$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.mft File: d554e897-c833-44b1-b0a8-49a6b5ded5f6.mft (raw, json) Hash identifier: IKo2fdtc25JbAkODZDj2fCgy+T6ksMkLe4NdbYDDH0Y= Subject key identifier: 51:FF:73:80:90:EF:7D:15:25:AD:8F:6E:B3:ED:C0:72:76:E8:BE:4D Authority key identifier: 71:9F:BE:59:0F:19:E1:AF:A1:3D:7A:81:D0:4E:B7:71:93:5C:87:2B Certificate issuer: /CN=d554e897-c833-44b1-b0a8-49a6b5ded5f6 Certificate serial: 010D0C9F4328584A934D2E429D8B274D8089B640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.mft Manifest number: 010D0C9F4328584A8AF718D3EED4CBA8BE436C50 Signing time: Sun 20 Jul 2025 00:00:03 +0000 Manifest this update: Sun 20 Jul 2025 00:00:03 +0000 Manifest next update: Tue 22 Jul 2025 00:00:00 +0000 Files and hashes: 1: d554e897-c833-44b1-b0a8-49a6b5ded5f6.crl (hash: H+a8+xpfTlTgDphsTRoS86Gfep1d1XXjEWstew38rwg=) 2: ffc753f5-bb59-33dd-9003-d026a1e46a92.roa (hash: SkF2bAMeGJS5CeWGyF8/NboANWUAtH/5Ytd9QnNghnk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:93:4d:2e:42:9d:8b:27:4d:80:89:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d554e897-c833-44b1-b0a8-49a6b5ded5f6 Validity Not Before: Jul 20 00:00:03 2025 GMT Not After : Jul 22 00:00:00 2025 GMT Subject: CN=95cf5a33-a8d2-44dd-93c8-71879891b2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:c6:7a:0d:c6:31:fb:49:47:ca:25:48:ed: 94:52:57:2c:a3:5f:13:73:de:43:c5:da:e6:6c:60: f2:5c:d3:90:df:30:c0:9b:63:d1:cf:f4:64:ae:b1: 29:0c:82:a3:1b:ab:86:97:d2:2f:08:71:7c:1a:8d: db:e1:77:86:09:0a:07:16:9a:fe:ed:9a:ff:7a:76: 86:9d:60:19:ae:50:5b:49:47:c8:ad:9f:9b:b4:9e: 77:a8:73:ab:fc:a6:d2:87:24:e2:6a:18:fa:02:03: 58:b4:57:da:83:84:2f:bd:98:d4:84:af:e2:01:ed: 49:48:d7:61:f4:39:ef:47:f4:0c:e4:a5:f7:c2:25: e2:18:a0:76:4c:dc:69:c3:07:87:4e:f2:52:93:c5: 45:59:b4:12:55:45:c5:52:44:de:1e:bd:cf:42:63: 9f:44:e6:be:b0:5c:a7:0b:b8:a0:59:f8:67:92:1c: 2d:6d:2c:81:0a:0a:a0:d7:92:4e:b1:e4:d8:d1:2b: e1:9a:3b:ce:43:65:be:d8:7f:fe:08:3a:da:b3:b0: 2e:97:ff:6e:c7:ef:24:48:c1:92:51:ba:77:52:09: 8f:7f:22:10:18:fd:3d:93:54:6b:9f:cf:2d:26:65: f6:9f:6c:33:05:24:3d:5f:4d:b0:64:82:69:ca:d0: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:73:80:90:EF:7D:15:25:AD:8F:6E:B3:ED:C0:72:76:E8:BE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6/d554e897-c833-44b1-b0a8-49a6b5ded5f6.crl X509v3 Authority Key Identifier: keyid:71:9F:BE:59:0F:19:E1:AF:A1:3D:7A:81:D0:4E:B7:71:93:5C:87:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d554e897-c833-44b1-b0a8-49a6b5ded5f6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8c:ef:ec:0f:59:ab:10:d3:ef:8b:4e:2d:c8:69:b7:77:a5: