$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft File: 5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft (raw, json) Hash identifier: O5qujTa6QT1YxMproBnrOV2qpAZQuIyAn0gHHbk0c/Q= Subject key identifier: 61:42:04:FF:1F:F9:05:66:9F:73:1E:64:2D:01:36:77:24:BE:7A:39 Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 Certificate issuer: /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Certificate serial: 010D0C9F4328584A98121C6EE7B769D2F9743680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft Manifest number: 010D0C9F43285840A34C633AD0744C9C0DA0C41E Signing time: Mon 21 Jul 2025 17:00:03 +0000 Manifest this update: Mon 21 Jul 2025 17:00:03 +0000 Manifest next update: Wed 23 Jul 2025 17:00:00 +0000 Files and hashes: 1: 1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer (hash: DEUMHAl7dunDSrgn2msw13P0HIipo216nWCblu80qqk=) 2: 5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl (hash: q2sV7dtDmaQ6J2xWkVR/tBftcRX4Y6eznLg+VCETRyo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:98:12:1c:6e:e7:b7:69:d2:f9:74:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Validity Not Before: Jul 21 17:00:03 2025 GMT Not After : Jul 23 17:00:00 2025 GMT Subject: CN=c12fc063-070b-4a7f-92a9-70db7b6bcc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:e5:57:6b:b6:20:98:6c:06:d1:b3:fc:c0: 8f:fd:1a:b2:17:9a:53:ae:ce:8e:c7:c2:59:ad:eb: 38:7a:4f:10:fc:41:c4:a8:ba:34:7d:2b:4e:04:1a: f0:d4:26:67:00:15:e7:fc:db:f1:86:7e:2c:bf:d1: d6:b1:46:40:62:74:85:d6:bf:23:74:fb:c9:b6:be: 42:d7:47:a9:5d:31:3f:48:f3:60:a2:e6:4c:14:28: 74:44:d6:bf:cc:e7:1e:34:cc:ec:da:c7:d0:07:b0: 77:34:24:46:22:6d:8e:d5:3e:64:91:c9:de:9f:02: 0c:8d:c0:42:34:f7:41:79:d9:93:94:0a:3e:3f:5d: 35:f3:43:5c:90:47:4f:02:5b:41:3b:2d:1e:af:cd: e0:30:18:9b:a8:e6:2a:b8:8e:50:8b:09:a0:ad:90: f7:85:96:61:7a:35:7f:bd:1e:77:a9:00:6e:e1:06: 12:91:ed:9f:15:77:b5:32:13:52:f3:55:fa:1d:cb: b1:08:0e:1f:73:6d:cc:9a:68:f8:b4:10:91:2d:b2: b7:3d:af:98:72:3e:3b:b8:24:98:57:a5:b2:dd:33: 51:4f:c8:b4:1a:e7:4f:55:ec:eb:6f:ba:ae:db:68: 81:1c:13:cc:de:25:f6:c2:f1:0b:cf:27:42:92:1c: 72:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:42:04:FF:1F:F9:05:66:9F:73:1E:64:2D:01:36:77:24:BE:7A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl X509v3 Authority Key Identifier: keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b5:ab:68:93:3e:08:c0:bf:df:0f:fe:47:3c:e2:31:16:b8: fd:49:8a:50:d1:24:c8:be:ca:f5:55:41:d4:a1:a2:57:fd:95: af:26:84:82:46:da:b0:bf:a5:f6:cb:2e:c8:67:fa:0c:1e:a5: ae:4c:88:ae:a4:99:ec:d9:4d:68:a8:a7:b9:e8:b8:46:45:83: 59:a0:1a:f0:69:bf:a8:6e:2a:11:8c:df:f5:72:2c:b8:5c:9a: 1e:8e:9e:fe:ff:cd:dd:68:22:5f:a5:d0:c1:e2:74:21:bc:1f: 22:aa:11:51:ce:13:36:20:74:84:60:f7:c1:73:08:d2:79:b6: 1f:b2:d5:f2:4e:46:97:ca:47:02:10:3a:d9:64:82:ca:9d:41: 33:cc:0d:e9:25:06:b3:f5:08:58:5a:8b:d0:9d:36:92:f3:21: 98:3d:5d:46:87:d3:06:fe:0b:77:a5:d9:23:d2:2c:25:b6:16: 84:d7:a6:7f:1f:69:ec:42:e4:29:7e:60:c1:fa:b5:ac:12:29: 02:ca:37:dd:ce:c7:32:cc:f6:e5:45:25:52:7d:5d:62:6f:db: 66:d4:12:36:28:f1:c0:da:58:95:8b:e7:c4:99:c5:70:54:40: d0:9e:39:c2:bc:76:35:86:d3:96:e3:98:c1:43:50:9e:0e:25: 0a:59:92:8e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqYEhxu57dp0vl0NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2M2UyZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZk MjNhMB4XDTI1MDcyMTE3MDAwM1oXDTI1MDcyMzE3MDAwMFowLzEtMCsGA1UEAxMk YzEyZmMwNjMtMDcwYi00YTdmLTkyYTktNzBkYjdiNmJjYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw/lV2u2IJhsBtGz/MCP/RqyF5pTrs6Ox8JZ res4ek8Q/EHEqLo0fStOBBrw1CZnABXn/Nvxhn4sv9HWsUZAYnSF1r8jdPvJtr5C 10epXTE/SPNgouZMFCh0RNa/zOceNMzs2sfQB7B3NCRGIm2O1T5kkcnenwIMjcBC NPdBedmTlAo+P10180NckEdPAltBOy0er83gMBibqOYquI5QiwmgrZD3hZZhejV/ vR53qQBu4QYSke2fFXe1MhNS81X6HcuxCA4fc23Mmmj4tBCRLbK3Pa+Ycj47uCSY V6Wy3TNRT8i0GudPVezrb7qu22iBHBPM3iX2wvELzydCkhxyWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGFCBP8f+QVmn3MeZC0BNnckvno5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYz ZTJmOS00ZDliLTQwYzMtYWZhMi1jZTcwNDVmZmQyM2EvNTU2M2UyZjktNGQ5Yi00 MGMzLWFmYTItY2U3MDQ1ZmZkMjNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTU2M2UyZjktNGQ5Yi00MGMzLWFm YTItY2U3MDQ1ZmZkMjNhLzU1NjNlMmY5LTRkOWItNDBjMy1hZmEyLWNlNzA0NWZm ZDIzYS5jcmwwHwYDVR0jBBgwFoAUhbeIIvLI4ITVAeYA4S15QSg2pWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1jZTcw NDVmZmQyM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBtatokz4IwL/fD/5HPOIx Frj9SYpQ0STIvsr1VUHUoaJX/ZWvJoSCRtqwv6X2yy7IZ/oMHqWuTIiupJns2U1o qKe56LhGRYNZoBrwab+obioRjN/1ciy4XJoejp7+/83daCJfpdDB4nQhvB8iqhFR zhM2IHSEYPfBcwjSebYfstXyTkaXykcCEDrZZILKnUEzzA3pJQaz9QhYWovQnTaS 8yGYPV1Gh9MG/gt3pdkj0iwlthaE16Z/H2nsQuQpfmDB+rWsEikCyjfdzscyzPbl RSVSfV1ib9tm1BI2KPHA2liVi+fEmcVwVEDQnjnCvHY1htOW45jBQ1CeDiUKWZKO -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:03 2025 by rpki-client