$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: xgi/cmSJpVGQVcTYPVJj/RvfT7m9ygBU8QSKH6DjTDs= Subject key identifier: 55:EA:5D:23:AE:58:E3:87:B8:4B:D3:F4:B9:EB:CB:D2:6E:F2:E6:14 Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584A5EF4E3EF0C499CE7B560D980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88C8D Signing time: Tue 01 Jul 2025 06:00:08 +0000 Manifest this update: Tue 01 Jul 2025 06:00:08 +0000 Manifest next update: Thu 03 Jul 2025 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: LP+l3TwtRnYcbwPjkIi4zuorbDpENGB6CnPSvyIE2ZA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:f4:e3:ef:0c:49:9c:e7:b5:60:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Jul 1 06:00:08 2025 GMT Not After : Jul 3 06:00:00 2025 GMT Subject: CN=fec51784-be0e-4197-b7bc-e5bcfb78db7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:18:54:2e:7f:21:66:f8:7c:a5:c7:5a:96: 74:6d:7b:e2:f6:30:be:22:b0:04:1e:46:b4:a1:6d: bb:8f:f8:04:13:6a:18:6f:61:d4:a8:f3:f7:e0:53: 6d:41:61:8c:d3:de:b0:3f:51:63:e2:a5:e3:1f:01: d6:64:5b:35:40:e1:94:61:70:94:95:d5:d4:6e:09: e4:a5:01:b2:17:79:0d:78:75:15:d0:7e:c4:57:27: 4e:75:d3:67:64:89:70:87:9d:66:76:8a:b2:c4:2a: c5:85:38:21:0a:07:c8:5a:01:da:1d:10:3a:83:7a: dc:fd:64:92:5b:16:ee:f2:a1:90:68:43:6f:c4:eb: 3c:da:f3:33:f0:28:65:f9:fc:4f:91:5d:a9:68:56: 79:b0:9e:8b:cc:b3:13:3a:06:ef:e7:7a:0e:98:0d: 7a:2a:c0:75:de:65:be:66:b4:07:61:85:97:0e:11: cf:0a:45:b6:82:80:4d:f2:83:5d:fb:ac:34:3a:f5: 97:5e:e8:8a:ea:8e:87:69:f7:bb:89:32:cd:34:51: a3:89:e9:ec:02:61:8a:6a:50:f1:14:11:7b:ab:b8: 75:b6:95:3f:cf:8c:41:d0:87:0e:d3:5b:da:d4:f0: 12:f7:65:72:7b:b8:4b:dc:d8:67:34:d7:7a:5f:91: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EA:5D:23:AE:58:E3:87:B8:4B:D3:F4:B9:EB:CB:D2:6E:F2:E6:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f0:2d:a1:38:8b:77:1c:4d:45:6f:b3:a8:70:00:31:38:28: d1:ac:86:85:3c:eb:cf:2c:5b:02:23:10:43:0a:e8:05:3c:c7: 04:e9:96:5c:2a:de:a3:8d:e7:1d:77:01:b4:96:be:8f:ba:13: 78:89:2a:2c:ce:4a:3d:5d:c1:c3:e3:82:93:c0:44:64:2c:b5: 67:6d:8f:27:f3:42:b8:17:66:09:bb:5b:1c:5f:c5:8c:17:df: d0:57:db:f3:e7:c1:4f:be:76:fb:19:c8:ee:90:5d:3a:23:d5: ce:64:c9:1c:67:0a:61:1d:ba:8d:08:fc:ee:52:63:04:31:ca: 19:6e:6b:d8:9b:9b:3f:79:1e:e8:53:d0:4b:86:fd:7c:a5:6f: 53:20:f1:46:dd:f1:58:9b:7b:e1:23:5b:c2:73:ec:d6:55:2b: 39:bc:7f:de:81:d2:28:94:eb:b3:44:5e:60:8c:99:77:d8:7d: 9e:98:12:23:2e:36:25:fb:00:34:b9:83:ec:1b:1e:e3:b2:60: bb:76:c0:87:84:f0:33:c4:81:ed:07:bd:a9:72:78:81:d8:fc: dd:25:80:f4:92:e9:4b:7f:b1:9e:b0:bb:fe:23:13:b5:6a:17: 01:74:51:be:72:0a:c4:3b:e3:3c:2b:17:09:32:6e:af:98:11: a6:2e:7e:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpe9OPvDEmc57Vg2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI1MDcwMTA2MDAwOFoXDTI1MDcwMzA2MDAwMFowLzEtMCsGA1UEAxMk ZmVjNTE3ODQtYmUwZS00MTk3LWI3YmMtZTViY2ZiNzhkYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUMYVC5/IWb4fKXHWpZ0bXvi9jC+IrAEHka0 oW27j/gEE2oYb2HUqPP34FNtQWGM096wP1Fj4qXjHwHWZFs1QOGUYXCUldXUbgnk pQGyF3kNeHUV0H7EVydOddNnZIlwh51mdoqyxCrFhTghCgfIWgHaHRA6g3rc/WSS Wxbu8qGQaENvxOs82vMz8Chl+fxPkV2paFZ5sJ6LzLMTOgbv53oOmA16KsB13mW+ ZrQHYYWXDhHPCkW2goBN8oNd+6w0OvWXXuiK6o6Hafe7iTLNNFGjiensAmGKalDx FBF7q7h1tpU/z4xB0IcO01va1PAS92Vye7hL3NhnNNd6X5ElrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFXqXSOuWOOHuEvT9Lnry9Ju8uYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCm8C2hOIt3HE1Fb7OocAAx OCjRrIaFPOvPLFsCIxBDCugFPMcE6ZZcKt6jjecddwG0lr6PuhN4iSoszko9XcHD 44KTwERkLLVnbY8n80K4F2YJu1scX8WMF9/QV9vz58FPvnb7GcjukF06I9XOZMkc ZwphHbqNCPzuUmMEMcoZbmvYm5s/eR7oU9BLhv18pW9TIPFG3fFYm3vhI1vCc+zW VSs5vH/egdIolOuzRF5gjJl32H2emBIjLjYl+wA0uYPsGx7jsmC7dsCHhPAzxIHt B72pcniB2PzdJYD0kulLf7GesLv+IxO1ahcBdFG+cgrEO+M8KxcJMm6vmBGmLn4H -----END CERTIFICATE-----Generated at Wed Jul 2 04:23:26 2025 by rpki-client