$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft File: 1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft (raw, json) Hash identifier: K3mG/BGym+9EDnBnswgaAl5OL7B7nKTFQL+aGrI4AFg= Subject key identifier: DB:AC:AD:D7:BA:C7:0F:B0:95:29:F5:44:A1:0C:7F:34:99:A1:AE:75 Authority key identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C Certificate issuer: /CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981 Certificate serial: 010D0C9F4328584A5CFB9D0F63CE6C2FF8DAD000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft Manifest number: 010D0C9F4328584073A83DEBD41BAF53C3965D63 Signing time: Mon 30 Jun 2025 13:02:03 +0000 Manifest this update: Mon 30 Jun 2025 13:02:03 +0000 Manifest next update: Thu 03 Jul 2025 04:00:00 +0000 Files and hashes: 1: 1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl (hash: 1wYu8wHON0JxbGvHC+X2ovq8AIeZX7yFqRwpEDnIo9A=) 2: 7aab2682-27f4-31f0-92cb-e0ec6137eab1.roa (hash: vzpV7ACn62BpTUwFBeNEJtVH2fXj5f+hQptSe4uRNzo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:9d:0f:63:ce:6c:2f:f8:da:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981 Validity Not Before: Jun 30 13:02:03 2025 GMT Not After : Jul 3 04:00:00 2025 GMT Subject: CN=d89cab63-590b-401d-b365-bd825d782b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:05:cf:4d:eb:93:40:c9:04:4d:3f:b7:61: 8d:10:cb:1b:a0:42:49:27:70:cf:12:d4:67:2c:cc: 58:69:1b:3b:83:4e:27:60:eb:e2:e4:dd:ca:f2:b5: 34:e7:9d:09:86:58:a7:21:86:18:32:d5:a0:98:bd: 05:20:2e:e3:a9:d6:9b:dc:4f:ac:0e:d9:4f:06:cb: 14:6e:95:d7:80:e7:5a:19:70:a7:ed:da:c8:99:33: a3:82:bd:e5:af:af:c0:95:b4:71:04:66:b8:b6:f1: dc:04:21:97:a9:a5:a9:ea:c6:ac:9d:60:35:e6:88: c2:12:d3:7b:db:60:f3:a7:5e:c5:fe:fc:17:8c:80: ab:a3:04:9f:6a:33:f6:7c:c2:25:36:fe:9b:1c:5f: ad:9e:32:24:09:e8:fd:6d:4f:0e:f6:d4:0c:1d:ea: 30:a2:2d:20:3e:7c:01:4d:84:3d:c6:b2:82:3f:fa: 24:5e:a5:fb:ab:f5:04:9e:30:7f:97:1f:00:44:52: b8:10:64:2c:42:d8:1d:03:cd:f2:5f:17:69:4f:fa: 85:3d:36:12:36:6c:01:44:00:cc:16:ea:f0:64:a3: 1b:05:cf:41:15:95:e2:dc:21:ec:9f:29:77:3b:77: 2e:23:4c:83:d5:f2:04:c3:51:48:c9:1f:41:8c:c8: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AC:AD:D7:BA:C7:0F:B0:95:29:F5:44:A1:0C:7F:34:99:A1:AE:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.crl X509v3 Authority Key Identifier: keyid:FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:46:a1:e5:4a:3e:3d:02:4a:38:e0:d7:c1:26:f3:11:c3:84: b7:0d:46:5b:82:6c:f0:92:7d:25:3c:37:2d:8b:0c:38:67:7b: 74:a6:40:7a:00:f7:71:50:c1:b2:62:02:fb:72:5e:3e:99:00: d4:01:d4:db:d2:02:15:a5:a6:32:0d:2f:c3:24:70:4b:45:39: ec:77:8b:d8:6d:81:14:fc:da:03:91:c4:27:8f:2c:f4:88:fb: 69:e7:12:b6:23:ba:b5:11:d5:9d:fc:50:6a:51:4a:bc:22:bc: 28:0c:99:fe:ef:04:48:8b:c3:5e:1a:9c:e7:36:cc:f2:b7:6d: bf:ee:f7:0e:58:cd:8c:91:7f:af:1c:91:a4:75:c9:58:5e:fd: b2:a5:18:90:9c:a6:f4:8b:9f:1b:bb:2b:85:a1:67:92:4b:94: 1f:72:0b:82:a1:cd:73:bf:9c:bc:bd:cb:be:28:d7:01:ea:a5: b9:45:79:29:cf:2c:c1:7e:83:e6:73:1d:d8:ac:e8:1f:5f:60: 3b:ca:ac:7d:b2:51:75:fa:c4:64:99:b4:4f:c3:ca:c2:b1:6f: d5:ad:26:72:56:6e:9f:5f:10:88:09:7e:fe:91:cd:77:a9:91: be:4b:b1:84:55:be:ea:c0:b3:37:53:cb:c5:af:d2:5f:a0:9e: 8a:01:99:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpc+50PY85sL/ja0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJjNzE1MzEtZDJjMC00NzNjLWFkM2EtNjNmMWFmNWU2 OTgxMB4XDTI1MDYzMDEzMDIwM1oXDTI1MDcwMzA0MDAwMFowLzEtMCsGA1UEAxMk ZDg5Y2FiNjMtNTkwYi00MDFkLWIzNjUtYmQ4MjVkNzgyYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV4Fz03rk0DJBE0/t2GNEMsboEJJJ3DPEtRn LMxYaRs7g04nYOvi5N3K8rU0550JhlinIYYYMtWgmL0FIC7jqdab3E+sDtlPBssU bpXXgOdaGXCn7drImTOjgr3lr6/AlbRxBGa4tvHcBCGXqaWp6sasnWA15ojCEtN7 22Dzp17F/vwXjICrowSfajP2fMIlNv6bHF+tnjIkCej9bU8O9tQMHeowoi0gPnwB TYQ9xrKCP/okXqX7q/UEnjB/lx8ARFK4EGQsQtgdA83yXxdpT/qFPTYSNmwBRADM FurwZKMbBc9BFZXi3CHsnyl3O3cuI0yD1fIEw1FIyR9BjMhiVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNusrde6xw+wlSn1RKEMfzSZoa51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmM3 MTUzMS1kMmMwLTQ3M2MtYWQzYS02M2YxYWY1ZTY5ODEvMWJjNzE1MzEtZDJjMC00 NzNjLWFkM2EtNjNmMWFmNWU2OTgxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJjNzE1MzEtZDJjMC00NzNjLWFk M2EtNjNmMWFmNWU2OTgxLzFiYzcxNTMxLWQyYzAtNDczYy1hZDNhLTYzZjFhZjVl Njk4MS5jcmwwHwYDVR0jBBgwFoAU/WPAgEmW+XW3nSu8WnaU9wAE6GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmM3MTUzMS1kMmMwLTQ3M2MtYWQzYS02M2Yx YWY1ZTY5ODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgRqHlSj49Ako44NfBJvMR w4S3DUZbgmzwkn0lPDctiww4Z3t0pkB6APdxUMGyYgL7cl4+mQDUAdTb0gIVpaYy DS/DJHBLRTnsd4vYbYEU/NoDkcQnjyz0iPtp5xK2I7q1EdWd/FBqUUq8IrwoDJn+ 7wRIi8NeGpznNszyt22/7vcOWM2MkX+vHJGkdclYXv2ypRiQnKb0i58buyuFoWeS S5QfcguCoc1zv5y8vcu+KNcB6qW5RXkpzyzBfoPmcx3YrOgfX2A7yqx9slF1+sRk mbRPw8rCsW/VrSZyVm6fXxCICX7+kc13qZG+S7GEVb7qwLM3U8vFr9JfoJ6KAZnN -----END CERTIFICATE-----Generated at Tue Jul 1 04:36:22 2025 by rpki-client