ff:4d:dc:c0:13:85:0c:f4:4c:ae:98:7f:76:7a:86:33:4e:4e: 8e:0d:ac:ad:78:93:28:73:46:c5:84:ff:74:5f:f2:4f:cd:13: c7:4d:f4:74:69:fa:6d:b1:c0:07:96:63:ef:45:17:94:eb:a1: ee:77:f5:b4:a7:a6:f4:d7:27:72:58:e7:7d:3d:7a:af:d4:53: 0d:a0:b1:0c:3a:79:00:95:f7:20:93:b2:b5:8f:b5:73:06:c8: a5:8a:ad:4a:93:a5:ef:2b:e2:a7:51:fd:dd:49:a6:c1:e8:62: 21:84:32:59:36:ca:69:fe:19:e3:29:9b:0d:38:49:1f:20:86: 59:3b:75:0d:a5:c9:81:1a:07:b3:53:05:b6:24:d5:b6:ff:33: 7b:3f:c5:44:f6:b9:47:53:0d:98:75:49:03:29:b9:97:ab:da: c5:c0:6c:e2:0a:41:72:83:1f:a1:5f:6b:fe:85:c8:29:98:95: 03:99:ef:57:18:d8:8e:01:b3:0c:2a:72:2c:f9:e5:11:07:25: 4c:82:33:67:a2:e2:2d:1c:15:7a:c1:59:a3:2f:83:de:d0:9d: e9:41:78:23:58:f5:bd:eb:de:72:b3:fb:ff:b6:ab:a0:2d:31: 04:fd:6e:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqTTS5CnYsnTYCJtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU1NGU4OTctYzgzMy00NGIxLWIwYTgtNDlhNmI1ZGVk NWY2MB4XDTI1MDcyMDAwMDAwM1oXDTI1MDcyMjAwMDAwMFowLzEtMCsGA1UEAxMk OTVjZjVhMzMtYThkMi00NGRkLTkzYzgtNzE4Nzk4OTFiMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXTGeg3GMftJR8olSO2UUlcso18Tc95Dxdrm bGDyXNOQ3zDAm2PRz/RkrrEpDIKjG6uGl9IvCHF8Go3b4XeGCQoHFpr+7Zr/enaG nWAZrlBbSUfIrZ+btJ53qHOr/KbShyTiahj6AgNYtFfag4QvvZjUhK/iAe1JSNdh 9DnvR/QM5KX3wiXiGKB2TNxpwweHTvJSk8VFWbQSVUXFUkTeHr3PQmOfROa+sFyn C7igWfhnkhwtbSyBCgqg15JOseTY0SvhmjvOQ2W+2H/+CDras7Aul/9ux+8kSMGS Ubp3UgmPfyIQGP09k1Rrn88tJmX2n2wzBSQ9X02wZIJpytAwhQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFH/c4CQ730VJa2PbrPtwHJ26L5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNTU0 ZTg5Ny1jODMzLTQ0YjEtYjBhOC00OWE2YjVkZWQ1ZjYvZDU1NGU4OTctYzgzMy00 NGIxLWIwYTgtNDlhNmI1ZGVkNWY2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDU1NGU4OTctYzgzMy00NGIxLWIw YTgtNDlhNmI1ZGVkNWY2L2Q1NTRlODk3LWM4MzMtNDRiMS1iMGE4LTQ5YTZiNWRl ZDVmNi5jcmwwHwYDVR0jBBgwFoAUcZ++WQ8Z4a+hPXqB0E63cZNchyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNTU0ZTg5Ny1jODMzLTQ0YjEtYjBhOC00OWE2 YjVkZWQ1ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLjO/sD1mrENPvi04tyGm3 d6X/TdzAE4UM9EyumH92eoYzTk6ODayteJMoc0bFhP90X/JPzRPHTfR0afptscAH lmPvRReU66Hud/W0p6b01ydyWOd9PXqv1FMNoLEMOnkAlfcgk7K1j7VzBsiliq1K k6XvK+KnUf3dSabB6GIhhDJZNspp/hnjKZsNOEkfIIZZO3UNpcmBGgezUwW2JNW2 /zN7P8VE9rlHUw2YdUkDKbmXq9rFwGziCkFygx+hX2v+hcgpmJUDme9XGNiOAbMM KnIs+eURByVMgjNnouItHBV6wVmjL4Pe0J3pQXgjWPW9695ys/v/tqugLTEE/W6L -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:13 2025 by rpki-client