$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft File: 5cab4920-f916-4f6e-89be-328cbbe66f94.mft (raw, json) Hash identifier: S8XXND4HV0Rp4H8S8yz6wBSwZRELNz5vcb7N3UBtAgc= Subject key identifier: 4B:2A:86:E0:85:E7:A0:F9:DE:45:81:83:F6:80:44:4F:5F:E2:DB:5D Authority key identifier: EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16 Certificate issuer: /CN=5cab4920-f916-4f6e-89be-328cbbe66f94 Certificate serial: 010D0C9F4328584A5A2FF9CA6259881DFC784080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft Manifest number: 010D0C9F432858449B0A4015E173972293FC8B9C Signing time: Sun 29 Jun 2025 13:00:08 +0000 Manifest this update: Sun 29 Jun 2025 13:00:08 +0000 Manifest next update: Tue 01 Jul 2025 13:00:00 +0000 Files and hashes: 1: 41dcca07-860f-381f-8c2a-e453ea6881d3.roa (hash: GGCHAeoB+qC3ze2CqH1oLgnogfbSKYSZjDY82H4wOU8=) 2: 5cab4920-f916-4f6e-89be-328cbbe66f94.crl (hash: ZymCf7PG6PgwpmwaZhgjH1fq62nOyTfBHVgphZtbhA0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:2f:f9:ca:62:59:88:1d:fc:78:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cab4920-f916-4f6e-89be-328cbbe66f94 Validity Not Before: Jun 29 13:00:08 2025 GMT Not After : Jul 1 13:00:00 2025 GMT Subject: CN=88de34b4-4c6b-426a-9265-2c6ebde8c656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:05:ec:3b:19:cc:f2:45:4e:4f:f7:94:6b: b8:11:79:2d:14:7f:2f:93:93:9e:d7:c2:f0:bd:10: 0a:4e:e1:8b:db:fe:81:45:6e:94:2b:5d:cb:d2:21: dd:80:cd:96:40:c4:b5:d1:ed:c6:40:ca:ca:26:97: 14:2f:34:01:f9:3a:73:c1:6e:b8:4e:92:16:5c:30: bd:78:2a:7a:9d:28:d6:bb:b0:35:01:cd:6a:3b:4d: 76:4b:0b:7d:11:f8:1f:e1:b0:19:93:57:d7:a8:82: 5b:f3:f2:d9:4e:80:a3:8e:5f:bb:db:2a:f4:44:c6: 0f:2d:4d:dd:d5:b1:89:5c:6d:6d:de:b0:d4:57:0e: 37:21:1f:58:57:6e:dd:d6:ba:6c:ce:f0:27:81:2d: f9:3b:24:8f:e8:a2:e5:67:cf:a6:57:1d:7a:8e:25: 3e:ec:05:1f:d0:ed:aa:5c:55:ff:5a:84:52:10:15: 00:7c:0e:3d:39:25:4f:eb:2a:e3:0e:b8:eb:d3:19: f9:c8:9a:bd:22:f7:d0:53:bb:91:8e:1a:53:6f:b5: e3:cf:68:8d:ff:92:23:11:03:86:f7:4e:a0:1c:e1: 5d:83:5c:83:47:c8:75:0d:9a:a8:f4:2f:a8:64:66: 9c:8b:47:7d:57:a1:e8:5a:54:0a:00:5e:29:10:34: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2A:86:E0:85:E7:A0:F9:DE:45:81:83:F6:80:44:4F:5F:E2:DB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl X509v3 Authority Key Identifier: keyid:EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c5:79:39:36:c7:81:c7:94:d3:92:01:30:16:e6:b6:5f:54: