$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft File: 025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft (raw, json) Hash identifier: KaO7rSKXe87Gh0LExWgDHcyX41krnZ7tvFTc40I807w= Subject key identifier: 78:B5:BC:1A:8D:58:EA:A3:19:79:B5:40:AA:76:E5:6F:12:E6:C2:53 Authority key identifier: 68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B Certificate issuer: /CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Certificate serial: 010D0C9F4328584A32FCA0B53C06567E2EAC6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft Manifest number: 010D0C9F4328584073A8534B491C0FD497F7CB91 Signing time: Sun 15 Jun 2025 12:00:07 +0000 Manifest this update: Sun 15 Jun 2025 12:00:07 +0000 Manifest next update: Tue 17 Jun 2025 12:00:00 +0000 Files and hashes: 1: 025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl (hash: VRlZyiXe+zFQ0hz0R9/msy5h8LO06DPPYxI5hIxqTyM=) 2: 5b2340ea-6054-31e3-b42d-7f23e40eb030.roa (hash: m0ewFDli+UHN8+NcNp/PoIQmvNr5JB2hqF9GprAf8rg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:fc:a0:b5:3c:06:56:7e:2e:ac:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f6cf8-1ef8-442b-a23d-43cf79ed5d3f Validity Not Before: Jun 15 12:00:07 2025 GMT Not After : Jun 17 12:00:00 2025 GMT Subject: CN=18df3113-11c0-4d3d-8313-c727ff660f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:2b:5e:e6:ff:b1:79:71:59:03:76:0f:18: a5:c6:3e:79:63:09:c4:fa:1a:47:63:c5:7b:51:82: 2c:a8:dc:d9:12:c5:cd:15:fd:2a:80:50:8f:12:55: b1:d8:bb:b7:7f:79:ca:28:91:54:35:11:dc:c6:a2: 8b:55:f3:01:4f:01:05:67:44:4e:20:bf:6d:96:4f: 1f:87:41:46:04:45:5f:27:21:13:11:d7:6e:8e:6d: b3:57:ac:7b:7b:c9:10:7b:bf:99:6d:2d:24:5c:2d: c7:bf:96:72:38:e0:e9:75:50:26:b6:c2:20:9a:5c: 6c:25:7b:b6:d5:ed:49:e9:d8:08:58:0a:d9:3a:93: 21:ef:b6:aa:41:73:2b:36:2f:41:08:bb:54:d1:c8: fa:ff:74:36:16:67:16:d3:0c:32:3d:c5:65:1a:0e: a3:2f:b4:26:2b:0f:ab:5f:23:4d:1c:27:45:9c:1d: e7:31:bf:b8:39:1d:8a:e3:bf:6e:5f:82:22:89:86: 68:ab:4d:54:47:ad:65:3f:49:32:2d:fc:1b:0c:f8: a6:22:57:b8:ef:d6:9e:19:2b:02:3a:a9:4c:e2:0c: 7e:3e:c1:2a:09:20:b7:b1:23:85:de:fd:90:46:14: 8e:c0:14:f3:e2:0c:e2:5e:60:e3:f1:bd:df:1d:8e: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B5:BC:1A:8D:58:EA:A3:19:79:B5:40:AA:76:E5:6F:12:E6:C2:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.crl X509v3 Authority Key Identifier: keyid:68:3D:46:AA:59:3B:FA:04:A5:1C:0E:01:20:31:78:03:1D:57:51:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/025f6cf8-1ef8-442b-a23d-43cf79ed5d3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:01:85:2d:3d:b4:9d:b8:18:8b:d6:06:40:9f:ad:ab:c3:22: 