$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft File: 5203a694-5cc2-43f1-be5c-5799819b975d.mft (raw, json) Hash identifier: NqgswW1OeneKsKMsMe5PAaPhPr4sQa7Uis+ejv8lQiU= Subject key identifier: 97:B6:7D:32:6D:40:4F:A6:84:0B:8B:F1:61:74:0F:92:E3:B2:F7:2B Authority key identifier: 65:3B:56:34:2A:06:AD:FC:04:3D:A2:96:38:C1:2F:BA:37:9E:14:FC Certificate issuer: /CN=5203a694-5cc2-43f1-be5c-5799819b975d Certificate serial: 010D0C9F4328584A5B1E2C77A8716FF3A372FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft Manifest number: 010D0C9F432858455421D0D97776D9B344513E0D Signing time: Sun 29 Jun 2025 21:00:03 +0000 Manifest this update: Sun 29 Jun 2025 21:00:03 +0000 Manifest next update: Tue 01 Jul 2025 21:00:00 +0000 Files and hashes: 1: 5203a694-5cc2-43f1-be5c-5799819b975d.crl (hash: TNXFoin6Xda90w4Wpy52IGXvhjHS9IuwsA0R5B8l7w4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:1e:2c:77:a8:71:6f:f3:a3:72:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5203a694-5cc2-43f1-be5c-5799819b975d Validity Not Before: Jun 29 21:00:03 2025 GMT Not After : Jul 1 21:00:00 2025 GMT Subject: CN=61f3b054-84fa-4304-bcb6-4ea6c1a46fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:fa:06:50:01:a4:62:87:f1:0c:7e:45:d2: b7:32:4b:8f:ee:46:aa:df:55:45:a9:39:9d:cb:c3: 9b:f3:38:fe:65:c7:66:94:59:6b:1f:93:f6:2f:36: f2:3e:35:fe:71:46:2d:e7:6b:8d:b1:7d:f5:53:8d: 99:48:e2:82:45:53:79:46:79:1f:9f:8f:a7:59:6c: 56:fd:08:25:47:a3:88:9b:c9:c6:3d:3c:c9:06:01: b1:6f:06:54:01:d5:0e:ee:47:27:13:5f:20:24:47: be:0b:4f:b6:17:0c:11:08:aa:9e:30:e4:66:9c:d3: 4f:85:84:58:c7:1c:7c:d7:e2:1b:33:2c:3d:c0:3a: b1:7b:58:1e:0f:7e:0e:92:1f:d8:2d:ab:4c:33:47: 66:0d:13:28:97:65:02:70:7d:cc:eb:e3:2b:9a:77: 3f:84:3b:38:02:d2:fe:bb:83:a2:86:9c:ec:f8:6a: b2:89:a7:4d:41:c0:7f:b5:93:08:75:04:7e:7e:ae: 4f:90:91:af:c7:d6:16:24:da:7f:fb:b8:2a:f6:2e: d1:5d:a9:27:a9:e7:a1:7e:1b:2f:a8:ed:a3:be:c2: 35:d8:d5:07:91:65:db:1c:b9:fa:66:4f:21:f2:4d: 47:03:92:ab:4f:c9:17:5d:a4:c1:70:11:91:77:79: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:7D:32:6D:40:4F:A6:84:0B:8B:F1:61:74:0F:92:E3:B2:F7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d/5203a694-5cc2-43f1-be5c-5799819b975d.crl X509v3 Authority Key Identifier: keyid:65:3B:56:34:2A:06:AD:FC:04:3D:A2:96:38:C1:2F:BA:37:9E:14:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5203a694-5cc2-43f1-be5c-5799819b975d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:08:2b:6a:f5:28:a2:84:58:18:ee:af:72:a0:03:eb:a3:ab: 