$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft File: 42c666c1-a603-4b7f-a5b1-8292a815144e.mft (raw, json) Hash identifier: NejPW8PyLXTZjCDQVT0pX7iDetTQ6o9DD5eiPqNKQ/c= Subject key identifier: 4A:9B:79:CA:E2:5B:97:C4:04:C3:34:CD:84:FC:18:9E:97:64:70:79 Authority key identifier: 9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 Certificate issuer: /CN=42c666c1-a603-4b7f-a5b1-8292a815144e Certificate serial: 010D0C9F4328584A1D1E38EDDEE33A2394CF6F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft Manifest number: 010D0C9F4328584890AF1FF4945AFE1912081BD4 Signing time: Sat 07 Jun 2025 16:00:03 +0000 Manifest this update: Sat 07 Jun 2025 16:00:03 +0000 Manifest next update: Tue 10 Jun 2025 16:00:00 +0000 Files and hashes: 1: 2dc2063e-28dd-3936-aa61-b0d1e7a6065c.roa (hash: WY48/3ilXuqfS7R5NITBx9hMRn9DC+HcwpFDUSmLzaI=) 2: 42c666c1-a603-4b7f-a5b1-8292a815144e.crl (hash: JKtUJG2cV7bEpg3NfEiCRCuM8OdR9kTSvpl2KgGCuYM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1d:1e:38:ed:de:e3:3a:23:94:cf:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c666c1-a603-4b7f-a5b1-8292a815144e Validity Not Before: Jun 7 16:00:03 2025 GMT Not After : Jun 10 16:00:00 2025 GMT Subject: CN=6f4ace08-a452-4090-bbf1-641f0ff3f11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:f5:1a:86:03:b7:ea:5a:10:cb:9e:9c:11: b1:10:bc:ad:e0:96:04:72:c1:cc:4f:42:a8:78:12: 81:d9:c5:24:26:6d:6c:fc:4c:ea:2c:b7:b8:56:c9: c9:d3:1c:18:91:5d:34:78:4a:dc:22:a5:e2:c8:bc: 5c:3e:76:44:8d:f7:62:be:50:1e:a5:59:fb:42:2e: 7c:a5:ec:ad:1c:09:ec:31:4b:4b:26:99:a6:f0:fd: 39:34:b9:39:1a:02:0e:9b:cb:94:fd:98:44:51:e0: 54:e8:6e:6f:fa:52:91:1e:81:3f:5c:e2:30:1d:7d: 6a:d7:c4:ce:33:4d:28:4b:8e:60:df:e8:40:51:9e: 22:1c:c8:e6:61:0d:7b:71:06:31:28:9b:9b:9d:09: 08:61:b0:b3:e2:b6:6c:7d:60:6e:42:42:b7:f0:24: 81:62:ad:91:74:4c:f9:b4:fc:26:d2:3e:74:69:cf: 87:de:80:6c:35:74:3d:54:91:7f:65:1c:93:a3:6c: 15:05:82:e1:b7:f8:bb:21:40:ca:0e:eb:01:93:0b: f8:53:34:8e:88:81:db:48:85:87:fc:a0:d2:47:6e: 7f:b6:06:aa:81:cb:d8:38:80:d2:5c:05:74:84:26: 93:d6:29:52:92:64:6e:ff:f8:6c:df:6d:fe:88:b0: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9B:79:CA:E2:5B:97:C4:04:C3:34:CD:84:FC:18:9E:97:64:70:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e/42c666c1-a603-4b7f-a5b1-8292a815144e.crl X509v3 Authority Key Identifier: keyid:9E:1A:34:20:B0:66:4F:98:39:3A:33:EF:54:18:95:61:DE:AF:BB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42c666c1-a603-4b7f-a5b1-8292a815144e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:41:25:78:67:84:d4:45:32:2d:bd:f2:a5:10:8a:4d:ee:30: