$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft File: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft (raw, json) Hash identifier: uE2jbpjkx/xS6E3Vn/tCiwGzqv4wjOF6hO85Q1yBnCg= Subject key identifier: EB:5E:1B:11:EA:67:07:DC:2E:17:20:7D:90:E4:B9:AE:F3:41:AD:AB Authority key identifier: 49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 Certificate issuer: /CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Certificate serial: 010D0C9F4328584A5FA790A0AEB1BC2DF8F7E780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft Manifest number: 010D0C9F43285848DE6E17CAE5012D9C33EA3DF6 Signing time: Tue 01 Jul 2025 12:00:08 +0000 Manifest this update: Tue 01 Jul 2025 12:00:08 +0000 Manifest next update: Fri 04 Jul 2025 12:00:00 +0000 Files and hashes: 1: 0c1fefb1-56ce-36ed-9660-7f696eaad2f6.roa (hash: 7xc1Nfnu7bfD9DSSb6VlVSJz3ROW9438j0/GVr7TW90=) 2: 5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl (hash: jUIYcP85quekuwdo6so0tu7Tj6c0GuEiBkDu1MLKHj4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:a7:90:a0:ae:b1:bc:2d:f8:f7:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb Validity Not Before: Jul 1 12:00:08 2025 GMT Not After : Jul 4 12:00:00 2025 GMT Subject: CN=226654ee-02a8-43c0-8c5f-7de743ea6c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:04:92:a4:4d:6b:f5:97:10:f4:a7:3d:b7: 1b:b1:37:4e:a0:de:be:7f:c6:60:a8:8f:d9:1b:58: 91:98:53:8d:1c:0d:d8:de:e9:ee:39:c8:3a:f7:74: d3:14:b1:bc:0c:d4:e6:48:4d:9d:3f:ff:e8:0d:f0: 41:1f:42:fa:89:75:8b:17:c7:93:42:88:1a:5b:0f: f6:04:bc:2c:f1:46:bb:81:57:d1:17:b2:cc:bd:fa: b4:71:96:f1:92:c0:2e:f2:e8:22:26:77:65:4a:52: 2c:14:ce:7f:75:16:79:ad:bb:dd:f4:af:dc:93:c6: 07:5c:7a:21:d5:7b:df:8e:71:74:56:40:c1:b8:11: 29:cf:e7:1a:e0:37:3b:4c:32:85:31:69:d2:75:25: 55:2d:33:5e:f3:1b:ba:c0:30:0a:c7:30:2e:2a:85: c2:6a:dd:da:98:2f:5d:f6:71:12:a0:fa:a9:32:47: 7e:bb:e2:d0:f1:23:c8:e9:60:cb:29:b7:02:5f:ee: 55:5f:e9:db:80:74:d0:ff:6d:c3:8c:d0:30:15:65: 23:1b:25:3a:fd:2a:95:ee:47:7d:db:17:7a:55:08: aa:29:83:dc:f2:be:9c:ec:c4:a3:82:21:ab:c0:3a: 35:ee:a7:ca:e1:7e:3a:1b:b1:08:69:4d:90:67:9b: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5E:1B:11:EA:67:07:DC:2E:17:20:7D:90:E4:B9:AE:F3:41:AD:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.crl X509v3 Authority Key Identifier: keyid:49:B0:D4:53:35:79:64:E8:10:0D:88:DA:88:F8:B7:22:D2:57:E3:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5f3fbae0-ad6f-4d27-babc-d2c6ae11a2cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:10:f6:85:7b:43:fd:8c:40:d2:07:3e:f0:2f:4f:4a:19:9d: 