7e:25:5b:96:12:3b:5b:b6:58:eb:6c:d8:22:8e:28:23:36:36: c0:43:81:58:a1:89:99:a7:68:46:91:e7:04:7f:3b:81:a9:14: 8b:5b:71:a6:65:b4:bb:76:3c:67:d9:a7:10:1f:51:de:cb:17: 6b:43:ee:7b:a5:21:cc:6e:99:9b:88:98:a0:bc:db:9b:e2:dc: fd:3b:47:1c:78:1c:06:09:d8:9f:1a:07:05:7d:d2:65:80:63: ce:38:4b:a8:e5:de:ef:12:a0:dc:b4:a4:3e:5f:c4:3b:cb:8a: 41:a5:a2:a8:98:12:1d:85:47:24:b8:44:ef:be:79:db:51:7c: c2:3f:c4:69:88:40:b2:2a:90:67:51:78:0a:56:85:7e:a9:92: 9d:2f:45:33:20:bb:d0:45:24:ed:5c:3b:7f:19:6b:58:f2:ef: 8d:f2:dd:08:ad:9d:fe:08:0f:78:a4:86:ee:17:44:ff:ff:68: 4f:f7:ec:f1:0f:b7:dd:aa:8c:a3:13:98:8a:94:8b:85:eb:48: 44:19:30:df:0a:e0:94:01:05:de:9f:1a:a5:6c:e9:80:73:04: f3:5f:0f:ec:77:69:53:ae:b8:dc:a0:60:11:fc:b0:8b:1e:d1: 7d:9f:2e:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpbHix3qHFv86Ny/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIwM2E2OTQtNWNjMi00M2YxLWJlNWMtNTc5OTgxOWI5 NzVkMB4XDTI1MDYyOTIxMDAwM1oXDTI1MDcwMTIxMDAwMFowLzEtMCsGA1UEAxMk NjFmM2IwNTQtODRmYS00MzA0LWJjYjYtNGVhNmMxYTQ2ZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ36BlABpGKH8Qx+RdK3MkuP7kaq31VFqTmd y8Ob8zj+ZcdmlFlrH5P2LzbyPjX+cUYt52uNsX31U42ZSOKCRVN5Rnkfn4+nWWxW /QglR6OIm8nGPTzJBgGxbwZUAdUO7kcnE18gJEe+C0+2FwwRCKqeMORmnNNPhYRY xxx81+IbMyw9wDqxe1geD34Okh/YLatMM0dmDRMol2UCcH3M6+Mrmnc/hDs4AtL+ u4Oihpzs+GqyiadNQcB/tZMIdQR+fq5PkJGvx9YWJNp/+7gq9i7RXaknqeehfhsv qO2jvsI12NUHkWXbHLn6Zk8h8k1HA5KrT8kXXaTBcBGRd3kwfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJe2fTJtQE+mhAuL8WF0D5LjsvcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MjAz YTY5NC01Y2MyLTQzZjEtYmU1Yy01Nzk5ODE5Yjk3NWQvNTIwM2E2OTQtNWNjMi00 M2YxLWJlNWMtNTc5OTgxOWI5NzVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTIwM2E2OTQtNWNjMi00M2YxLWJl NWMtNTc5OTgxOWI5NzVkLzUyMDNhNjk0LTVjYzItNDNmMS1iZTVjLTU3OTk4MTli OTc1ZC5jcmwwHwYDVR0jBBgwFoAUZTtWNCoGrfwEPaKWOMEvujeeFPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MjAzYTY5NC01Y2MyLTQzZjEtYmU1Yy01Nzk5 ODE5Yjk3NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkCCtq9SiihFgY7q9yoAPr o6t+JVuWEjtbtljrbNgijigjNjbAQ4FYoYmZp2hGkecEfzuBqRSLW3GmZbS7djxn 2acQH1HeyxdrQ+57pSHMbpmbiJigvNub4tz9O0cceBwGCdifGgcFfdJlgGPOOEuo 5d7vEqDctKQ+X8Q7y4pBpaKomBIdhUckuETvvnnbUXzCP8RpiECyKpBnUXgKVoV+ qZKdL0UzILvQRSTtXDt/GWtY8u+N8t0IrZ3+CA94pIbuF0T//2hP9+zxD7fdqoyj E5iKlIuF60hEGTDfCuCUAQXenxqlbOmAcwTzXw/sd2lTrrjcoGAR/LCLHtF9ny6m -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:46 2025 by rpki-client