$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft (raw, json) Hash identifier: Q+/nPlkvLCFzjqdDUxVw0CXAT+of+Kk8nr2QZ1/0oiw= Subject key identifier: FB:2A:B5:9D:5A:51:9F:01:A1:5B:B8:FD:C8:49:E8:67:68:42:09:35 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584A3AA9F7012A4DAA0CC8978920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft Manifest number: 010D0C9F43285849CB146E7AB4A800E43DFE4229 Signing time: Wed 18 Jun 2025 06:00:03 +0000 Manifest this update: Wed 18 Jun 2025 06:00:03 +0000 Manifest next update: Sat 21 Jun 2025 06:00:00 +0000 Files and hashes: 1: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (hash: myVURPqdt9lxfgyFdziSBNvx/+36i/+d7lNJeqAvTbY=) 2: f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl (hash: ZH9moyJIJj3glIm1e0QVNwodFJxizUP1FfWNu3iohtQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:a9:f7:01:2a:4d:aa:0c:c8:97:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Jun 18 06:00:03 2025 GMT Not After : Jun 21 06:00:00 2025 GMT Subject: CN=feb93fc8-26c3-4521-b502-8d95fb9f1ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:e4:c2:05:4b:25:12:d1:ef:32:34:07:98: 11:c2:2a:fc:20:a4:cf:fb:4e:98:fb:c4:c7:18:df: 4c:64:dc:38:29:3f:92:93:e1:d5:ef:fa:80:e5:0d: 37:1d:6e:b6:8b:24:08:3b:e2:b7:ef:02:e2:9f:b3: 98:87:69:81:6a:cd:98:fc:e5:e8:99:b1:0e:49:02: a7:63:14:39:75:af:21:1b:86:27:0b:17:f0:56:3b: 98:31:cf:3d:a0:ec:f3:25:99:80:a6:88:ca:68:33: d4:0b:4f:60:17:60:78:e9:8d:a6:f1:78:2c:1f:fc: 0d:18:c8:1a:51:52:45:46:07:db:1b:13:55:67:f6: 14:65:d2:8b:1b:87:96:63:82:3e:ab:a6:64:6b:1f: ef:4c:86:a3:c8:a5:35:9e:e9:dd:bc:cf:9d:e8:24: 14:cf:35:73:54:74:c6:b8:86:cb:cb:52:60:be:ff: dd:73:9d:11:b7:39:a6:89:b3:4f:63:0b:e5:45:cc: 9e:62:e8:7b:1c:0c:60:be:61:de:fc:56:9e:68:93: 74:67:fe:8c:5e:f5:6f:15:9c:3e:0f:1b:5f:45:9b: 9e:e0:e5:97:03:18:4f:0e:79:f6:fd:3c:70:e7:05: 68:55:b4:2c:31:80:c5:88:7d:46:28:9f:70:03:e8: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:B5:9D:5A:51:9F:01:A1:5B:B8:FD:C8:49:E8:67:68:42:09:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e8:11:1a:b1:21:bb:1b:07:99:6d:20:65:82:21:e2:08:fd: 2b:e3:1b:43:97:2b:29:33:22:92:1a:6f:fa:02:42:85:42:20: e4:c6:04:26:7d:49:db:54:b6:3a:99:62:0a:87:a1:bd:b8:fb: a3:14:1a:28:c4:c5:7a:7c:49:a1:e6:f5:43:72:2b:cf:20:d3: 98:33:6a:49:83:d3:d8:7e:8b:70:b9:e7:53:ba:4b:cf:98:8f: db:88:19:f4:e0:16:d0:dd:15:49:52:47:72:6c:22:41:ed:d9: dc:b7:d2:ff:f6:8a:88:1a:03:20:05:c6:03:1e:f9:63:24:28: 16:ad:52:4e:4c:15:80:96:7e:94:80:66:0a:e7:25:16:9f:a9: 77:2b:89:e2:d5:53:d7:55:7d:8f:75:9f:cd:9b:61:fe:03:87: 65:57:84:e7:4e:16:89:01:0c:92:eb:d1:17:48:c8:0e:d6:14: eb:77:94:b0:2a:a2:82:af:b7:ca:d5:82:f1:88:e0:9c:c0:47: 22:78:79:a4:75:0c:97:dc:60:16:0f:46:9a:ea:d8:a9:64:6b: a1:11:2e:b9:1f:c8:70:af:c2:d6:db:59:d2:64:6c:d6:a3:96: 57:cd:b2:bc:2b:c3:5b:c9:2c:6a:ab:e0:8f:5c:a1:db:21:bc: 46:ec:a0:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo6qfcBKk2qDMiXiSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MDYxODA2MDAwM1oXDTI1MDYyMTA2MDAwMFowLzEtMCsGA1UEAxMk ZmViOTNmYzgtMjZjMy00NTIxLWI1MDItOGQ5NWZiOWYxYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn63kwgVLJRLR7zI0B5gRwir8IKTP+06Y+8TH GN9MZNw4KT+Sk+HV7/qA5Q03HW62iyQIO+K37wLin7OYh2mBas2Y/OXombEOSQKn YxQ5da8hG4YnCxfwVjuYMc89oOzzJZmApojKaDPUC09gF2B46Y2m8XgsH/wNGMga UVJFRgfbGxNVZ/YUZdKLG4eWY4I+q6Zkax/vTIajyKU1nundvM+d6CQUzzVzVHTG uIbLy1Jgvv/dc50RtzmmibNPYwvlRcyeYuh7HAxgvmHe/FaeaJN0Z/6MXvVvFZw+ DxtfRZue4OWXAxhPDnn2/Txw5wVoVbQsMYDFiH1GKJ9wA+hxDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPsqtZ1aUZ8BoVu4/chJ6GdoQgk1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvZjcxZDI1MmItOWEwZS00 NDkzLWJlOTMtZTZhOGUyZmZmZWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi6BEasSG7GweZbSBlgiHi CP0r4xtDlyspMyKSGm/6AkKFQiDkxgQmfUnbVLY6mWIKh6G9uPujFBooxMV6fEmh 5vVDcivPINOYM2pJg9PYfotwuedTukvPmI/biBn04BbQ3RVJUkdybCJB7dnct9L/ 9oqIGgMgBcYDHvljJCgWrVJOTBWAln6UgGYK5yUWn6l3K4ni1VPXVX2PdZ/Nm2H+ A4dlV4TnThaJAQyS69EXSMgO1hTrd5SwKqKCr7fK1YLxiOCcwEcieHmkdQyX3GAW D0aa6tipZGuhES65H8hwr8LW21nSZGzWo5ZXzbK8K8NbySxqq+CPXKHbIbxG7KAc -----END CERTIFICATE-----Generated at Wed Jun 18 17:42:51 2025 by rpki-client