$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft File: 89f46e33-a45d-4efe-8e7f-94df4343f1be.mft (raw, json) Hash identifier: 4EcnEa7JVHedOtfmE9VQGMJmR1SyQ9rIPs3Q8FU9JVY= Subject key identifier: BB:93:A2:F7:5F:A8:47:74:15:CB:C5:9C:C1:C8:41:6E:DC:AC:B1:9C Authority key identifier: BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 Certificate issuer: /CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Certificate serial: 010D0C9F4328584A5A894EF0EB7A86CEDECF1200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft Manifest number: 010D0C9F432858419BA974F3424D7851A3CF4882 Signing time: Sun 29 Jun 2025 16:00:08 +0000 Manifest this update: Sun 29 Jun 2025 16:00:08 +0000 Manifest next update: Wed 02 Jul 2025 16:00:00 +0000 Files and hashes: 1: 89f46e33-a45d-4efe-8e7f-94df4343f1be.crl (hash: UVN6JIUv5gZW+EStTltK8VRgz5qFVl1YPD6oFWXDIf0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:89:4e:f0:eb:7a:86:ce:de:cf:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Validity Not Before: Jun 29 16:00:08 2025 GMT Not After : Jul 2 16:00:00 2025 GMT Subject: CN=e191fe44-35b5-4152-98c1-6bce732e82ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:8f:c1:e7:c4:50:fb:99:fe:2b:8b:08:a9: 2d:2a:a1:98:f0:b8:57:3c:51:10:d2:1a:f7:92:47: 29:07:96:cb:bd:10:8b:c0:d7:3e:dc:e3:54:7e:01: 2a:cd:57:97:2d:e9:07:18:de:97:f0:87:3e:36:ff: 4f:ca:33:c1:31:a4:8d:25:c3:78:d3:e4:f6:9d:42: 19:3d:24:7a:aa:06:83:89:63:7a:47:7a:b7:b2:b4: 91:74:a8:8f:ec:1b:11:39:f0:01:54:8d:8f:e6:a0: 2a:3f:9f:1e:ba:d2:45:47:39:a1:fe:9c:fc:52:c6: 22:c6:71:c4:3a:2c:42:43:55:dd:24:80:04:24:91: a1:60:38:e8:0a:97:d9:9f:c8:68:dd:7e:77:8f:b5: 44:34:48:3f:26:53:b5:d9:7a:89:42:16:c4:a3:6e: ae:24:60:d1:85:d5:c9:a5:46:3b:62:cf:cb:ea:29: 03:f9:61:4a:79:09:99:39:28:b3:fb:06:ff:ac:a5: 56:6e:23:c6:3a:b4:0c:d7:49:f5:57:f4:27:24:e0: 5c:8f:6f:0d:bd:c6:81:30:db:bf:98:70:6d:6c:fb: 5b:83:36:af:5f:3e:ac:dd:09:a4:be:82:50:e4:d9: c7:4d:73:43:87:05:99:7b:10:97:10:14:9a:23:e4: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:93:A2:F7:5F:A8:47:74:15:CB:C5:9C:C1:C8:41:6E:DC:AC:B1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl X509v3 Authority Key Identifier: keyid:BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e9:3c:43:ea:fa:9c:cf:72:9a:a7:31:b1:45:73:a8:2a:09: 99:c4:ae:12:f8:e3:a4:79:3a:ca:dc:09:22:34:00:be:c6:c5: 76:6f:f0:84:7d:29:37:ed:65:4e:3d:26:10:f3:19:7b:0d:9b: a5:90:f9:c4:44:4c:47:1c:67:06:95:cc:05:26:4f:d6:25:1c: b3:c5:e9:47:8f:8c:1d:2a:6b:cd:30:f8:b1:46:27:0a:13:c1: 87:2b:16:f7:cf:e5:e6:4c:de:e4:27:e1:a7:8a:23:64:75:e1: bc:74:50:84:6f:37:5f:29:5c:4b:11:a3:ac:42:b3:0f:48:22: c1:be:ee:fe:ca:b6:03:8c:e2:24:c5:e8:18:4c:e3:65:08:54: a9:1f:de:92:20:60:70:52:43:36:99:94:44:7e:89:00:78:fc: 83:ed:05:bd:42:e5:7c:69:2f:eb:d6:ff:43:87:0f:24:5f:0e: e7:9e:ac:de:66:04:c4:e6:c0:c6:00:df:96:e7:4b:6b:bf:50: 34:23:77:9c:27:33:86:03:90:d5:dc:2a:bf:16:74:8f:6a:fe: 1d:4c:83:e7:c4:1a:3f:6d:6e:09:42:c2:af:a7:4e:c8:3d:e9: 6f:1c:3c:87:37:15:ea:3f:5a:b4:51:b2:11:23:17:54:ac:ee: 37:8f:e4:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaiU7w63qGzt7PEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmNDZlMzMtYTQ1ZC00ZWZlLThlN2YtOTRkZjQzNDNm MWJlMB4XDTI1MDYyOTE2MDAwOFoXDTI1MDcwMjE2MDAwMFowLzEtMCsGA1UEAxMk ZTE5MWZlNDQtMzViNS00MTUyLTk4YzEtNmJjZTczMmU4MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC6PwefEUPuZ/iuLCKktKqGY8LhXPFEQ0hr3 kkcpB5bLvRCLwNc+3ONUfgEqzVeXLekHGN6X8Ic+Nv9PyjPBMaSNJcN40+T2nUIZ PSR6qgaDiWN6R3q3srSRdKiP7BsROfABVI2P5qAqP58eutJFRzmh/pz8UsYixnHE OixCQ1XdJIAEJJGhYDjoCpfZn8ho3X53j7VENEg/JlO12XqJQhbEo26uJGDRhdXJ pUY7Ys/L6ikD+WFKeQmZOSiz+wb/rKVWbiPGOrQM10n1V/QnJOBcj28NvcaBMNu/ mHBtbPtbgzavXz6s3QmkvoJQ5NnHTXNDhwWZexCXEBSaI+QBLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLuTovdfqEd0FcvFnMHIQW7crLGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWY0 NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRmNDM0M2YxYmUvODlmNDZlMzMtYTQ1ZC00 ZWZlLThlN2YtOTRkZjQzNDNmMWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlmNDZlMzMtYTQ1ZC00ZWZlLThl N2YtOTRkZjQzNDNmMWJlLzg5ZjQ2ZTMzLWE0NWQtNGVmZS04ZTdmLTk0ZGY0MzQz ZjFiZS5jcmwwHwYDVR0jBBgwFoAUv9d2XK58fpkTOQhza/xHcMyiC9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWY0NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRm NDM0M2YxYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB36TxD6vqcz3KapzGxRXOo KgmZxK4S+OOkeTrK3AkiNAC+xsV2b/CEfSk37WVOPSYQ8xl7DZulkPnERExHHGcG lcwFJk/WJRyzxelHj4wdKmvNMPixRicKE8GHKxb3z+XmTN7kJ+GniiNkdeG8dFCE bzdfKVxLEaOsQrMPSCLBvu7+yrYDjOIkxegYTONlCFSpH96SIGBwUkM2mZREfokA ePyD7QW9QuV8aS/r1v9Dhw8kXw7nnqzeZgTE5sDGAN+W50trv1A0I3ecJzOGA5DV 3Cq/FnSPav4dTIPnxBo/bW4JQsKvp07IPelvHDyHNxXqP1q0UbIRIxdUrO43j+SE -----END CERTIFICATE-----Generated at Sun Jun 29 19:07:46 2025 by rpki-client