$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft File: d438c823-e424-41a1-9631-aa3b75aea0c7.mft (raw, json) Hash identifier: kniatYfew5qcEffatXGoT82KAVviUMivccw+xhd/Eso= Subject key identifier: 55:9A:04:9C:DA:2F:94:20:F6:34:EA:9C:E2:C5:4F:D6:28:EA:75:90 Authority key identifier: E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93 Certificate issuer: /CN=d438c823-e424-41a1-9631-aa3b75aea0c7 Certificate serial: 010D0C9F4328584A6290084A408BE281DD1B53C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft Manifest number: 010D0C9F43285849F5C721EFAB492FB8369203E7 Signing time: Wed 02 Jul 2025 13:00:08 +0000 Manifest this update: Wed 02 Jul 2025 13:00:08 +0000 Manifest next update: Fri 04 Jul 2025 13:00:00 +0000 Files and hashes: 1: d438c823-e424-41a1-9631-aa3b75aea0c7.crl (hash: GwM5loFWUWz9AmY/udg4uPNDtA23vbY0bKTas0e8fPs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:08:4a:40:8b:e2:81:dd:1b:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d438c823-e424-41a1-9631-aa3b75aea0c7 Validity Not Before: Jul 2 13:00:08 2025 GMT Not After : Jul 4 13:00:00 2025 GMT Subject: CN=fb70aef1-f71b-4823-87b5-5f6deef29bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:fa:96:03:61:09:25:42:3f:a1:59:0d:e6: 94:27:74:c2:25:9f:f0:91:ad:a3:e3:0a:21:3a:85: 76:5c:ad:7b:ac:88:12:e0:2c:f0:2b:28:2d:90:00: e0:3f:15:31:c1:b9:4c:73:2f:11:f3:e3:b1:2a:fb: 7d:10:8d:9b:14:cb:8a:74:61:40:bd:5a:1e:2c:ab: cd:d2:89:04:fa:f4:c5:be:bb:70:d3:8f:cc:1e:a6: cc:43:84:e8:ec:b5:87:ce:0b:ae:7d:c7:25:10:8c: 8a:24:e7:59:20:fc:4c:e3:ed:c4:1f:e6:cf:cc:f5: 1c:94:27:05:ba:77:b1:cd:80:45:92:51:08:5a:c8: 7a:b4:99:f3:3e:ac:a7:b9:35:e8:71:3e:4b:47:d9: 62:2b:85:a9:aa:17:af:2d:ac:d4:eb:5d:fa:c5:80: 2c:bb:23:a5:9b:a5:65:76:34:e1:d6:ad:38:29:73: fb:c8:f6:1a:f1:b4:40:ab:e7:f5:df:bb:68:c4:40: fa:8f:b8:b0:8f:83:30:fc:3e:1e:b8:03:20:49:82: 87:ed:11:89:e5:8f:97:63:0f:32:b6:e2:b6:bf:8d: 77:f8:93:b5:61:d2:c5:46:a6:f0:d7:79:fa:20:58: 4c:3d:f0:2e:ae:ea:a3:d0:9e:ed:98:35:80:ce:46: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9A:04:9C:DA:2F:94:20:F6:34:EA:9C:E2:C5:4F:D6:28:EA:75:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl X509v3 Authority Key Identifier: keyid:E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:17:09:cb:98:93:63:92:f8:7b:f4:42:3a:e5:85:4a:55:ef: 4a:31:56:0d:42:a6:91:f4:b0:1b:60:64:1b:95:e8:85:32:78: 