$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft File: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft (raw, json) Hash identifier: vd85FhsMvrGTutyuv7Ass2KoKznyl/f8SBSFOXYWLFU= Subject key identifier: 6D:67:78:B9:07:D4:46:04:0D:F2:DA:70:FB:65:86:38:C2:FB:E3:EE Authority key identifier: 33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 Certificate issuer: /CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Certificate serial: 010D0C9F4328584A59B8D3170F5709A9B9B520C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft Manifest number: 010D0C9F432858425E3306748870EF88DC1C8FDC Signing time: Sun 29 Jun 2025 09:00:03 +0000 Manifest this update: Sun 29 Jun 2025 09:00:03 +0000 Manifest next update: Wed 02 Jul 2025 09:00:00 +0000 Files and hashes: 1: aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl (hash: Ly7p385Ojdlp7YKsujrQdx5isnm8GzB499j/ACIvTBo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:b8:d3:17:0f:57:09:a9:b9:b5:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2 Validity Not Before: Jun 29 09:00:03 2025 GMT Not After : Jul 2 09:00:00 2025 GMT Subject: CN=70b405d5-3a84-4e90-bf56-dd231b8e98e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:aa:23:70:c7:fd:f0:fd:cb:df:79:f7:66: 37:ae:04:ae:fc:c7:e9:f8:71:e2:9e:6e:0b:3e:77: 0d:c9:c8:c8:14:ea:7d:e7:37:42:51:4c:ca:13:74: 56:59:5a:96:3d:1f:50:ba:c0:c6:59:0e:a1:02:d6: fd:13:a2:2d:39:9d:63:c3:73:42:e9:55:62:b0:d8: 3d:54:ce:d3:b6:20:b8:8f:bf:2a:10:b2:34:12:29: 51:e2:83:49:72:5f:95:d6:cb:da:a8:7d:1f:8b:20: 2e:9b:e7:77:b8:5a:f9:82:e4:85:7f:b1:f6:27:5a: e1:47:45:40:ff:23:51:be:be:e2:60:31:ed:33:64: 03:dc:e7:09:3b:a9:fa:de:2d:86:a3:65:d7:8c:6d: 77:9d:1d:d8:62:19:a6:41:51:d1:87:fb:fb:57:f2: b5:f8:43:8b:80:52:0f:bf:ee:41:e9:98:0b:71:b0: bd:9a:d6:52:ba:ff:f2:03:e7:45:1e:ec:00:f9:cd: 77:bb:f8:08:ff:48:ea:cf:d8:d5:cd:8f:2f:04:e9: df:ae:dd:ce:98:0d:46:fa:d1:de:07:a6:93:28:21: 3d:ce:9e:30:47:69:18:c4:59:b7:6f:fd:25:b9:df: 57:a8:f2:da:c5:35:aa:a6:98:8b:4f:03:b5:44:86: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:67:78:B9:07:D4:46:04:0D:F2:DA:70:FB:65:86:38:C2:FB:E3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.crl X509v3 Authority Key Identifier: keyid:33:67:08:05:95:F8:CB:22:BC:11:35:A5:B5:3E:0F:59:0F:DA:FD:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aa9848ad-5ef9-48b1-91c5-7faf69e9f6a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4e:89:0d:b3:48:90:e4:a6:e4:ce:dd:de:65:a3:29:ec:6e: 