$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: wyVuKspA9mqcGpRzf+Cl0a6VB0QOh2yGaRUJuCk1cM4= Subject key identifier: 2C:5F:E1:BB:48:A1:21:92:62:7E:01:7F:D4:05:24:7C:9A:34:9D:DE Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584A35325EC85D3F133BE071D800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3314 Signing time: Mon 16 Jun 2025 07:00:03 +0000 Manifest this update: Mon 16 Jun 2025 07:00:03 +0000 Manifest next update: Thu 19 Jun 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: fXpFuLOxrKf3G3jytIUInemtnxTtEVnjA4Y6JNfJZ8g=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: dLLPZAvSPjflHOk3L4RHfyn+Dz32AuFd29iIINjlqdY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:32:5e:c8:5d:3f:13:3b:e0:71:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jun 16 07:00:03 2025 GMT Not After : Jun 19 07:00:00 2025 GMT Subject: CN=dd76ab23-f3ec-47c2-83a0-7aa28ef01b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:e8:d6:74:f5:a3:84:2b:c4:f2:ac:3e:38: 8c:28:e8:be:f6:84:1f:72:eb:40:13:be:13:ea:10: ed:66:d1:d2:c7:95:3b:74:56:22:6e:aa:f1:61:85: bb:12:a0:02:c4:1d:aa:be:15:5d:b4:f2:d7:1d:8e: df:19:07:b6:9e:fc:f1:98:95:83:23:63:34:ca:24: 2b:c1:9f:da:a3:5e:08:28:0a:81:ce:f9:a9:f4:62: f5:d8:2d:c9:9d:ef:a4:3a:7e:0f:18:d0:da:6f:30: 6e:9e:60:e9:a6:12:a8:34:26:36:00:1f:de:98:49: 1b:90:5c:a7:86:42:ac:2e:2a:1d:11:c1:71:36:8c: 46:a8:82:91:9c:29:f6:be:19:78:85:12:c9:04:67: 4a:d5:6a:c5:c5:0a:ad:d8:13:20:5f:15:d8:09:cb: 66:4f:b0:00:95:df:45:be:a4:ee:fa:20:90:7b:bc: fa:c8:0e:23:36:3d:bc:b0:ed:06:6b:f9:b9:f8:69: be:7f:91:9d:37:ec:5c:71:d5:02:45:c7:06:fb:02: 08:4e:ed:c8:3a:09:6a:04:8d:63:4f:15:af:f9:4b: 90:79:59:76:a9:8d:15:f9:3b:f3:87:86:51:33:ed: 93:be:68:58:14:0b:23:be:87:e5:c3:8e:ca:fb:b2: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:E1:BB:48:A1:21:92:62:7E:01:7F:D4:05:24:7C:9A:34:9D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ab:40:0b:06:44:6b:76:75:10:a3:b7:53:d5:d9:9f:92:f4: 1c:4d:14:bb:3c:9b:a0:86:2d:ca:9f:a1:5c:fb:de:a5:c6:21: a7:4b:5b:7d:fa:24:46:49:31:a1:a4:c1:4f:9e:64:48:d5:7e: 19:5d:0d:54:9a:43:8c:9f:6f:2f:c4:06:3e:d3:0b:48:a5:5c: 19:16:05:af:2d:92:ee:d9:a3:35:8b:9f:b8:60:ec:bc:53:b9: 17:e2:dd:91:d0:3c:15:4c:5f:0d:26:2d:3a:96:9e:e4:79:ab: 4c:c2:93:04:ee:b0:66:8b:29:e5:c7:f9:2a:05:19:f8:a4:14: ec:f3:48:f0:ae:42:4b:3b:60:1c:58:10:97:74:89:5a:9f:2c: ec:b0:ae:02:ab:fd:2a:87:bd:07:3c:d6:58:b1:00:eb:82:1c: 88:4d:5a:2b:ed:ff:be:88:77:a1:e2:bd:0f:73:12:32:1d:55: 53:60:07:22:0c:ec:67:fd:a8:32:69:aa:4b:09:10:1d:09:00: 7b:bf:f1:10:33:5e:71:7e:58:09:16:d3:d5:b8:36:04:dc:51: f4:8d:f8:e3:38:74:0f:c3:77:a2:d4:43:c0:e7:33:d6:d7:3f: 64:99:02:f6:ea:e1:44:4d:c9:5d:41:da:f6:86:35:85:57:2f: e9:73:e3:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo1Ml7IXT8TO+Bx2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDYxNjA3MDAwM1oXDTI1MDYxOTA3MDAwMFowLzEtMCsGA1UEAxMk ZGQ3NmFiMjMtZjNlYy00N2MyLTgzYTAtN2FhMjhlZjAxYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeTo1nT1o4QrxPKsPjiMKOi+9oQfcutAE74T 6hDtZtHSx5U7dFYibqrxYYW7EqACxB2qvhVdtPLXHY7fGQe2nvzxmJWDI2M0yiQr wZ/ao14IKAqBzvmp9GL12C3Jne+kOn4PGNDabzBunmDpphKoNCY2AB/emEkbkFyn hkKsLiodEcFxNoxGqIKRnCn2vhl4hRLJBGdK1WrFxQqt2BMgXxXYCctmT7AAld9F vqTu+iCQe7z6yA4jNj28sO0Ga/m5+Gm+f5GdN+xccdUCRccG+wIITu3IOglqBI1j TxWv+UuQeVl2qY0V+Tvzh4ZRM+2TvmhYFAsjvoflw47K+7JUWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxf4btIoSGSYn4Bf9QFJHyaNJ3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUq0ALBkRrdnUQo7dT1dmf kvQcTRS7PJughi3Kn6Fc+96lxiGnS1t9+iRGSTGhpMFPnmRI1X4ZXQ1UmkOMn28v xAY+0wtIpVwZFgWvLZLu2aM1i5+4YOy8U7kX4t2R0DwVTF8NJi06lp7keatMwpME 7rBmiynlx/kqBRn4pBTs80jwrkJLO2AcWBCXdIlanyzssK4Cq/0qh70HPNZYsQDr ghyITVor7f++iHeh4r0PcxIyHVVTYAciDOxn/agyaapLCRAdCQB7v/EQM15xflgJ FtPVuDYE3FH0jfjjOHQPw3ei1EPA5zPW1z9kmQL26uFETcldQdr2hjWFVy/pc+Mz -----END CERTIFICATE-----Generated at Mon Jun 16 11:05:34 2025 by rpki-client