$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft File: de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft (raw, json) Hash identifier: q1H4ZUCJcjK9YvgLigtDc8I6CvQFJicS0TZflQGr88A= Subject key identifier: 72:C2:06:E7:05:F2:88:73:EB:75:31:FE:3A:D6:F9:AD:B3:40:64:4A Authority key identifier: 7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 Certificate issuer: /CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Certificate serial: 010D0C9F4328584A1D007513EDF48F5448DD9A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft Manifest number: 010D0C9F43285848B4FA0FEA2B359536FF72A74F Signing time: Sat 07 Jun 2025 15:00:03 +0000 Manifest this update: Sat 07 Jun 2025 15:00:03 +0000 Manifest next update: Mon 09 Jun 2025 15:00:00 +0000 Files and hashes: 1: 9d9939e1-e7c3-3ea6-a720-303f759b790e.roa (hash: tt82b9nLJkHNJDIE7hLIry8HG6A5o40KMRm3sc3u8a0=) 2: de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl (hash: OApvDRfVOM/TriN4QX7vTJh5jPGuRlTg/T3GhcAR7oY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1d:00:75:13:ed:f4:8f:54:48:dd:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de1bc80f-5d57-4b96-8834-574e9bb2e82d Validity Not Before: Jun 7 15:00:03 2025 GMT Not After : Jun 9 15:00:00 2025 GMT Subject: CN=d43476b7-8142-4a19-8455-3bfc9e7629ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:a6:1c:e4:17:2a:c6:c3:80:83:10:39:6c: bf:f4:33:3d:56:ca:10:95:17:95:3d:87:5f:98:fc: cb:37:d8:27:9f:69:e7:77:86:ae:ed:f1:0e:df:02: d4:6f:ee:ea:d6:ae:8f:4e:cc:36:51:91:32:1c:c3: 24:69:3c:63:23:cb:55:eb:dd:00:63:49:51:d7:02: 62:b2:ee:29:a4:6b:4e:95:5f:ac:37:67:46:68:ce: 35:48:c1:78:a9:d0:62:62:29:b9:88:c5:ad:8d:66: 9f:d9:58:40:77:e6:30:64:c6:8b:2e:98:6d:d8:2c: 38:5e:dd:93:8a:4d:49:52:69:35:95:30:0a:a1:2b: 35:4b:7b:51:c1:2c:c0:96:c7:6c:ec:18:d2:b4:96: ca:5b:27:98:23:76:93:d0:50:23:23:4d:20:2a:0f: ee:86:71:a3:56:77:58:45:7f:0c:8c:93:0d:89:98: 51:4a:c5:bd:47:4e:8c:04:83:1b:0f:77:74:fa:cc: 8d:88:7b:9b:0e:24:8f:01:b9:9a:72:cc:82:7b:31: 30:ab:61:1f:10:26:4d:e4:7b:ec:6e:ef:de:99:36: e7:45:16:b6:e1:fb:40:7f:56:3a:9c:77:47:50:92: 74:91:c0:2e:f3:3b:b5:45:cd:13:6a:2f:d6:a4:f4: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C2:06:E7:05:F2:88:73:EB:75:31:FE:3A:D6:F9:AD:B3:40:64:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d/de1bc80f-5d57-4b96-8834-574e9bb2e82d.crl X509v3 Authority Key Identifier: keyid:7B:6F:26:0A:91:31:C7:BC:A5:02:81:0A:C0:DA:BD:A8:6F:44:51:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/de1bc80f-5d57-4b96-8834-574e9bb2e82d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ca:72:07:9f:91:e9:a6:5c:71:62:3d:d7:18:fe:9c:3d:e0: 