$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft File: de519df3-4594-450e-ac51-a7e085408381.mft (raw, json) Hash identifier: Oe97tLCJI3W0fOeJe7rKoYOeA1LWAIQO2e+ULDEByaU= Subject key identifier: C9:BD:9A:38:82:FE:9F:0A:A1:8F:30:D1:1D:DC:B5:54:B6:10:06:D5 Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381 Certificate serial: 010D0C9F4328584A95A0CD9B0C746CA33A896200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft Manifest number: 010D0C9F4328584A7C8892862C8910CC3DEF698C Signing time: Sun 20 Jul 2025 20:00:08 +0000 Manifest this update: Sun 20 Jul 2025 20:00:08 +0000 Manifest next update: Tue 22 Jul 2025 20:00:00 +0000 Files and hashes: 1: de519df3-4594-450e-ac51-a7e085408381.crl (hash: /fd8TkJWKyTyjLGhqLqKRvEgMHaCDZxYpGdg1tAcl0U=) 2: e14e9812-67c6-3d91-835b-4bf6037ab3dc.roa (hash: /jxwyMXKhLkU03SMYcCX7P4XnX25A6P2WDi/LpJrC0A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:95:a0:cd:9b:0c:74:6c:a3:3a:89:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de519df3-4594-450e-ac51-a7e085408381 Validity Not Before: Jul 20 20:00:08 2025 GMT Not After : Jul 22 20:00:00 2025 GMT Subject: CN=4f956aa2-7f47-41bd-91c2-572aadebac77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:17:a0:57:8c:6a:5f:fe:f0:d2:37:f0:ae: aa:a8:44:88:2b:0c:a8:fa:d5:b5:ff:02:52:39:fe: 97:8f:1d:d1:68:73:71:47:5c:a0:aa:ba:d4:f9:82: 3a:7b:04:9f:de:1b:77:4e:ec:d8:b2:a7:52:b9:ec: 08:5a:1d:ff:6a:04:36:ac:da:29:56:c7:61:52:57: 2f:02:36:97:10:6d:44:b6:08:0d:74:05:af:b4:d4: d2:f5:86:17:6f:a2:ed:d7:6a:af:9a:2b:a0:93:a5: 2c:06:0f:07:ed:89:3a:89:58:9b:41:1d:9d:8f:49: d3:e1:bb:35:de:98:78:39:62:a7:76:96:ce:94:1e: af:9f:b3:bd:10:31:4f:f0:be:52:59:02:da:62:fe: e9:cf:b6:82:60:2a:46:da:14:b9:fe:2d:dd:db:1e: 70:68:4f:37:63:61:ad:5c:a7:40:41:ae:45:e6:ab: 71:00:7a:e1:85:dd:ab:25:aa:72:9a:3f:53:05:39: 46:b1:c4:aa:7f:50:2f:3f:bf:17:ee:a3:e5:6a:75: 3c:ed:ae:dc:5f:f4:68:62:b4:2a:7e:6c:3e:2d:50: 81:83:85:bb:d8:70:45:31:28:f9:46:9a:d6:ad:b5: 3b:31:4e:28:2e:77:87:a5:46:90:a4:5e:95:bb:6f: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BD:9A:38:82:FE:9F:0A:A1:8F:30:D1:1D:DC:B5:54:B6:10:06:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl X509v3 Authority Key Identifier: keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:bf:87:7d:fa:ee:70:04:cc:fc:ae:83:8f:95:bd:be:7a: 2a:60:48:03:f9:1a:d8:1d:53:fd:16:da:1d:78:8c:ee:e7:ba: 65:60:20:3b:eb:6d:91:98:61:c6:fc:cd:f2:20:a0:10:a1:a8: 46:16:22:a5:32:cd:ba:4c:44:8f:ce:77:a4:57:4a:0d:40:74: 6e:7c:66:9e:d0:96:24:a2:71:52:e5:a1:22:12:c1:6e:5a:49: 69:34:bc:65:3d:e3:36:e1:25:6a:56:89:db:48:69:03:17:cf: 76:62:c4:94:8e:ae:9e:cf:d8:e3:d1:5a:a5:29:95:2c:11:be: 4d:28:b8:fd:f5:a3:12:d8:66:7d:75:85:bf:50:23:c8:98:d5: 0b:90:65:f0:27:50:61:2f:a1:84:39:f2:a6:33:71:10:55:f4: f7:1c:9d:50:6b:74:30:4a:a4:e8:bc:4e:9b:5d:20:f0:80:e3: 47:3f:a6:ed:5a:3e:49:62:6d:dc:c1:c2:1b:85:38:18:32:05: 9e:c8:18:17:f9:13:1c:a0:75:9f:da:46:0d:a3:c7:1b:e1:e4: 50:7f:c6:32:27:f6:30:78:c4:d3:99:d9:55:84:4d:00:40:f8: af:e5:7a:d7:f1:c1:00:f2:f6:12:25:93:c0:09:28:a6:1e:ca: d7:33:44:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqVoM2bDHRsozqJYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4 MzgxMB4XDTI1MDcyMDIwMDAwOFoXDTI1MDcyMjIwMDAwMFowLzEtMCsGA1UEAxMk NGY5NTZhYTItN2Y0Ny00MWJkLTkxYzItNTcyYWFkZWJhYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUAXoFeMal/+8NI38K6qqESIKwyo+tW1/wJS Of6Xjx3RaHNxR1ygqrrU+YI6ewSf3ht3TuzYsqdSuewIWh3/agQ2rNopVsdhUlcv AjaXEG1EtggNdAWvtNTS9YYXb6Lt12qvmiugk6UsBg8H7Yk6iVibQR2dj0nT4bs1 3ph4OWKndpbOlB6vn7O9EDFP8L5SWQLaYv7pz7aCYCpG2hS5/i3d2x5waE83Y2Gt XKdAQa5F5qtxAHrhhd2rJapymj9TBTlGscSqf1AvP78X7qPlanU87a7cX/RoYrQq fmw+LVCBg4W72HBFMSj5RprWrbU7MU4oLneHpUaQpF6Vu2+1MwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMm9mjiC/p8KoY8w0R3ctVS2EAbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvZGU1MTlkZjMtNDU5NC00 NTBlLWFjNTEtYTdlMDg1NDA4MzgxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw ODU0MDgzODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWLr+HffrucATM/K6Dj5W9 vnoqYEgD+RrYHVP9FtodeIzu57plYCA7622RmGHG/M3yIKAQoahGFiKlMs26TESP znekV0oNQHRufGae0JYkonFS5aEiEsFuWklpNLxlPeM24SVqVonbSGkDF892YsSU jq6ez9jj0VqlKZUsEb5NKLj99aMS2GZ9dYW/UCPImNULkGXwJ1BhL6GEOfKmM3EQ VfT3HJ1Qa3QwSqTovE6bXSDwgONHP6btWj5JYm3cwcIbhTgYMgWeyBgX+RMcoHWf 2kYNo8cb4eRQf8YyJ/YweMTTmdlVhE0AQPiv5XrX8cEA8vYSJZPACSimHsrXM0R0 -----END CERTIFICATE-----Generated at Sun Jul 20 22:48:13 2025 by rpki-client