$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft File: 4e0731c4-3d05-4440-8c74-77d5a579b356.mft (raw, json) Hash identifier: 9NsMxiitpWDey1n1hekm6HVWN9YLALkfXyGa5yX5YcY= Subject key identifier: 1A:9A:38:44:5F:69:B6:1B:B8:37:79:1C:AE:3A:04:BB:91:89:58:01 Authority key identifier: 8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 Certificate issuer: /CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Certificate serial: 010D0C9F4328584A6218E0E74F0892C4A9FCE2B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft Manifest number: 010D0C9F432858499929861EAAF71E97058D2B48 Signing time: Wed 02 Jul 2025 09:00:03 +0000 Manifest this update: Wed 02 Jul 2025 09:00:03 +0000 Manifest next update: Sat 05 Jul 2025 09:00:00 +0000 Files and hashes: 1: 4e0731c4-3d05-4440-8c74-77d5a579b356.crl (hash: W6A3BYSKgDJop4HbS4rmSYrzYsKB0sTDDsbllun32sI=) 2: a383ea14-bf86-3b46-bdae-73dbe397ae8a.roa (hash: W0AE95HliZ/APzPqMohmGA4+fxq/+Hvkh/eVpYUX4UA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:18:e0:e7:4f:08:92:c4:a9:fc:e2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0731c4-3d05-4440-8c74-77d5a579b356 Validity Not Before: Jul 2 09:00:03 2025 GMT Not After : Jul 5 09:00:00 2025 GMT Subject: CN=4bf25373-d74c-4a19-9f68-745378f7cc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:e8:af:1a:4e:ee:e0:24:62:45:47:e8:18: 99:d3:7a:f1:04:45:06:db:aa:5c:8f:ee:d8:83:08: 11:fc:11:f0:81:f4:38:a8:40:25:41:9d:dc:01:b4: 7b:18:b7:fd:0c:1e:0f:af:9e:25:06:3d:11:84:5d: 6f:4e:a6:d9:70:24:ab:98:1a:77:d1:c3:83:67:35: 46:9a:20:16:f1:96:78:30:b3:47:98:39:34:98:08: d4:2b:d0:66:08:c5:6b:a9:e7:c0:9e:98:a0:a0:23: da:da:c8:b1:b7:57:a4:9f:a9:9d:5d:06:31:4a:48: 68:cf:f2:ed:60:7a:12:a8:f9:fa:ab:6d:c2:28:02: 79:24:b9:7b:23:37:37:a2:24:f6:06:8b:c7:bf:c6: 90:59:4d:28:35:ed:60:8d:b2:42:47:ba:04:fa:c6: e4:56:33:64:12:2e:07:9f:2f:df:b1:65:b3:04:6d: 37:46:e0:0f:dd:98:68:6d:cb:69:17:5c:a7:ef:a5: dd:fe:ac:a0:41:e7:be:cc:7d:f8:8b:bb:2a:4a:89: 78:2f:ae:c8:53:3f:7f:c3:57:cf:89:92:9d:15:a9: bf:9c:60:e5:a5:20:02:01:b6:d3:d9:ed:87:41:ef: cd:bd:e8:52:02:0d:25:40:ba:84:0e:72:65:64:7b: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9A:38:44:5F:69:B6:1B:B8:37:79:1C:AE:3A:04:BB:91:89:58:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356/4e0731c4-3d05-4440-8c74-77d5a579b356.crl X509v3 Authority Key Identifier: keyid:8E:69:9C:CA:03:CD:5E:B3:A7:3B:D9:37:A4:77:09:32:E8:53:59:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e0731c4-3d05-4440-8c74-77d5a579b356.