$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft File: 2d400a27-be93-4337-a967-4cb74da5710d.mft (raw, json) Hash identifier: k61zHJK1/2/q5ILraEg+w6hBvSO9wH4wbvBVzj3W+wo= Subject key identifier: 52:77:39:FE:2A:4A:24:43:97:0F:4B:37:19:9D:41:F0:80:E0:4A:E0 Authority key identifier: BB:56:7A:4E:E9:F8:8B:3E:0C:D8:5B:5D:3C:B8:C7:70:17:54:F0:60 Certificate issuer: /CN=2d400a27-be93-4337-a967-4cb74da5710d Certificate serial: 010D0C9F4328584A6324F6A379317A0B3E59F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft Manifest number: 010D0C9F4328584A6324F6A74940285E1DD3BC01 Signing time: Wed 02 Jul 2025 18:00:10 +0000 Manifest this update: Wed 02 Jul 2025 18:00:10 +0000 Manifest next update: Sat 05 Jul 2025 18:00:00 +0000 Files and hashes: 1: 2d400a27-be93-4337-a967-4cb74da5710d.crl (hash: y/+ut4F1eelRm5j+bL3Jey2qm8MF1QL1iEoAPIps+mc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:24:f6:a3:79:31:7a:0b:3e:59:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d400a27-be93-4337-a967-4cb74da5710d Validity Not Before: Jul 2 18:00:10 2025 GMT Not After : Jul 5 18:00:00 2025 GMT Subject: CN=830d5374-1b2f-48db-bcc0-9d9b897bd0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:26:95:b9:5e:0f:aa:47:6e:c4:25:d8:6c: 75:85:61:f4:b9:89:de:3f:24:07:93:de:15:a2:da: 93:35:9e:bc:39:0f:08:e6:cb:dc:83:7e:51:f4:1e: 7f:04:7a:73:12:f6:81:54:50:2f:a4:21:ea:17:bc: a7:91:d9:f8:66:59:47:cf:1d:60:5d:4f:56:3c:16: 07:12:7f:21:49:75:11:a4:32:c1:68:48:01:09:fe: e3:52:ee:1b:13:e4:ef:24:f4:2c:e8:28:96:1d:3f: 5b:d0:74:f4:75:9a:0e:8e:87:56:09:0e:da:f4:0f: 1e:28:58:f5:f0:5a:e4:0b:d6:65:0a:4b:37:b4:4b: 17:ec:85:3c:9c:4f:bc:8f:ab:e0:d9:a3:b9:76:1a: 8c:3a:5e:14:9b:27:cd:55:04:18:fd:50:f3:de:94: 18:36:1f:24:f3:e8:9c:0a:c5:30:ca:ea:2d:43:c3: 66:a1:38:62:8b:53:c9:f1:b5:fb:66:4e:20:8a:20: 86:87:91:9c:d0:cb:86:cd:ca:a3:43:56:c3:c4:ae: b7:12:af:5b:3b:48:5b:da:b9:1b:c0:98:30:0f:fa: 9b:84:a8:2d:0a:b7:a2:1f:6a:0e:3a:e3:16:4f:a3: 66:bc:18:2a:90:36:2e:bf:88:b1:4b:ab:c5:17:99: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:39:FE:2A:4A:24:43:97:0F:4B:37:19:9D:41:F0:80:E0:4A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d/2d400a27-be93-4337-a967-4cb74da5710d.crl X509v3 Authority Key Identifier: keyid:BB:56:7A:4E:E9:F8:8B:3E:0C:D8:5B:5D:3C:B8:C7:70:17:54:F0:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d400a27-be93-4337-a967-4cb74da5710d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:14:84:ad:c9:01:b5:c9:c9:40:0f:8e:e8:d3:7a:7d:2e:de: 