$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft File: 8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft (raw, json) Hash identifier: wlwBaTALGWK3YdZDz7lYLA5mJG8OB+rTlijcD4K3Bt4= Subject key identifier: 36:91:22:3B:48:C3:4B:93:B0:DE:55:34:EA:EC:53:24:68:2A:59:F7 Authority key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Certificate issuer: /CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Certificate serial: 010D0C9F4328584A5E5FF5B42B7BF16E7BB17EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft Manifest number: 010D0C9F4328584073A83450E63A56FB23244E23 Signing time: Tue 01 Jul 2025 01:00:03 +0000 Manifest this update: Tue 01 Jul 2025 01:00:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: 5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa (hash: 592M7qtYiDL0itfxwgvzCMCzyR9JkptX+5nDOl7k/l8=) 2: 8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl (hash: 5dHPyiOQm/qRBqkpE6VVk+4yO9RXRn2+l/4VN1UltkI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:5f:f5:b4:2b:7b:f1:6e:7b:b1:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Validity Not Before: Jul 1 01:00:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=b7a477e5-3d81-4cf4-a9de-334f31a3d3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:10:21:63:41:22:a0:bb:17:43:1e:0e:5c: eb:ca:5a:f0:92:0e:96:a5:23:20:58:e3:d9:32:7f: 87:61:1a:2b:a3:6c:03:f8:d2:cc:2e:69:07:9c:34: 54:9d:41:ff:c1:67:f5:21:2c:ea:25:74:2d:fe:68: ce:9b:81:e4:2e:ec:68:ac:99:da:46:df:54:88:84: a9:4e:30:a4:f2:07:81:95:85:79:18:c8:70:15:c8: e6:85:a3:9b:4b:3a:63:2f:0a:24:d3:23:f0:29:a9: ea:79:f3:80:36:74:8d:e8:df:ff:73:bd:32:fe:c4: f8:80:75:57:2f:75:e1:2c:9e:27:20:f8:9f:20:bd: f4:10:47:49:90:2a:f6:7a:71:b9:a6:64:40:ca:8b: b5:2d:ab:1a:5e:89:8f:aa:ae:21:0d:5e:17:1d:ae: 09:89:0d:84:e6:ea:7a:a0:82:ef:e0:16:de:3b:75: 7b:cd:d1:b6:06:01:b7:c6:b9:61:34:9f:d4:8c:1c: 05:f8:f4:85:7d:c1:49:a8:43:6f:96:06:6e:ce:0e: 3d:2e:99:a3:e4:7b:d6:be:99:b4:1b:d9:ce:89:13: 57:1f:c7:93:81:f9:23:6f:2a:b4:6c:23:28:bb:ae: dc:5b:ee:59:77:ec:08:6d:4a:0a:83:f7:20:3c:d4: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:91:22:3B:48:C3:4B:93:B0:DE:55:34:EA:EC:53:24:68:2A:59:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl X509v3 Authority Key Identifier: keyid:B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:81:73:e2:3e:5c:34:05:8c:93:cf:e1:ff:7b:b9:b2:22:99: 86:18:04:7e:04:34:26:91:84:d1:7c:05:d8:8c:cc:e9:a7:2a: ee:e5:20:6e:5d:a5:5f:df:ce:8e:7e:bc:a5:71:f8:02:b2:a9: ac:2d:6c:fb:4f:4c:31:cc:a3:e8:0b:db:b6:74:d4:31:cc:04: 94:a6:d7:c4:6c:8f:45:8d:7c:df:fb:6e:60:c2:8a:4e:d5:74: 0d:66:cb:46:cb:3c:38:61:cc:c3:46:93:2f:df:20:b6:e6:63: f4:bc:2f:81:76:64:f3:26:f7:52:bd:d9:e1:b7:e5:9f:d3:7b: 82:32:29:da:b6:ea:c6:d9:ed:58:3b:75:3d:0e:d9:73:46:57: 3d:e0:ab:c9:62:d8:d5:0a:35:39:4f:56:31:9a:eb:c0:dd:a7: ad:a9:be:21:2d:be:f7:ea:7f:63:11:3f:ca:c3:1b:9a:45:d3: 9a:d6:93:2b:62:40:18:71:97:8e:0f:a4:c4:a9:f2:e1:58:c6: 4a:be:7c:04:49:db:7c:c6:a6:0c:a0:95:b2:95:58:a8:c8:06: 9d:7f:2f:c0:f2:40:d4:87:ac:07:ad:ba:10:2e:a0:07:5c:c0: 84:cc:64:4b:04:ac:b0:2a:85:6c:fd:50:7b:54:59:d1:e3:ec: dc:5d:c4:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeX/W0K3vxbnuxfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMw ZDRjMB4XDTI1MDcwMTAxMDAwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk YjdhNDc3ZTUtM2Q4MS00Y2Y0LWE5ZGUtMzM0ZjMxYTNkM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15QQIWNBIqC7F0MeDlzrylrwkg6WpSMgWOPZ Mn+HYRoro2wD+NLMLmkHnDRUnUH/wWf1ISzqJXQt/mjOm4HkLuxorJnaRt9UiISp TjCk8geBlYV5GMhwFcjmhaObSzpjLwok0yPwKanqefOANnSN6N//c70y/sT4gHVX L3XhLJ4nIPifIL30EEdJkCr2enG5pmRAyou1LasaXomPqq4hDV4XHa4JiQ2E5up6 oILv4BbeO3V7zdG2BgG3xrlhNJ/UjBwF+PSFfcFJqENvlgZuzg49Lpmj5HvWvpm0 G9nOiRNXH8eTgfkjbyq0bCMou67cW+5Zd+wIbUoKg/cgPNSwawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDaRIjtIw0uTsN5VNOrsUyRoKln3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVh YzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvOGU1YWM1YmQtMjZjOC00 ZWNhLTlmMTUtZmQyMzI3NmMwZDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGU1YWM1YmQtMjZjOC00ZWNhLTlm MTUtZmQyMzI3NmMwZDRjLzhlNWFjNWJkLTI2YzgtNGVjYS05ZjE1LWZkMjMyNzZj MGQ0Yy5jcmwwHwYDVR0jBBgwFoAUsyfIbi8GrE6uYl00Q/S49eYKbJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIz Mjc2YzBkNGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABgXPiPlw0BYyTz+H/e7my IpmGGAR+BDQmkYTRfAXYjMzppyru5SBuXaVf386OfrylcfgCsqmsLWz7T0wxzKPo C9u2dNQxzASUptfEbI9FjXzf+25gwopO1XQNZstGyzw4YczDRpMv3yC25mP0vC+B dmTzJvdSvdnht+Wf03uCMinaturG2e1YO3U9DtlzRlc94KvJYtjVCjU5T1YxmuvA 3aetqb4hLb736n9jET/KwxuaRdOa1pMrYkAYcZeOD6TEqfLhWMZKvnwESdt8xqYM oJWylVioyAadfy/A8kDUh6wHrboQLqAHXMCEzGRLBKywKoVs/VB7VFnR4+zcXcT3 -----END CERTIFICATE-----Generated at Tue Jul 1 05:10:21 2025 by rpki-client