23:9a:a1:ac:09:be:29:66:8e:a1:cd:6e:8a:8d:0e:33:9d:5d: d5:4f:33:1f:fd:d9:82:8b:36:8c:2a:89:9a:2e:34:57:b5:fc: 32:e6:fd:53:20:9b:68:40:cf:c7:c1:16:cf:91:07:92:36:04: 27:d5:4d:19:d3:67:6d:f1:87:8c:bd:a1:a2:aa:0e:cd:3b:04: 4f:b0:e6:a4:b3:49:ec:f7:f7:7c:b2:39:b7:79:b4:26:e9:4e: 9b:57:90:cf:9d:b4:96:13:85:07:d3:fe:c2:a5:29:56:2e:42: 8a:22:0f:14:83:fd:b9:e2:ec:f3:5b:be:32:4c:85:d1:d7:48: fe:36:72:33:d5:82:87:f0:b6:05:3f:2e:3d:a2:2c:58:93:eb: 01:8e:d1:fb:0d:4d:d1:e9:24:01:91:60:77:49:2f:72:9f:45: 36:43:fc:7b:99:3e:27:34:27:47:84:ac:86:cd:96:77:f6:32: 0c:9b:04:3d:fc:f9:5a:b7:d0:3f:fe:70:e2:bd:08:52:d1:d7: f8:08:c0:f7:0b:dd:a3:dd:78:71:19:b6:7a:dd:4e:30:ad:a2: 8b:b4:c0:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpikAhKQIvigd0bU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQzOGM4MjMtZTQyNC00MWExLTk2MzEtYWEzYjc1YWVh MGM3MB4XDTI1MDcwMjEzMDAwOFoXDTI1MDcwNDEzMDAwMFowLzEtMCsGA1UEAxMk ZmI3MGFlZjEtZjcxYi00ODIzLTg3YjUtNWY2ZGVlZjI5YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j/6lgNhCSVCP6FZDeaUJ3TCJZ/wka2j4woh OoV2XK17rIgS4CzwKygtkADgPxUxwblMcy8R8+OxKvt9EI2bFMuKdGFAvVoeLKvN 0okE+vTFvrtw04/MHqbMQ4To7LWHzguufcclEIyKJOdZIPxM4+3EH+bPzPUclCcF unexzYBFklEIWsh6tJnzPqynuTXocT5LR9liK4WpqhevLazU6136xYAsuyOlm6Vl djTh1q04KXP7yPYa8bRAq+f137toxED6j7iwj4Mw/D4euAMgSYKH7RGJ5Y+XYw8y tuK2v413+JO1YdLFRqbw13n6IFhMPfAuruqj0J7tmDWAzkbHzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFWaBJzaL5Qg9jTqnOLFT9Yo6nWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNDM4 YzgyMy1lNDI0LTQxYTEtOTYzMS1hYTNiNzVhZWEwYzcvZDQzOGM4MjMtZTQyNC00 MWExLTk2MzEtYWEzYjc1YWVhMGM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDQzOGM4MjMtZTQyNC00MWExLTk2 MzEtYWEzYjc1YWVhMGM3L2Q0MzhjODIzLWU0MjQtNDFhMS05NjMxLWFhM2I3NWFl YTBjNy5jcmwwHwYDVR0jBBgwFoAU47w3VoVo5ZH1j5/93tQWKaNT2JMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNDM4YzgyMy1lNDI0LTQxYTEtOTYzMS1hYTNi NzVhZWEwYzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBxFwnLmJNjkvh79EI65YVK Ve9KMVYNQqaR9LAbYGQbleiFMngjmqGsCb4pZo6hzW6KjQ4znV3VTzMf/dmCizaM KomaLjRXtfwy5v1TIJtoQM/HwRbPkQeSNgQn1U0Z02dt8YeMvaGiqg7NOwRPsOak s0ns9/d8sjm3ebQm6U6bV5DPnbSWE4UH0/7CpSlWLkKKIg8Ug/254uzzW74yTIXR 10j+NnIz1YKH8LYFPy49oixYk+sBjtH7DU3R6SQBkWB3SS9yn0U2Q/x7mT4nNCdH hKyGzZZ39jIMmwQ9/Plat9A//nDivQhS0df4CMD3C92j3XhxGbZ63U4wraKLtMDY -----END CERTIFICATE-----Generated at Thu Jul 3 13:14:23 2025 by rpki-client