$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft File: a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft (raw, json) Hash identifier: ni7u4jdJ9YXLIxvCSvO24Kq6MEfE3BYFm9S8XkaUs88= Subject key identifier: BA:A8:C1:17:D9:D8:B7:DB:7E:93:8C:E6:B6:18:7C:C8:F8:FD:58:B7 Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 Certificate issuer: /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Certificate serial: 010D0C9F4328584A59062983E852A17EAF35DBA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft Manifest number: 010D0C9F4328584073A839821729DB76AB67A167 Signing time: Sun 29 Jun 2025 03:00:03 +0000 Manifest this update: Sun 29 Jun 2025 03:00:03 +0000 Manifest next update: Tue 01 Jul 2025 03:00:00 +0000 Files and hashes: 1: a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl (hash: tCiEBdq7NU7VN90+B8KqyiAb/6U4Ith3x95A807ugLY=) 2: be7ad7b9-a247-3a4b-8764-f23d8fb0c013.roa (hash: ZrbeOSATTmat2aPtV6ln4tC4vkICqo8X02ZeDt59Wy4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:06:29:83:e8:52:a1:7e:af:35:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41 Validity Not Before: Jun 29 03:00:03 2025 GMT Not After : Jul 1 03:00:00 2025 GMT Subject: CN=13667562-d806-4e31-82ee-55cef706e742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:5d:e1:73:b2:3c:67:73:f4:35:ea:f5:01: 00:81:48:20:6f:2f:fd:ce:4d:f6:02:be:18:c4:3e: b2:05:ab:6c:40:e3:e9:ce:f5:54:6c:f6:fe:2a:ce: 22:4b:f1:82:09:ab:5c:32:b6:99:7a:3c:98:25:41: c6:ca:ae:64:dd:ee:50:7b:af:04:dc:66:e8:20:78: 4e:97:d5:35:5b:f1:ae:aa:17:2e:e3:65:0b:2c:94: 95:38:cc:e1:a1:d6:74:1f:01:69:be:f8:8c:38:2f: 48:f8:44:16:82:c9:5c:ea:c3:10:04:95:e5:6b:d4: f0:70:1d:5f:41:7c:da:29:70:91:53:2c:50:73:24: 92:73:8f:98:b3:b0:de:4b:23:c1:b9:c1:8a:0a:92: f0:36:09:7a:e3:29:c7:f3:b7:47:34:a0:e8:48:07: 3c:0b:53:67:00:18:95:54:b6:6a:35:a1:9e:92:04: df:77:aa:05:b7:6c:ff:16:8a:3e:eb:47:70:44:c6: ae:20:8b:c0:12:d5:f2:d1:10:6f:55:d2:f9:77:dd: dd:25:b9:7b:df:94:87:22:09:c8:12:3c:48:75:e1: 10:24:ce:49:3c:3c:ed:02:17:44:d4:8f:b6:4d:25: 23:57:b4:0b:30:e4:73:d8:19:95:e3:46:24:2a:7a: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A8:C1:17:D9:D8:B7:DB:7E:93:8C:E6:B6:18:7C:C8:F8:FD:58:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl X509v3 Authority Key Identifier: keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:38:1a:09:e5:af:76:61:e0:7b:67:d1:1d:70:86:66:43:98: 75:3a:1d:bc:57:e8:c9:a8:b3:9f:f9:c0:56:68:e5:b2:dc:58: 9f:6f:c9:7b:d5:f6:1d:f5:80:eb:3d:a7:bb:97:34:2a:d4:4a: c4:b7:79:9c:fc:c5:8e:3d:a9:34:16:fc:f7:59:32:7a:74:5f: d5:5a:45:8f:a8:e6:01:f5:16:0f:13:bf:f1:09:9e:b5:9d:68: 56:00:e9:83:cf:fb:df:a6:97:a0:16:c4:21:2d:e0:e8:7b:84: da:68:19:88:f4:d9:2c:16:1d:3b:55:f1:bb:62:ad:f8:5b:8b: 67:9d:37:a3:10:90:6e:99:1a:3b:f5:56:c8:31:fb:36:ed:da: 90:9d:45:7b:e6:4e:36:2a:49:74:0b:d2:d2:d6:77:17:a1:90: b2:94:95:40:12:ca:3f:44:73:1f:7a:14:4c:58:c4:5f:28:ad: a7:6e:2e:2b:0e:47:51:72:67:53:bb:b8:3f:84:8b:d7:e1:72: 4d:1b:1b:07:a1:a8:09:24:70:0d:fc:ad:48:9e:d6:33:5f:f0: c4:db:ea:2f:a9:e6:41:5e:18:a2:ce:ca:f0:23:0c:7c:0f:ec: d2:57:21:43:37:57:4b:31:5b:18:db:3a:11:9a:c1:f0:ac:a6: 02:29:d1:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZBimD6FKhfq8126AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4M2UtNjBlOTFmY2Q5 ZjQxMB4XDTI1MDYyOTAzMDAwM1oXDTI1MDcwMTAzMDAwMFowLzEtMCsGA1UEAxMk MTM2Njc1NjItZDgwNi00ZTMxLTgyZWUtNTVjZWY3MDZlNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJtd4XOyPGdz9DXq9QEAgUggby/9zk32Ar4Y xD6yBatsQOPpzvVUbPb+Ks4iS/GCCatcMraZejyYJUHGyq5k3e5Qe68E3GboIHhO l9U1W/Guqhcu42ULLJSVOMzhodZ0HwFpvviMOC9I+EQWgslc6sMQBJXla9TwcB1f QXzaKXCRUyxQcySSc4+Ys7DeSyPBucGKCpLwNgl64ynH87dHNKDoSAc8C1NnABiV VLZqNaGekgTfd6oFt2z/Foo+60dwRMauIIvAEtXy0RBvVdL5d93dJbl735SHIgnI EjxIdeEQJM5JPDztAhdE1I+2TSUjV7QLMORz2BmV40YkKnpWqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLqowRfZ2LfbfpOM5rYYfMj4/Vi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZm MGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5MWZjZDlmNDEvYTg2ZjBmNmYtZGE2Ny00 ZmZmLWE4M2UtNjBlOTFmY2Q5ZjQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTg2ZjBmNmYtZGE2Ny00ZmZmLWE4 M2UtNjBlOTFmY2Q5ZjQxL2E4NmYwZjZmLWRhNjctNGZmZi1hODNlLTYwZTkxZmNk OWY0MS5jcmwwHwYDVR0jBBgwFoAUZKDSyOp4SNVqHvBQsMFRkE4g9AcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hODZmMGY2Zi1kYTY3LTRmZmYtYTgzZS02MGU5 MWZjZDlmNDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoOBoJ5a92YeB7Z9EdcIZm Q5h1Oh28V+jJqLOf+cBWaOWy3Fifb8l71fYd9YDrPae7lzQq1ErEt3mc/MWOPak0 Fvz3WTJ6dF/VWkWPqOYB9RYPE7/xCZ61nWhWAOmDz/vfppegFsQhLeDoe4TaaBmI 9NksFh07VfG7Yq34W4tnnTejEJBumRo79VbIMfs27dqQnUV75k42Kkl0C9LS1ncX oZCylJVAEso/RHMfehRMWMRfKK2nbi4rDkdRcmdTu7g/hIvX4XJNGxsHoagJJHAN /K1IntYzX/DE2+ovqeZBXhiizsrwIwx8D+zSVyFDN1dLMVsY2zoRmsHwrKYCKdFh -----END CERTIFICATE-----Generated at Sun Jun 29 07:19:24 2025 by rpki-client