$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft File: 0b291a85-da3e-420d-8e7f-61b66b323402.mft (raw, json) Hash identifier: issXYyX9Uvw3viwLBsScef+dZ3GrxW4BlBjicWKeXb0= Subject key identifier: AC:66:69:21:FF:0F:0E:F7:32:AA:4C:44:70:54:FA:9C:19:B3:12:38 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584A5EF4E54F614E981108DFC080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft Manifest number: 010D0C9F4328584703143B112F9C890ADBF4F6BB Signing time: Tue 01 Jul 2025 06:00:08 +0000 Manifest this update: Tue 01 Jul 2025 06:00:08 +0000 Manifest next update: Fri 04 Jul 2025 06:00:00 +0000 Files and hashes: 1: 0b291a85-da3e-420d-8e7f-61b66b323402.crl (hash: TEb6j6DI9C+jN0tACEFK1kEr85pxveBXQzZIN6ZnmY0=) 2: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (hash: g8DsAaYttgaGJI4ikl9exqiW1E6zyY9fnA1zVWWFpyI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:f4:e5:4f:61:4e:98:11:08:df:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Jul 1 06:00:08 2025 GMT Not After : Jul 4 06:00:00 2025 GMT Subject: CN=5d7407e5-8e6c-40be-9797-686fdb890f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:69:5b:5b:3b:16:09:e1:91:4a:d8:c7:23:07: 65:10:58:f1:c6:95:6c:5e:28:c1:83:2a:15:06:a9: 14:7f:d3:eb:90:4e:8f:b2:90:65:ed:e1:8f:7f:d0: f4:c9:59:16:24:e4:10:1b:82:b9:a9:d9:73:a4:7d: 54:ab:05:88:79:9f:bb:2a:8e:6f:93:77:96:56:be: 8e:da:ee:3c:97:91:d3:1f:14:50:7a:d2:5a:05:a2: 2e:a3:47:23:fc:4e:22:e1:65:cb:dd:f3:37:4e:ea: 73:20:f0:d1:5a:5a:26:95:bf:26:94:a7:f8:01:a2: d7:11:d2:c0:53:b7:88:91:31:62:29:32:28:d5:24: 61:f9:10:8f:01:96:f4:d7:6b:ad:45:0f:77:96:28: 18:0b:3e:aa:2e:5a:ed:a6:d8:ba:76:8c:a2:09:a9: 7a:1c:24:62:f1:7b:b0:e2:48:53:29:73:1e:5d:04: e4:25:1a:fa:bf:55:c8:cc:21:11:1e:75:2c:a9:68: 70:ad:6b:50:ed:f1:16:e0:dd:e7:65:dc:27:6a:bd: fa:3e:9d:f1:b0:b2:64:80:c1:f5:7f:dc:45:59:f9: f9:58:b5:85:0d:dd:54:29:17:c7:ce:29:80:61:21: eb:d4:95:95:58:2b:35:70:93:93:e4:c1:ce:f2:06: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:69:21:FF:0F:0E:F7:32:AA:4C:44:70:54:FA:9C:19:B3:12:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d1:a9:21:5d:36:78:10:e5:9f:80:a9:6a:2d:63:af:cc:01: 5e:2b:29:d3:8b:48:91:0d:32:81:7e:bc:3a:b1:dc:28:a0:d8: a6:72:27:2f:78:f1:e2:5d:3d:32:28:84:9f:53:07:5c:c7:6e: 79:61:89:b6:9c:c1:0c:32:a6:83:7c:e9:ba:9a:68:8b:53:f8: fb:e5:29:cd:a8:e6:8a:53:84:b1:11:90:89:e0:fb:7e:59:77: 7d:00:71:d1:8a:57:c9:a8:ef:7a:2d:bd:a5:1b:21:92:71:4b: fb:f0:91:5c:29:16:0a:8a:23:1d:94:96:25:77:6d:0a:ea:31: c5:90:06:fe:e6:a2:ba:c9:2b:03:cd:3a:e2:f5:7d:54:f7:87: ea:6e:75:11:08:37:4e:0a:a0:dc:64:45:a5:76:b2:34:a8:e1: a3:de:f3:1c:7a:ff:22:82:f1:a2:0b:86:24:3c:f2:40:6d:76: 95:6f:53:b1:e3:1f:48:e0:3e:0d:a8:5e:dc:b7:2b:25:20:d9: 99:d1:e9:9f:6d:6d:3c:ed:85:83:6a:78:76:ed:6d:c4:4c:a9: f9:21:e7:2e:5e:fd:a4:63:ee:51:5f:d4:eb:69:85:2a:ea:8e: a5:6c:bf:98:27:db:e2:ee:79:e3:8c:84:c6:b8:0d:c2:9f:4b: 6e:04:17:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpe9OVPYU6YEQjfwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MDcwMTA2MDAwOFoXDTI1MDcwNDA2MDAwMFowLzEtMCsGA1UEAxMk NWQ3NDA3ZTUtOGU2Yy00MGJlLTk3OTctNjg2ZmRiODkwZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mlbWzsWCeGRStjHIwdlEFjxxpVsXijBgyoV BqkUf9PrkE6PspBl7eGPf9D0yVkWJOQQG4K5qdlzpH1UqwWIeZ+7Ko5vk3eWVr6O 2u48l5HTHxRQetJaBaIuo0cj/E4i4WXL3fM3TupzIPDRWlomlb8mlKf4AaLXEdLA U7eIkTFiKTIo1SRh+RCPAZb012utRQ93ligYCz6qLlrtpti6doyiCal6HCRi8Xuw 4khTKXMeXQTkJRr6v1XIzCERHnUsqWhwrWtQ7fEW4N3nZdwnar36Pp3xsLJkgMH1 f9xFWfn5WLWFDd1UKRfHzimAYSHr1JWVWCs1cJOT5MHO8gaS6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKxmaSH/Dw73MqpMRHBU+pwZsxI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvMGIyOTFhODUtZGEzZS00 MjBkLThlN2YtNjFiNjZiMzIzNDAyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAP0akhXTZ4EOWfgKlqLWOv zAFeKynTi0iRDTKBfrw6sdwooNimcicvePHiXT0yKISfUwdcx255YYm2nMEMMqaD fOm6mmiLU/j75SnNqOaKU4SxEZCJ4Pt+WXd9AHHRilfJqO96Lb2lGyGScUv78JFc KRYKiiMdlJYld20K6jHFkAb+5qK6ySsDzTri9X1U94fqbnURCDdOCqDcZEWldrI0 qOGj3vMcev8igvGiC4YkPPJAbXaVb1Ox4x9I4D4NqF7ctyslINmZ0emfbW087YWD anh27W3ETKn5IecuXv2kY+5RX9TraYUq6o6lbL+YJ9vi7nnjjITGuA3Cn0tuBBek -----END CERTIFICATE-----Generated at Tue Jul 1 20:43:36 2025 by rpki-client