$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft File: aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft (raw, json) Hash identifier: jprim1dY0RswdM268m49m56BIxn/WPMw177F3DgSlxA= Subject key identifier: 86:F4:A1:0E:DD:38:29:F7:44:55:DC:D2:2A:42:89:63:8E:0F:5B:70 Authority key identifier: D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1 Certificate issuer: /CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1 Certificate serial: 010D0C9F4328584A59D699288BB10E9BA7A50000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft Manifest number: 010D0C9F43285842D92AE02E86CD1681A8C063B6 Signing time: Sun 29 Jun 2025 10:00:03 +0000 Manifest this update: Sun 29 Jun 2025 10:00:03 +0000 Manifest next update: Wed 02 Jul 2025 10:00:00 +0000 Files and hashes: 1: aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl (hash: imtprl4Xx72BfETCG/ZwBJQSRn4AWsc5xxEDNUgaKt8=) 2: fec5555d-db4c-36dd-8f4d-0aefe55de0f8.roa (hash: 9xPshl5LCidL6oKiLTPCaVmY5AVr9OLfl9CRQwMrJaU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:d6:99:28:8b:b1:0e:9b:a7:a5:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa750f8e-a6ce-4a3f-8257-bc12479a72b1 Validity Not Before: Jun 29 10:00:03 2025 GMT Not After : Jul 2 10:00:00 2025 GMT Subject: CN=b4c91425-2fc9-4bf7-9786-a1db8cb47d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5c:db:cd:e4:2a:13:6f:96:20:21:b4:41:17: 1d:31:26:a2:36:54:38:2c:79:8a:9e:73:0e:a5:5a: e2:99:4c:e0:12:c0:04:11:ed:92:22:5a:9b:29:52: b6:6b:6f:4e:52:af:37:ab:de:41:d4:80:25:53:c9: 87:39:8b:aa:c1:cf:3b:d5:32:4b:5b:06:cd:5e:ae: 85:41:04:b9:59:88:74:04:7e:2c:df:12:67:02:fb: 2e:6a:8d:0a:3a:ce:d9:25:2f:45:c1:d1:3a:54:3a: 4c:f3:e9:4e:44:c0:71:b3:7c:50:f5:a4:04:c0:92: af:0d:26:42:6b:b5:4e:d6:2a:1a:4d:2b:be:d6:f6: a7:e0:e0:42:1d:41:1f:c0:bd:5c:dd:7a:c7:96:50: d5:41:7a:09:da:a4:5d:1a:ed:88:54:3f:9c:66:c2: c4:db:00:ae:8e:7f:40:32:f2:55:0a:3e:b4:be:13: 0e:91:f8:16:83:73:e5:1d:37:99:33:34:c8:63:4a: 79:5c:92:e7:19:92:2f:03:4f:24:b8:7c:ce:27:81: 01:c1:3b:10:b5:7b:5d:78:ee:e3:b4:ec:31:fe:b2: 5c:5d:51:3c:7e:dc:46:ab:1c:71:2a:6c:b5:2b:91: 92:9e:bf:17:28:d3:63:fc:4b:25:c8:4e:7b:17:6f: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:A1:0E:DD:38:29:F7:44:55:DC:D2:2A:42:89:63:8E:0F:5B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.crl X509v3 Authority Key Identifier: keyid:D7:16:B1:3C:45:DF:41:9A:DC:28:CA:D8:B1:30:C0:CB:BA:9F:C4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa750f8e-a6ce-4a3f-8257-bc12479a72b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7b:dc:8b:a3:ce:51:c6:91:39:c4:6d:7f:44:c7:e4:01:bc: 