$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft File: c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft (raw, json) Hash identifier: sPas6oPLxlSa+u7ROKgJ/1GAnDPlXi31wDOUimHPknY= Subject key identifier: 6A:55:5B:36:0E:D4:A3:15:1F:95:B8:FB:7A:76:C1:5E:A3:17:7D:FD Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F Certificate issuer: /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Certificate serial: 010D0C9F4328584A72D905D89238EAE555DAE700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft Manifest number: 010D0C9F432858489B24373D0D526E5751B7B82C Signing time: Tue 08 Jul 2025 09:00:08 +0000 Manifest this update: Tue 08 Jul 2025 09:00:08 +0000 Manifest next update: Thu 10 Jul 2025 09:00:00 +0000 Files and hashes: 1: 1190cb49-d6b6-36f1-8898-ac542e226430.roa (hash: gTamvtY4/LQZzweTmGGfVs0+6605l+Qktv+7KbzlqPw=) 2: c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl (hash: 48kjIE/vlyWjLmiS2Cp/H2YNdaMEQ2Kz4PrnLw8q9NA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:72:d9:05:d8:92:38:ea:e5:55:da:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Validity Not Before: Jul 8 09:00:08 2025 GMT Not After : Jul 10 09:00:00 2025 GMT Subject: CN=a6dd20b2-46a3-4d2f-8f65-dd07194e8550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:30:40:7a:2d:1a:53:3e:2e:9e:f5:fa:6e: d2:34:4b:3b:08:b6:cb:7e:d5:4e:e1:3e:dc:19:96: 29:43:52:fd:0e:e1:52:6d:0f:72:c5:d6:cc:c5:2d: 91:43:5c:9b:50:42:be:68:9a:99:e0:9f:0e:d6:67: 7c:e7:d0:d5:c7:98:a2:bc:43:d8:60:75:b4:bd:a9: 6f:41:7a:54:9b:9c:9c:e7:44:21:6f:93:83:d4:d5: 5f:76:66:c5:28:83:5d:5e:fc:6a:b0:b3:69:c1:00: bf:3e:3d:8f:7b:78:17:f5:90:b2:fa:b4:de:b6:27: 51:b1:a3:71:d1:a7:08:1c:55:1b:3f:df:52:f5:c3: c0:7b:42:82:91:f9:7e:17:72:68:63:64:04:0d:84: f3:78:69:84:0e:0e:87:fa:79:80:b5:76:01:54:1b: 2f:31:98:07:ca:ca:2f:a3:2b:40:f8:a8:4c:9d:2a: a8:60:6e:d3:8c:21:10:da:6c:07:57:1b:aa:50:10: 3e:6e:71:7b:d2:0b:56:56:b4:6b:a8:37:f2:28:2a: 54:ef:83:c6:43:28:c9:16:a8:93:ab:63:c4:c2:d7: 96:ea:db:74:41:83:02:54:ef:9e:a8:0b:cf:ea:8f: 5b:b1:0d:55:6d:52:34:a6:23:77:3b:71:2b:11:65: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:55:5B:36:0E:D4:A3:15:1F:95:B8:FB:7A:76:C1:5E:A3:17:7D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl X509v3 Authority Key Identifier: keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a2:5a:49:32:de:df:4b:81:17:a9:54:06:47:ab:ed:1d:73: 4f:2c:88:91:48:83:2d:6c:ca:a9:88:ca:93:6f:f6:c2:e4:37: 7f:64:52:d5:d3:26:17:d7:04:b8:10:83:4d:5c:61:fd:e2:70: 2e:61:23:14:7c:1a:a5:12:83:77:0e:e1:5e:d7:2b:8d:ef:10: bb:85:e2:a2:23:2d:16:56:03:de:45:82:ba:bc:3e:f7:1b:7b: 42:ba:d4:69:bc:f5:e9:c8:7c:43:a9:96:d5:b7:56:8d:c1:1e: cc:d5:e3:23:90:66:81:b7:15:c9:76:08:89:11:dc:e1:d0:43: 02:92:54:92:ec:cf:2e:36:f7:68:3c:f3:ef:89:4d:5a:0d:ca: 43:0d:79:07:d8:93:78:8f:98:fe:8b:d9:e0:af:2f:d1:dd:b9: b9:54:d1:e2:43:b5:ac:5e:e6:b8:33:5f:2a:56:af:ae:7f:ed: 6a:05:d2:4e:a8:31:48:ea:a4:ca:c1:0e:75:94:09:4f:89:8d: c2:ed:84:f3:d1:60:dc:95:a2:1c:95:24:3a:cd:62:f0:c5:5e: 07:9f:2f:7e:ce:28:28:b9:fc:88:8b:1e:f8:18:d0:05:ad:be: 5b:1c:b4:d1:db:b5:dd:b9:e1:f4:70:46:7a:b3:4a:d9:83:b0: 60:84:13:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpy2QXYkjjq5VXa5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBk OWZjMB4XDTI1MDcwODA5MDAwOFoXDTI1MDcxMDA5MDAwMFowLzEtMCsGA1UEAxMk YTZkZDIwYjItNDZhMy00ZDJmLThmNjUtZGQwNzE5NGU4NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFMwQHotGlM+Lp71+m7SNEs7CLbLftVO4T7c GZYpQ1L9DuFSbQ9yxdbMxS2RQ1ybUEK+aJqZ4J8O1md859DVx5iivEPYYHW0valv QXpUm5yc50Qhb5OD1NVfdmbFKINdXvxqsLNpwQC/Pj2Pe3gX9ZCy+rTetidRsaNx 0acIHFUbP99S9cPAe0KCkfl+F3JoY2QEDYTzeGmEDg6H+nmAtXYBVBsvMZgHysov oytA+KhMnSqoYG7TjCEQ2mwHVxuqUBA+bnF70gtWVrRrqDfyKCpU74PGQyjJFqiT q2PEwteW6tt0QYMCVO+eqAvP6o9bsQ1VbVI0piN3O3ErEWUT1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGpVWzYO1KMVH5W4+3p2wV6jF339MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMmJi NGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvYzJiYjRjNTQtMTRhNi00 ZTMyLWIzYTAtZGVmYWQzMDBkOWZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzJiYjRjNTQtMTRhNi00ZTMyLWIz YTAtZGVmYWQzMDBkOWZjL2MyYmI0YzU0LTE0YTYtNGUzMi1iM2EwLWRlZmFkMzAw ZDlmYy5jcmwwHwYDVR0jBBgwFoAU1FljNJLTiXWCreXe3xu4GJvnei8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZh ZDMwMGQ5ZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUolpJMt7fS4EXqVQGR6vt HXNPLIiRSIMtbMqpiMqTb/bC5Dd/ZFLV0yYX1wS4EINNXGH94nAuYSMUfBqlEoN3 DuFe1yuN7xC7heKiIy0WVgPeRYK6vD73G3tCutRpvPXpyHxDqZbVt1aNwR7M1eMj kGaBtxXJdgiJEdzh0EMCklSS7M8uNvdoPPPviU1aDcpDDXkH2JN4j5j+i9ngry/R 3bm5VNHiQ7WsXua4M18qVq+uf+1qBdJOqDFI6qTKwQ51lAlPiY3C7YTz0WDclaIc lSQ6zWLwxV4Hny9+zigoufyIix74GNAFrb5bHLTR27XdueH0cEZ6s0rZg7BghBOY -----END CERTIFICATE-----Generated at Wed Jul 9 05:47:28 2025 by rpki-client