$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft File: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft (raw, json) Hash identifier: BwrLXbRLcAPXjzjavK+nmsEiD8AvlR3K2ZtFHtHvrNk= Subject key identifier: 6C:32:25:39:42:3C:C1:52:15:37:D9:82:1E:A9:AB:6C:A3:C3:17:DD Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584A5A8953ED84C430EA6632712C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft Manifest number: 010D0C9F43285847FF6DB89C0ACD762A7E013ADC Signing time: Sun 29 Jun 2025 16:00:08 +0000 Manifest this update: Sun 29 Jun 2025 16:00:08 +0000 Manifest next update: Wed 02 Jul 2025 16:00:00 +0000 Files and hashes: 1: 9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl (hash: 9ShSbPsgUhpr9AShL51jUQWp4kd4vzSsXp7n+3wE3Do=) 2: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (hash: mAwzoyhNF4lGTvJ2NAyLDixLul6hrf8mgFZZgagVQy4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:89:53:ed:84:c4:30:ea:66:32:71:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Jun 29 16:00:08 2025 GMT Not After : Jul 2 16:00:00 2025 GMT Subject: CN=890e06ab-3816-4ebe-88b0-0f83204c0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:40:6d:2f:af:ef:ca:6c:4c:f8:73:08:4d: 5c:29:2c:e8:59:71:e1:d5:f7:5d:bb:82:c7:d1:ad: b6:6c:5e:73:c9:bd:36:4e:34:a5:e6:5d:80:b7:65: 98:d5:39:4d:8f:b7:f7:5b:ab:d3:15:17:0e:06:79: d8:3f:17:e0:3d:15:dc:50:41:31:21:6e:44:da:12: ef:34:e7:75:88:c9:53:7c:2d:fd:4c:54:9f:42:57: 0e:ce:fb:27:63:9d:fe:32:c2:14:90:7e:12:90:23: ac:c6:da:50:51:39:7d:7c:dc:22:10:7e:59:17:2b: ab:95:64:e0:9c:95:1d:9d:b5:5d:58:66:26:7a:af: 56:d4:e5:27:dd:e0:8d:01:11:26:10:7b:ba:bc:2c: 2b:67:25:5b:5f:9c:a4:d1:89:be:25:ff:a7:9d:da: 3b:8a:fb:80:f0:60:b8:6b:cc:16:4e:97:de:bc:d9: 5f:7b:12:fa:c3:9a:6b:bb:74:e0:74:20:b7:e4:60: d0:c9:af:5f:5a:1f:20:0b:5c:40:dd:cc:57:2c:5f: 4f:c3:41:7f:19:68:b9:a2:05:a0:3e:ea:ae:61:88: be:8e:28:ca:9e:1c:fc:08:46:0c:a5:ec:8c:93:24: ae:98:8e:99:3e:ae:85:fc:6f:23:aa:d6:d1:ed:97: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:32:25:39:42:3C:C1:52:15:37:D9:82:1E:A9:AB:6C:A3:C3:17:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:70:32:d2:68:16:15:98:b4:bb:aa:9e:dc:f8:e1:6d:b3:ab: 10:ea:87:b1:35:14:72:a8:7c:f2:fe:23:c9:e8:16:6e:2e:85: ff:ed:57:10:10:4c:25:19:d5:45:16:01:46:41:85:a1:84:a6: 2e:2f:a9:03:54:ce:22:4a:93:f2:32:5e:51:7f:c5:63:d6:cd: 0d:15:c4:dc:14:35:d9:2d:fa:21:86:b9:4f:12:c4:27:d9:d8: 83:4a:c3:0e:49:01:b7:32:48:09:80:37:24:4a:0d:57:22:90: 80:06:04:ab:0b:aa:f8:5a:b3:c8:2b:ac:74:da:b0:db:e7:9e: 1e:36:d7:69:d8:d8:95:c8:b1:23:60:fd:ba:ab:fe:fe:ea:6e: 1a:ab:df:06:09:77:e2:9b:b3:3f:a7:4a:f3:d9:6f:8a:8a:70: 8a:9a:b0:0f:53:5f:a3:9d:1a:3b:6f:ad:b9:8e:62:d0:31:26: 98:29:e2:af:c0:96:6b:0d:6b:a3:fd:3f:b4:5e:5b:53:41:08: a5:c0:b3:13:16:5a:4f:1f:4a:e2:2d:e3:57:7f:3e:7e:36:35: d3:c1:6e:16:17:06:20:45:16:5e:e6:f4:74:e0:bb:bf:e7:9e: d3:c2:91:df:88:60:b4:3b:a7:5c:4f:a8:02:e1:39:c7:c2:22: 20:c5:9a:cf -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaiVPthMQw6mYycSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MDYyOTE2MDAwOFoXDTI1MDcwMjE2MDAwMFowLzEtMCsGA1UEAxMk ODkwZTA2YWItMzgxNi00ZWJlLTg4YjAtMGY4MzIwNGMwZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnlAbS+v78psTPhzCE1cKSzoWXHh1fddu4LH 0a22bF5zyb02TjSl5l2At2WY1TlNj7f3W6vTFRcOBnnYPxfgPRXcUEExIW5E2hLv NOd1iMlTfC39TFSfQlcOzvsnY53+MsIUkH4SkCOsxtpQUTl9fNwiEH5ZFyurlWTg nJUdnbVdWGYmeq9W1OUn3eCNAREmEHu6vCwrZyVbX5yk0Ym+Jf+nndo7ivuA8GC4 a8wWTpfevNlfexL6w5pru3TgdCC35GDQya9fWh8gC1xA3cxXLF9Pw0F/GWi5ogWg PuquYYi+jijKnhz8CEYMpeyMkySumI6ZPq6F/G8jqtbR7ZcKEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGwyJTlCPMFSFTfZgh6pq2yjwxfdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvOWY3NWU4ZDctZTQ1Zi00 NzY3LTg5MzktYTJjNTM5NGMxZTdjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJcDLSaBYVmLS7qp7c+OFt s6sQ6oexNRRyqHzy/iPJ6BZuLoX/7VcQEEwlGdVFFgFGQYWhhKYuL6kDVM4iSpPy Ml5Rf8Vj1s0NFcTcFDXZLfohhrlPEsQn2diDSsMOSQG3MkgJgDckSg1XIpCABgSr C6r4WrPIK6x02rDb554eNtdp2NiVyLEjYP26q/7+6m4aq98GCXfim7M/p0rz2W+K inCKmrAPU1+jnRo7b625jmLQMSaYKeKvwJZrDWuj/T+0XltTQQilwLMTFlpPH0ri LeNXfz5+NjXTwW4WFwYgRRZe5vR04Lu/557TwpHfiGC0O6dcT6gC4TnHwiIgxZrP -----END CERTIFICATE-----Generated at Mon Jun 30 16:18:58 2025 by rpki-client