$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft File: 6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft (raw, json) Hash identifier: 33xDV0aGNaa3I9AYWcuPB5IeXiZRQV9L1SZn6NMm370= Subject key identifier: 64:6A:E4:A8:29:15:D8:D2:CA:87:15:DB:38:F1:4C:EA:B9:0E:A2:0A Authority key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C Certificate issuer: /CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f Certificate serial: 010D0C9F43285849D2E78820C945574D74884200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft Manifest number: 010D0C9F4328584073A838261103456820853469 Signing time: Mon 12 May 2025 02:00:02 +0000 Manifest this update: Mon 12 May 2025 02:00:02 +0000 Manifest next update: Wed 14 May 2025 02:00:00 +0000 Files and hashes: 1: 6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl (hash: OYimEnA7ME+gNvUDU+vDa+8GX09wtLkj+p3yfQeZgY8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:e7:88:20:c9:45:57:4d:74:88:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f Validity Not Before: May 12 02:00:02 2025 GMT Not After : May 14 02:00:00 2025 GMT Subject: CN=acbece58-32b3-4e6c-bb07-a6a3e6c17599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0b:f1:40:85:f7:9f:c7:5d:eb:f1:3e:9d:07: 88:a6:e5:ef:33:79:4e:45:3c:b2:b2:cb:69:a1:4a: 01:25:4b:d4:16:48:05:80:aa:5f:3f:a6:63:db:1d: 66:6b:88:a7:c1:3f:d6:b3:29:d1:72:08:14:d4:7a: c0:ec:8a:43:d4:76:6f:fd:97:d6:56:41:0f:94:6a: 86:53:04:8c:29:8c:52:c6:0c:3f:4b:65:82:b3:f5: fe:c8:6d:24:3d:03:70:2a:36:b7:0e:3f:90:98:72: 9d:5e:2c:4d:e6:7c:e8:fe:fe:e9:f3:95:2c:88:2f: 2a:9f:c3:a7:e5:97:d2:9b:6b:93:ae:e9:6f:b4:ab: 90:8f:92:d5:e5:77:19:6c:8d:7e:ad:54:58:fb:81: ea:ba:66:fa:10:98:24:a6:a8:df:01:37:82:25:6c: 8e:f4:b3:8b:4e:e6:78:b5:db:68:2b:d8:5e:dc:27: 45:01:55:e9:2a:b0:99:15:cf:66:60:b0:f8:9b:ae: 0d:27:c5:f8:8f:4d:a3:83:7d:80:bb:70:48:50:64: 78:d8:68:e0:be:1b:eb:32:1c:d0:8c:de:8a:96:af: 73:d6:02:a4:be:40:dd:7c:01:fa:6b:43:da:58:30: 79:94:b5:c9:ef:a9:25:5c:fd:ec:2c:ab:c1:2c:5e: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6A:E4:A8:29:15:D8:D2:CA:87:15:DB:38:F1:4C:EA:B9:0E:A2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl X509v3 Authority Key Identifier: keyid:D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d7:5d:c9:ff:82:e1:9f:6b:c9:26:a4:af:87:5c:50:23:2d: 94:e2:41:9e:91:f4:e9:c0:85:28:f8:a8:27:3d:99:62:c8:5a: 96:dd:9d:79:2d:64:22:83:3e:b3:59:31:63:45:4c:28:87:55: fd:24:d1:fb:fd:56:e9:c4:e4:fd:dc:76:fd:7d:bd:1c:dc:37: 66:0e:06:93:8c:20:cc:b8:28:93:a0:d6:87:7a:a0:c3:42:5f: 5c:99:07:8d:48:01:68:39:ce:f0:c1:65:17:8f:e8:23:19:c6: 9b:7d:5e:23:a6:b3:78:03:c0:74:2f:42:b6:9f:47:5a:0a:f9: 22:20:f4:d3:fa:63:fa:6b:71:1c:5d:cd:19:45:59:81:14:67: 9f:8a:e7:bb:06:da:5b:de:d4:6a:bc:57:31:1c:ae:b9:63:b1: e7:98:bf:2a:ff:4c:09:ed:0c:19:95:14:5a:2e:c0:77:9d:9b: a9:ff:d7:49:c6:4b:2d:64:17:40:ce:cd:8b:ef:7b:bd:31:61: 20:2e:e2:78:d4:87:35:4d:a4:d6:ea:bc:28:0c:a9:e3:1a:1a: ec:3f:ec:d3:f0:62:10:cf:dd:f1:c8:01:dd:4d:85:b8:1c:f0: e6:39:b5:92:0e:68:68:63:5e:2a:f4:00:4e:46:c5:63:00:5e: 3f:97:2d:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnS54ggyUVXTXSIQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIyYzVkNjctYmY1NS00NTUwLWJlNTktYzFhYTVlNjNm ZDJmMB4XDTI1MDUxMjAyMDAwMloXDTI1MDUxNDAyMDAwMFowLzEtMCsGA1UEAxMk YWNiZWNlNTgtMzJiMy00ZTZjLWJiMDctYTZhM2U2YzE3NTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAvxQIX3n8dd6/E+nQeIpuXvM3lORTyysstp oUoBJUvUFkgFgKpfP6Zj2x1ma4inwT/WsynRcggU1HrA7IpD1HZv/ZfWVkEPlGqG UwSMKYxSxgw/S2WCs/X+yG0kPQNwKja3Dj+QmHKdXixN5nzo/v7p85UsiC8qn8On 5ZfSm2uTrulvtKuQj5LV5XcZbI1+rVRY+4Hqumb6EJgkpqjfATeCJWyO9LOLTuZ4 tdtoK9he3CdFAVXpKrCZFc9mYLD4m64NJ8X4j02jg32Au3BIUGR42GjgvhvrMhzQ jN6Klq9z1gKkvkDdfAH6a0PaWDB5lLXJ76klXP3sLKvBLF6jmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGRq5KgpFdjSyocV2zjxTOq5DqIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjJj NWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2M2ZkMmYvNmIyYzVkNjctYmY1NS00 NTUwLWJlNTktYzFhYTVlNjNmZDJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIyYzVkNjctYmY1NS00NTUwLWJl NTktYzFhYTVlNjNmZDJmLzZiMmM1ZDY3LWJmNTUtNDU1MC1iZTU5LWMxYWE1ZTYz ZmQyZi5jcmwwHwYDVR0jBBgwFoAU0SXgqnpruPPsxgmPReU+0LuatDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFh NWU2M2ZkMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ113J/4Lhn2vJJqSvh1xQ Iy2U4kGekfTpwIUo+KgnPZliyFqW3Z15LWQigz6zWTFjRUwoh1X9JNH7/VbpxOT9 3Hb9fb0c3DdmDgaTjCDMuCiToNaHeqDDQl9cmQeNSAFoOc7wwWUXj+gjGcabfV4j prN4A8B0L0K2n0daCvkiIPTT+mP6a3EcXc0ZRVmBFGefiue7Btpb3tRqvFcxHK65 Y7HnmL8q/0wJ7QwZlRRaLsB3nZup/9dJxkstZBdAzs2L73u9MWEgLuJ41Ic1TaTW 6rwoDKnjGhrsP+zT8GIQz93xyAHdTYW4HPDmObWSDmhoY14q9ABORsVjAF4/ly0J -----END CERTIFICATE-----Generated at Mon May 12 10:43:17 2025 by rpki-client