$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft File: 421cece2-8c18-41dd-a133-74ed29168835.mft (raw, json) Hash identifier: a33q6TUq2G8qZ2EIRMG7VK0R5AvsuI8f3+vpe5t2FXY= Subject key identifier: C6:13:27:B0:31:57:4B:0B:DD:16:DA:9C:F2:F0:59:EC:42:2F:1B:31 Authority key identifier: 07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F Certificate issuer: /CN=421cece2-8c18-41dd-a133-74ed29168835 Certificate serial: 010D0C9F4328584A6B84FBA6374525D389AC0BA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft Manifest number: 010D0C9F4328584073A82259B3C6039E30B966A8 Signing time: Sat 05 Jul 2025 18:00:08 +0000 Manifest this update: Sat 05 Jul 2025 18:00:08 +0000 Manifest next update: Tue 08 Jul 2025 18:00:00 +0000 Files and hashes: 1: 421cece2-8c18-41dd-a133-74ed29168835.crl (hash: QKgzkL/N3af33Ss1fxKj8+WnK7/p+lsyzVwmgWQxXlk=) 2: bdc1790a-cecc-3ae3-863f-105e516b77ef.roa (hash: yJl4lQ9tg63N0iBYH2Oo2zLzd125HuGwxJ7netxoC3w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6b:84:fb:a6:37:45:25:d3:89:ac:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421cece2-8c18-41dd-a133-74ed29168835 Validity Not Before: Jul 5 18:00:08 2025 GMT Not After : Jul 8 18:00:00 2025 GMT Subject: CN=d321e2a3-2ded-4f6a-aa22-4197e45113ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:bc:a2:ba:f4:7b:af:72:a0:6b:f1:56:a3: a6:aa:81:07:b0:ef:a3:73:c9:7b:e2:d6:e6:e4:4e: 01:fa:a9:35:70:98:f6:27:d2:05:a1:54:aa:90:15: 81:40:c6:a8:2d:8c:ed:6d:46:ed:72:3c:56:28:2b: 6d:60:9b:f1:bb:b5:3f:14:19:bc:02:bd:47:f8:3b: ef:9f:12:ce:5d:56:bf:7a:6f:3d:cc:a7:66:bf:06: bb:12:2c:84:d3:8e:fb:cf:8c:3a:a7:84:36:a1:dd: b1:b9:a6:02:ee:aa:be:8b:12:f4:fc:9d:a3:01:df: eb:b9:4c:06:0f:18:85:d1:eb:ae:4d:40:8d:0c:fb: e0:e1:60:28:3c:a1:35:5a:66:b5:16:83:b1:cd:f9: 27:b4:b8:15:37:ad:cc:8c:74:09:7a:7a:02:8a:bc: 5b:31:bd:0e:7e:61:4e:23:cd:20:d1:72:ae:1e:2b: b9:92:41:e0:7b:ff:0b:37:10:59:b6:06:d1:6f:e5: 2f:5e:11:5d:59:92:91:4a:b3:7d:ca:3e:e2:99:ad: a5:5f:0e:b3:38:25:fd:5f:5a:97:13:7f:fa:31:fd: 5e:1a:e4:4f:4f:56:4b:63:21:11:87:7d:de:23:13: 65:2d:83:12:e1:00:59:50:9e:67:3f:e9:72:28:a3: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:13:27:B0:31:57:4B:0B:DD:16:DA:9C:F2:F0:59:EC:42:2F:1B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl X509v3 Authority Key Identifier: keyid:07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ea:ac:c9:59:1e:91:e5:3d:ad:dd:60:fc:65:78:c8:23:fa: 