$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f/f17465b5-d0f0-43da-8b02-afc63fef2f0f.mft File: f17465b5-d0f0-43da-8b02-afc63fef2f0f.mft (raw, json) Hash identifier: GIPlYaCTkuLfqGt+RZPahjDTFG8HWg3MZyRAUHf7zWE= Subject key identifier: 36:4E:E4:CF:55:65:35:89:8E:42:AF:4B:D1:A3:04:AF:7F:91:5C:F7 Authority key identifier: 39:93:54:3D:82:4A:43:6E:10:09:C6:F3:35:14:F7:A4:47:15:22:11 Certificate issuer: /CN=f17465b5-d0f0-43da-8b02-afc63fef2f0f Certificate serial: 010D0C9F4328584A795C92A4D641E914C5FAB580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f/f17465b5-d0f0-43da-8b02-afc63fef2f0f.mft Manifest number: 010D0C9F4328584596AC1A7A4738C29B6D0FC6CC Signing time: Thu 10 Jul 2025 17:00:03 +0000 Manifest this update: Thu 10 Jul 2025 17:00:03 +0000 Manifest next update: Sun 13 Jul 2025 17:00:00 +0000 Files and hashes: 1: 346b602b-364a-30ce-9044-952330756bc6.roa (hash: /rcy9eT67eEHa4ifdXSFaaJ0atf+QETK8GSD1iR1L/Q=) 2: f17465b5-d0f0-43da-8b02-afc63fef2f0f.crl (hash: nnXnK08aSFib2HCIuOEibhdKp9dipBfinGU70Rk1CGQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f/f17465b5-d0f0-43da-8b02-afc63fef2f0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f/f17465b5-d0f0-43da-8b02-afc63fef2f0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:5c:92:a4:d6:41:e9:14:c5:fa:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f17465b5-d0f0-43da-8b02-afc63fef2f0f Validity Not Before: Jul 10 17:00:03 2025 GMT Not After : Jul 13 17:00:00 2025 GMT Subject: CN=8f0aa0af-0104-4ef8-8fb8-c76ecab2cf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:22:88:db:2a:f4:53:c2:3c:80:ae:b1:ac: 97:8a:76:38:5c:97:f8:df:90:d2:93:05:ca:51:0a: 9e:3c:86:a0:04:e7:a2:1a:5b:4c:ab:0b:f7:38:e2: f0:2b:a7:12:33:4e:b6:2f:3e:a0:5e:76:09:25:7f: d8:05:fe:68:75:ff:69:45:1c:66:16:43:ea:8c:e3: 7c:44:77:1c:63:54:6c:3f:79:94:a0:c1:03:0e:98: d3:5f:e6:c6:f5:70:7a:e4:56:c9:05:a1:d7:40:5e: 70:96:0d:5f:b4:55:f1:67:d9:3a:98:58:06:3b:44: e9:8f:9d:55:06:ec:81:13:b5:50:6f:85:da:08:72: 48:68:82:26:1a:48:42:bc:10:7a:95:40:7d:b1:66: ae:9d:ba:76:75:0f:1c:b7:5f:94:4a:51:43:75:c0: ae:26:4e:46:81:70:41:45:fd:1c:4d:61:7b:d4:1d: f7:98:46:fe:2f:28:e8:ca:e0:e1:68:76:ac:06:09: 2c:e1:89:94:f2:c8:f4:7b:17:01:48:7a:03:05:fc: 49:1f:43:7b:a9:01:c3:c8:4a:7b:4e:3c:43:cb:39: ff:00:9b:2a:b6:2b:7c:79:1d:9a:e4:2f:8b:cf:43: 46:67:9f:3c:d1:a2:c1:a4:16:f7:c0:11:be:5e:ff: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4E:E4:CF:55:65:35:89:8E:42:AF:4B:D1:A3:04:AF:7F:91:5C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f/f17465b5-d0f0-43da-8b02-afc63fef2f0f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f/f17465b5-d0f0-43da-8b02-afc63fef2f0f.crl X509v3 Authority Key Identifier: keyid:39:93:54:3D:82:4A:43:6E:10:09:C6:F3:35:14:F7:A4:47:15:22:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f17465b5-d0f0-43da-8b02-afc63fef2f0f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:22:d5:60:3b:e2:ac:48:8f:92:58:1c:dc:65:a4:dc:02:17: 2d:27:e3:3c:dd:fa:6f:84:13:93:43:2c:9e:4a:98:11:c5:c1: 4f:f0:de:e6:fe:d7:84:cc:be:04:6c:eb:d3:d0:cb:a5:bb:ff: 77:13:80:94:21:d1:55:5c:a4:23:38:5c:e0:3f:d8:b9:ca:f1: b9:0e:ea:ec:0a:74:72:65:54:d4:4d:bb:f7:83:e2:a3:d4:28: 15:41:72:54:b7:28:ce:a2:82:3c:b8:2f:ae:77:ab:23:ea:19: 1d:6c:15:33:db:d4:54:9f:e2:6e:b8:c0:b6:9b:b0:9c:b3:fd: f1:64:f1:1d:07:97:5a:1a:95:9a:3a:df:61:07:d4:bd:ba:01: 09:87:b4:7f:34:2c:21:3a:75:9e:34:22:46:91:f8:b3:b3:96: 83:35:08:3f:d6:2b:2d:d6:6c:ba:db:81:10:bb:65:db:21:a8: 44:42:73:ad:c3:9d:4d:f0:81:a0:8c:d5:11:25:a0:23:49:33: 4f:ec:eb:15:ce:32:d0:5b:59:e7:08:2a:13:22:f3:23:9c:92: 99:0b:f5:06:bf:4f:68:58:8c:09:e8:5f:6c:f6:07:bb:8e:6a: 39:0c:7d:18:25:e6:35:6b:03:ec:f6:76:4b:0d:8f:f9:da:8e: a1:73:f1:d4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp5XJKk1kHpFMX6tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjE3NDY1YjUtZDBmMC00M2RhLThiMDItYWZjNjNmZWYy ZjBmMB4XDTI1MDcxMDE3MDAwM1oXDTI1MDcxMzE3MDAwMFowLzEtMCsGA1UEAxMk OGYwYWEwYWYtMDEwNC00ZWY4LThmYjgtYzc2ZWNhYjJjZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0MiiNsq9FPCPICusayXinY4XJf435DSkwXK UQqePIagBOeiGltMqwv3OOLwK6cSM062Lz6gXnYJJX/YBf5odf9pRRxmFkPqjON8 RHccY1RsP3mUoMEDDpjTX+bG9XB65FbJBaHXQF5wlg1ftFXxZ9k6mFgGO0Tpj51V BuyBE7VQb4XaCHJIaIImGkhCvBB6lUB9sWaunbp2dQ8ct1+USlFDdcCuJk5GgXBB Rf0cTWF71B33mEb+LyjoyuDhaHasBgks4YmU8sj0excBSHoDBfxJH0N7qQHDyEp7 TjxDyzn/AJsqtit8eR2a5C+Lz0NGZ5880aLBpBb3wBG+Xv86BQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDZO5M9VZTWJjkKvS9GjBK9/kVz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMTc0 NjViNS1kMGYwLTQzZGEtOGIwMi1hZmM2M2ZlZjJmMGYvZjE3NDY1YjUtZDBmMC00 M2RhLThiMDItYWZjNjNmZWYyZjBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjE3NDY1YjUtZDBmMC00M2RhLThi MDItYWZjNjNmZWYyZjBmL2YxNzQ2NWI1LWQwZjAtNDNkYS04YjAyLWFmYzYzZmVm MmYwZi5jcmwwHwYDVR0jBBgwFoAUOZNUPYJKQ24QCcbzNRT3pEcVIhEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mMTc0NjViNS1kMGYwLTQzZGEtOGIwMi1hZmM2 M2ZlZjJmMGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMItVgO+KsSI+SWBzcZaTc AhctJ+M83fpvhBOTQyyeSpgRxcFP8N7m/teEzL4EbOvT0Mulu/93E4CUIdFVXKQj OFzgP9i5yvG5DursCnRyZVTUTbv3g+Kj1CgVQXJUtyjOooI8uC+ud6sj6hkdbBUz 29RUn+JuuMC2m7Ccs/3xZPEdB5daGpWaOt9hB9S9ugEJh7R/NCwhOnWeNCJGkfiz s5aDNQg/1ist1my624EQu2XbIahEQnOtw51N8IGgjNURJaAjSTNP7OsVzjLQW1nn CCoTIvMjnJKZC/UGv09oWIwJ6F9s9ge7jmo5DH0YJeY1awPs9nZLDY/52o6hc/HU -----END CERTIFICATE-----Generated at Thu Jul 10 18:16:59 2025 by rpki-client