$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: RSuOt3JcR1q3iI3klTLeKG2VNl7RqJzmi6f6+PfR+U8= Subject key identifier: 81:53:F2:16:B7:B7:55:58:AF:D8:49:E5:25:B9:E0:D9:B1:8C:C2:1D Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F4328584A5F4E3C24E2DBCF3E3905FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A32A3 Signing time: Tue 01 Jul 2025 09:00:08 +0000 Manifest this update: Tue 01 Jul 2025 09:00:08 +0000 Manifest next update: Thu 03 Jul 2025 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: EfEEVTUH/kjZD5ADkqQcRLVu/HcdUw3TJO0y9qeC54Y=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: 65R1A+yo6YxqELe9Nfy46iorcMvBkXMghu1d/UTaOnU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:4e:3c:24:e2:db:cf:3e:39:05:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Jul 1 09:00:08 2025 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=86d8a7db-e182-4d64-8ce5-ef5a04a857a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:58:6b:1c:07:ae:bc:0b:4a:36:7a:fe:48: db:68:d9:7c:26:72:4e:c5:1f:df:2f:cc:4e:a9:9d: 44:aa:ab:1f:b7:88:51:77:30:8c:1f:ef:0a:0d:40: 99:fd:39:b2:9f:04:bb:e5:c5:dd:95:8e:8e:08:e3: a8:29:67:55:47:d0:fd:ac:7f:21:c2:a4:a7:40:85: 2c:1b:1f:1e:0b:03:c5:82:e8:86:69:d0:8a:1f:a2: 1d:05:ea:79:a0:22:50:84:97:60:63:48:04:26:1e: 49:0a:a1:e5:7b:07:27:80:72:ef:c9:0b:4e:fe:da: b6:52:5a:5e:e6:28:91:08:8e:53:a4:06:7d:be:c4: f5:5c:86:62:45:4c:b3:c8:5d:ad:79:38:64:04:a9: af:4d:db:61:3b:54:36:2b:e9:80:84:58:a6:4d:54: 9e:3a:06:91:3b:df:3d:26:24:83:a5:f8:93:ee:75: 9f:c7:ac:86:d2:99:a0:11:0b:b0:fc:18:54:d1:e9: 18:eb:38:48:85:f0:45:a7:19:fa:fb:4a:f5:8d:4b: ed:d6:87:da:9a:95:1c:30:76:40:53:34:3b:0e:3d: c1:57:57:60:30:fb:48:bc:0a:e3:ab:36:65:ea:b6: 1f:e5:16:b4:94:a8:2b:9d:d3:26:af:23:23:19:86: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:53:F2:16:B7:B7:55:58:AF:D8:49:E5:25:B9:E0:D9:B1:8C:C2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2d:22:89:37:2e:04:76:3d:2b:73:e0:97:b2:be:41:b5:65: 80:e2:de:95:88:1c:4f:74:58:96:d6:36:b0:a7:9d:02:0c:be: a5:b4:53:51:60:ab:36:c1:02:07:12:eb:d6:be:9d:18:39:43: 91:82:f2:3f:b7:d8:0c:37:4f:61:ee:d4:b7:f8:2c:a0:99:c6: e9:ca:73:12:00:03:25:90:e6:4d:f4:23:78:61:5b:46:27:4f: 00:50:17:9c:60:d2:b1:98:e8:74:35:b6:3a:92:39:8a:1b:bd: 53:97:68:99:55:83:dc:ce:6a:a1:d7:02:d0:0e:da:e7:b3:2b: ef:2e:1a:96:74:7d:e6:d0:26:cb:7a:00:9e:c1:5d:d1:e9:77: 54:ab:f0:ea:92:d6:3c:3d:83:e5:2a:5d:21:68:88:2a:8f:76: 6a:78:a2:2b:1d:aa:b3:1b:d3:93:c0:30:97:11:58:48:be:6d: 50:85:5e:a1:96:0e:8a:d7:1e:16:b4:74:db:11:27:05:18:08: 14:45:f8:27:93:ee:a1:dc:09:ef:c4:36:d6:14:fd:e3:24:e7: 67:ee:0b:d8:f8:84:f1:73:34:f8:4f:27:2d:88:bc:b3:80:33: fa:48:59:da:22:22:c1:1c:3a:cc:c7:0b:68:96:fd:0e:c3:e4: 90:ef:07:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfTjwk4tvPPjkF+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI1MDcwMTA5MDAwOFoXDTI1MDcwMzA5MDAwMFowLzEtMCsGA1UEAxMk ODZkOGE3ZGItZTE4Mi00ZDY0LThjZTUtZWY1YTA0YTg1N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM5YaxwHrrwLSjZ6/kjbaNl8JnJOxR/fL8xO qZ1Eqqsft4hRdzCMH+8KDUCZ/TmynwS75cXdlY6OCOOoKWdVR9D9rH8hwqSnQIUs Gx8eCwPFguiGadCKH6IdBep5oCJQhJdgY0gEJh5JCqHlewcngHLvyQtO/tq2Ulpe 5iiRCI5TpAZ9vsT1XIZiRUyzyF2teThkBKmvTdthO1Q2K+mAhFimTVSeOgaRO989 JiSDpfiT7nWfx6yG0pmgEQuw/BhU0ekY6zhIhfBFpxn6+0r1jUvt1ofampUcMHZA UzQ7Dj3BV1dgMPtIvArjqzZl6rYf5Ra0lKgrndMmryMjGYZ6OQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIFT8ha3t1VYr9hJ5SW54NmxjMIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApLSKJNy4Edj0rc+CXsr5B tWWA4t6ViBxPdFiW1jawp50CDL6ltFNRYKs2wQIHEuvWvp0YOUORgvI/t9gMN09h 7tS3+CygmcbpynMSAAMlkOZN9CN4YVtGJ08AUBecYNKxmOh0NbY6kjmKG71Tl2iZ VYPczmqh1wLQDtrnsyvvLhqWdH3m0CbLegCewV3R6XdUq/DqktY8PYPlKl0haIgq j3ZqeKIrHaqzG9OTwDCXEVhIvm1QhV6hlg6K1x4WtHTbEScFGAgURfgnk+6h3Anv xDbWFP3jJOdn7gvY+ITxczT4TyctiLyzgDP6SFnaIiLBHDrMxwtolv0Ow+SQ7weu -----END CERTIFICATE-----Generated at Tue Jul 1 12:41:39 2025 by rpki-client