$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: o1L+aCSPUt6zcDUq8zDxADp+S4phXnGl5cGkHI4u8vo= Subject key identifier: 5D:A5:1B:47:F3:69:73:DD:D6:A3:B8:F3:BE:44:92:D7:E3:2C:F5:7F Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584A5FC54D2889CDEC2B8802ABC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060C0E Signing time: Tue 01 Jul 2025 13:00:03 +0000 Manifest this update: Tue 01 Jul 2025 13:00:03 +0000 Manifest next update: Thu 03 Jul 2025 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: JTar1rq9VW4j7JmbTL/Cy2XHFzWT8F6ATSbdtURY8CU=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: 9gYPg6ZgV+bZVINDgGflsEvGRgltWgXSooXCYUJ+H4Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:4d:28:89:cd:ec:2b:88:02:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Jul 1 13:00:03 2025 GMT Not After : Jul 3 13:00:00 2025 GMT Subject: CN=39f891d9-9c8f-4b75-b8c8-70a98d64c02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:df:ec:9d:af:ef:c6:62:4d:fd:36:2e:7f:29: 66:7c:1a:ae:ed:e4:6f:18:4e:c1:c6:8d:61:fd:2d: fe:8a:d3:fb:46:a9:3e:61:30:6c:4e:42:22:7f:6e: 96:81:b5:1b:ac:2b:bf:28:81:02:4e:5b:9c:71:76: d5:7b:18:e1:75:f1:dd:9e:df:a8:da:c9:ac:ef:d8: 58:c0:86:f3:90:d5:61:ef:de:07:f7:1c:9f:8e:c1: 50:6a:26:d2:bc:fd:61:a1:f1:63:1e:36:4a:bf:72: f9:48:b4:75:e1:c6:7e:8c:33:0c:48:da:28:b6:d7: b8:81:83:78:7e:ad:c2:00:e6:70:9a:2c:30:4d:d0: 80:5a:fd:dd:42:8d:8a:43:cb:e0:b4:b6:5d:e0:34: 41:6e:3d:36:65:7a:2c:94:1d:5f:0e:cc:7c:3e:1a: fa:eb:fd:47:21:04:6d:c0:90:48:5c:76:8c:63:3d: 83:17:ee:af:29:b9:ee:fb:44:89:c4:11:2b:64:2c: b6:39:fc:14:61:10:21:e8:28:14:bb:83:16:a1:4a: 99:e7:75:e9:ee:51:9a:29:51:dd:ba:6c:49:0e:46: 24:9b:3b:62:7a:02:92:0a:d0:2f:34:ca:1a:23:70: 37:a4:ae:42:91:9e:5c:2d:91:93:97:a7:b6:be:76: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:1B:47:F3:69:73:DD:D6:A3:B8:F3:BE:44:92:D7:E3:2C:F5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6c:9c:46:37:be:3a:34:c9:b5:69:59:c5:46:95:4d:0c:2e: 0a:85:b1:c0:c4:6e:c0:b7:38:f4:69:4a:aa:c2:76:ce:fd:81: f6:cc:3e:64:54:38:72:2b:5e:3a:d9:8f:1e:ba:94:05:36:29: 33:87:0e:2b:52:41:90:a7:32:25:4d:78:c4:a1:d9:f6:36:66: ff:be:d3:58:17:f0:59:d9:b5:6a:14:14:01:07:09:69:ac:14: 9d:c9:7e:fc:cc:74:ff:11:a1:db:ca:9e:8b:ba:46:e7:cd:98: cd:8a:31:23:8d:db:cf:31:51:7e:ba:b2:a1:c2:cf:e6:53:c3: 70:16:bf:14:28:4e:5f:24:f4:4b:a3:9c:9f:cd:5d:c0:64:67: 42:74:71:ed:91:d2:7f:7c:3f:ad:36:e2:98:bb:f3:7b:38:bd: 52:61:bd:7e:08:c8:21:eb:cf:80:78:30:09:f9:f8:5e:59:bf: cd:02:3b:81:11:49:69:11:1d:47:30:6b:64:b4:ae:3a:c9:55: e8:0d:ae:8a:56:fa:b9:1d:08:5d:6e:a1:9c:cc:47:a9:7c:66: e7:97:9b:0d:2d:3e:5b:fe:21:78:99:d5:36:96:70:17:87:f2: 5f:5f:5b:01:7a:4a:d9:fd:8d:1d:9f:7d:ad:73:98:79:03:e7: 13:b4:ab:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfxU0oic3sK4gCq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MDcwMTEzMDAwM1oXDTI1MDcwMzEzMDAwMFowLzEtMCsGA1UEAxMk MzlmODkxZDktOWM4Zi00Yjc1LWI4YzgtNzBhOThkNjRjMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd/sna/vxmJN/TYufylmfBqu7eRvGE7Bxo1h /S3+itP7Rqk+YTBsTkIif26WgbUbrCu/KIECTluccXbVexjhdfHdnt+o2sms79hY wIbzkNVh794H9xyfjsFQaibSvP1hofFjHjZKv3L5SLR14cZ+jDMMSNootte4gYN4 fq3CAOZwmiwwTdCAWv3dQo2KQ8vgtLZd4DRBbj02ZXoslB1fDsx8Phr66/1HIQRt wJBIXHaMYz2DF+6vKbnu+0SJxBErZCy2OfwUYRAh6CgUu4MWoUqZ53Xp7lGaKVHd umxJDkYkmztiegKSCtAvNMoaI3A3pK5CkZ5cLZGTl6e2vnYf4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2lG0fzaXPd1qO4875EktfjLPV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAObJxGN746NMm1aVnFRpVN DC4KhbHAxG7Atzj0aUqqwnbO/YH2zD5kVDhyK1462Y8eupQFNikzhw4rUkGQpzIl TXjEodn2Nmb/vtNYF/BZ2bVqFBQBBwlprBSdyX78zHT/EaHbyp6LukbnzZjNijEj jdvPMVF+urKhws/mU8NwFr8UKE5fJPRLo5yfzV3AZGdCdHHtkdJ/fD+tNuKYu/N7 OL1SYb1+CMgh68+AeDAJ+fheWb/NAjuBEUlpER1HMGtktK46yVXoDa6KVvq5HQhd bqGczEepfGbnl5sNLT5b/iF4mdU2lnAXh/JfX1sBekrZ/Y0dn32tc5h5A+cTtKvI -----END CERTIFICATE-----Generated at Tue Jul 1 19:23:41 2025 by rpki-client