$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: CmBgCEvjqK22YUpNVbgYVDhOCXDQCdTxOgC9dU8rqQg= Subject key identifier: C3:08:AA:A0:2C:83:92:C6:0D:28:5D:26:54:BD:E6:03:A4:D6:80:D5 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584A3102633F888BBCBA1D433CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7634 Signing time: Sat 14 Jun 2025 19:00:07 +0000 Manifest this update: Sat 14 Jun 2025 19:00:07 +0000 Manifest next update: Mon 16 Jun 2025 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: fD6OcFjqWOs3y/9m75Hnc42LHakDEo7EVubMz4Jh268=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: K2anfdcaKCprEqhdb29Eh8BvD2IKZAXTVr+NJzBEB1Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:02:63:3f:88:8b:bc:ba:1d:43:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Jun 14 19:00:07 2025 GMT Not After : Jun 16 19:00:00 2025 GMT Subject: CN=c747cf0d-f464-44c0-8be3-f40d9faa8481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:eb:ec:c2:5f:53:8b:f9:4e:45:6d:16:72: 4e:13:75:32:63:e2:ec:d7:d7:ee:61:32:7d:54:04: 08:ba:2b:ff:f4:ad:9e:0d:fb:b8:ee:c3:c3:fb:5f: 79:4e:62:32:b9:08:0f:d5:33:4c:e0:c1:18:e5:cf: a2:59:95:c2:9f:5a:80:4e:7e:6b:90:30:8a:b7:c3: 16:10:c1:0b:46:f9:aa:d4:90:84:58:0a:a7:0c:dd: 55:79:42:46:61:b7:b4:12:17:ea:c4:b7:10:87:90: 9b:a0:39:12:b3:19:33:9c:eb:c6:36:d8:ba:80:f6: 14:fe:22:2c:f5:ab:70:7f:f7:51:51:54:1b:b8:ef: 7f:3b:d3:f6:3a:33:57:63:bc:a4:98:8f:01:81:56: 59:87:69:65:8f:e8:1c:06:55:c1:58:1f:a9:1f:5e: 3a:81:e7:0b:d9:46:d9:57:03:a6:7c:4a:99:a9:bd: b0:6b:a8:52:d0:a3:e4:a8:65:a9:b1:15:50:d8:87: 61:67:66:89:28:3c:58:14:a4:96:5a:b7:71:67:39: 04:5c:d6:af:aa:64:85:ea:2c:5d:a5:9b:40:be:25: f1:16:c7:f2:c7:5e:32:9d:37:92:31:c7:42:94:25: ee:d2:28:76:f8:01:d3:4a:fe:d0:c2:5a:25:30:94: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:08:AA:A0:2C:83:92:C6:0D:28:5D:26:54:BD:E6:03:A4:D6:80:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:23:82:cd:c4:74:d7:18:e6:d9:54:cc:97:43:89:7b:50:b4: 8c:46:7f:1e:46:9b:12:7f:f7:63:83:4f:04:96:68:f3:14:d0: b0:33:c8:67:3c:08:33:8b:98:23:36:3a:40:b9:55:9c:4a:e8: 21:e1:d2:dc:36:fb:e6:f4:ae:7e:f9:37:cc:98:0c:f5:8c:cc: c6:44:c9:05:aa:41:46:f5:1e:06:7d:d5:35:63:02:85:38:5d: 94:2b:03:13:40:bf:e4:bf:93:35:ec:89:f8:49:39:b2:96:9b: f6:a2:68:d4:9a:de:68:26:eb:df:cd:c5:24:fa:6b:ad:ba:98: f7:28:bf:a3:d5:fb:5c:4f:2f:d4:89:84:22:f0:0e:4d:ad:98: 0f:1a:31:ff:0f:40:d7:98:9a:dd:c1:e9:26:cf:8f:af:b9:45: df:38:da:c1:e4:ff:0e:2c:60:a0:a8:8e:42:95:01:43:99:57: e6:c2:66:52:f4:61:b0:99:6a:fb:9f:d3:96:37:8e:4c:c8:7a: 51:0c:f9:db:40:24:da:c8:d7:0b:68:81:3a:ac:46:e9:c2:3b: 1d:88:bb:2e:e6:f6:9b:54:84:90:10:a4:59:d4:4f:c1:a7:14: 21:e6:05:f4:f3:b8:30:ee:4e:7c:56:4b:6e:cd:c9:6c:0c:58: ed:2c:fb:f8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoxAmM/iIu8uh1DPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI1MDYxNDE5MDAwN1oXDTI1MDYxNjE5MDAwMFowLzEtMCsGA1UEAxMk Yzc0N2NmMGQtZjQ2NC00NGMwLThiZTMtZjQwZDlmYWE4NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq7r7MJfU4v5TkVtFnJOE3UyY+Ls19fuYTJ9 VAQIuiv/9K2eDfu47sPD+195TmIyuQgP1TNM4MEY5c+iWZXCn1qATn5rkDCKt8MW EMELRvmq1JCEWAqnDN1VeUJGYbe0EhfqxLcQh5CboDkSsxkznOvGNti6gPYU/iIs 9atwf/dRUVQbuO9/O9P2OjNXY7ykmI8BgVZZh2llj+gcBlXBWB+pH146gecL2UbZ VwOmfEqZqb2wa6hS0KPkqGWpsRVQ2IdhZ2aJKDxYFKSWWrdxZzkEXNavqmSF6ixd pZtAviXxFsfyx14ynTeSMcdClCXu0ih2+AHTSv7QwlolMJSIywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMMIqqAsg5LGDShdJlS95gOk1oDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjI4LNxHTXGObZVMyXQ4l7 ULSMRn8eRpsSf/djg08ElmjzFNCwM8hnPAgzi5gjNjpAuVWcSugh4dLcNvvm9K5+ +TfMmAz1jMzGRMkFqkFG9R4GfdU1YwKFOF2UKwMTQL/kv5M17In4STmylpv2omjU mt5oJuvfzcUk+mutupj3KL+j1ftcTy/UiYQi8A5NrZgPGjH/D0DXmJrdwekmz4+v uUXfONrB5P8OLGCgqI5ClQFDmVfmwmZS9GGwmWr7n9OWN45MyHpRDPnbQCTayNcL aIE6rEbpwjsdiLsu5vabVISQEKRZ1E/BpxQh5gX087gw7k58VktuzclsDFjtLPv4 -----END CERTIFICATE-----Generated at Sun Jun 15 15:14:16 2025 by rpki-client