e6:3c:d1:59:81:6f:8f:ed:d7:7a:4f:56:b5:01:09:76:86:d4: 16:fa:14:90:4b:c8:c5:a6:8c:f8:62:e6:ef:b1:d2:93:a7:8e: d0:12:ee:47:96:77:8d:9f:97:fb:68:d2:80:46:3a:09:90:37: 55:1d:21:9a:1b:d7:81:77:40:dc:4b:33:72:59:82:12:1a:bb: 49:4c:62:18:3c:6d:b1:27:04:38:f3:25:99:7a:f5:3c:aa:54: 76:f7:cc:e3:48:62:d0:c9:c1:b0:ed:90:1d:ff:a1:15:de:cd: 70:02:e9:46:2a:27:d1:4d:e1:a0:08:47:fd:7b:43:e4:a9:a5: 70:fb:4a:40:48:9b:e1:ce:4d:bd:75:6e:fc:44:96:ea:61:6a: f9:9f:8a:a6:12:85:d3:09:fe:54:01:66:78:07:9b:9a:c1:16: d6:42:94:c3:51:68:0c:1b:e2:66:1f:bb:aa:ee:20:28:6b:45: e1:13:e0:cc:ee:9b:d2:7c:b8:39:a1:b1:30:69:2b:5d:57:99: 50:4b:80:7c:d7:b3:e8:04:ad:e4:da:6d:1f:81:aa:5a:57:d6: 80:47:fc:bd:86:e5:fa:75:32:a5:ab:fb:ee:cf:4d:2d:a2:ef: a7:1b:62:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEodHjjt3uM6I5TPb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjNjY2YzEtYTYwMy00YjdmLWE1YjEtODI5MmE4MTUx NDRlMB4XDTI1MDYwNzE2MDAwM1oXDTI1MDYxMDE2MDAwMFowLzEtMCsGA1UEAxMk NmY0YWNlMDgtYTQ1Mi00MDkwLWJiZjEtNjQxZjBmZjNmMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztn1GoYDt+paEMuenBGxELyt4JYEcsHMT0Ko eBKB2cUkJm1s/EzqLLe4VsnJ0xwYkV00eErcIqXiyLxcPnZEjfdivlAepVn7Qi58 peytHAnsMUtLJpmm8P05NLk5GgIOm8uU/ZhEUeBU6G5v+lKRHoE/XOIwHX1q18TO M00oS45g3+hAUZ4iHMjmYQ17cQYxKJubnQkIYbCz4rZsfWBuQkK38CSBYq2RdEz5 tPwm0j50ac+H3oBsNXQ9VJF/ZRyTo2wVBYLht/i7IUDKDusBkwv4UzSOiIHbSIWH /KDSR25/tgaqgcvYOIDSXAV0hCaT1ilSkmRu//hs323+iLClKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEqbecriW5fEBMM0zYT8GJ6XZHB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmM2 NjZjMS1hNjAzLTRiN2YtYTViMS04MjkyYTgxNTE0NGUvNDJjNjY2YzEtYTYwMy00 YjdmLWE1YjEtODI5MmE4MTUxNDRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJjNjY2YzEtYTYwMy00YjdmLWE1 YjEtODI5MmE4MTUxNDRlLzQyYzY2NmMxLWE2MDMtNGI3Zi1hNWIxLTgyOTJhODE1 MTQ0ZS5jcmwwHwYDVR0jBBgwFoAUnho0ILBmT5g5OjPvVBiVYd6vu3AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmM2NjZjMS1hNjAzLTRiN2YtYTViMS04Mjky YTgxNTE0NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByQSV4Z4TURTItvfKlEIpN 7jDmPNFZgW+P7dd6T1a1AQl2htQW+hSQS8jFpoz4YubvsdKTp47QEu5HlneNn5f7 aNKARjoJkDdVHSGaG9eBd0DcSzNyWYISGrtJTGIYPG2xJwQ48yWZevU8qlR298zj SGLQycGw7ZAd/6EV3s1wAulGKifRTeGgCEf9e0PkqaVw+0pASJvhzk29dW78RJbq YWr5n4qmEoXTCf5UAWZ4B5uawRbWQpTDUWgMG+JmH7uq7iAoa0XhE+DM7pvSfLg5 obEwaStdV5lQS4B817PoBK3k2m0fgapaV9aAR/y9huX6dTKlq/vuz00tou+nG2Jj -----END CERTIFICATE-----Generated at Sun Jun 8 03:46:45 2025 by rpki-client