$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft File: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft (raw, json) Hash identifier: 9kSuTneSIBh7aIT/j0qeSKQxjqaQZwFF6OKhEv+pnPE= Subject key identifier: DB:DB:30:99:DC:B7:39:F0:7E:EB:E4:1D:35:B1:B9:C4:F5:12:52:D3 Authority key identifier: 99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 Certificate issuer: /CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Certificate serial: 010D0C9F4328584A30A90CFC6DD155F17DA07E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft Manifest number: 010D0C9F43285843578F3527FC8EFC79C417E183 Signing time: Sat 14 Jun 2025 16:00:07 +0000 Manifest this update: Sat 14 Jun 2025 16:00:07 +0000 Manifest next update: Tue 17 Jun 2025 16:00:00 +0000 Files and hashes: 1: 403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl (hash: eRaTfUbFTc3ybDiOA4xmEca4nEU5IqlMXDe7psxnoAY=) 2: e5fbb8de-4f18-3d20-aed5-41146169b9b8.roa (hash: tQUdV/rSIlvrZxymM/R7oBgO0Hdofg2/EuZNbVqh084=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:a9:0c:fc:6d:d1:55:f1:7d:a0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403dc5cf-0fab-4e03-becf-fa25dffa64b7 Validity Not Before: Jun 14 16:00:07 2025 GMT Not After : Jun 17 16:00:00 2025 GMT Subject: CN=bef0e3fa-aa9a-4ee8-87cc-d9c7e26df481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:9a:86:ef:e3:5f:1e:53:3c:e8:73:6a:ba: af:71:b2:35:a1:3d:85:61:e9:4b:03:73:63:2c:24: db:8a:9a:75:c9:1c:19:ac:b5:e9:2d:80:6f:40:20: b5:65:aa:19:82:ed:6d:d9:b3:85:f4:24:92:49:0e: 26:63:40:0f:18:5c:3b:91:89:c2:87:99:bf:33:e1: d9:07:be:f7:73:f0:b5:30:8d:6c:8e:b1:cc:35:7e: 8e:8f:06:5c:90:07:51:e5:68:56:de:69:bb:ab:d3: b5:de:a6:84:d9:91:d4:75:b1:be:1d:2b:87:ca:e6: 43:eb:4e:d6:0b:09:60:5a:9d:84:8c:af:90:46:32: b4:69:d1:88:b8:ec:61:68:d7:96:88:39:fc:44:03: 37:b0:1c:ef:df:ef:3e:9e:42:c2:ec:a3:60:de:38: 56:55:66:f6:95:8e:7a:66:d6:11:26:a0:5f:61:b1: 49:93:a3:a0:85:6a:09:4d:15:9a:8b:16:e2:02:49: b2:75:03:af:0a:7a:f1:f4:05:e5:28:04:68:21:a1: 40:ac:37:2b:3f:6e:3a:9f:63:2d:cd:2e:31:9f:19: 26:5f:f6:2f:40:52:ab:ff:c5:75:08:cc:ea:86:57: 7a:33:72:86:8c:3f:5e:9c:82:7f:7e:fd:34:16:dc: 69:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DB:30:99:DC:B7:39:F0:7E:EB:E4:1D:35:B1:B9:C4:F5:12:52:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7/403dc5cf-0fab-4e03-becf-fa25dffa64b7.crl X509v3 Authority Key Identifier: keyid:99:CA:0F:8C:17:F2:DB:F1:E3:5C:B1:92:8F:92:1F:E7:45:CA:4E:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/403dc5cf-0fab-4e03-becf-fa25dffa64b7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7d:7f:cf:d7:e8:94:f6:44:78:a0:dd:90:53:e5:6e:c3:06: 