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a0:00:39:ce:59:39:b6:f1:3f:51:cc:a3:19:f0:f2:af:56: a8:ac:e2:12:d6:9a:08:77:49:49:f9:db:d2:66:b5:d4:76:f1: 66:4d:21:8d:98:7f:4e:14:aa:02:04:07:50:80:6b:7a:9c:ba: 2b:f2:11:f9:70:be:67:21:3a:6e:80:ca:03:69:2e:00:3b:f5: 8c:9f:f6:77:6d:73:23:2b:33:c7:7d:d4:ec:b2:ee:9f:25:6e: 5d:76:fe:e9:52:7d:08:b3:ef:c9:5e:c6:21:b6:fc:67:e3:7d: d0:fb:60:f6:c1:67:ed:ce:26:4b:e6:a5:bb:5c:b3:82:5d:a7: d7:f1:ee:a9:6e:09:45:cc:10:ad:1c:03:cb:0b:a3:2e:bf:9c: f6:f7:13:02:90:13:ee:cb:69:6a:91:9f:48:53:c7:fb:2a:3f: 65:17:b8:a6:98:17:61:0a:45:a1:ca:ec:8d:cf:c1:14:06:93: 29:07:c8:8c:bb:ea:75:2b:ed:56:75:f0:9e:7a:37:65:c2:f2: 6f:9f:1e:d5:84:88:bd:32:d3:69:3e:65:b5:23:83:87:0b:75: dd:c1:84:a3:f1:9f:45:6f:74:90:79:49:4f:29:3e:fd:b7:83: 47:ca:45:f5:31:4b:2a:f3:ea:6e:4c:8b:0e:74:a2:44:92:b3: 15:39:07:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpiGODnTwiSxKn84rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNzMxYzQtM2QwNS00NDQwLThjNzQtNzdkNWE1Nzli MzU2MB4XDTI1MDcwMjA5MDAwM1oXDTI1MDcwNTA5MDAwMFowLzEtMCsGA1UEAxMk NGJmMjUzNzMtZDc0Yy00YTE5LTlmNjgtNzQ1Mzc4ZjdjYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwLorxpO7uAkYkVH6BiZ03rxBEUG26pcj+7Y gwgR/BHwgfQ4qEAlQZ3cAbR7GLf9DB4Pr54lBj0RhF1vTqbZcCSrmBp30cODZzVG miAW8ZZ4MLNHmDk0mAjUK9BmCMVrqefAnpigoCPa2sixt1ekn6mdXQYxSkhoz/Lt YHoSqPn6q23CKAJ5JLl7Izc3oiT2BovHv8aQWU0oNe1gjbJCR7oE+sbkVjNkEi4H ny/fsWWzBG03RuAP3ZhobctpF1yn76Xd/qygQee+zH34i7sqSol4L67IUz9/w1fP iZKdFam/nGDlpSACAbbT2e2HQe/NvehSAg0lQLqEDnJlZHtxiQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBqaOERfabYbuDd5HK46BLuRiVgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80ZTA3 MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1YTU3OWIzNTYvNGUwNzMxYzQtM2QwNS00 NDQwLThjNzQtNzdkNWE1NzliMzU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGUwNzMxYzQtM2QwNS00NDQwLThj NzQtNzdkNWE1NzliMzU2LzRlMDczMWM0LTNkMDUtNDQ0MC04Yzc0LTc3ZDVhNTc5 YjM1Ni5jcmwwHwYDVR0jBBgwFoAUjmmcygPNXrOnO9k3pHcJMuhTWSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZTA3MzFjNC0zZDA1LTQ0NDAtOGM3NC03N2Q1 YTU3OWIzNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcoAA5zlk5tvE/UcyjGfDy r1aorOIS1poId0lJ+dvSZrXUdvFmTSGNmH9OFKoCBAdQgGt6nLor8hH5cL5nITpu gMoDaS4AO/WMn/Z3bXMjKzPHfdTssu6fJW5ddv7pUn0Is+/JXsYhtvxn433Q+2D2 wWftziZL5qW7XLOCXafX8e6pbglFzBCtHAPLC6Muv5z29xMCkBPuy2lqkZ9IU8f7 Kj9lF7immBdhCkWhyuyNz8EUBpMpB8iMu+p1K+1WdfCeejdlwvJvnx7VhIi9MtNp PmW1I4OHC3XdwYSj8Z9Fb3SQeUlPKT79t4NHykX1MUsq8+puTIsOdKJEkrMVOQfN -----END CERTIFICATE-----Generated at Wed Jul 2 14:52:23 2025 by rpki-client