06:70:b6:e1:4f:c4:7b:4e:5a:3f:05:b9:dc:a2:a8:95:4e:48: 68:62:22:82:8c:6a:58:db:7e:52:f1:6c:73:5b:cf:eb:d1:da: 8d:8c:da:29:73:4f:12:0d:40:4c:d2:61:1d:2c:74:0d:5f:fb: db:b4:11:57:b2:ca:31:a7:56:f1:72:c0:95:82:76:04:84:9f: 3f:a7:93:94:b5:22:3f:a5:9a:ca:c2:76:32:68:9a:30:9e:98: 62:12:41:85:0e:d9:cf:90:d6:ec:51:e8:0a:6e:5e:85:9b:b5: 88:0c:d0:33:f7:b4:ac:13:ac:29:4e:51:03:4d:04:01:20:ab: e0:10:f2:44:e7:53:43:16:b1:b8:f7:3d:c3:1f:2c:eb:b3:c5: a7:13:e4:20:32:0b:5d:be:f2:de:67:58:cf:80:ce:83:82:22: ce:ac:4e:60:83:a7:61:ea:cb:fb:a7:0c:75:7f:a5:7e:f8:99: 70:ed:22:53:8e:93:62:aa:10:e3:bf:56:a3:b3:95:b9:3b:0d: 16:78:41:e9:62:5d:98:89:fc:b0:fd:3a:4e:69:d9:e2:2e:37: fd:01:b8:31:b3:dc:d2:7b:ae:19:28:63:79:aa:d3:cd:c8:80: fd:ee:c0:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjJPajeTF6Cz5Z8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0MDBhMjctYmU5My00MzM3LWE5NjctNGNiNzRkYTU3 MTBkMB4XDTI1MDcwMjE4MDAxMFoXDTI1MDcwNTE4MDAwMFowLzEtMCsGA1UEAxMk ODMwZDUzNzQtMWIyZi00OGRiLWJjYzAtOWQ5Yjg5N2JkMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsComlbleD6pHbsQl2Gx1hWH0uYnePyQHk94V otqTNZ68OQ8I5svcg35R9B5/BHpzEvaBVFAvpCHqF7ynkdn4ZllHzx1gXU9WPBYH En8hSXURpDLBaEgBCf7jUu4bE+TvJPQs6CiWHT9b0HT0dZoOjodWCQ7a9A8eKFj1 8FrkC9ZlCks3tEsX7IU8nE+8j6vg2aO5dhqMOl4UmyfNVQQY/VDz3pQYNh8k8+ic CsUwyuotQ8NmoThii1PJ8bX7Zk4giiCGh5Gc0MuGzcqjQ1bDxK63Eq9bO0hb2rkb wJgwD/qbhKgtCreiH2oOOuMWT6NmvBgqkDYuv4ixS6vFF5lj6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFJ3Of4qSiRDlw9LNxmdQfCA4ErgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDQw MGEyNy1iZTkzLTQzMzctYTk2Ny00Y2I3NGRhNTcxMGQvMmQ0MDBhMjctYmU5My00 MzM3LWE5NjctNGNiNzRkYTU3MTBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQ0MDBhMjctYmU5My00MzM3LWE5 NjctNGNiNzRkYTU3MTBkLzJkNDAwYTI3LWJlOTMtNDMzNy1hOTY3LTRjYjc0ZGE1 NzEwZC5jcmwwHwYDVR0jBBgwFoAUu1Z6Tun4iz4M2FtdPLjHcBdU8GAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDQwMGEyNy1iZTkzLTQzMzctYTk2Ny00Y2I3 NGRhNTcxMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKFIStyQG1yclAD47o03p9 Lt4GcLbhT8R7Tlo/BbncoqiVTkhoYiKCjGpY235S8WxzW8/r0dqNjNopc08SDUBM 0mEdLHQNX/vbtBFXssoxp1bxcsCVgnYEhJ8/p5OUtSI/pZrKwnYyaJownphiEkGF DtnPkNbsUegKbl6Fm7WIDNAz97SsE6wpTlEDTQQBIKvgEPJE51NDFrG49z3DHyzr s8WnE+QgMgtdvvLeZ1jPgM6DgiLOrE5gg6dh6sv7pwx1f6V++Jlw7SJTjpNiqhDj v1ajs5W5Ow0WeEHpYl2Yifyw/TpOadniLjf9Abgxs9zSe64ZKGN5qtPNyID97sCq -----END CERTIFICATE-----Generated at Thu Jul 3 23:29:04 2025 by rpki-client