71:49:99:96:64:47:ed:20:da:11:a0:d2:8e:1c:1b:3f:32:33: d9:cd:7f:3d:a8:15:0b:a9:d4:f2:f7:8f:22:b7:8c:d3:59:8f: 72:0a:41:0b:9c:ed:f4:29:ba:db:47:8c:4f:e5:bf:a5:1a:1b: 6f:1c:f3:0a:4a:21:b9:fc:b1:a7:05:f0:aa:40:d9:b6:b2:1e: 23:30:01:15:cd:a6:70:9a:20:f7:1f:e6:a7:bb:6f:1e:1d:c5: 7c:6c:65:00:f4:96:46:d9:ed:1d:31:4d:92:3f:fb:a3:b9:ed: 77:da:88:1e:d8:bc:1b:d8:47:b5:ec:e5:51:b8:2d:1c:12:f3: 49:94:60:1c:ee:13:5d:07:c1:b9:ca:d3:66:53:87:73:ba:96: f6:25:61:bb:35:db:7d:28:38:fa:5e:2e:0b:56:2b:c1:35:dd: 97:a0:25:63:05:4b:ff:f0:37:1c:41:21:95:ad:53:a0:d1:70: 22:a3:0a:09:6c:28:42:35:d0:98:3c:80:50:a5:92:10:47:9d: d5:1b:99:3e:39:28:74:fb:e6:d2:cc:63:6f:5f:ca:68:e3:72: 16:d1:9e:3e:a3:23:6c:20:8b:3e:97:41:d5:f3:93:9f:33:7e: 2a:1d:cc:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoy/KC1PAZWfi6sZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI1ZjZjZjgtMWVmOC00NDJiLWEyM2QtNDNjZjc5ZWQ1 ZDNmMB4XDTI1MDYxNTEyMDAwN1oXDTI1MDYxNzEyMDAwMFowLzEtMCsGA1UEAxMk MThkZjMxMTMtMTFjMC00ZDNkLTgzMTMtYzcyN2ZmNjYwZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7YrXub/sXlxWQN2Dxilxj55YwnE+hpHY8V7 UYIsqNzZEsXNFf0qgFCPElWx2Lu3f3nKKJFUNRHcxqKLVfMBTwEFZ0ROIL9tlk8f h0FGBEVfJyETEddujm2zV6x7e8kQe7+ZbS0kXC3Hv5ZyOODpdVAmtsIgmlxsJXu2 1e1J6dgIWArZOpMh77aqQXMrNi9BCLtU0cj6/3Q2FmcW0wwyPcVlGg6jL7QmKw+r XyNNHCdFnB3nMb+4OR2K479uX4IiiYZoq01UR61lP0kyLfwbDPimIle479aeGSsC OqlM4gx+PsEqCSC3sSOF3v2QRhSOwBTz4gziXmDj8b3fHY6jAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHi1vBqNWOqjGXm1QKp25W8S5sJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVm NmNmOC0xZWY4LTQ0MmItYTIzZC00M2NmNzllZDVkM2YvMDI1ZjZjZjgtMWVmOC00 NDJiLWEyM2QtNDNjZjc5ZWQ1ZDNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDI1ZjZjZjgtMWVmOC00NDJiLWEy M2QtNDNjZjc5ZWQ1ZDNmLzAyNWY2Y2Y4LTFlZjgtNDQyYi1hMjNkLTQzY2Y3OWVk NWQzZi5jcmwwHwYDVR0jBBgwFoAUaD1Gqlk7+gSlHA4BIDF4Ax1XUWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMjVmNmNmOC0xZWY4LTQ0MmItYTIzZC00M2Nm NzllZDVkM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxAYUtPbSduBiL1gZAn62r wyJxSZmWZEftINoRoNKOHBs/MjPZzX89qBULqdTy948it4zTWY9yCkELnO30Kbrb R4xP5b+lGhtvHPMKSiG5/LGnBfCqQNm2sh4jMAEVzaZwmiD3H+anu28eHcV8bGUA 9JZG2e0dMU2SP/ujue132oge2Lwb2Ee17OVRuC0cEvNJlGAc7hNdB8G5ytNmU4dz upb2JWG7Ndt9KDj6Xi4LVivBNd2XoCVjBUv/8DccQSGVrVOg0XAiowoJbChCNdCY PIBQpZIQR53VG5k+OSh0++bSzGNvX8po43IW0Z4+oyNsIIs+l0HV85OfM34qHcyx -----END CERTIFICATE-----Generated at Sun Jun 15 14:29:45 2025 by rpki-client