$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft File: 71effefa-6381-4c3d-8487-95f07e37a7cf.mft (raw, json) Hash identifier: nylw6KQgKP3VKKYhJheIWJtlyUMi/oHddRrj0V1Ml8Q= Subject key identifier: 40:A4:C5:AF:70:F7:4D:C6:2C:78:89:AD:1D:E9:C4:AF:4C:A5:A2:ED Authority key identifier: CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 Certificate issuer: /CN=71effefa-6381-4c3d-8487-95f07e37a7cf Certificate serial: 010D0C9F4328584A5F306995076077FAC62D5B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft Manifest number: 010D0C9F4328584073A84657CD0005EEFC67F28F Signing time: Tue 01 Jul 2025 08:00:03 +0000 Manifest this update: Tue 01 Jul 2025 08:00:03 +0000 Manifest next update: Thu 03 Jul 2025 08:00:00 +0000 Files and hashes: 1: 71effefa-6381-4c3d-8487-95f07e37a7cf.crl (hash: 6nlShd5u9UmUWrcDgo0FdLr+zI5+NGKuldwrwbVpARI=) 2: d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer (hash: MFx/Zq+SYIVCL/sxvVRDYD1z03EMN0j5Nry9JFEDSkA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:30:69:95:07:60:77:fa:c6:2d:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71effefa-6381-4c3d-8487-95f07e37a7cf Validity Not Before: Jul 1 08:00:03 2025 GMT Not After : Jul 3 08:00:00 2025 GMT Subject: CN=2a222ff8-fea9-4e39-8f2c-45a4c7963c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:b9:ba:c6:7e:ea:63:ae:31:36:a6:45:84: 9f:a0:44:60:f8:f4:38:4a:de:74:65:d2:5e:75:cf: 10:fb:21:43:e7:ed:85:27:96:b9:2a:66:80:9d:7f: a1:3a:10:ab:55:89:37:09:5b:19:1e:ca:d8:29:a4: 21:3a:c6:0d:e5:f4:c0:77:bd:29:57:81:b0:00:30: 4e:03:a6:b7:25:13:35:26:04:8d:44:10:df:70:ba: eb:f8:c7:c7:9a:93:1d:23:ad:34:3d:23:10:d4:ef: eb:fe:9e:69:49:f7:5e:d1:9f:b7:ad:14:c8:15:cd: a5:ce:17:a3:d1:7e:b4:90:e6:79:81:30:ed:4f:24: eb:9a:a5:28:9a:fe:38:81:26:84:07:19:9b:d1:17: 1e:2c:59:88:da:ac:eb:91:d0:6c:a1:79:67:9d:47: fc:f1:7d:79:48:d8:67:69:ac:4a:19:a1:1e:04:60: 4f:b6:74:77:e2:b4:39:80:67:62:61:98:85:a0:29: 8d:2c:b1:0e:a4:c5:5c:5e:b5:37:65:37:6e:e4:3d: 0f:3a:75:3f:5f:14:50:70:14:e9:53:3c:4c:9b:f0: 51:ba:91:af:4e:52:05:b3:a6:44:3c:ca:9b:36:62: fa:74:78:51:f8:fb:c5:13:19:0f:8b:27:2c:86:5a: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A4:C5:AF:70:F7:4D:C6:2C:78:89:AD:1D:E9:C4:AF:4C:A5:A2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl X509v3 Authority Key Identifier: keyid:CE:A6:47:53:9D:E0:A3:5D:0D:52:78:87:95:4D:CC:83:F7:33:7F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2a:8f:a1:c2:fb:b4:23:54:1f:78:88:98:c4:c4:0c:d5:3c: