XS0WQ8tQcbAOdiHwH+D2/vuP4XbS+7348SnAk Vbe9ZaqCEaIwuRoY5Uyru8cl8vMUS8CWL/KTcXqtASaX241zroLNca50cuir7tjk nBqdzDxSproN2/e1YUNdbZdTDOFJS+JdySB30M5O2DumNDSr3tvmpC5uLZQ3PTHW -----END CERTIFICATE-----Generated at Wed Jul 9 06:18:32 2025 by rpki-client