32:ab:0e:e2:aa:67:92:77:1d:46:42:e3:7f:7f:e6:dc:65:b7: 90:b2:08:76:dc:0a:26:d8:f3:8a:3f:2e:4e:81:9c:ab:7e:a1: e7:60:53:1c:19:7b:95:93:4e:ce:37:9b:73:85:2b:17:b3:0a: 7e:9b:cc:20:1d:3f:56:26:61:56:5e:80:75:4e:d8:5e:fa:6a: da:5d:b5:d7:d1:3e:f8:6a:13:9a:34:e7:f9:c3:ab:fe:0f:7a: f7:64:de:ee:1a:49:49:19:ce:00:f5:8f:b0:e3:a5:ec:20:4b: af:6d:21:11:f2:59:5c:f4:89:9b:79:3f:e3:89:a4:77:9f:30: fd:75:5b:ae:26:ef:ff:29:68:db:09:13:bd:20:fe:a0:08:5a: c9:11:c1:32:9e:a0:09:4f:90:4f:32:92:57:8b:4c:2b:78:86: f7:03:b6:57:5b:4e:21:99:69:43:72:c4:0e:24:da:4b:33:d2: 34:57:f0:d4:c9:7c:54:fa:32:9a:8f:c3:e6:70:9c:9e:61:5a: 7e:5f:bf:6c:3f:10:49:5c:3f:67:73:9a:a4:d2:6e:e3:2d:7e: 11:c7:22:94:83:3d:e7:c7:82:86:dd:1d:19:33:dd:25:b0:6e: 62:37:8d:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfp5CgrrG8Lfj354AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYzZmJhZTAtYWQ2Zi00ZDI3LWJhYmMtZDJjNmFlMTFh MmNiMB4XDTI1MDcwMTEyMDAwOFoXDTI1MDcwNDEyMDAwMFowLzEtMCsGA1UEAxMk MjI2NjU0ZWUtMDJhOC00M2MwLThjNWYtN2RlNzQzZWE2YzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDYEkqRNa/WXEPSnPbcbsTdOoN6+f8ZgqI/Z G1iRmFONHA3Y3unuOcg693TTFLG8DNTmSE2dP//oDfBBH0L6iXWLF8eTQogaWw/2 BLws8Ua7gVfRF7LMvfq0cZbxksAu8ugiJndlSlIsFM5/dRZ5rbvd9K/ck8YHXHoh 1XvfjnF0VkDBuBEpz+ca4Dc7TDKFMWnSdSVVLTNe8xu6wDAKxzAuKoXCat3amC9d 9nESoPqpMkd+u+LQ8SPI6WDLKbcCX+5VX+nbgHTQ/23DjNAwFWUjGyU6/SqV7kd9 2xd6VQiqKYPc8r6c7MSjgiGrwDo17qfK4X46G7EIaU2QZ5vuKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOteGxHqZwfcLhcgfZDkua7zQa2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNm YmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2YWUxMWEyY2IvNWYzZmJhZTAtYWQ2Zi00 ZDI3LWJhYmMtZDJjNmFlMTFhMmNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWYzZmJhZTAtYWQ2Zi00ZDI3LWJh YmMtZDJjNmFlMTFhMmNiLzVmM2ZiYWUwLWFkNmYtNGQyNy1iYWJjLWQyYzZhZTEx YTJjYi5jcmwwHwYDVR0jBBgwFoAUSbDUUzV5ZOgQDYjaiPi3ItJX42MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZjNmYmFlMC1hZDZmLTRkMjctYmFiYy1kMmM2 YWUxMWEyY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaEPaFe0P9jEDSBz7wL09K GZ0yqw7iqmeSdx1GQuN/f+bcZbeQsgh23Aom2POKPy5OgZyrfqHnYFMcGXuVk07O N5tzhSsXswp+m8wgHT9WJmFWXoB1Tthe+mraXbXX0T74ahOaNOf5w6v+D3r3ZN7u GklJGc4A9Y+w46XsIEuvbSER8llc9ImbeT/jiaR3nzD9dVuuJu//KWjbCRO9IP6g CFrJEcEynqAJT5BPMpJXi0wreIb3A7ZXW04hmWlDcsQOJNpLM9I0V/DUyXxU+jKa j8PmcJyeYVp+X79sPxBJXD9nc5qk0m7jLX4RxyKUgz3nx4KG3R0ZM90lsG5iN40s -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:00 2025 by rpki-client