a5:42:ea:98:24:89:b1:40:16:79:ad:d4:70:7b:f5:ca:2d:09: d8:5a:5a:49:e3:06:8f:25:4e:bf:19:78:b3:7d:73:1f:6e:e6: 73:e9:71:fd:96:ba:8c:50:33:c7:02:d2:9f:86:e8:12:c2:b8: 83:84:68:d8:3f:6a:92:9f:a5:6d:d4:ac:8c:df:74:7b:28:e6: 4c:57:65:81:b0:8d:c7:72:d3:01:5a:2d:6b:f9:8e:e0:de:c3: 3a:cb:d7:94:9c:47:7b:6c:64:ba:6e:0f:9c:f6:c2:ed:88:17: a4:6e:80:fb:9d:c5:b4:42:6a:47:70:24:10:17:84:bb:be:2e: 0b:d7:be:83:a4:de:2d:14:1e:cd:e8:9a:5d:bd:f5:13:79:ec: 5f:c2:bb:c2:ea:99:30:30:20:2b:15:71:f4:62:88:70:45:c6: 05:e6:cd:b6:c4:3f:53:a3:87:4c:56:8d:c3:6f:f7:33:c2:d8: 26:c7:01:51:22:ec:2a:0d:c4:fc:3a:5c:c1:af:9f:82:ed:e8: 32:40:ac:cc:0e:b9:82:ce:62:44:54:db:a0:d7:e6:34:1d:4b: 13:11:8c:48:52:3e:ad:41:a8:b6:72:12:3a:f0:fd:fe:49:23: dc:59:8d:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfMGmVB2B3+sYtWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFlZmZlZmEtNjM4MS00YzNkLTg0ODctOTVmMDdlMzdh N2NmMB4XDTI1MDcwMTA4MDAwM1oXDTI1MDcwMzA4MDAwMFowLzEtMCsGA1UEAxMk MmEyMjJmZjgtZmVhOS00ZTM5LThmMmMtNDVhNGM3OTYzYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQS5usZ+6mOuMTamRYSfoERg+PQ4St50ZdJe dc8Q+yFD5+2FJ5a5KmaAnX+hOhCrVYk3CVsZHsrYKaQhOsYN5fTAd70pV4GwADBO A6a3JRM1JgSNRBDfcLrr+MfHmpMdI600PSMQ1O/r/p5pSfde0Z+3rRTIFc2lzhej 0X60kOZ5gTDtTyTrmqUomv44gSaEBxmb0RceLFmI2qzrkdBsoXlnnUf88X15SNhn aaxKGaEeBGBPtnR34rQ5gGdiYZiFoCmNLLEOpMVcXrU3ZTdu5D0POnU/XxRQcBTp UzxMm/BRupGvTlIFs6ZEPMqbNmL6dHhR+PvFExkPiycshlrwwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFECkxa9w903GLHiJrR3pxK9MpaLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MWVm ZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYwN2UzN2E3Y2YvNzFlZmZlZmEtNjM4MS00 YzNkLTg0ODctOTVmMDdlMzdhN2NmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzFlZmZlZmEtNjM4MS00YzNkLTg0 ODctOTVmMDdlMzdhN2NmLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi5jcmwwHwYDVR0jBBgwFoAUzqZHU53go10NUniHlU3Mg/czf9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MWVmZmVmYS02MzgxLTRjM2QtODQ4Ny05NWYw N2UzN2E3Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNKo+hwvu0I1QfeIiYxMQM 1TylQuqYJImxQBZ5rdRwe/XKLQnYWlpJ4waPJU6/GXizfXMfbuZz6XH9lrqMUDPH AtKfhugSwriDhGjYP2qSn6Vt1KyM33R7KOZMV2WBsI3HctMBWi1r+Y7g3sM6y9eU nEd7bGS6bg+c9sLtiBekboD7ncW0QmpHcCQQF4S7vi4L176DpN4tFB7N6JpdvfUT eexfwrvC6pkwMCArFXH0YohwRcYF5s22xD9To4dMVo3Db/czwtgmxwFRIuwqDcT8 OlzBr5+C7egyQKzMDrmCzmJEVNug1+Y0HUsTEYxIUj6tQai2chI68P3+SSPcWY0T -----END CERTIFICATE-----Generated at Tue Jul 1 20:53:04 2025 by rpki-client