$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft (raw, json) Hash identifier: PZMP1WHVXWljXcLsbRfJRunrIvHSPV1iRN0La+TN5iY= Subject key identifier: F8:A4:82:9F:5E:84:9A:5E:FB:1C:FB:06:A1:33:4B:30:49:E9:E1:84 Authority key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Certificate issuer: /CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Certificate serial: 010D0C9F4328584A5E5FF5E8BCEA28E369DD6DA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft Manifest number: 010D0C9F4328584073A8338FE8C46476050B2122 Signing time: Tue 01 Jul 2025 01:00:03 +0000 Manifest this update: Tue 01 Jul 2025 01:00:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl (hash: 1Kwkro4XiNhmoP2IBZoevVqFde3wbn+9vW28c/8wGwU=) 2: af0a8e4a-42b9-3667-8ce3-865564983774.roa (hash: 5yvDJolQfYj0DmuOZkqTMwoJByvbk0ARJeZENi+FLb4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:5f:f5:e8:bc:ea:28:e3:69:dd:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Validity Not Before: Jul 1 01:00:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=f7e22982-bcb5-4277-b6a7-96857f4193f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:ba:3d:1f:50:29:8e:04:ea:c4:3b:cd:a9: 03:43:72:fa:31:f2:ca:1a:03:dd:e4:24:64:da:e7: 13:16:5c:4d:31:fa:b7:15:8f:d8:af:da:85:7e:0a: f5:97:7a:57:bf:20:68:e7:89:d8:c1:10:e0:fc:7d: fb:e0:dc:fa:eb:9d:4a:77:00:86:22:9e:8b:6a:63: f6:43:8e:8c:d0:f3:a4:38:66:20:f2:48:b0:3d:9e: cc:79:ea:bd:b5:80:3d:74:99:f9:75:5d:de:9e:ae: 14:50:a4:22:e4:6a:f3:2b:82:f1:17:16:0e:97:41: 5e:fb:d2:38:54:7c:ba:0e:a0:a3:ea:11:46:c8:48: da:22:2d:58:23:a5:6e:3e:3f:a6:f1:1e:52:1b:eb: 61:60:09:13:ea:2e:07:14:10:7b:cc:95:23:2b:ce: a8:0a:a5:35:03:18:4b:25:32:68:2b:7b:8f:6c:49: 35:09:f6:65:41:65:ee:de:9f:95:79:7b:70:de:19: d6:9a:ce:8e:33:22:1b:d5:20:44:39:43:81:f4:99: 60:97:2f:77:4c:9d:d4:1c:f0:07:5b:b1:7d:fd:53: df:fd:ae:8b:90:c4:2c:90:4d:c5:41:f9:14:e8:56: f2:f4:15:c6:67:0b:89:e4:11:c0:e6:01:ca:a6:8f: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:82:9F:5E:84:9A:5E:FB:1C:FB:06:A1:33:4B:30:49:E9:E1:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.crl X509v3 Authority Key Identifier: keyid:F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:21:1c:d0:7c:95:22:89:b6:0b:7a:9c:e8:11:1a:0b:6d:8f: df:b9:93:8d:57:cb:61:d7:df:3b:34:9a:7c:e2:64:f5:21:52: 9f:87:81:1e:60:29:6a:7a:1e:f6:4b:9f:ea:e0:17:fa:ef:53: 9b:cb:19:f3:25:da:15:c6:9d:99:0f:7c:e5:d6:15:5d:77:b8: 8d:30:29:a3:75:05:9f:a8:da:57:9b:4e:7e:5c:cf:d2:bc:7a: 5a:72:36:da:52:18:27:45:d2:e8:8f:b1:6b:17:e5:54:d2:8a: 01:3b:19:8a:b8:f7:28:b1:fd:d8:ec:4e:1f:ca:a0:8c:50:fb: 4b:4f:3c:1a:86:72:ae:e4:10:a6:65:30:79:90:9b:f0:0c:a9: 71:05:67:c2:db:99:51:1c:1e:ec:40:1c:e6:79:84:99:11:e3: e8:dd:b8:4a:e8:04:47:ee:66:a6:d2:54:52:66:53:bc:5d:40: 2c:18:df:52:7b:05:2a:1c:d1:99:85:a2:3c:bc:a3:42:d7:2c: ae:07:8b:c3:22:9b:1b:41:ed:94:ac:6b:f6:d7:01:aa:85:35: c5:6a:37:9d:7a:77:6b:b7:f2:c7:b9:d9:b3:5a:35:49:a8:2a: 37:05:eb:7d:db:8b:0b:c9:3c:63:f6:ed:24:28:92:4e:f0:d6: 9a:75:74:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeX/XovOoo42ndbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhi ZjRjMB4XDTI1MDcwMTAxMDAwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk ZjdlMjI5ODItYmNiNS00Mjc3LWI2YTctOTY4NTdmNDE5M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYm6PR9QKY4E6sQ7zakDQ3L6MfLKGgPd5CRk 2ucTFlxNMfq3FY/Yr9qFfgr1l3pXvyBo54nYwRDg/H374Nz6651KdwCGIp6LamP2 Q46M0POkOGYg8kiwPZ7Meeq9tYA9dJn5dV3enq4UUKQi5GrzK4LxFxYOl0Fe+9I4 VHy6DqCj6hFGyEjaIi1YI6VuPj+m8R5SG+thYAkT6i4HFBB7zJUjK86oCqU1AxhL JTJoK3uPbEk1CfZlQWXu3p+VeXtw3hnWms6OMyIb1SBEOUOB9Jlgly93TJ3UHPAH W7F9/VPf/a6LkMQskE3FQfkU6Fby9BXGZwuJ5BHA5gHKpo84HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPikgp9ehJpe+xz7BqEzSzBJ6eGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2 MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvNjRhNjAwOWQtMTJiOC00 YjM0LTk1ZjktZDI2MTgwZDhiZjRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjRhNjAwOWQtMTJiOC00YjM0LTk1 ZjktZDI2MTgwZDhiZjRjLzY0YTYwMDlkLTEyYjgtNGIzNC05NWY5LWQyNjE4MGQ4 YmY0Yy5jcmwwHwYDVR0jBBgwFoAU9xheiLqU8dG2wRT/9s/VCcWqX+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYx ODBkOGJmNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKIRzQfJUiibYLepzoERoL bY/fuZONV8th1987NJp84mT1IVKfh4EeYClqeh72S5/q4Bf671ObyxnzJdoVxp2Z D3zl1hVdd7iNMCmjdQWfqNpXm05+XM/SvHpacjbaUhgnRdLoj7FrF+VU0ooBOxmK uPcosf3Y7E4fyqCMUPtLTzwahnKu5BCmZTB5kJvwDKlxBWfC25lRHB7sQBzmeYSZ EePo3bhK6ARH7mam0lRSZlO8XUAsGN9SewUqHNGZhaI8vKNC1yyuB4vDIpsbQe2U rGv21wGqhTXFajedendrt/LHudmzWjVJqCo3Bet924sLyTxj9u0kKJJO8NaadXTa -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:28 2025 by rpki-client