77:a7:26:36:12:02:66:f0:51:89:8a:ad:15:75:80:79:fc:30: 31:96:66:d7:c9:94:88:55:3f:4c:26:0b:2e:c9:b6:bb:a5:d3: 5c:21:5c:ae:92:52:c2:e8:2d:9e:89:e6:1d:6d:64:ff:c3:4a: 95:ef:bf:b0:5e:d1:60:a5:34:80:09:05:a3:9b:a6:b2:99:aa: 31:90:f9:64:fb:fa:a4:df:5e:32:bf:f4:08:ae:5c:fe:64:19: 13:aa:1a:9a:46:98:e9:e6:22:44:d2:10:16:4f:9c:f9:00:81: 81:b8:1a:07:b4:86:94:cd:83:97:60:9a:6f:2d:a8:76:25:85: 55:f3:b5:46:6b:d4:df:8d:7c:8d:54:e9:a4:55:9e:6c:0b:3f: 55:ed:50:66:84:2c:19:de:19:8d:f8:9a:d4:45:83:a6:37:48: 93:9f:c0:37:cf:6f:07:5e:2b:88:8f:a4:95:d1:20:9e:2e:c7: bc:20:f0:d5:eb:19:09:57:b5:38:3c:93:4a:df:00:59:5c:88: 81:89:bf:a8:50:ec:cf:28:95:d2:57:7b:73:8e:7a:dd:ca:75: e9:a3:b9:9b:60:91:3d:87:68:15:01:ae:67:0d:89:a2:aa:0d: be:0f:6c:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZ1pkoi7EOm6elAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE3NTBmOGUtYTZjZS00YTNmLTgyNTctYmMxMjQ3OWE3 MmIxMB4XDTI1MDYyOTEwMDAwM1oXDTI1MDcwMjEwMDAwMFowLzEtMCsGA1UEAxMk YjRjOTE0MjUtMmZjOS00YmY3LTk3ODYtYTFkYjhjYjQ3ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1zbzeQqE2+WICG0QRcdMSaiNlQ4LHmKnnMO pVrimUzgEsAEEe2SIlqbKVK2a29OUq83q95B1IAlU8mHOYuqwc871TJLWwbNXq6F QQS5WYh0BH4s3xJnAvsuao0KOs7ZJS9FwdE6VDpM8+lORMBxs3xQ9aQEwJKvDSZC a7VO1ioaTSu+1van4OBCHUEfwL1c3XrHllDVQXoJ2qRdGu2IVD+cZsLE2wCujn9A MvJVCj60vhMOkfgWg3PlHTeZMzTIY0p5XJLnGZIvA08kuHzOJ4EBwTsQtXtdeO7j tOwx/rJcXVE8ftxGqxxxKmy1K5GSnr8XKNNj/EslyE57F2+TzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIb0oQ7dOCn3RFXc0ipCiWOOD1twMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1 MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEyNDc5YTcyYjEvYWE3NTBmOGUtYTZjZS00 YTNmLTgyNTctYmMxMjQ3OWE3MmIxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE3NTBmOGUtYTZjZS00YTNmLTgy NTctYmMxMjQ3OWE3MmIxL2FhNzUwZjhlLWE2Y2UtNGEzZi04MjU3LWJjMTI0Nzlh NzJiMS5jcmwwHwYDVR0jBBgwFoAU1xaxPEXfQZrcKMrYsTDAy7qfxNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTc1MGY4ZS1hNmNlLTRhM2YtODI1Ny1iYzEy NDc5YTcyYjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAje9yLo85RxpE5xG1/RMfk Abx3pyY2EgJm8FGJiq0VdYB5/DAxlmbXyZSIVT9MJgsuyba7pdNcIVyuklLC6C2e ieYdbWT/w0qV77+wXtFgpTSACQWjm6aymaoxkPlk+/qk314yv/QIrlz+ZBkTqhqa Rpjp5iJE0hAWT5z5AIGBuBoHtIaUzYOXYJpvLah2JYVV87VGa9TfjXyNVOmkVZ5s Cz9V7VBmhCwZ3hmN+JrURYOmN0iTn8A3z28HXiuIj6SV0SCeLse8IPDV6xkJV7U4 PJNK3wBZXIiBib+oUOzPKJXSV3tzjnrdynXpo7mbYJE9h2gVAa5nDYmiqg2+D2y3 -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:53 2025 by rpki-client