$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft File: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft (raw, json) Hash identifier: oDJddbqF9OvrcI6pj8fFY/c76qQ6VWm02MotrODH+7c= Subject key identifier: 37:FE:43:28:4E:B3:AA:87:81:A4:B7:08:7E:54:95:98:FB:92:7A:EA Authority key identifier: 27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB Certificate issuer: /CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Certificate serial: 010D0C9F4328584A33917B66A50A95DBC932C2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft Manifest number: 010D0C9F4328584720528DA38C7982779313AE21 Signing time: Sun 15 Jun 2025 17:00:03 +0000 Manifest this update: Sun 15 Jun 2025 17:00:03 +0000 Manifest next update: Wed 18 Jun 2025 17:00:00 +0000 Files and hashes: 1: 16633004-e46a-3fb4-be3b-681f6a980807.roa (hash: oA8In+ipbiXyPICb7DwD5Q6AX9MRyuY8OhWT9IndnU4=) 2: 66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl (hash: +yYMRlmGyls0ZRb773tvLi0J0mWdQxfCCZROD4Zfvc4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:91:7b:66:a5:0a:95:db:c9:32:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd4a40-75d3-4112-a4c8-6de9ca571ffe Validity Not Before: Jun 15 17:00:03 2025 GMT Not After : Jun 18 17:00:00 2025 GMT Subject: CN=9bc66fad-5202-419b-85c7-b5c168ac889e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:b5:31:81:ea:d4:5c:b0:f5:d8:9d:48:0e: 70:43:77:1c:a1:39:aa:11:5d:2a:de:18:ff:95:a9: a1:75:e9:82:06:cf:9b:23:ae:f2:a2:a9:5a:a2:0e: 6f:a3:b7:88:5d:f2:ef:9e:65:87:6b:81:b2:e7:c3: 45:6c:8c:2c:c1:7a:f4:25:9c:0e:d5:19:e5:a1:13: 25:56:1a:48:0c:28:c6:29:6a:d4:ae:fa:d2:2e:b6: ad:c1:1a:52:88:61:31:f6:3e:2e:5d:68:e4:e2:b6: b5:98:33:b2:45:90:83:1a:cd:70:2c:25:a4:5c:bd: a3:d8:e7:97:da:e4:40:8d:32:92:35:04:1e:49:67: c5:bb:f9:b2:da:30:f9:5b:7d:71:09:c5:ec:80:00: d8:a4:af:63:10:fb:46:06:d1:fe:37:ea:7b:49:2c: d0:d6:76:7c:d5:0b:2a:6d:94:b9:33:f3:c3:fb:d5: 25:23:6c:94:b7:ae:09:6b:62:5f:9e:10:87:f9:40: c9:4a:ec:c4:c9:bd:63:87:d5:f9:23:16:08:2d:d6: 9f:14:79:46:f6:2e:90:ef:ea:42:23:fb:78:e3:c8: 46:b7:41:e9:d9:b0:1e:e9:34:40:35:57:92:11:47: 5d:3e:82:70:b6:83:5b:a8:1f:89:a4:f4:c4:81:6c: a9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FE:43:28:4E:B3:AA:87:81:A4:B7:08:7E:54:95:98:FB:92:7A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.crl X509v3 Authority Key Identifier: keyid:27:82:C7:B1:E4:68:E2:EB:E1:56:90:DD:2D:E3:65:AD:79:5B:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cd4a40-75d3-4112-a4c8-6de9ca571ffe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d3:f7:47:f6:fe:12:b3:60:6c:42:bc:36:19:1c:e3:d3:9e: 