$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft File: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft (raw, json) Hash identifier: EkjgAfV+FZ4+25PWsTUhfog/IN4lnO3zp6Bb1CTOzRI= Subject key identifier: C0:82:71:CD:80:D4:54:AE:1D:CD:D8:19:5A:72:D5:01:15:FB:4C:F2 Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Certificate issuer: /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Certificate serial: 010D0C9F4328584A5A2FFB12587025A9EDD5C800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft Manifest number: 010D0C9F4328584A1A12077C4B595F510F327BD7 Signing time: Sun 29 Jun 2025 13:00:08 +0000 Manifest this update: Sun 29 Jun 2025 13:00:08 +0000 Manifest next update: Tue 01 Jul 2025 13:00:00 +0000 Files and hashes: 1: a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl (hash: b2Ig45hY4+EWnm8Fl6nGSNpQrgr1lYJfwaGn5VXwJYs=) 2: c5f99082-735a-3bc4-848d-adbcd08fa635.roa (hash: Knhw+PcxM/gO83sDLhvnIfdgHod+BYiZ0PtoyeDh5tc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:2f:fb:12:58:70:25:a9:ed:d5:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Validity Not Before: Jun 29 13:00:08 2025 GMT Not After : Jul 1 13:00:00 2025 GMT Subject: CN=5e1052a9-263d-4762-86b5-800000cde4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:3e:d1:1c:6b:eb:96:fb:1f:51:a1:9a:fb: 4c:c1:c7:63:3f:b2:0a:00:03:2f:1e:b1:7c:0a:87: 2d:ad:3a:2a:3c:cb:24:ae:8d:17:2f:33:8d:fc:1d: 87:f1:ac:32:fd:e4:94:1b:cd:9c:63:89:74:8c:11: dc:84:8e:c3:bc:e9:f0:74:da:ca:d0:c9:89:de:b6: 67:9a:79:33:af:92:ad:03:8b:88:01:8b:6a:e3:95: 21:38:28:98:1a:96:c3:74:90:17:f0:33:95:cd:01: be:99:1a:ae:fa:07:7a:22:5d:82:7e:6c:e7:6b:10: 6f:6c:4d:f0:9f:df:ec:f8:8c:cf:b2:65:36:cb:98: fc:ad:c5:f1:1a:d3:84:b6:a4:80:dd:73:4c:07:e5: d4:55:4d:de:aa:e6:01:21:e7:5c:ab:f8:ff:a1:89: 9f:3b:3d:5d:72:6c:ba:53:ab:29:4f:03:9c:ea:1e: 12:c5:d0:5b:30:2b:3b:a8:5c:ba:2a:7c:95:70:fe: c4:68:5c:f2:0e:e9:07:51:47:35:9d:f8:ea:50:b0: 13:04:04:3e:94:b8:cd:8d:6c:c1:ad:1f:50:a9:90: 41:61:98:c2:15:45:60:20:de:56:c4:79:4f:96:34: 5c:14:f7:45:c3:4d:b3:a6:e0:5f:ae:dd:ce:96:4f: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:82:71:CD:80:D4:54:AE:1D:CD:D8:19:5A:72:D5:01:15:FB:4C:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl X509v3 Authority Key Identifier: keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e3:4f:08:72:3a:aa:15:b5:5c:37:d3:7e:e0:e3:be:09:ca: 54:20:54:48:7c:7e:f6:b3:e6:00:ac:8e:70:f4:ce:db:6b:db: be:fd:a9:58:44:7c:24:77:74:7b:d6:66:3f:97:91:f5:22:36: 57:6b:14:4c:73:6e:de:10:8b:9a:cb:2f:8e:e9:cd:90:c2:af: fa:58:a2:6e:19:d4:bb:dc:25:58:cd:aa:17:2e:fa:25:6c:75: 91:2a:ce:be:a2:47:f4:90:eb:b8:91:61:c5:bd:71:e4:4f:3d: bf:34:aa:0d:c5:c6:3b:73:20:09:73:a8:58:14:da:c9:d6:af: d3:af:9c:95:cf:89:ed:f3:c6:73:c2:80:76:a6:c7:cc:27:13: d4:c0:8b:50:04:f6:cf:53:97:05:d4:53:8f:85:da:61:65:d3: 75:32:48:58:e2:5a:ee:c2:c7:bc:2f:83:a9:fe:70:71:42:ff: e6:d6:d2:be:45:d7:1e:a6:fb:f7:b1:95:cc:d0:81:f1:73:9e: 73:4d:3b:56:78:65:c9:08:d3:59:0e:a4:e4:4e:17:05:fb:13: 46:4a:14:20:28:01:76:3e:4d:ce:be:4d:9f:91:aa:e9:88:db: 3e:43:e2:bc:e1:57:38:8c:0e:dc:8d:71:39:15:b4:88:37:e7: e9:a9:14:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaL/sSWHAlqe3VyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1 ZmY4MB4XDTI1MDYyOTEzMDAwOFoXDTI1MDcwMTEzMDAwMFowLzEtMCsGA1UEAxMk NWUxMDUyYTktMjYzZC00NzYyLTg2YjUtODAwMDAwY2RlNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm20+0Rxr65b7H1GhmvtMwcdjP7IKAAMvHrF8 CoctrToqPMskro0XLzON/B2H8awy/eSUG82cY4l0jBHchI7DvOnwdNrK0MmJ3rZn mnkzr5KtA4uIAYtq45UhOCiYGpbDdJAX8DOVzQG+mRqu+gd6Il2CfmznaxBvbE3w n9/s+IzPsmU2y5j8rcXxGtOEtqSA3XNMB+XUVU3equYBIedcq/j/oYmfOz1dcmy6 U6spTwOc6h4SxdBbMCs7qFy6KnyVcP7EaFzyDukHUUc1nfjqULATBAQ+lLjNjWzB rR9QqZBBYZjCFUVgIN5WxHlPljRcFPdFw02zpuBfrt3Olk+sxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMCCcc2A1FSuHc3YGVpy1QEV+0zyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYy ZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvYTRmMmYxYTctMDdlNS00 MmY4LWIxYWEtMWUyZTk1YTY1ZmY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRmMmYxYTctMDdlNS00MmY4LWIx YWEtMWUyZTk1YTY1ZmY4L2E0ZjJmMWE3LTA3ZTUtNDJmOC1iMWFhLTFlMmU5NWE2 NWZmOC5jcmwwHwYDVR0jBBgwFoAU1qWC4Tn6LXUH223MkamWkgxxO64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJl OTVhNjVmZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn408IcjqqFbVcN9N+4OO+ CcpUIFRIfH72s+YArI5w9M7ba9u+/alYRHwkd3R71mY/l5H1IjZXaxRMc27eEIua yy+O6c2Qwq/6WKJuGdS73CVYzaoXLvolbHWRKs6+okf0kOu4kWHFvXHkTz2/NKoN xcY7cyAJc6hYFNrJ1q/Tr5yVz4nt88ZzwoB2psfMJxPUwItQBPbPU5cF1FOPhdph ZdN1MkhY4lruwse8L4Op/nBxQv/m1tK+Rdcepvv3sZXM0IHxc55zTTtWeGXJCNNZ DqTkThcF+xNGShQgKAF2Pk3Ovk2fkarpiNs+Q+K84Vc4jA7cjXE5FbSIN+fpqRRZ -----END CERTIFICATE-----Generated at Sun Jun 29 15:59:18 2025 by rpki-client