$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft File: 1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft (raw, json) Hash identifier: 0NeRAGXYt//bd4huYF5is1ceP3zuG83PAGscWp2Yghw= Subject key identifier: 29:80:BF:D4:F1:90:D7:B9:27:33:47:31:B1:AD:30:59:96:CE:E4:E5 Authority key identifier: 63:E3:52:4F:21:0C:83:3D:D3:63:4B:A9:07:B0:61:AA:0F:11:93:61 Certificate issuer: /CN=1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab Certificate serial: 010D0C9F4328584A62900AD0782449294DFF3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft Manifest number: 010D0C9F4328584A11A510EB855377874DD6AF9D Signing time: Wed 02 Jul 2025 13:00:08 +0000 Manifest this update: Wed 02 Jul 2025 13:00:08 +0000 Manifest next update: Fri 04 Jul 2025 13:00:00 +0000 Files and hashes: 1: 1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.crl (hash: XMklQcmTSifDvFCD28cFgAvhddsCI7kZSGhpi6rSUMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:0a:d0:78:24:49:29:4d:ff:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab Validity Not Before: Jul 2 13:00:08 2025 GMT Not After : Jul 4 13:00:00 2025 GMT Subject: CN=0e9ebf96-e9df-4853-8c74-61ce11d440fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:a6:f2:04:c3:c8:a2:10:64:e8:bc:f2:44: cc:a9:68:d2:3a:c1:14:41:db:c5:ff:11:ad:8f:35: cc:dc:95:95:37:db:08:9c:35:af:2e:66:a2:28:08: 28:bb:ee:14:d6:22:e9:c0:df:6e:22:66:18:7f:f9: 7a:a7:b5:76:9e:ad:b5:3a:99:3a:44:15:3d:0d:c1: 40:ea:37:17:df:cd:b8:3f:8c:7d:72:58:0f:99:c7: 6e:89:14:79:90:1a:75:cc:fb:46:db:57:47:44:65: 4a:8d:d6:f4:71:f7:43:44:25:4e:2d:49:dd:42:b9: f5:50:d1:6d:06:c5:8e:6f:48:84:90:bb:07:b9:1d: 84:85:07:7f:ed:0d:87:7b:40:ee:41:b4:a2:9c:a9: 27:46:f4:06:38:dc:2b:7c:60:21:bd:88:8c:ed:34: 36:f8:81:b7:b2:ac:dd:0a:10:28:90:87:4d:47:61: 75:29:68:8d:96:b3:4b:e5:45:5d:13:87:e6:45:e8: 1b:90:6b:d8:9c:59:98:83:62:0c:b8:40:7d:37:5f: 2b:f8:10:43:4a:1c:6d:0c:45:25:51:df:09:04:21: e9:3e:42:d3:a2:06:3f:04:03:15:06:7b:98:71:69: 23:7b:30:17:ad:cf:5d:27:8b:76:c1:2c:27:fe:1a: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:80:BF:D4:F1:90:D7:B9:27:33:47:31:B1:AD:30:59:96:CE:E4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.crl X509v3 Authority Key Identifier: keyid:63:E3:52:4F:21:0C:83:3D:D3:63:4B:A9:07:B0:61:AA:0F:11:93:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1cf7564b-c6bc-4b78-9c51-e5b52ebd82ab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:25:dc:fe:50:89:7d:9a:e5:68:9b:27:8d:36:99:e7:2d:47: 