64:e2:e6:85:68:64:de:18:eb:f6:ac:a4:e8:5f:f9:00:c9:17: 8b:ae:7d:92:64:bb:9b:66:e4:4a:86:8c:ce:f9:4b:ba:45:b8: e2:c5:47:d3:3f:4a:c3:da:58:61:51:c3:84:6e:46:f0:44:81: 35:09:6d:58:9c:ff:7e:f1:13:e8:af:e5:61:45:b4:b9:70:d0: 67:70:7f:af:06:b5:9f:a5:6c:10:6e:29:27:c7:7c:23:c9:34: e2:77:93:2f:7e:a5:be:87:b4:b2:e3:8b:b7:c0:a7:04:cc:8c: b6:17:1c:44:66:09:0e:29:9b:0f:32:ab:3e:fc:b2:2e:46:05: d6:b6:36:cc:90:54:a3:14:37:aa:91:b7:89:b2:59:ec:ca:a0: 5e:5e:24:49:8f:3f:d2:fd:3c:c3:54:76:4d:82:0b:d8:d8:d3: da:49:33:82:02:a0:a5:ee:45:ef:f3:34:04:2b:f6:26:55:fd: 1f:83:63:fa:b8:f3:37:9f:6a:c9:94:58:0a:e1:fe:19:91:3f: 46:0a:49:02:ce:08:cf:f8:a6:1f:c7:0b:3d:65:50:f2:83:fe: 40:ca:33:60:f7:6e:aa:d3:9d:0f:af:1f:38:f8:b9:d1:a7:ef: c9:e1:e4:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEowqQz8bdFV8X2gfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzZGM1Y2YtMGZhYi00ZTAzLWJlY2YtZmEyNWRmZmE2 NGI3MB4XDTI1MDYxNDE2MDAwN1oXDTI1MDYxNzE2MDAwMFowLzEtMCsGA1UEAxMk YmVmMGUzZmEtYWE5YS00ZWU4LTg3Y2MtZDljN2UyNmRmNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeSahu/jXx5TPOhzarqvcbI1oT2FYelLA3Nj LCTbipp1yRwZrLXpLYBvQCC1ZaoZgu1t2bOF9CSSSQ4mY0APGFw7kYnCh5m/M+HZ B773c/C1MI1sjrHMNX6OjwZckAdR5WhW3mm7q9O13qaE2ZHUdbG+HSuHyuZD607W CwlgWp2EjK+QRjK0adGIuOxhaNeWiDn8RAM3sBzv3+8+nkLC7KNg3jhWVWb2lY56 ZtYRJqBfYbFJk6OghWoJTRWaixbiAkmydQOvCnrx9AXlKARoIaFArDcrP246n2Mt zS4xnxkmX/YvQFKr/8V1CMzqhld6M3KGjD9enIJ/fv00FtxpTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNvbMJnctznwfuvkHTWxucT1ElLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNk YzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1ZGZmYTY0YjcvNDAzZGM1Y2YtMGZhYi00 ZTAzLWJlY2YtZmEyNWRmZmE2NGI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDAzZGM1Y2YtMGZhYi00ZTAzLWJl Y2YtZmEyNWRmZmE2NGI3LzQwM2RjNWNmLTBmYWItNGUwMy1iZWNmLWZhMjVkZmZh NjRiNy5jcmwwHwYDVR0jBBgwFoAUmcoPjBfy2/HjXLGSj5If50XKTpkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MDNkYzVjZi0wZmFiLTRlMDMtYmVjZi1mYTI1 ZGZmYTY0YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzfX/P1+iU9kR4oN2QU+Vu wwZk4uaFaGTeGOv2rKToX/kAyReLrn2SZLubZuRKhozO+Uu6RbjixUfTP0rD2lhh UcOEbkbwRIE1CW1YnP9+8RPor+VhRbS5cNBncH+vBrWfpWwQbiknx3wjyTTid5Mv fqW+h7Sy44u3wKcEzIy2FxxEZgkOKZsPMqs+/LIuRgXWtjbMkFSjFDeqkbeJslns yqBeXiRJjz/S/TzDVHZNggvY2NPaSTOCAqCl7kXv8zQEK/YmVf0fg2P6uPM3n2rJ lFgK4f4ZkT9GCkkCzgjP+KYfxws9ZVDyg/5AyjNg926q050Prx84+LnRp+/J4eQS -----END CERTIFICATE-----Generated at Sun Jun 15 11:14:09 2025 by rpki-client