84:79:fa:77:2b:4b:43:91:5a:17:dc:d1:7d:a1:9b:e9:8d:36: 51:fe:04:4e:15:c5:52:31:7a:db:3c:90:46:78:71:24:5d:e8: 75:30:61:64:6e:4e:f8:4a:4f:70:7a:37:24:c5:17:58:fa:1f: 95:22:7c:49:76:66:5d:22:64:c9:2b:bc:98:27:4a:c6:1c:ef: 15:a0:24:ac:6b:4c:b7:0e:51:3c:39:37:88:18:2f:0b:27:b2: ae:5d:e6:27:8e:10:d6:02:69:64:9e:20:d5:22:cd:1d:88:4f: 87:45:9a:eb:0c:a0:0d:47:55:bd:bb:bc:d8:2d:f3:bc:4a:85: c2:57:e4:2d:0e:d8:f0:e8:b8:99:a6:3c:7d:32:b9:c3:81:35: 1c:82:b0:1a:02:aa:ff:51:8b:d7:e2:52:c3:61:11:33:e3:95: 8c:14:f9:61:64:91:ee:a8:0a:79:12:e7:a1:c3:d5:cf:de:37: 44:b5:02:14:1c:3b:03:94:a3:2c:a0:0e:05:f2:b6:46:e3:b4: 68:e9:3a:27:18:cd:cc:8a:b3:92:7c:2e:8a:d0:5d:92:b9:9a: b9:ad:8f:0b:04:8c:84:6c:52:13:56:2e:89:cd:d6:e0:47:6b: 81:3d:e4:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEodAHUT7fSPVEjdmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4MzQtNTc0ZTliYjJl ODJkMB4XDTI1MDYwNzE1MDAwM1oXDTI1MDYwOTE1MDAwMFowLzEtMCsGA1UEAxMk ZDQzNDc2YjctODE0Mi00YTE5LTg0NTUtM2JmYzllNzYyOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIymHOQXKsbDgIMQOWy/9DM9VsoQlReVPYdf mPzLN9gnn2nnd4au7fEO3wLUb+7q1q6PTsw2UZEyHMMkaTxjI8tV690AY0lR1wJi su4ppGtOlV+sN2dGaM41SMF4qdBiYim5iMWtjWaf2VhAd+YwZMaLLpht2Cw4Xt2T ik1JUmk1lTAKoSs1S3tRwSzAlsds7BjStJbKWyeYI3aT0FAjI00gKg/uhnGjVndY RX8MjJMNiZhRSsW9R06MBIMbD3d0+syNiHubDiSPAbmacsyCezEwq2EfECZN5Hvs bu/emTbnRRa24ftAf1Y6nHdHUJJ0kcAu8zu1Rc0Tai/WpPRaXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHLCBucF8ohz63Ux/jrW+a2zQGRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZTFi YzgwZi01ZDU3LTRiOTYtODgzNC01NzRlOWJiMmU4MmQvZGUxYmM4MGYtNWQ1Ny00 Yjk2LTg4MzQtNTc0ZTliYjJlODJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGUxYmM4MGYtNWQ1Ny00Yjk2LTg4 MzQtNTc0ZTliYjJlODJkL2RlMWJjODBmLTVkNTctNGI5Ni04ODM0LTU3NGU5YmIy ZTgyZC5jcmwwHwYDVR0jBBgwFoAUe28mCpExx7ylAoEKwNq9qG9EUbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZTFiYzgwZi01ZDU3LTRiOTYtODgzNC01NzRl OWJiMmU4MmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdynIHn5HpplxxYj3XGP6c PeCEefp3K0tDkVoX3NF9oZvpjTZR/gROFcVSMXrbPJBGeHEkXeh1MGFkbk74Sk9w ejckxRdY+h+VInxJdmZdImTJK7yYJ0rGHO8VoCSsa0y3DlE8OTeIGC8LJ7KuXeYn jhDWAmlkniDVIs0diE+HRZrrDKANR1W9u7zYLfO8SoXCV+QtDtjw6LiZpjx9MrnD gTUcgrAaAqr/UYvX4lLDYREz45WMFPlhZJHuqAp5Euehw9XP3jdEtQIUHDsDlKMs oA4F8rZG47Ro6TonGM3MirOSfC6K0F2SuZq5rY8LBIyEbFITVi6JzdbgR2uBPeTk -----END CERTIFICATE-----Generated at Sun Jun 8 12:33:47 2025 by rpki-client