60:85:5c:89:ac:17:02:2c:cd:98:4b:20:20:0a:e0:ef:1f:2e: 79:13:0d:b1:73:13:55:98:8b:26:6b:28:99:07:4a:1b:31:3c: b6:ee:a7:53:f1:96:a0:4f:19:82:71:14:2d:26:5b:71:f9:e9: 03:58:8d:4a:28:0d:b9:f3:2f:e9:be:9a:2a:9f:65:a1:46:fb: 66:5e:ca:77:45:88:f4:46:cc:c5:34:ad:c9:cf:13:b1:93:a8: c2:cb:7c:48:30:d9:8d:c9:40:29:ad:b4:81:29:ae:0c:c2:9f: bf:46:27:9b:f5:2f:b5:8f:22:3d:ad:5b:a2:1b:68:04:5a:66: d9:d1:8c:3a:b2:47:7e:6a:02:73:49:7f:c0:13:bd:c0:5e:43: 5b:81:bb:5c:c6:4b:d1:72:29:50:32:f0:b1:fc:72:21:e1:bd: 0a:8d:82:59:f4:5b:3c:68:d2:d5:ac:7d:e8:f5:68:4b:00:d7: d7:4e:c3:91:95:6f:22:24:2f:a0:a1:c1:89:83:c9:32:f7:49: 34:5b:33:41:be:5e:93:c3:84:46:2a:d2:5b:a3:9b:da:61:6f: a4:a0:53:7b:98:1c:e3:7b:c1:3d:bd:b4:47:3d:84:fc:d8:61: 51:cc:89:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpikArQeCRJKU3/PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNzU2NGItYzZiYy00Yjc4LTljNTEtZTViNTJlYmQ4 MmFiMB4XDTI1MDcwMjEzMDAwOFoXDTI1MDcwNDEzMDAwMFowLzEtMCsGA1UEAxMk MGU5ZWJmOTYtZTlkZi00ODUzLThjNzQtNjFjZTExZDQ0MGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk6m8gTDyKIQZOi88kTMqWjSOsEUQdvF/xGt jzXM3JWVN9sInDWvLmaiKAgou+4U1iLpwN9uImYYf/l6p7V2nq21Opk6RBU9DcFA 6jcX3824P4x9clgPmcduiRR5kBp1zPtG21dHRGVKjdb0cfdDRCVOLUndQrn1UNFt BsWOb0iEkLsHuR2EhQd/7Q2He0DuQbSinKknRvQGONwrfGAhvYiM7TQ2+IG3sqzd ChAokIdNR2F1KWiNlrNL5UVdE4fmRegbkGvYnFmYg2IMuEB9N18r+BBDShxtDEUl Ud8JBCHpPkLTogY/BAMVBnuYcWkjezAXrc9dJ4t2wSwn/hojCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCmAv9TxkNe5JzNHMbGtMFmWzuTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xY2Y3 NTY0Yi1jNmJjLTRiNzgtOWM1MS1lNWI1MmViZDgyYWIvMWNmNzU2NGItYzZiYy00 Yjc4LTljNTEtZTViNTJlYmQ4MmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWNmNzU2NGItYzZiYy00Yjc4LTlj NTEtZTViNTJlYmQ4MmFiLzFjZjc1NjRiLWM2YmMtNGI3OC05YzUxLWU1YjUyZWJk ODJhYi5jcmwwHwYDVR0jBBgwFoAUY+NSTyEMgz3TY0upB7Bhqg8Rk2EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xY2Y3NTY0Yi1jNmJjLTRiNzgtOWM1MS1lNWI1 MmViZDgyYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1Jdz+UIl9muVomyeNNpnn LUdghVyJrBcCLM2YSyAgCuDvHy55Ew2xcxNVmIsmayiZB0obMTy27qdT8ZagTxmC cRQtJltx+ekDWI1KKA258y/pvpoqn2WhRvtmXsp3RYj0RszFNK3JzxOxk6jCy3xI MNmNyUAprbSBKa4Mwp+/Rieb9S+1jyI9rVuiG2gEWmbZ0Yw6skd+agJzSX/AE73A XkNbgbtcxkvRcilQMvCx/HIh4b0KjYJZ9Fs8aNLVrH3o9WhLANfXTsORlW8iJC+g ocGJg8ky90k0WzNBvl6Tw4RGKtJbo5vaYW+koFN7mBzje8E9vbRHPYT82GFRzIkB -----END CERTIFICATE-----Generated at Thu Jul 3 13:09:28 2025 by rpki-client