$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft File: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft (raw, json) Hash identifier: FS2YqCEoTW1G/vsvIjDDQIh8Fjigv5yNbY3fxTw2rpI= Subject key identifier: 47:76:85:46:E0:3F:8A:0A:44:BB:DA:79:58:11:DF:1C:2C:8C:7F:39 Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 Certificate issuer: /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Certificate serial: 010D0C9F4328584A587142B7D9A5516FFBE2E640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft Manifest number: 010D0C9F43285844EA3B75C49737B7093179843F Signing time: Sat 28 Jun 2025 22:00:03 +0000 Manifest this update: Sat 28 Jun 2025 22:00:03 +0000 Manifest next update: Tue 01 Jul 2025 22:00:00 +0000 Files and hashes: 1: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (hash: q2S1VwZxOpx9EYkCo+RPlWIrDfekasLDJAK+ARplzjA=) 2: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl (hash: FW4o7cDs1iovzzZMSfZfkBgoS/YD0MEhBfa7iutFWMw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:71:42:b7:d9:a5:51:6f:fb:e2:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7 Validity Not Before: Jun 28 22:00:03 2025 GMT Not After : Jul 1 22:00:00 2025 GMT Subject: CN=79f2a9f1-986a-4546-ba45-2f4a6dd840d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:bd:50:cf:b9:64:ad:e7:4f:85:52:a3:4e: 14:55:12:2f:f9:64:79:79:18:e1:6a:93:35:b9:cb: 1f:11:d9:81:e2:8d:8b:be:bc:ae:00:68:87:72:8e: 98:3f:bb:a9:5e:c3:b2:43:68:e8:b6:0f:36:1a:7d: b3:f8:4c:e5:84:f5:7a:5e:2e:49:b1:d4:01:9b:03: ba:c9:ae:fe:db:5b:89:b9:e5:81:ef:8f:a9:5e:4e: f6:9f:a5:53:d7:f2:2e:45:08:64:8c:7e:a5:51:ff: 88:8e:ca:28:ca:01:3b:ef:48:01:3b:14:6f:d7:b6: c7:e7:ba:30:48:56:e4:4d:b7:4c:67:24:0b:de:2e: 20:4b:60:88:75:bb:e2:8a:e9:4b:cb:76:86:d2:8d: b6:d5:eb:9e:22:cc:f8:9e:dc:bc:d8:15:43:cd:fb: aa:d1:39:e1:4c:fd:93:53:c0:8b:de:f8:cb:9a:e8: 13:04:dc:a4:19:08:a3:16:34:2d:90:33:3a:12:f0: 61:da:3d:80:9b:e5:0e:8b:77:67:ec:f0:24:6d:9d: c8:30:9e:b9:fd:56:bf:cc:39:88:c4:c0:b8:5b:b5: c1:dc:8b:97:ac:2c:cc:f6:3d:0b:0f:b5:6d:a4:dd: aa:8a:10:57:e9:fc:07:10:98:4b:9b:52:43:58:df: 2b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:76:85:46:E0:3F:8A:0A:44:BB:DA:79:58:11:DF:1C:2C:8C:7F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl X509v3 Authority Key Identifier: keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0d:1a:7b:a3:2d:fc:e9:09:82:d1:0c:85:e6:ca:b5:84:71: f1:32:8d:92:ce:0a:85:4d:20:20:ca:af:ae:49:ba:dd:5a:30: de:5d:55:2d:e0:38:a3:8b:f2:79:e9:b3:ae:ac:f8:88:ed:16: 61:e4:74:61:97:fe:d1:7c:51:68:2b:81:b9:2e:55:f3:79:c6: 33:43:5d:f5:e9:bc:1b:54:92:0a:8a:05:04:a3:34:4c:aa:2c: f9:ff:a3:a6:cc:0b:d3:8f:da:d1:65:f8:42:08:d7:1f:c8:50: 38:f2:c7:49:12:63:2e:2e:3e:2f:59:53:ca:36:d7:49:8d:cf: e1:d7:0e:f5:10:87:88:ae:5b:e6:a2:c2:ec:9b:20:01:79:2a: ff:66:13:b5:b5:ca:30:2e:08:89:cd:7d:11:8f:7e:b6:5b:ba: bc:d5:15:cf:a4:3a:fc:8a:b7:a5:da:54:9d:b8:bf:40:67:02: 28:f1:38:1a:57:9e:1d:e5:ff:d3:d1:b3:76:d4:5c:c9:a5:3c: a5:2c:e9:8e:97:3a:55:a0:da:69:d0:79:fa:85:4c:49:83:9c: e1:7d:e0:8d:ff:19:5b:84:48:7e:94:3a:d7:81:3a:e6:1a:e2: 27:3b:e3:8e:df:d3:c7:d0:96:91:5c:38:ed:49:63:98:b6:e3: d6:e2:c7:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYcUK32aVRb/vi5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiMWZiNDMtZGIwYy00MmU0LWFkNjItNGUwODZjYTJm NGQ3MB4XDTI1MDYyODIyMDAwM1oXDTI1MDcwMTIyMDAwMFowLzEtMCsGA1UEAxMk NzlmMmE5ZjEtOTg2YS00NTQ2LWJhNDUtMmY0YTZkZDg0MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoq9UM+5ZK3nT4VSo04UVRIv+WR5eRjhapM1 ucsfEdmB4o2LvryuAGiHco6YP7upXsOyQ2jotg82Gn2z+EzlhPV6Xi5JsdQBmwO6 ya7+21uJueWB74+pXk72n6VT1/IuRQhkjH6lUf+IjsooygE770gBOxRv17bH57ow SFbkTbdMZyQL3i4gS2CIdbviiulLy3aG0o221eueIsz4nty82BVDzfuq0TnhTP2T U8CL3vjLmugTBNykGQijFjQtkDM6EvBh2j2Am+UOi3dn7PAkbZ3IMJ65/Va/zDmI xMC4W7XB3IuXrCzM9j0LD7VtpN2qihBX6fwHEJhLm1JDWN8rnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEd2hUbgP4oKRLvaeVgR3xwsjH85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMWIx ZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4NmNhMmY0ZDcvYTFiMWZiNDMtZGIwYy00 MmU0LWFkNjItNGUwODZjYTJmNGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTFiMWZiNDMtZGIwYy00MmU0LWFk NjItNGUwODZjYTJmNGQ3L2ExYjFmYjQzLWRiMGMtNDJlNC1hZDYyLTRlMDg2Y2Ey ZjRkNy5jcmwwHwYDVR0jBBgwFoAUcpexTjDO2X4uuA6LlYq3HTddRdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMWIxZmI0My1kYjBjLTQyZTQtYWQ2Mi00ZTA4 NmNhMmY0ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsDRp7oy386QmC0QyF5sq1 hHHxMo2SzgqFTSAgyq+uSbrdWjDeXVUt4Diji/J56bOurPiI7RZh5HRhl/7RfFFo K4G5LlXzecYzQ1316bwbVJIKigUEozRMqiz5/6OmzAvTj9rRZfhCCNcfyFA48sdJ EmMuLj4vWVPKNtdJjc/h1w71EIeIrlvmosLsmyABeSr/ZhO1tcowLgiJzX0Rj362 W7q81RXPpDr8irel2lSduL9AZwIo8TgaV54d5f/T0bN21FzJpTylLOmOlzpVoNpp 0Hn6hUxJg5zhfeCN/xlbhEh+lDrXgTrmGuInO+OO39PH0JaRXDjtSWOYtuPW4se+ -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:53 2025 by rpki-client