$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft File: c9f645ac-84aa-42e3-b85a-7af9688898a6.mft (raw, json) Hash identifier: k5vKJoldjm3/MLAt46NX+euDxR3U+HY83QhDL58igFY= Subject key identifier: 21:AA:CE:7A:06:84:47:3D:B0:8C:62:BE:12:32:F8:BF:9D:95:DC:E1 Authority key identifier: 58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 Certificate issuer: /CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Certificate serial: 010D0C9F4328584A742098999FB9729AB71F7BAC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft Manifest number: 010D0C9F43285844C004D6D7C16ABFA97D8A7818 Signing time: Tue 08 Jul 2025 20:00:08 +0000 Manifest this update: Tue 08 Jul 2025 20:00:08 +0000 Manifest next update: Thu 10 Jul 2025 20:00:00 +0000 Files and hashes: 1: 2612dc02-3036-3ced-ba2c-8e1c04a2b25e.roa (hash: ejO490ZyizmSe8aRUsmUXA96SjmhaY7AH090cXatEZE=) 2: c9f645ac-84aa-42e3-b85a-7af9688898a6.crl (hash: wSDD2J6YGJGB/KDIpiQj4vCvbH2AR9lHOYseLnDtP+A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:20:98:99:9f:b9:72:9a:b7:1f:7b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6 Validity Not Before: Jul 8 20:00:08 2025 GMT Not After : Jul 10 20:00:00 2025 GMT Subject: CN=d0a8efcc-ac76-43d1-a284-4c3f09e4fe30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:27:d2:de:22:c3:53:9d:c9:63:e8:23:2a: 5a:0a:f8:34:39:25:f5:2d:c3:61:2b:c8:bc:da:3e: 7f:ce:7f:ef:22:6d:d5:9d:cc:ad:75:29:36:0b:8b: c1:51:6e:9b:50:58:f0:15:7e:8a:20:25:01:2b:3e: 25:50:46:06:b0:b2:ff:48:64:f7:2a:a6:09:52:9f: bd:bc:28:cf:e8:02:c2:e8:2b:aa:d3:80:d8:c5:37: 77:29:8b:f8:49:ef:92:c3:b2:69:91:e6:09:8b:62: 2f:fa:26:b4:41:aa:b5:8a:85:0f:b6:77:d5:30:ce: ff:3d:bb:8e:2d:81:00:f9:77:78:59:4b:7e:42:d8: 39:55:fc:fa:9c:e2:80:52:f8:e1:36:fa:1e:5a:1b: 85:75:f2:6d:b4:d2:27:8e:a6:60:59:f8:cb:dd:34: d0:c6:2a:05:3f:b7:70:01:91:99:e3:98:24:8f:b8: 8d:00:93:2c:80:65:82:c7:56:37:fb:0a:dc:a2:5f: bf:b0:ea:33:16:86:3f:e6:56:f3:ba:75:5f:56:78: 53:7d:6b:f6:e9:91:77:12:64:2a:a5:10:c0:34:a3: 42:39:46:fb:6d:1f:6e:42:7a:95:0b:ee:bc:a1:79: 87:52:6b:bb:e7:c5:c0:ab:27:8a:21:c8:a6:7a:4d: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AA:CE:7A:06:84:47:3D:B0:8C:62:BE:12:32:F8:BF:9D:95:DC:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.crl X509v3 Authority Key Identifier: keyid:58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8d:a7:54:89:8c:bf:7c:f0:f6:6b:b2:11:61:e5:e3:ea:5f: a4:62:85:90:57:9a:54:e9:09:90:fe:ed:34:13:91:5b:b4:b2: 