$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: vJuv2Lp3yAoyiWRQiJx1ICMzK9APgU/4NNtAbYzrkAA= Subject key identifier: 36:F5:83:B5:EF:10:BB:3E:25:22:02:43:D2:92:37:50:FD:79:BA:51 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584A5F4E3A581B1660CA2AB64D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022423 Signing time: Tue 01 Jul 2025 09:00:08 +0000 Manifest this update: Tue 01 Jul 2025 09:00:08 +0000 Manifest next update: Thu 03 Jul 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: CJHbUXldE7Gzh7pACkutMfUlnh1TIBVyVnh2YmLofuQ=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: NoEz5lOOZlDcTBR3IcR10wZOoc5q/ZXVMu/eaxgB2GU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:4e:3a:58:1b:16:60:ca:2a:b6:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Jul 1 09:00:08 2025 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=9efe242f-604b-4006-93c5-d42b91f48dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:06:93:9b:a0:52:85:cc:eb:4a:e3:c9:3d: 1e:c4:d1:c5:77:66:ee:7f:f0:79:bd:ca:05:b5:7b: 51:9f:ae:2f:da:3c:91:56:6f:3b:36:86:5e:cd:77: 1a:52:0d:05:cd:05:5b:48:da:8c:3b:82:c2:b4:49: 39:63:22:f3:8e:6d:09:4a:76:c0:03:55:9b:78:d3: e7:ed:c4:d0:00:d9:2e:7d:b2:8f:c1:02:17:88:c9: ae:0a:05:1b:92:8d:5c:fe:f5:5c:45:7e:e7:4a:07: 82:10:cb:ac:0d:3d:84:3b:23:06:ea:6e:d1:b8:4c: 06:69:c5:29:6e:c7:57:05:3b:d7:1c:df:ef:23:03: e8:3d:33:12:8e:b0:08:f6:60:85:d4:69:64:2f:e1: 2c:ad:d4:2e:f9:15:1a:e7:c6:03:de:3e:25:e4:96: 59:b5:a1:4d:2c:cd:b3:74:dd:f3:55:54:92:ea:d0: f6:8b:89:3f:08:6e:80:a8:07:99:b5:d5:57:4f:b5: 20:00:07:14:3a:a1:22:cc:c3:6d:1c:c3:71:d3:97: 50:e6:0e:32:ef:36:76:3c:38:bb:6e:e2:5a:c1:75: 42:30:84:e5:55:e5:42:79:3f:df:2f:7b:f7:93:cf: e2:b4:72:e2:d9:c6:11:32:60:e2:41:01:d5:9b:40: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:83:B5:EF:10:BB:3E:25:22:02:43:D2:92:37:50:FD:79:BA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ac:e8:9d:6e:80:8b:7b:17:ab:0a:5b:6a:31:43:33:ea:39: 3a:ab:5e:af:3e:3e:23:76:16:36:67:19:7c:7f:a9:8d:b2:12: f5:19:8d:c4:f2:26:f3:b0:47:5c:3a:d6:a9:a8:e1:88:74:aa: 7a:7f:b8:a8:0d:fb:9e:85:b8:69:60:f1:d9:c6:10:18:f8:8d: 26:37:f4:fe:07:6c:ff:d3:5a:1e:27:e1:da:c2:c0:37:87:e0: 70:f0:15:db:e8:ec:1b:d7:92:19:93:d8:45:79:f7:6c:ed:5a: 94:d7:63:64:e3:b0:df:9a:91:3d:a2:0c:6d:6e:4e:0e:f6:b1: a5:ec:e3:3e:76:e9:e0:75:c0:50:2c:62:f2:94:17:c5:10:b8: ec:63:5c:a7:76:c7:cc:b2:34:a9:e7:96:74:70:bf:8b:f3:4c: 6e:f8:89:0c:bd:50:76:23:63:0e:96:02:6e:17:1b:64:44:b2: 85:45:67:97:fe:0b:fd:d3:f9:2b:4a:02:71:9a:6e:b9:d7:19: d5:a8:ce:8c:dd:3c:3b:34:dd:0c:a3:66:15:3c:b1:1f:09:07: 39:03:dc:ed:34:67:da:79:ac:e2:51:0c:7c:74:21:21:5a:69: 9f:df:6e:1b:f0:21:c8:36:24:c2:0a:14:68:ec:ef:48:f8:5c: c8:f5:9f:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfTjpYGxZgyiq2TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDcwMTA5MDAwOFoXDTI1MDcwMzA5MDAwMFowLzEtMCsGA1UEAxMk OWVmZTI0MmYtNjA0Yi00MDA2LTkzYzUtZDQyYjkxZjQ4ZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn18Gk5ugUoXM60rjyT0exNHFd2buf/B5vcoF tXtRn64v2jyRVm87NoZezXcaUg0FzQVbSNqMO4LCtEk5YyLzjm0JSnbAA1WbeNPn 7cTQANkufbKPwQIXiMmuCgUbko1c/vVcRX7nSgeCEMusDT2EOyMG6m7RuEwGacUp bsdXBTvXHN/vIwPoPTMSjrAI9mCF1GlkL+EsrdQu+RUa58YD3j4l5JZZtaFNLM2z dN3zVVSS6tD2i4k/CG6AqAeZtdVXT7UgAAcUOqEizMNtHMNx05dQ5g4y7zZ2PDi7 buJawXVCMITlVeVCeT/fL3v3k8/itHLi2cYRMmDiQQHVm0B0MwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDb1g7XvELs+JSICQ9KSN1D9ebpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8rOidboCLexerCltqMUMz 6jk6q16vPj4jdhY2Zxl8f6mNshL1GY3E8ibzsEdcOtapqOGIdKp6f7ioDfuehbhp YPHZxhAY+I0mN/T+B2z/01oeJ+HawsA3h+Bw8BXb6Owb15IZk9hFefds7VqU12Nk 47DfmpE9ogxtbk4O9rGl7OM+dungdcBQLGLylBfFELjsY1yndsfMsjSp55Z0cL+L 80xu+IkMvVB2I2MOlgJuFxtkRLKFRWeX/gv90/krSgJxmm651xnVqM6M3Tw7NN0M o2YVPLEfCQc5A9ztNGfaeaziUQx8dCEhWmmf324b8CHINiTCChRo7O9I+FzI9Z/V -----END CERTIFICATE-----Generated at Wed Jul 2 00:01:23 2025 by rpki-client