af:2a:88:e2:3e:9a:a3:dd:da:03:6c:63:d3:95:90:11:47:df: bf:89:e1:84:92:54:60:3d:a4:cb:c2:15:cd:93:b5:c7:57:eb: f9:26:8e:02:07:36:75:d7:cc:6a:39:19:d9:8f:03:f0:0e:99: 86:97:73:60:dc:2f:00:62:cf:70:4f:b3:bc:2b:e8:c3:73:68: a5:2d:f6:28:c5:bc:61:27:c9:4f:26:a2:7f:c1:f6:ec:af:28: e9:91:6c:0a:1d:8f:71:bb:69:1d:77:7b:bc:7e:9f:7a:81:ae: 88:2a:a5:65:da:8d:8b:1f:45:7a:70:78:5e:a8:93:4a:da:cb: 44:59:eb:76:31:38:71:43:f5:df:20:7b:26:73:1c:60:1d:df: 8e:66:b8:70:f7:4d:a0:67:70:a3:94:d6:af:eb:fb:ee:f8:3c: 19:f0:72:da:20:0b:c4:a3:7f:3f:3f:0b:59:d8:91:5a:91:5e: 2d:41:4a:97:e2:e7:e4:17:8f:a7:da:c4:86:2b:31:46:fe:c1: b6:f0:74:50:60:f5:06:e3:32:cf:6e:d9:72:7f:db:fe:27:62: bd:da:8c:11:72:01:b5:90:9d:87:e7:39:8f:71:1a:43:a5:65: 95:a3:c7:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaL/nKYlmIHfx4QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhYjQ5MjAtZjkxNi00ZjZlLTg5YmUtMzI4Y2JiZTY2 Zjk0MB4XDTI1MDYyOTEzMDAwOFoXDTI1MDcwMTEzMDAwMFowLzEtMCsGA1UEAxMk ODhkZTM0YjQtNGM2Yi00MjZhLTkyNjUtMmM2ZWJkZThjNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPIF7DsZzPJFTk/3lGu4EXktFH8vk5Oe18Lw vRAKTuGL2/6BRW6UK13L0iHdgM2WQMS10e3GQMrKJpcULzQB+TpzwW64TpIWXDC9 eCp6nSjWu7A1Ac1qO012Swt9Efgf4bAZk1fXqIJb8/LZToCjjl+72yr0RMYPLU3d 1bGJXG1t3rDUVw43IR9YV27d1rpszvAngS35OySP6KLlZ8+mVx16jiU+7AUf0O2q XFX/WoRSEBUAfA49OSVP6yrjDrjr0xn5yJq9IvfQU7uRjhpTb7Xjz2iN/5IjEQOG 906gHOFdg1yDR8h1DZqo9C+oZGaci0d9V6HoWlQKAF4pEDTO6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEsqhuCF56D53kWBg/aARE9f4ttdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Fi NDkyMC1mOTE2LTRmNmUtODliZS0zMjhjYmJlNjZmOTQvNWNhYjQ5MjAtZjkxNi00 ZjZlLTg5YmUtMzI4Y2JiZTY2Zjk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNhYjQ5MjAtZjkxNi00ZjZlLTg5 YmUtMzI4Y2JiZTY2Zjk0LzVjYWI0OTIwLWY5MTYtNGY2ZS04OWJlLTMyOGNiYmU2 NmY5NC5jcmwwHwYDVR0jBBgwFoAU607OeNfdcGN4vMRXxIsGXwoyZhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2FiNDkyMC1mOTE2LTRmNmUtODliZS0zMjhj YmJlNjZmOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTxXk5NseBx5TTkgEwFua2 X1SvKojiPpqj3doDbGPTlZARR9+/ieGEklRgPaTLwhXNk7XHV+v5Jo4CBzZ118xq ORnZjwPwDpmGl3Ng3C8AYs9wT7O8K+jDc2ilLfYoxbxhJ8lPJqJ/wfbsryjpkWwK HY9xu2kdd3u8fp96ga6IKqVl2o2LH0V6cHheqJNK2stEWet2MThxQ/XfIHsmcxxg Hd+OZrhw902gZ3CjlNav6/vu+DwZ8HLaIAvEo38/PwtZ2JFakV4tQUqX4ufkF4+n 2sSGKzFG/sG28HRQYPUG4zLPbtlyf9v+J2K92owRcgG1kJ2H5zmPcRpDpWWVo8dS -----END CERTIFICATE-----Generated at Sun Jun 29 19:44:28 2025 by rpki-client