$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft File: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft (raw, json) Hash identifier: cuphqBY8c7NntfpXctlTEDZuJh/YEDeT+Kc4Jxq+K4w= Subject key identifier: 4B:86:A8:0A:72:37:18:2A:5B:AF:87:B3:03:7E:74:ED:46:E3:98:33 Authority key identifier: B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA Certificate issuer: /CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Certificate serial: 010D0C9F4328584A5941B4BCB80C8B6672F46880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft Manifest number: 010D0C9F43285848EB9EF9CB5EADD579954BD789 Signing time: Sun 29 Jun 2025 05:00:03 +0000 Manifest this update: Sun 29 Jun 2025 05:00:03 +0000 Manifest next update: Tue 01 Jul 2025 05:00:00 +0000 Files and hashes: 1: a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa (hash: FQlzmhbArM4+89Yl9XQtH67iCGxxr3wkU6oCLltAie0=) 2: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl (hash: ezuxcahmVVVDmE5TBoJcd6sNGSRSoP/WC/4kGcYp8zg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:41:b4:bc:b8:0c:8b:66:72:f4:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Validity Not Before: Jun 29 05:00:03 2025 GMT Not After : Jul 1 05:00:00 2025 GMT Subject: CN=ebf4227b-1630-4541-8ea8-37f142056798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:8e:f9:60:20:dc:4a:c1:9a:4f:a6:ae:af: f1:4c:1d:9a:22:52:cd:71:43:bf:26:1e:94:e7:d2: 42:b0:2d:31:2c:f4:51:24:77:d7:55:89:44:ab:e0: 42:cc:50:dd:78:ed:1b:42:a3:98:32:c0:f1:ee:cb: d6:ed:f6:f5:01:02:47:ae:a1:85:26:25:1d:92:d5: 22:7b:74:d5:0e:f9:52:ec:19:87:27:ab:b1:b9:26: bc:43:6d:ee:69:c5:07:03:58:2b:c6:2e:a0:31:51: 9d:b3:19:ab:bb:02:b2:a5:15:98:31:72:78:42:f7: 17:30:25:43:9d:44:d6:d0:ad:c2:e8:e3:63:c4:b2: 73:4e:72:b6:d2:97:9b:7c:a4:38:77:83:ce:66:2d: c5:7c:50:2c:0c:11:b8:ec:6e:0a:89:f8:82:d0:5e: 9d:01:a7:22:bf:d5:7c:20:0d:6d:70:58:a5:e3:36: cc:e4:1a:ae:9a:0b:9f:9c:f5:58:02:47:71:f4:ed: 0a:66:af:c2:43:16:90:38:14:64:18:d0:c6:46:8d: d8:74:a5:a8:bf:3f:c1:e6:0f:90:ee:58:90:6b:70: e5:82:64:c8:e7:58:5f:4f:b2:af:73:e7:60:85:fc: 6f:d0:f1:08:fa:9c:12:e6:b6:06:44:8b:d0:52:43: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:86:A8:0A:72:37:18:2A:5B:AF:87:B3:03:7E:74:ED:46:E3:98:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl X509v3 Authority Key Identifier: keyid:B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:3c:ea:f1:03:ce:8a:8c:b1:70:f8:d8:92:c9:f7:7c:70:60: 1e:6d:7b:ae:9e:a0:d3:0f:06:e9:36:27:ca:ec:9c:bf:c5:ef: 7f:af:52:6d:29:80:c4:44:d1:5e:0b:2f:c2:aa:e0:1b:d6:86: c2:6e:43:0b:c8:e2:d7:89:3d:65:d4:4f:6f:94:c3:6b:96:1e: af:fc:5f:01:bf:45:8d:b0:8d:66:61:b5:75:ab:da:27:74:56: d1:48:95:c4:e2:e7:b9:3d:8d:06:ca:76:23:53:c6:de:06:89: 36:fa:d6:35:5b:f2:ec:bf:07:be:ad:fe:6c:8b:a7:f2:41:80: 01:53:97:e3:1a:33:f9:0b:eb:db:ca:b3:73:e5:42:8d:43:c5: 51:a2:cd:6c:22:af:8d:0a:5b:29:bd:90:31:df:b3:db:78:76: e6:f8:d0:27:c9:79:a2:4f:c0:8b:64:fc:a9:e6:af:d6:dc:26: 76:b4:b1:bd:32:d4:c1:23:fd:01:57:5b:ef:32:b7:c7:1a:12: f7:01:3a:bc:bd:53:5a:de:35:8e:2a:16:4d:63:d6:4b:96:50: 21:ce:b0:a9:dc:9f:e4:1a:a0:7b:56:e8:84:2a:54:c2:f8:a5: 5e:c9:55:71:1e:f9:b0:76:83:6f:7e:ad:b7:2e:62:a2:36:8d: 15:4c:02:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZQbS8uAyLZnL0aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhNTM4YWUtZmEyNS00YTM4LWIxZjEtMzIwZTJlOWYx NmVmMB4XDTI1MDYyOTA1MDAwM1oXDTI1MDcwMTA1MDAwMFowLzEtMCsGA1UEAxMk ZWJmNDIyN2ItMTYzMC00NTQxLThlYTgtMzdmMTQyMDU2Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorqO+WAg3ErBmk+mrq/xTB2aIlLNcUO/Jh6U 59JCsC0xLPRRJHfXVYlEq+BCzFDdeO0bQqOYMsDx7svW7fb1AQJHrqGFJiUdktUi e3TVDvlS7BmHJ6uxuSa8Q23uacUHA1grxi6gMVGdsxmruwKypRWYMXJ4QvcXMCVD nUTW0K3C6ONjxLJzTnK20pebfKQ4d4POZi3FfFAsDBG47G4KifiC0F6dAaciv9V8 IA1tcFil4zbM5BqumgufnPVYAkdx9O0KZq/CQxaQOBRkGNDGRo3YdKWovz/B5g+Q 7liQa3DlgmTI51hfT7Kvc+dghfxv0PEI+pwS5rYGRIvQUkMfwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEuGqApyNxgqW6+HswN+dO1G45gzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1 MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBlMmU5ZjE2ZWYvZTZhNTM4YWUtZmEyNS00 YTM4LWIxZjEtMzIwZTJlOWYxNmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTZhNTM4YWUtZmEyNS00YTM4LWIx ZjEtMzIwZTJlOWYxNmVmL2U2YTUzOGFlLWZhMjUtNGEzOC1iMWYxLTMyMGUyZTlm MTZlZi5jcmwwHwYDVR0jBBgwFoAUtyyMyJ51ztdTHmylketyq4EsCrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBl MmU5ZjE2ZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjPOrxA86KjLFw+NiSyfd8 cGAebXuunqDTDwbpNifK7Jy/xe9/r1JtKYDERNFeCy/CquAb1obCbkMLyOLXiT1l 1E9vlMNrlh6v/F8Bv0WNsI1mYbV1q9ondFbRSJXE4ue5PY0GynYjU8beBok2+tY1 W/Lsvwe+rf5si6fyQYABU5fjGjP5C+vbyrNz5UKNQ8VRos1sIq+NClspvZAx37Pb eHbm+NAnyXmiT8CLZPyp5q/W3CZ2tLG9MtTBI/0BV1vvMrfHGhL3ATq8vVNa3jWO KhZNY9ZLllAhzrCp3J/kGqB7VuiEKlTC+KVeyVVxHvmwdoNvfq23LmKiNo0VTAJg -----END CERTIFICATE-----Generated at Sun Jun 29 16:36:44 2025 by rpki-client