1e:79:e0:04:c1:ed:69:fb:73:2c:05:c4:4c:6a:fc:8b:25:4f: a8:20:22:9a:57:93:8c:78:b1:78:6d:eb:bb:87:d6:02:6d:07: 7b:3f:09:21:fc:b7:aa:4c:49:55:4c:c2:65:98:3a:07:91:9c: 53:51:5b:27:06:53:98:39:9d:c0:ee:16:43:fb:3c:16:f3:7e: ae:78:c0:a8:a3:a8:4b:64:b5:00:3c:80:e4:27:ff:0c:08:32: d7:2c:f2:2e:ae:96:4d:7c:c7:d4:7c:36:1d:92:ee:8c:52:5e: 27:3e:d0:23:e5:f9:b6:01:0f:0d:3a:fd:99:4c:b7:c2:e7:de: 33:aa:7d:04:64:3e:70:b2:e0:fa:68:05:63:af:f8:60:45:c6: 94:ff:2e:8a:97:f9:94:2c:ee:1f:43:77:cf:21:b5:23:a6:46: 22:f7:95:36:f4:17:c3:a8:b9:65:03:ff:6c:a3:31:f2:e8:49: 65:cc:35:ed:12:f1:5f:e0:b5:e5:70:ea:92:ff:8b:57:b1:00: 01:e9:94:9d:37:99:82:98:b4:a5:34:59:50:61:56:23:cb:bf: 6c:72:8e:27:50:d0:f9:38:70:af:27:f7:c3:91:1b:fb:90:a5: e8:f0:4c:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEozkXtmpQqV28kywsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZDRhNDAtNzVkMy00MTEyLWE0YzgtNmRlOWNhNTcx ZmZlMB4XDTI1MDYxNTE3MDAwM1oXDTI1MDYxODE3MDAwMFowLzEtMCsGA1UEAxMk OWJjNjZmYWQtNTIwMi00MTliLTg1YzctYjVjMTY4YWM4ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNm1MYHq1Fyw9didSA5wQ3ccoTmqEV0q3hj/ lamhdemCBs+bI67yoqlaog5vo7eIXfLvnmWHa4Gy58NFbIwswXr0JZwO1RnloRMl VhpIDCjGKWrUrvrSLratwRpSiGEx9j4uXWjk4ra1mDOyRZCDGs1wLCWkXL2j2OeX 2uRAjTKSNQQeSWfFu/my2jD5W31xCcXsgADYpK9jEPtGBtH+N+p7SSzQ1nZ81Qsq bZS5M/PD+9UlI2yUt64Ja2JfnhCH+UDJSuzEyb1jh9X5IxYILdafFHlG9i6Q7+pC I/t448hGt0Hp2bAe6TRANVeSEUddPoJwtoNbqB+JpPTEgWyp9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDf+QyhOs6qHgaS3CH5UlZj7knrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNk NGE0MC03NWQzLTQxMTItYTRjOC02ZGU5Y2E1NzFmZmUvNjZjZDRhNDAtNzVkMy00 MTEyLWE0YzgtNmRlOWNhNTcxZmZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZDRhNDAtNzVkMy00MTEyLWE0 YzgtNmRlOWNhNTcxZmZlLzY2Y2Q0YTQwLTc1ZDMtNDExMi1hNGM4LTZkZTljYTU3 MWZmZS5jcmwwHwYDVR0jBBgwFoAUJ4LHseRo4uvhVpDdLeNlrXlb7MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNkNGE0MC03NWQzLTQxMTItYTRjOC02ZGU5 Y2E1NzFmZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCa0/dH9v4Ss2BsQrw2GRzj 054eeeAEwe1p+3MsBcRMavyLJU+oICKaV5OMeLF4beu7h9YCbQd7Pwkh/LeqTElV TMJlmDoHkZxTUVsnBlOYOZ3A7hZD+zwW836ueMCoo6hLZLUAPIDkJ/8MCDLXLPIu rpZNfMfUfDYdku6MUl4nPtAj5fm2AQ8NOv2ZTLfC594zqn0EZD5wsuD6aAVjr/hg RcaU/y6Kl/mULO4fQ3fPIbUjpkYi95U29BfDqLllA/9sozHy6EllzDXtEvFf4LXl cOqS/4tXsQAB6ZSdN5mCmLSlNFlQYVYjy79sco4nUND5OHCvJ/fDkRv7kKXo8EzR -----END CERTIFICATE-----Generated at Mon Jun 16 18:05:41 2025 by rpki-client