$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: 1Z7diRkInwhkbz1z4pZGnfgm4LtLoPlzTbyls0CY09s= Subject key identifier: 57:B2:3D:37:AE:0C:D5:92:B5:C2:AF:E3:52:03:3E:36:92:8E:4B:47 Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F4328584A32FC9E31BE3E1838B70DE4B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF237 Signing time: Sun 15 Jun 2025 12:00:07 +0000 Manifest this update: Sun 15 Jun 2025 12:00:07 +0000 Manifest next update: Wed 18 Jun 2025 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: Umvo0k4HFLTU16apx9VkMZVhbigsLWIjbsfgqGAMIkE=) 2: c778b757-0391-3c4a-869f-5f03f34425a6.roa (hash: q0ApjzK1tRq+UzuJZJjbG1dMl6oX1tnGYgnD7u/HgGo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:32:fc:9e:31:be:3e:18:38:b7:0d:e4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: Jun 15 12:00:07 2025 GMT Not After : Jun 18 12:00:00 2025 GMT Subject: CN=d3e79ff4-63c3-4307-a2c4-6e1b657da25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:83:68:e4:62:8d:c6:d2:d5:e4:e5:28:e2:14: 3b:6a:91:98:57:c9:39:5a:f9:4f:29:87:e5:07:61: b4:44:4f:d7:4d:d8:15:5c:30:77:80:6a:27:0a:dc: 44:ac:5f:98:d4:bd:dd:e5:b2:14:9b:23:af:d8:fb: e7:59:c3:2f:4a:0f:ff:1c:fe:a9:c3:23:cd:3a:39: 60:09:2c:57:b1:7b:33:1a:4c:dc:75:10:ac:77:5e: ef:5a:cb:c7:cd:b4:7e:46:d3:1c:da:02:21:15:88: d8:fe:21:86:82:d6:82:c6:e5:25:41:bd:68:1d:ba: c9:9d:57:cb:f9:51:75:ab:5b:60:31:e9:82:6b:c0: 33:59:45:7a:72:41:71:d8:6c:7e:4d:c7:9b:1b:54: 31:e7:2e:f6:75:76:13:72:f8:8a:18:3e:33:aa:00: 37:62:89:43:d2:a8:09:78:ee:5d:57:15:69:8c:87: 41:96:de:d9:d2:30:8d:1d:91:3e:4e:36:22:d4:99: cd:a9:68:45:59:d8:b0:51:df:e5:ce:1b:00:f1:80: 6f:08:af:1b:58:55:25:96:23:77:76:0e:2c:59:b3: f5:3c:af:0e:73:29:97:01:63:91:d5:d5:6a:41:5d: ac:f4:d1:44:a1:38:98:fb:34:f9:3a:a3:90:fc:0c: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:3D:37:AE:0C:D5:92:B5:C2:AF:E3:52:03:3E:36:92:8E:4B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:83:cd:75:fc:b2:46:22:b5:ca:ac:ac:a3:8a:5b:4a:ec:62: de:5a:a6:7e:a4:85:f1:9f:90:9c:a1:54:a5:ac:ff:3a:c8:08: 76:e9:c6:df:fa:4d:7b:d3:f0:18:2e:d7:0f:1b:4d:15:b6:ea: 39:03:bb:0a:64:fb:79:f5:73:94:1c:2f:b6:3c:28:0a:46:92: f0:6b:0a:72:59:d4:90:a3:b4:f3:60:30:e5:76:e8:05:c3:6e: 32:f1:af:be:f9:47:8b:a2:9b:4e:b6:9a:44:a5:78:7d:fb:b6: f4:81:87:2c:66:4d:6e:2e:b7:3c:01:e2:77:ea:a9:2d:c0:f6: 09:6c:45:a3:a1:0b:26:90:60:5e:4b:91:48:ce:79:b3:2e:68: 64:6e:e2:ed:74:c7:7f:8e:30:1e:f1:2b:16:fe:af:e7:24:0b: a3:bb:d4:ab:a4:03:f5:55:20:0f:d7:66:69:be:61:66:e8:46: 43:74:28:8f:a9:ce:50:3e:0c:19:7a:e8:b7:7f:0a:67:a5:de: db:95:70:33:de:90:6c:5e:08:30:cd:36:ca:e7:df:48:da:b4: 63:8f:35:b6:6c:54:bc:02:c8:5e:7f:78:ab:2e:07:07:4b:67: 52:fd:61:63:0d:52:56:4a:4c:7b:03:3b:fa:15:f5:02:69:c3: 85:58:3c:34 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEoy/J4xvj4YOLcN5LgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI1MDYxNTEyMDAwN1oXDTI1MDYxODEyMDAwMFowLzEtMCsGA1UEAxMk ZDNlNzlmZjQtNjNjMy00MzA3LWEyYzQtNmUxYjY1N2RhMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4No5GKNxtLV5OUo4hQ7apGYV8k5WvlPKYfl B2G0RE/XTdgVXDB3gGonCtxErF+Y1L3d5bIUmyOv2PvnWcMvSg//HP6pwyPNOjlg CSxXsXszGkzcdRCsd17vWsvHzbR+RtMc2gIhFYjY/iGGgtaCxuUlQb1oHbrJnVfL +VF1q1tgMemCa8AzWUV6ckFx2Gx+TcebG1Qx5y72dXYTcviKGD4zqgA3YolD0qgJ eO5dVxVpjIdBlt7Z0jCNHZE+TjYi1JnNqWhFWdiwUd/lzhsA8YBvCK8bWFUlliN3 dg4sWbP1PK8OcymXAWOR1dVqQV2s9NFEoTiY+zT5OqOQ/AybGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFeyPTeuDNWStcKv41IDPjaSjktHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCog811/LJGIrXKrKyjiltK 7GLeWqZ+pIXxn5CcoVSlrP86yAh26cbf+k170/AYLtcPG00Vtuo5A7sKZPt59XOU HC+2PCgKRpLwawpyWdSQo7TzYDDldugFw24y8a+++UeLoptOtppEpXh9+7b0gYcs Zk1uLrc8AeJ36qktwPYJbEWjoQsmkGBeS5FIznmzLmhkbuLtdMd/jjAe8SsW/q/n JAuju9SrpAP1VSAP12ZpvmFm6EZDdCiPqc5QPgwZeui3fwpnpd7blXAz3pBsXggw zTbK599I2rRjjzW2bFS8Ashef3irLgcHS2dS/WFjDVJWSkx7Azv6FfUCacOFWDw0 -----END CERTIFICATE-----Generated at Sun Jun 15 22:41:12 2025 by rpki-client