$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft File: 4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft (raw, json) Hash identifier: k+fj6BPcBBWukQozRjYJMbJYeatM86PVojWFLvukHCw= Subject key identifier: 4E:22:C0:DC:35:1D:D6:85:7D:D0:11:BD:90:3B:AE:8A:BA:7A:61:6A Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Certificate serial: 010D0C9F4328584A94D0501580FEEAF8B0BE0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft Manifest number: 010D0C9F4328584073A85479346DD02524915F26 Signing time: Sun 20 Jul 2025 13:00:03 +0000 Manifest this update: Sun 20 Jul 2025 13:00:03 +0000 Manifest next update: Wed 23 Jul 2025 13:00:00 +0000 Files and hashes: 1: 4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl (hash: OoweBVo0XH1iaWVs7nYt27r7wifgRkD66Hdny5R3rSo=) 2: 98f32648-a32e-38aa-9fd3-716eb026852a.roa (hash: 4nrW1ZSCB7lqw7CnDgkP3i06IK7WnKB636JXRftUIlI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:50:15:80:fe:ea:f8:b0:be:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Validity Not Before: Jul 20 13:00:03 2025 GMT Not After : Jul 23 13:00:00 2025 GMT Subject: CN=8b866b5d-7b08-41a7-9673-a2194cd71a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:a4:cf:24:b2:b6:d4:28:a2:16:1f:f5:e1: 27:d9:a5:ca:6c:eb:45:76:e1:9e:8d:5f:f0:fc:70: 53:56:35:8f:37:13:2f:f1:12:88:bd:a5:fd:6e:82: 5c:f6:83:86:b5:35:1a:fe:66:c2:ee:0a:b3:4d:9d: 56:cb:ab:d5:d5:9a:38:ca:39:3c:b9:1a:75:d6:d4: 5a:42:83:05:c4:8e:65:b1:a6:f2:bd:e7:ec:f6:ab: 01:67:57:36:25:fe:ab:4e:f6:ff:a4:39:e2:75:e5: 77:c3:fb:c8:1f:50:c1:0e:02:2b:6d:fa:c8:5d:94: 32:5c:91:7c:58:a5:d9:16:07:dd:a8:5a:b0:65:4f: 92:22:fe:fa:17:91:cc:d1:78:28:df:72:83:25:d5: ca:ba:54:f0:ad:5b:39:51:88:3e:d3:4d:95:c9:05: 20:27:43:ab:52:52:d4:64:ef:70:d1:ad:6f:ef:5f: a7:1c:14:ae:0c:50:76:ed:4b:76:71:05:7c:b1:0c: 74:e1:96:2d:3d:c9:05:be:2c:2c:38:48:40:f6:2c: 6a:44:1c:8a:d9:76:5d:8e:ab:f5:1b:ef:28:f5:39: 16:11:cd:77:35:2d:72:c9:9a:ce:6a:b4:8b:67:86: 57:12:9d:6a:8b:7a:e6:1d:de:82:d3:88:26:a2:01: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:C0:DC:35:1D:D6:85:7D:D0:11:BD:90:3B:AE:8A:BA:7A:61:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl X509v3 Authority Key Identifier: keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ed:d7:ef:c2:a2:82:af:90:2a:d2:29:4b:be:8a:e1:62:63:ca: a9:59:65:94:32:b0:21:d7:37:15:3f:92:13:54:96:ed:e7:af: af:01:ed:2f:4b:9d:63:99:92:c4:a2:96:6a:bd:d9:da:b7:9c: e1:db:6a:fd:c0:94:5f:17:aa:36:fd:c5:c9:22:27:65:72:e3: ab:8b:6a:ba:47:2f:96:68:e1:0b:fc:49:f7:47:fa:a2:ba:06: bc:52:c0:7f:bb:a6:3b:39:4e:52:f9:c1:97:ed:35:65:59:23: 13:59:6c:5b:12:b9:2f:e1:70:67:79:80:e9:53:e5:d3:04:80: 65:97:f4:1d:39:5c:4f:60:cc:59:6f:73:5c:7f:e8:fc:22:fc: dd:fb:ed:21:ec:6c:0f:96:54:6b:63:cc:02:46:22:95:99:8a: 21:cd:43:39:30:c9:91:1a:0e:f3:b9:17:87:58:f9:7f:1c:f1: e5:7a:82:fb:95:71:65:47:e2:a4:60:b2:f2:06:c3:a9:de:d7: 3a:d7:d6:64:82:8e:b1:c9:48:47:16:47:8c:d8:55:d8:af:f8: fc:9e:74:03:78:ec:9c:76:0c:bb:e5:18:9a:79:d7:f0:24:64: 28:a2:17:7d:9b:8a:06:45:6e:34:b7:9d:4e:11:11:06:3a:d8: d1:90:5c:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqU0FAVgP7q+LC+DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy ZTVlMB4XDTI1MDcyMDEzMDAwM1oXDTI1MDcyMzEzMDAwMFowLzEtMCsGA1UEAxMk OGI4NjZiNWQtN2IwOC00MWE3LTk2NzMtYTIxOTRjZDcxYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXikzySyttQoohYf9eEn2aXKbOtFduGejV/w /HBTVjWPNxMv8RKIvaX9boJc9oOGtTUa/mbC7gqzTZ1Wy6vV1Zo4yjk8uRp11tRa QoMFxI5lsabyvefs9qsBZ1c2Jf6rTvb/pDnideV3w/vIH1DBDgIrbfrIXZQyXJF8 WKXZFgfdqFqwZU+SIv76F5HM0Xgo33KDJdXKulTwrVs5UYg+002VyQUgJ0OrUlLU ZO9w0a1v71+nHBSuDFB27Ut2cQV8sQx04ZYtPckFviwsOEhA9ixqRByK2XZdjqv1 G+8o9TkWEc13NS1yyZrOarSLZ4ZXEp1qi3rmHd6C04gmogE1SwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE4iwNw1HdaFfdARvZA7roq6emFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1 ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvNGZiNWY2NDgtZDhiNC00 ZWUyLWE0M2QtMWJhMDFiMDQyZTVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0 M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0 MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw MWIwNDJlNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDt1+/CooKvkCrSKUu+iuFi Y8qpWWWUMrAh1zcVP5ITVJbt56+vAe0vS51jmZLEopZqvdnat5zh22r9wJRfF6o2 /cXJIidlcuOri2q6Ry+WaOEL/En3R/qiuga8UsB/u6Y7OU5S+cGX7TVlWSMTWWxb Erkv4XBneYDpU+XTBIBll/QdOVxPYMxZb3Ncf+j8Ivzd++0h7GwPllRrY8wCRiKV mYohzUM5MMmRGg7zuReHWPl/HPHleoL7lXFlR+KkYLLyBsOp3tc619Zkgo6xyUhH FkeM2FXYr/j8nnQDeOycdgy75RiaedfwJGQoohd9m4oGRW40t51OEREGOtjRkFx5 -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:22 2025 by rpki-client