$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft (raw, json) Hash identifier: 6O8W2SeWyAEfNkHHDQE8BU6x1qUtaQ3wVezfjHv2sKU= Subject key identifier: 2A:2D:1B:C3:0A:4B:EF:D6:BC:F7:FF:8C:2A:FE:BC:DC:1E:4E:97:C1 Authority key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Certificate issuer: /CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Certificate serial: 010D0C9F4328584A5E7DC02382151AFB74EAB380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft Manifest number: 010D0C9F4328584073A837D5DC90CFDD9E2C4A23 Signing time: Tue 01 Jul 2025 02:00:03 +0000 Manifest this update: Tue 01 Jul 2025 02:00:03 +0000 Manifest next update: Thu 03 Jul 2025 02:00:00 +0000 Files and hashes: 1: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl (hash: 64xxAVqNoQzZoUf2rpQkb2RcNI/eNJcLbYTaB69oLaY=) 2: c565c5c0-8555-3cb8-bca1-d3a92ed022e8.roa (hash: QcV8l/Tvv7w5WQFAcfcv4LAVf5C5ZXn52ssvqWVIikU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:7d:c0:23:82:15:1a:fb:74:ea:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Validity Not Before: Jul 1 02:00:03 2025 GMT Not After : Jul 3 02:00:00 2025 GMT Subject: CN=930ea8ab-c160-4859-b006-5612a533f0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a9:04:87:39:37:a2:8f:63:d8:f1:c5:e0:d6: 82:c6:8f:0c:b1:f2:03:73:52:66:53:b3:92:cf:23: 9b:1f:76:17:d5:40:14:1e:95:e9:f3:b9:03:36:09: 12:b1:30:f7:be:0f:dc:cc:96:a2:03:64:52:56:51: bf:71:11:15:3d:17:5f:6c:e4:65:f6:e0:69:7a:95: 0d:98:6d:66:d3:24:11:20:b6:90:72:76:8a:3e:1d: f6:ba:e3:21:cd:f1:d0:28:4e:31:9c:f7:2d:78:35: 06:57:e7:0e:f9:75:50:72:4d:ed:df:44:cb:96:7c: f4:da:35:e7:55:ab:f9:ce:ba:b5:11:66:58:a4:c8: 60:c3:c9:f4:45:f9:5c:c8:84:61:0b:9b:22:75:d7: 4e:bc:e5:2c:27:ba:b0:55:64:35:5a:70:8a:f4:14: c5:ee:33:23:bf:af:09:c3:e1:13:d7:df:71:73:a5: 4a:09:2e:43:b5:f2:6b:6f:86:6a:04:f8:f3:26:fa: 46:6c:6b:43:52:8c:a1:9b:68:ac:e1:43:4a:90:00: 60:53:b8:a9:1b:29:7f:1f:e3:93:71:bf:8e:e2:22: 57:44:94:d5:55:49:5b:19:99:a3:9f:65:0f:27:0d: 41:fa:1e:54:42:f3:84:34:2a:73:0b:a6:af:e0:d3: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:1B:C3:0A:4B:EF:D6:BC:F7:FF:8C:2A:FE:BC:DC:1E:4E:97:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.crl X509v3 Authority Key Identifier: keyid:57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:dd:62:dc:62:54:dc:52:51:fa:01:63:dc:8e:6e:69:b1:55: 4c:53:23:5c:6f:d9:07:e5:4d:7a:10:bc:ce:d5:f6:c4:ff:b0: e7:e0:cb:52:8e:52:04:9c:64:cd:fd:9a:9a:8e:f0:53:85:02: d3:6d:14:14:51:29:8a:25:34:a6:c2:7b:8d:88:68:ae:8c:b6: 07:b7:00:30:56:5b:40:6e:37:d5:c8:2c:34:fc:a7:e0:37:8a: 6b:71:26:dd:af:f7:60:90:a8:49:28:d7:d9:07:f4:24:a5:57: 5b:b4:af:3d:33:4e:5d:23:36:b4:75:54:1d:b2:41:3b:ca:8a: ca:69:1a:c6:bd:2b:9f:23:1c:bf:8c:fc:3e:2f:fa:6f:e7:36: 4b:06:ca:22:3d:61:37:67:cc:2a:ba:f4:d2:e4:d4:0e:b5:ec: fb:6a:be:cd:1a:d3:e5:10:f4:fd:96:19:88:1f:73:b8:b7:02: 0b:a0:be:1f:ae:b5:51:60:bd:42:b0:26:c1:19:d7:49:5e:60: 72:26:7a:5b:3f:d4:82:70:cf:15:5c:96:cb:99:8a:3b:bc:d2: 1c:21:c7:47:7f:e4:23:48:93:c2:74:ed:d0:13:dd:2e:60:b7: 22:cd:5b:d6:57:a8:16:f3:90:3c:e5:6b:cf:16:47:d4:54:b0: c7:32:a6:22 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpefcAjghUa+3Tqs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWEx NGM2MB4XDTI1MDcwMTAyMDAwM1oXDTI1MDcwMzAyMDAwMFowLzEtMCsGA1UEAxMk OTMwZWE4YWItYzE2MC00ODU5LWIwMDYtNTYxMmE1MzNmMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6kEhzk3oo9j2PHF4NaCxo8MsfIDc1JmU7OS zyObH3YX1UAUHpXp87kDNgkSsTD3vg/czJaiA2RSVlG/cREVPRdfbORl9uBpepUN mG1m0yQRILaQcnaKPh32uuMhzfHQKE4xnPcteDUGV+cO+XVQck3t30TLlnz02jXn Vav5zrq1EWZYpMhgw8n0RflcyIRhC5sidddOvOUsJ7qwVWQ1WnCK9BTF7jMjv68J w+ET199xc6VKCS5DtfJrb4ZqBPjzJvpGbGtDUoyhm2is4UNKkABgU7ipGyl/H+OT cb+O4iJXRJTVVUlbGZmjn2UPJw1B+h5UQvOENCpzC6av4NM15wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCotG8MKS+/WvPf/jCr+vNweTpfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0 NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvNDk5NDUwYmQtNjQzMi00 ZTVkLWEyOWYtMWMzOGMxZWExNGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDk5NDUwYmQtNjQzMi00ZTVkLWEy OWYtMWMzOGMxZWExNGM2LzQ5OTQ1MGJkLTY0MzItNGU1ZC1hMjlmLTFjMzhjMWVh MTRjNi5jcmwwHwYDVR0jBBgwFoAUV5x9/YcwBLe0R40DMFkQXZSTefEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4 YzFlYTE0YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv3WLcYlTcUlH6AWPcjm5p sVVMUyNcb9kH5U16ELzO1fbE/7Dn4MtSjlIEnGTN/ZqajvBThQLTbRQUUSmKJTSm wnuNiGiujLYHtwAwVltAbjfVyCw0/KfgN4prcSbdr/dgkKhJKNfZB/QkpVdbtK89 M05dIza0dVQdskE7yorKaRrGvSufIxy/jPw+L/pv5zZLBsoiPWE3Z8wquvTS5NQO tez7ar7NGtPlEPT9lhmIH3O4twILoL4frrVRYL1CsCbBGddJXmByJnpbP9SCcM8V XJbLmYo7vNIcIcdHf+QjSJPCdO3QE90uYLcizVvWV6gW85A85WvPFkfUVLDHMqYi -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:33 2025 by rpki-client