$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: 2wKe+WgRyFd8EBBam+LqUIv1ZvoZvCGlpJwtnP64TCI= Subject key identifier: 59:24:18:28:AA:C7:56:85:60:89:13:9A:AC:4C:4C:57:42:F9:BF:81 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584A3AC7BB39FB76585FD1D40780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA983393700605C9 Signing time: Wed 18 Jun 2025 07:00:03 +0000 Manifest this update: Wed 18 Jun 2025 07:00:03 +0000 Manifest next update: Fri 20 Jun 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: +SOLk0RtR4b1jdX1nxR/dJqT780U4pQmldlvhmhHFSM=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: Cd3vn6rI4HvLz0b63f9baUDzHcQS2tMEgehoLXPndNM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:c7:bb:39:fb:76:58:5f:d1:d4:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Jun 18 07:00:03 2025 GMT Not After : Jun 20 07:00:00 2025 GMT Subject: CN=2f6d5b98-2889-4c0a-81e9-72e4f19d577f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:91:cb:e5:43:0e:b3:3e:67:eb:92:84:d4: e3:99:9e:55:48:8e:f2:8f:cf:ae:56:6c:7e:3f:12: a9:c6:a5:12:a4:d9:b8:23:f5:bb:ac:aa:c9:c4:d3: d8:1b:f3:84:8a:5c:3f:53:91:82:39:56:85:c4:74: ee:9f:57:e1:bb:b1:ac:54:0b:2a:e0:e1:75:bc:f3: 64:29:ef:a7:0e:5c:72:7e:bb:35:bc:72:10:cd:03: be:01:36:21:e4:3f:67:db:4d:a2:99:ab:a3:a7:fc: 56:0c:c9:d6:88:63:2e:84:f4:b0:d2:be:3f:03:b9: cc:98:0e:39:fa:4d:50:4b:c9:5e:5e:e8:f3:ee:83: 0b:62:81:4d:f2:06:95:98:19:1e:79:ab:e9:c9:f9: b6:a2:a8:a9:df:a8:6b:ff:89:31:77:ab:1a:18:1c: fd:1c:56:af:01:65:6c:ce:5a:1c:7c:da:61:b1:22: 7f:27:13:18:75:f6:d5:41:3f:a6:30:a3:09:89:fe: 2f:b8:3f:30:6d:4e:5e:93:63:b5:d0:7c:c6:cf:ab: 3f:d9:cf:2b:2e:b5:71:35:9c:37:61:52:79:10:41: 98:36:5a:f3:a8:62:ac:82:80:b3:fd:4e:09:b8:e8: 85:d8:56:90:a6:be:71:89:d5:4b:35:5a:f5:05:a3: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:18:28:AA:C7:56:85:60:89:13:9A:AC:4C:4C:57:42:F9:BF:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:17:f5:3e:65:2d:5a:93:57:71:01:d5:0a:11:6a:8c:d4:17: 00:a7:e5:d6:4b:60:87:a0:97:35:46:69:5b:e3:48:76:a8:e7: 34:12:8d:9c:d4:fe:be:16:de:a2:db:1c:4f:3d:d4:88:f9:e4: 3c:3e:00:5a:37:77:6a:46:d3:54:ee:b9:ae:a1:31:80:86:84: 00:7a:38:ee:1a:f2:c9:e9:e7:3a:88:42:9e:d1:be:50:da:13: cd:bb:5f:f2:8e:00:b3:04:9e:76:a0:c0:18:39:3a:6e:e4:49: ad:09:19:38:1e:07:11:7c:b8:a1:0e:62:1b:1c:d7:68:8d:22: ae:98:48:85:f3:af:5d:fa:65:3d:70:2b:93:ac:28:08:ff:04: b8:16:c1:d2:ae:95:7b:6e:d0:f5:cc:05:89:7b:59:d1:ca:8a: 38:da:3a:c2:74:b4:2a:19:82:20:e3:ea:1d:08:06:cc:9e:2b: 34:9c:93:92:3a:91:b9:31:78:a6:9b:68:56:84:a9:2a:51:e8: 86:10:78:9b:a5:f0:e4:1d:aa:55:ec:17:12:a5:e5:d7:15:7e: c6:cc:cf:06:f4:5b:da:b3:f6:98:2f:27:e6:89:e2:4d:0d:84: 88:b8:e5:09:59:2a:45:59:4b:5a:02:84:56:61:75:ae:0e:46: bc:d6:17:54 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo6x7s5+3ZYX9HUB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MDYxODA3MDAwM1oXDTI1MDYyMDA3MDAwMFowLzEtMCsGA1UEAxMk MmY2ZDViOTgtMjg4OS00YzBhLTgxZTktNzJlNGYxOWQ1NzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6uRy+VDDrM+Z+uShNTjmZ5VSI7yj8+uVmx+ PxKpxqUSpNm4I/W7rKrJxNPYG/OEilw/U5GCOVaFxHTun1fhu7GsVAsq4OF1vPNk Ke+nDlxyfrs1vHIQzQO+ATYh5D9n202imaujp/xWDMnWiGMuhPSw0r4/A7nMmA45 +k1QS8leXujz7oMLYoFN8gaVmBkeeavpyfm2oqip36hr/4kxd6saGBz9HFavAWVs zlocfNphsSJ/JxMYdfbVQT+mMKMJif4vuD8wbU5ek2O10HzGz6s/2c8rLrVxNZw3 YVJ5EEGYNlrzqGKsgoCz/U4JuOiF2FaQpr5xidVLNVr1BaMDnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFkkGCiqx1aFYIkTmqxMTFdC+b+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOF/U+ZS1ak1dxAdUKEWqM 1BcAp+XWS2CHoJc1Rmlb40h2qOc0Eo2c1P6+Ft6i2xxPPdSI+eQ8PgBaN3dqRtNU 7rmuoTGAhoQAejjuGvLJ6ec6iEKe0b5Q2hPNu1/yjgCzBJ52oMAYOTpu5EmtCRk4 HgcRfLihDmIbHNdojSKumEiF869d+mU9cCuTrCgI/wS4FsHSrpV7btD1zAWJe1nR yoo42jrCdLQqGYIg4+odCAbMnis0nJOSOpG5MXimm2hWhKkqUeiGEHibpfDkHapV 7BcSpeXXFX7GzM8G9Fvas/aYLyfmieJNDYSIuOUJWSpFWUtaAoRWYXWuDka81hdU -----END CERTIFICATE-----Generated at Wed Jun 18 19:12:56 2025 by rpki-client