$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft File: 093dd42f-849c-49fe-b795-49e66b3b3b7a.mft (raw, json) Hash identifier: ZlUpwzT4VU0zeIGudaVDvIlbg4x5dGi3fGi4MMrqkD8= Subject key identifier: FE:81:74:44:BC:D8:26:BF:A1:D4:77:9A:2B:CD:87:DE:70:68:F3:D5 Authority key identifier: 70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 Certificate issuer: /CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Certificate serial: 010D0C9F4328584A5FE3223115CDBE2718A4BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft Manifest number: 010D0C9F43285847DB12F1F07E6AEBE8DBDB16EC Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: 093dd42f-849c-49fe-b795-49e66b3b3b7a.crl (hash: IB6mL+1Ey7ShP9KAjxTcVw46TxCjihbBc93vx2tZk+8=) 2: 34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa (hash: 2KXuT+gbm6oiY5aI9gVbLpcL2o7aMgNyNQnJuTa+UcE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:22:31:15:cd:be:27:18:a4:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=33aada00-745e-4f63-b0d8-4aa274a5e0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8a:6d:a8:b6:31:00:d9:ae:50:26:07:5b:8b: e3:50:22:e9:c5:d0:db:2e:be:bf:56:79:d7:eb:b8: 3c:2e:d7:97:31:f2:f4:30:aa:4f:6f:86:40:68:59: 7e:76:9f:85:39:ba:d8:b4:31:19:2c:f0:4e:a0:89: a0:d7:c7:02:c9:a2:78:16:0e:06:eb:de:9d:b0:f2: 27:13:04:50:69:e7:ad:03:d6:e7:84:da:df:26:32: 4b:e4:f6:cf:a2:33:84:9f:07:22:9a:66:7d:e1:9d: 89:c3:eb:52:c2:de:5e:68:13:f9:43:2c:a7:c4:52: 6f:22:68:51:55:c4:02:0c:7a:4d:ea:ed:72:ee:35: 72:af:d5:c8:cd:0c:c0:4f:ea:7c:29:cd:42:55:98: 01:7b:46:ba:7a:f4:a4:85:cf:00:6d:d5:4f:dd:c2: 36:19:c2:2f:11:eb:f8:ae:2b:95:38:8b:3c:0a:82: 2b:bc:64:5d:a5:b4:68:77:d2:46:35:06:6a:56:eb: 35:2c:bf:c1:08:0f:f3:ca:4a:55:1b:99:ed:0b:2d: eb:60:1a:c5:e0:e9:83:c7:d0:b4:56:01:50:44:d8: 62:a9:bb:14:b0:9d:05:cc:c8:1e:c0:84:7d:89:a0: 4b:bb:ee:08:99:59:ef:38:01:23:52:e3:dc:f3:57: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:81:74:44:BC:D8:26:BF:A1:D4:77:9A:2B:CD:87:DE:70:68:F3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl X509v3 Authority Key Identifier: keyid:70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b1:62:30:af:42:ae:3f:7a:7e:f0:3d:e2:c2:73:32:26:21: 0b:0f:97:24:ae:6b:43:bf:7a:15:13:58:74:ef:87:58:6a:a9: f5:3c:11:e6:fd:93:37:83:de:ad:ac:be:34:1b:41:40:89:d1: 12:16:d7:45:c1:d6:68:a4:a6:9d:b7:d7:1e:1c:a8:28:2f:7c: 36:69:25:4a:5f:c0:ca:11:02:a2:0d:db:85:a2:d1:33:8b:bd: c4:ab:90:7e:6c:9a:92:d8:5e:34:43:1e:ac:a5:b2:8d:a3:05: 30:f5:52:ff:b2:4b:2f:f5:1f:dc:73:4c:d2:97:c4:b9:fa:d1: 8c:fc:67:29:19:7b:55:d9:b3:54:96:f4:74:c0:84:6f:3f:e4: 26:2b:b5:0f:bc:7f:31:18:2f:a1:66:f4:6c:b9:c4:8e:de:40: b5:99:6b:b6:96:03:17:cf:56:4c:0a:e2:0f:6c:4c:c2:e0:58: 38:a6:27:58:57:89:f9:da:1f:3a:90:a4:d0:2c:97:77:cd:81: fc:e8:5b:2b:ff:bd:d1:11:11:82:07:da:88:85:81:5f:3c:07: e3:92:8e:e4:ed:59:64:98:2c:c0:8e:d0:eb:f5:c5:51:58:67: 4e:81:f1:f1:c7:9d:0f:dc:11:6e:70:2e:f5:96:28:30:f2:3c: 5c:cd:f3:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4yIxFc2+JxikvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDkzZGQ0MmYtODQ5Yy00OWZlLWI3OTUtNDllNjZiM2Iz YjdhMB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk MzNhYWRhMDAtNzQ1ZS00ZjYzLWIwZDgtNGFhMjc0YTVlMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIptqLYxANmuUCYHW4vjUCLpxdDbLr6/VnnX 67g8LteXMfL0MKpPb4ZAaFl+dp+FObrYtDEZLPBOoImg18cCyaJ4Fg4G696dsPIn EwRQaeetA9bnhNrfJjJL5PbPojOEnwcimmZ94Z2Jw+tSwt5eaBP5QyynxFJvImhR VcQCDHpN6u1y7jVyr9XIzQzAT+p8Kc1CVZgBe0a6evSkhc8AbdVP3cI2GcIvEev4 riuVOIs8CoIrvGRdpbRod9JGNQZqVus1LL/BCA/zykpVG5ntCy3rYBrF4OmDx9C0 VgFQRNhiqbsUsJ0FzMgewIR9iaBLu+4ImVnvOAEjUuPc81dXeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP6BdES82Ca/odR3mivNh95waPPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNk ZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2NmIzYjNiN2EvMDkzZGQ0MmYtODQ5Yy00 OWZlLWI3OTUtNDllNjZiM2IzYjdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDkzZGQ0MmYtODQ5Yy00OWZlLWI3 OTUtNDllNjZiM2IzYjdhLzA5M2RkNDJmLTg0OWMtNDlmZS1iNzk1LTQ5ZTY2YjNi M2I3YS5jcmwwHwYDVR0jBBgwFoAUcEAvE95Lzx82DCLXbM/ZWUuMriEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNkZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2 NmIzYjNiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzsWIwr0KuP3p+8D3iwnMy JiELD5ckrmtDv3oVE1h074dYaqn1PBHm/ZM3g96trL40G0FAidESFtdFwdZopKad t9ceHKgoL3w2aSVKX8DKEQKiDduFotEzi73Eq5B+bJqS2F40Qx6spbKNowUw9VL/ sksv9R/cc0zSl8S5+tGM/GcpGXtV2bNUlvR0wIRvP+QmK7UPvH8xGC+hZvRsucSO 3kC1mWu2lgMXz1ZMCuIPbEzC4Fg4pidYV4n52h86kKTQLJd3zYH86Fsr/73RERGC B9qIhYFfPAfjko7k7VlkmCzAjtDr9cVRWGdOgfHxx50P3BFucC71ligw8jxczfNr -----END CERTIFICATE-----Generated at Tue Jul 1 15:40:58 2025 by rpki-client