87:ca:40:bb:38:2d:82:5b:09:ce:6f:67:a2:af:aa:c3:8e:fd: e5:8b:ff:64:b2:3e:40:fe:16:bf:5f:b5:01:93:b2:48:7e:08: 31:3d:11:24:c8:3b:a3:b2:29:2e:c1:62:42:63:fd:ca:cc:98: 69:89:8c:ad:8e:50:8d:95:58:de:70:73:88:7b:1c:be:bc:08: 3d:73:7b:bc:38:10:8c:8f:52:41:45:dc:2a:47:03:50:b2:1c: 01:ad:c5:80:d5:a9:bc:94:cd:df:53:a7:b3:39:68:0f:d4:f1: a3:02:c1:cd:9c:75:9c:55:04:53:4c:fa:88:2a:b5:fc:2c:3a: d0:6a:b0:b2:44:81:bb:ce:6f:54:16:2d:20:0d:b7:e1:aa:43: f3:9f:a5:85:bb:32:ce:a3:fe:6e:56:2a:7f:a0:c1:12:33:86: 19:b3:98:80:f5:bb:85:0d:dd:9c:80:bb:a9:cd:a2:00:a7:91: ab:b6:32:15:e8:fc:57:bd:db:a2:58:24:0a:f6:76:3a:96:91: e8:ad:7d:3d:0b:6d:34:0a:40:c4:61:dd:de:56:18:fc:49:dd: 86:7e:2e:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0IJiZn7lymrcfe6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmNjQ1YWMtODRhYS00MmUzLWI4NWEtN2FmOTY4ODg5 OGE2MB4XDTI1MDcwODIwMDAwOFoXDTI1MDcxMDIwMDAwMFowLzEtMCsGA1UEAxMk ZDBhOGVmY2MtYWM3Ni00M2QxLWEyODQtNGMzZjA5ZTRmZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsn0t4iw1OdyWPoIypaCvg0OSX1LcNhK8i8 2j5/zn/vIm3VncytdSk2C4vBUW6bUFjwFX6KICUBKz4lUEYGsLL/SGT3KqYJUp+9 vCjP6ALC6Cuq04DYxTd3KYv4Se+Sw7JpkeYJi2Iv+ia0Qaq1ioUPtnfVMM7/PbuO LYEA+Xd4WUt+Qtg5Vfz6nOKAUvjhNvoeWhuFdfJttNInjqZgWfjL3TTQxioFP7dw AZGZ45gkj7iNAJMsgGWCx1Y3+wrcol+/sOozFoY/5lbzunVfVnhTfWv26ZF3EmQq pRDANKNCOUb7bR9uQnqVC+68oXmHUmu758XAqyeKIcimek2F5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCGqznoGhEc9sIxivhIy+L+dldzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jOWY2 NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5Njg4ODk4YTYvYzlmNjQ1YWMtODRhYS00 MmUzLWI4NWEtN2FmOTY4ODg5OGE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzlmNjQ1YWMtODRhYS00MmUzLWI4 NWEtN2FmOTY4ODg5OGE2L2M5ZjY0NWFjLTg0YWEtNDJlMy1iODVhLTdhZjk2ODg4 OThhNi5jcmwwHwYDVR0jBBgwFoAUWDton2ItqVzW8+xVfihjXKiBhBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jOWY2NDVhYy04NGFhLTQyZTMtYjg1YS03YWY5 Njg4ODk4YTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWjadUiYy/fPD2a7IRYeXj 6l+kYoWQV5pU6QmQ/u00E5FbtLKHykC7OC2CWwnOb2eir6rDjv3li/9ksj5A/ha/ X7UBk7JIfggxPREkyDujsikuwWJCY/3KzJhpiYytjlCNlVjecHOIexy+vAg9c3u8 OBCMj1JBRdwqRwNQshwBrcWA1am8lM3fU6ezOWgP1PGjAsHNnHWcVQRTTPqIKrX8 LDrQarCyRIG7zm9UFi0gDbfhqkPzn6WFuzLOo/5uVip/oMESM4YZs5iA9buFDd2c gLupzaIAp5GrtjIV6PxXvduiWCQK9nY6lpHorX09C200CkDEYd3eVhj8Sd2Gfi4R -----END CERTIFICATE-----Generated at Wed Jul 9 19:09:36 2025 by rpki-client