$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: Qog5sINvIS9xx78WOx0iuasT69DCdLiNdwF6nk74oos= Subject key identifier: 62:03:B5:E1:A1:62:54:46:07:97:3F:39:F1:75:50:E3:BF:AD:DC:D6 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F4328584A3285833B5A4C2B24356FCD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D761 Signing time: Sun 15 Jun 2025 08:00:08 +0000 Manifest this update: Sun 15 Jun 2025 08:00:08 +0000 Manifest next update: Tue 17 Jun 2025 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: vEk5sE1OZpBPjGmS2PpEP7w4AVmAqTojmgRyAX3bEFQ=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: i0WBA5IDLhd5+lm6bWaMNdajumiIAGQCV568GTBFtsE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:85:83:3b:5a:4c:2b:24:35:6f:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Jun 15 08:00:08 2025 GMT Not After : Jun 17 08:00:00 2025 GMT Subject: CN=242416e4-bf69-487c-b031-1e6c85393207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:d9:fe:8a:8d:b7:d5:30:f8:0e:dc:f9:59: 7a:b3:f6:fa:ec:7c:b2:e6:64:4a:30:9a:7a:fa:95: 8f:c0:92:73:94:f0:b8:7a:63:7f:a9:49:3c:d5:7d: bb:0b:15:bb:f2:c0:5a:16:17:f3:65:69:57:f9:86: b9:fa:12:ab:c8:33:9e:9b:ae:14:e2:69:20:a8:61: 31:96:75:73:b8:be:bc:71:e0:44:b5:9e:1c:7f:1b: c6:cc:ab:46:4d:8f:f4:17:f3:c9:21:34:78:c5:72: e4:3e:22:6d:c7:ba:b6:3d:6a:f2:a6:4a:25:b7:60: fb:c6:97:62:a7:d5:21:67:3f:9f:1b:d7:72:1d:27: f9:a4:0b:18:ea:54:72:74:e3:f1:1f:61:41:31:74: ad:43:96:8d:82:2b:66:73:e9:f1:fa:41:c5:2e:a4: 42:1c:11:07:cf:f2:06:95:e4:b3:68:e9:fb:a5:8a: 4b:01:74:e7:7b:08:91:a2:70:7b:23:ca:8b:69:3a: 3a:38:ab:ab:db:18:28:9d:74:0e:40:00:a4:68:0d: 9d:8d:50:10:43:cf:b1:55:e3:97:59:47:31:02:74: df:47:eb:09:ec:0a:1c:11:e0:29:a6:9c:d0:72:62: a4:5d:4f:54:eb:a8:7e:fa:2c:95:ef:c2:e0:05:6c: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:03:B5:E1:A1:62:54:46:07:97:3F:39:F1:75:50:E3:BF:AD:DC:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:57:42:53:14:97:18:c7:d6:c6:25:19:31:41:25:aa:5b:f0: 84:4e:96:94:f1:81:34:cf:0c:56:c0:80:55:ad:64:04:93:4d: c0:25:76:2f:fa:a2:28:aa:c0:bb:58:f1:9a:90:ec:8f:82:ca: 5a:de:f7:0c:0c:f8:0e:e5:89:6a:94:cd:c5:5a:fe:f4:b0:81: cd:22:58:5e:91:c6:d7:b0:b9:31:f0:8f:ea:de:8b:45:a0:25: f3:df:97:1f:59:92:7c:66:4a:82:eb:b4:a6:7a:bc:7d:9c:33: f2:be:06:e1:61:28:b0:87:e5:a9:bb:1e:ce:c1:f0:f5:c0:83: af:3c:01:3c:35:56:79:e0:8c:3c:98:03:20:7b:df:9f:49:ed: 32:ef:63:a4:f1:8c:a5:79:59:f6:e5:2e:47:34:3a:47:7f:05: 3c:b7:fb:11:92:67:9c:63:aa:ee:4d:38:e5:80:e6:e1:46:66: c8:68:41:57:3d:2a:3f:be:9c:e0:27:98:7a:b2:34:37:b7:14: 7a:42:62:85:b8:41:74:49:1e:d5:77:42:fc:65:b6:22:c4:36: 25:3c:5e:97:8e:0d:6f:11:3c:a5:8a:74:13:20:f0:b2:a6:11: 0c:bc:ab:31:44:de:26:21:e9:64:d5:87:ff:b6:46:2d:39:2d: d4:28:24:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoyhYM7WkwrJDVvzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI1MDYxNTA4MDAwOFoXDTI1MDYxNzA4MDAwMFowLzEtMCsGA1UEAxMk MjQyNDE2ZTQtYmY2OS00ODdjLWIwMzEtMWU2Yzg1MzkzMjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiTZ/oqNt9Uw+A7c+Vl6s/b67Hyy5mRKMJp6 +pWPwJJzlPC4emN/qUk81X27CxW78sBaFhfzZWlX+Ya5+hKryDOem64U4mkgqGEx lnVzuL68ceBEtZ4cfxvGzKtGTY/0F/PJITR4xXLkPiJtx7q2PWrypkolt2D7xpdi p9UhZz+fG9dyHSf5pAsY6lRydOPxH2FBMXStQ5aNgitmc+nx+kHFLqRCHBEHz/IG leSzaOn7pYpLAXTnewiRonB7I8qLaTo6OKur2xgonXQOQACkaA2djVAQQ8+xVeOX WUcxAnTfR+sJ7AocEeApppzQcmKkXU9U66h++iyV78LgBWwjAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGIDteGhYlRGB5c/OfF1UOO/rdzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKV0JTFJcYx9bGJRkxQSWq W/CETpaU8YE0zwxWwIBVrWQEk03AJXYv+qIoqsC7WPGakOyPgspa3vcMDPgO5Ylq lM3FWv70sIHNIlhekcbXsLkx8I/q3otFoCXz35cfWZJ8ZkqC67Smerx9nDPyvgbh YSiwh+Wpux7OwfD1wIOvPAE8NVZ54Iw8mAMge9+fSe0y72Ok8YyleVn25S5HNDpH fwU8t/sRkmecY6ruTTjlgObhRmbIaEFXPSo/vpzgJ5h6sjQ3txR6QmKFuEF0SR7V d0L8ZbYixDYlPF6Xjg1vETylinQTIPCyphEMvKsxRN4mIelk1Yf/tkYtOS3UKCRY -----END CERTIFICATE-----Generated at Sun Jun 15 15:14:00 2025 by rpki-client