$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8/02f25e72-adb5-49df-9243-a5f4c124bea8.mft File: 02f25e72-adb5-49df-9243-a5f4c124bea8.mft (raw, json) Hash identifier: +kxiWXlBe2OTFabseaplhb+VpnZ1S0smQReG2G0RNHI= Subject key identifier: 96:6A:B5:CB:0E:DB:A0:42:7E:34:A6:B8:DA:9D:48:51:69:57:26:0C Authority key identifier: 71:D4:6B:AD:34:22:E4:8B:0E:38:A1:E7:E8:0F:B0:5E:43:80:94:5C Certificate issuer: /CN=02f25e72-adb5-49df-9243-a5f4c124bea8 Certificate serial: 010D0C9F4328584A59F46E68E2864458CE2D5300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8/02f25e72-adb5-49df-9243-a5f4c124bea8.mft Manifest number: 010D0C9F4328584073A84F4BC589CB9601BB7AAB Signing time: Sun 29 Jun 2025 11:00:08 +0000 Manifest this update: Sun 29 Jun 2025 11:00:08 +0000 Manifest next update: Tue 01 Jul 2025 11:00:00 +0000 Files and hashes: 1: 02f25e72-adb5-49df-9243-a5f4c124bea8.crl (hash: dyT+oi4KmI60n+itUI+QbenyZhX+MjaCZbYK5faXVJU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8/02f25e72-adb5-49df-9243-a5f4c124bea8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8/02f25e72-adb5-49df-9243-a5f4c124bea8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:f4:6e:68:e2:86:44:58:ce:2d:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02f25e72-adb5-49df-9243-a5f4c124bea8 Validity Not Before: Jun 29 11:00:08 2025 GMT Not After : Jul 1 11:00:00 2025 GMT Subject: CN=17cb0ab5-35bc-4a22-b112-e3e6c16ca201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:7c:c4:97:f1:ae:d3:a6:fc:75:88:0c:59: fb:90:13:61:19:43:7d:69:2f:3c:ef:e3:17:3c:7f: 98:df:8c:a9:ee:39:6d:49:a9:5f:50:1a:81:a6:d7: bc:0d:5c:29:0c:63:33:f6:d5:72:e4:74:57:4b:62: b1:13:56:44:5c:73:f8:b0:40:58:26:bb:a6:e6:a4: 98:d9:81:2d:ae:03:2e:32:80:e0:9a:33:82:ec:d0: 75:ac:21:51:c0:58:db:f8:8d:27:15:ce:35:a0:e2: 79:15:37:f5:35:34:c2:a5:8c:66:6c:e5:af:fa:16: 20:dd:c3:31:2d:93:ea:90:70:4a:df:f8:a2:72:c1: d3:49:9d:c6:ac:42:d4:7e:ab:a4:5f:01:ff:0d:19: d5:c8:32:43:85:d6:77:e3:52:a9:fa:e7:7c:2d:a9: 4a:b7:99:1c:ea:7d:cd:90:d7:5b:48:d7:81:eb:05: 44:b0:69:ed:4c:4e:e4:3b:93:fd:bd:1a:bc:8e:69: e2:1a:e1:d8:30:ef:73:7b:f5:f9:59:b2:3b:65:92: be:de:dc:26:b4:ab:e2:dd:aa:2d:95:38:13:4a:28: b6:fc:eb:28:fd:3c:5c:13:e6:6c:85:bf:cb:4c:92: 68:ab:a2:69:a1:9d:a0:86:2e:54:2c:47:0f:ee:ba: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6A:B5:CB:0E:DB:A0:42:7E:34:A6:B8:DA:9D:48:51:69:57:26:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8/02f25e72-adb5-49df-9243-a5f4c124bea8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8/02f25e72-adb5-49df-9243-a5f4c124bea8.crl X509v3 Authority Key Identifier: keyid:71:D4:6B:AD:34:22:E4:8B:0E:38:A1:E7:E8:0F:B0:5E:43:80:94:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02f25e72-adb5-49df-9243-a5f4c124bea8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:40:80:4a:ce:5c:56:3c:99:1f:0e:e1:7e:a3:3e:0e:81:43: 17:b4:4d:b4:a2:73:fc:79:bb:ef:d2:03:c0:e6:f9:16:aa:21: f3:73:5f:19:b3:7f:5d:c5:9b:da:03:4b:c4:55:de:92:14:b7: fe:21:77:1a:d7:42:e0:18:1f:de:e0:53:a5:21:ea:28:1e:64: 8d:1a:e2:4a:70:ee:65:dd:d8:1d:23:6a:29:be:61:43:ed:de: 67:ed:32:6c:8c:a2:b9:94:d9:f4:08:2b:4b:cc:35:e4:d4:29: 19:e6:97:40:68:24:f1:3d:79:37:ae:0d:a0:74:e9:1d:4f:cd: 8f:c4:1e:d0:ef:6e:28:7f:56:08:4b:d6:60:31:4c:9f:6b:00: 57:52:ce:9f:c5:2a:9f:f2:9b:96:d3:ea:61:07:56:1b:5f:54: 80:6f:a9:98:fd:62:4c:a4:0b:b8:77:cd:c1:30:d4:9d:78:4a: d0:0e:15:2e:95:f8:a2:2b:68:a2:8a:98:4e:77:ea:86:3d:b1: fa:1d:f1:e0:14:0b:10:4f:41:c6:91:a8:3e:2b:33:94:6e:ad: 7c:f0:d8:df:79:48:a3:37:71:86:3d:12:b4:aa:a2:66:b1:19: e4:9c:3c:84:2d:92:5e:c2:47:4d:13:df:45:3a:4f:f8:c0:76: ac:f0:76:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZ9G5o4oZEWM4tUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJmMjVlNzItYWRiNS00OWRmLTkyNDMtYTVmNGMxMjRi ZWE4MB4XDTI1MDYyOTExMDAwOFoXDTI1MDcwMTExMDAwMFowLzEtMCsGA1UEAxMk MTdjYjBhYjUtMzViYy00YTIyLWIxMTItZTNlNmMxNmNhMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VR8xJfxrtOm/HWIDFn7kBNhGUN9aS887+MX PH+Y34yp7jltSalfUBqBpte8DVwpDGMz9tVy5HRXS2KxE1ZEXHP4sEBYJrum5qSY 2YEtrgMuMoDgmjOC7NB1rCFRwFjb+I0nFc41oOJ5FTf1NTTCpYxmbOWv+hYg3cMx LZPqkHBK3/iicsHTSZ3GrELUfqukXwH/DRnVyDJDhdZ341Kp+ud8LalKt5kc6n3N kNdbSNeB6wVEsGntTE7kO5P9vRq8jmniGuHYMO9ze/X5WbI7ZZK+3twmtKvi3aot lTgTSii2/Oso/TxcE+Zshb/LTJJoq6JpoZ2ghi5ULEcP7ronuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJZqtcsO26BCfjSmuNqdSFFpVyYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmYy NWU3Mi1hZGI1LTQ5ZGYtOTI0My1hNWY0YzEyNGJlYTgvMDJmMjVlNzItYWRiNS00 OWRmLTkyNDMtYTVmNGMxMjRiZWE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJmMjVlNzItYWRiNS00OWRmLTky NDMtYTVmNGMxMjRiZWE4LzAyZjI1ZTcyLWFkYjUtNDlkZi05MjQzLWE1ZjRjMTI0 YmVhOC5jcmwwHwYDVR0jBBgwFoAUcdRrrTQi5IsOOKHn6A+wXkOAlFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmYyNWU3Mi1hZGI1LTQ5ZGYtOTI0My1hNWY0 YzEyNGJlYTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuQIBKzlxWPJkfDuF+oz4O gUMXtE20onP8ebvv0gPA5vkWqiHzc18Zs39dxZvaA0vEVd6SFLf+IXca10LgGB/e 4FOlIeooHmSNGuJKcO5l3dgdI2opvmFD7d5n7TJsjKK5lNn0CCtLzDXk1CkZ5pdA aCTxPXk3rg2gdOkdT82PxB7Q724of1YIS9ZgMUyfawBXUs6fxSqf8puW0+phB1Yb X1SAb6mY/WJMpAu4d83BMNSdeErQDhUulfiiK2iiiphOd+qGPbH6HfHgFAsQT0HG kag+KzOUbq188NjfeUijN3GGPRK0qqJmsRnknDyELZJewkdNE99FOk/4wHas8Ha7 -----END CERTIFICATE-----Generated at Sun Jun 29 16:22:35 2025 by rpki-client