24:d4:97:d1:38:32:63:d6:ed:c5:d6:d0:bb:20:08:d1:5e:98: ee:33:62:3a:2b:3e:e7:99:12:2c:7d:ea:a1:c6:fd:14:9e:ff: 92:02:3b:c8:7e:6e:07:66:03:fa:fd:76:4e:80:1a:16:0a:02: d2:d4:3d:82:fa:d9:c0:f3:96:57:28:23:00:44:90:b6:43:32: 29:21:3e:99:d6:1b:6b:df:cc:4f:69:32:4f:02:7b:48:92:08: 90:e8:eb:b4:de:53:f4:8f:ae:47:e1:9e:5c:c2:b7:a7:e5:93: e4:3a:2b:03:08:f9:5b:32:ea:08:50:de:4c:57:56:d2:50:8e: 74:9c:97:91:37:71:33:a1:7c:b9:6e:f6:82:6f:ce:63:21:af: 50:0b:4c:68:3d:03:64:cf:78:34:b7:06:40:fe:3b:e2:eb:0a: 42:d9:1e:d8:52:89:cb:4b:60:d0:33:89:f0:96:e9:9d:cd:f2: 6f:64:6f:83:b5:f6:15:62:33:6c:4f:d1:27:6a:3d:df:76:3d: 44:8c:d7:68:3e:58:86:32:0a:b9:ca:6a:ee:36:dc:3f:c4:9b: 38:21:dd:ef:f3:b0:80:91:12:4b:aa:5c:8e:72:18:7b:6c:6e: 63:54:a7:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEprhPumN0Ul04msC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIxY2VjZTItOGMxOC00MWRkLWExMzMtNzRlZDI5MTY4 ODM1MB4XDTI1MDcwNTE4MDAwOFoXDTI1MDcwODE4MDAwMFowLzEtMCsGA1UEAxMk ZDMyMWUyYTMtMmRlZC00ZjZhLWFhMjItNDE5N2U0NTExM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoW8orr0e69yoGvxVqOmqoEHsO+jc8l74tbm 5E4B+qk1cJj2J9IFoVSqkBWBQMaoLYztbUbtcjxWKCttYJvxu7U/FBm8Ar1H+Dvv nxLOXVa/em89zKdmvwa7EiyE0477z4w6p4Q2od2xuaYC7qq+ixL0/J2jAd/ruUwG DxiF0euuTUCNDPvg4WAoPKE1Wma1FoOxzfkntLgVN63MjHQJenoCirxbMb0OfmFO I80g0XKuHiu5kkHge/8LNxBZtgbRb+UvXhFdWZKRSrN9yj7ima2lXw6zOCX9X1qX E3/6Mf1eGuRPT1ZLYyERh33eIxNlLYMS4QBZUJ5nP+lyKKNXawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMYTJ7AxV0sL3RbanPLwWexCLxsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjFj ZWNlMi04YzE4LTQxZGQtYTEzMy03NGVkMjkxNjg4MzUvNDIxY2VjZTItOGMxOC00 MWRkLWExMzMtNzRlZDI5MTY4ODM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIxY2VjZTItOGMxOC00MWRkLWEx MzMtNzRlZDI5MTY4ODM1LzQyMWNlY2UyLThjMTgtNDFkZC1hMTMzLTc0ZWQyOTE2 ODgzNS5jcmwwHwYDVR0jBBgwFoAUB4ln0mgAeHIU4HXWwkESchA+DQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjFjZWNlMi04YzE4LTQxZGQtYTEzMy03NGVk MjkxNjg4MzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZ6qzJWR6R5T2t3WD8ZXjI I/ok1JfRODJj1u3F1tC7IAjRXpjuM2I6Kz7nmRIsfeqhxv0Unv+SAjvIfm4HZgP6 /XZOgBoWCgLS1D2C+tnA85ZXKCMARJC2QzIpIT6Z1htr38xPaTJPAntIkgiQ6Ou0 3lP0j65H4Z5cwren5ZPkOisDCPlbMuoIUN5MV1bSUI50nJeRN3EzoXy5bvaCb85j Ia9QC0xoPQNkz3g0twZA/jvi6wpC2R7YUonLS2DQM4nwlumdzfJvZG+DtfYVYjNs T9Enaj3fdj1EjNdoPliGMgq5ymruNtw/xJs4Id3v87CAkRJLqlyOchh7bG5jVKf5 -----END CERTIFICATE-----Generated at Sat Jul 5 21:20:30 2025 by rpki-client