95:e1:18:d1:1b:7a:f1:fd:b2:36:73:ea:e9:b5:6c:f3:81:5f: b6:1a:c5:e5:2e:e6:a2:75:90:b1:04:d6:6b:b4:40:4f:b1:39: f6:35:56:57:53:11:6d:1c:1a:d5:5c:28:2b:a7:05:aa:fb:6e: 96:fa:04:f1:81:59:4d:d7:14:e4:39:07:55:0e:1b:b3:a1:9a: 21:80:bd:72:87:23:ad:b1:c2:c4:d6:60:af:4b:98:aa:ad:b6: 76:12:98:c4:98:4b:7d:ac:f1:9c:25:20:60:a4:dc:6b:ed:66: 22:e1:0b:a8:32:d0:d3:16:88:3c:68:3e:18:2d:e4:d4:e3:8c: ed:13:bc:f1:3e:73:4e:6f:57:e7:a6:47:0a:32:ab:b3:06:83: bd:6a:6b:d6:5f:53:81:29:42:f6:ff:3d:68:41:c7:48:a9:d0: ba:65:61:ff:e1:0e:49:ac:4f:4f:9e:9e:05:a3:a1:ae:dd:f8: f8:1b:ed:5e:22:5a:00:78:ca:88:d5:7f:db:a2:c1:00:4e:87: 3d:a6:8f:24:c2:f1:8c:2d:a5:ab:3a:b1:a7:47:e1:75:ce:d0: 81:4c:ce:9d:13:22:91:8a:4d:be:b0:44:0c:8c:c0:06:a1:ab: 06:13:68:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZuNMXD1cJqbm1IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ODQ4YWQtNWVmOS00OGIxLTkxYzUtN2ZhZjY5ZTlm NmEyMB4XDTI1MDYyOTA5MDAwM1oXDTI1MDcwMjA5MDAwMFowLzEtMCsGA1UEAxMk NzBiNDA1ZDUtM2E4NC00ZTkwLWJmNTYtZGQyMzFiOGU5OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunWqI3DH/fD9y99592Y3rgSu/Mfp+HHinm4L PncNycjIFOp95zdCUUzKE3RWWVqWPR9QusDGWQ6hAtb9E6ItOZ1jw3NC6VVisNg9 VM7TtiC4j78qELI0EilR4oNJcl+V1svaqH0fiyAum+d3uFr5guSFf7H2J1rhR0VA /yNRvr7iYDHtM2QD3OcJO6n63i2Go2XXjG13nR3YYhmmQVHRh/v7V/K1+EOLgFIP v+5B6ZgLcbC9mtZSuv/yA+dFHuwA+c13u/gI/0jqz9jVzY8vBOnfrt3OmA1G+tHe B6aTKCE9zp4wR2kYxFm3b/0lud9XqPLaxTWqppiLTwO1RIYj+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG1neLkH1EYEDfLacPtlhjjC++PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4 NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFmNjllOWY2YTIvYWE5ODQ4YWQtNWVmOS00 OGIxLTkxYzUtN2ZhZjY5ZTlmNmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWE5ODQ4YWQtNWVmOS00OGIxLTkx YzUtN2ZhZjY5ZTlmNmEyL2FhOTg0OGFkLTVlZjktNDhiMS05MWM1LTdmYWY2OWU5 ZjZhMi5jcmwwHwYDVR0jBBgwFoAUM2cIBZX4yyK8ETWltT4PWQ/a/XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYTk4NDhhZC01ZWY5LTQ4YjEtOTFjNS03ZmFm NjllOWY2YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcTokNs0iQ5Kbkzt3eZaMp 7G6V4RjRG3rx/bI2c+rptWzzgV+2GsXlLuaidZCxBNZrtEBPsTn2NVZXUxFtHBrV XCgrpwWq+26W+gTxgVlN1xTkOQdVDhuzoZohgL1yhyOtscLE1mCvS5iqrbZ2EpjE mEt9rPGcJSBgpNxr7WYi4QuoMtDTFog8aD4YLeTU44ztE7zxPnNOb1fnpkcKMquz BoO9amvWX1OBKUL2/z1oQcdIqdC6ZWH/4Q5JrE9Pnp4Fo6Gu3fj4G+1eIloAeMqI 1X/bosEAToc9po8kwvGMLaWrOrGnR+F1ztCBTM6dEyKRik2+sEQMjMAGoasGE2jn -----END CERTIFICATE-----Generated at Mon Jun 30 00:50:01 2025 by rpki-client