$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft File: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft (raw, json) Hash identifier: k/4srBAUIpy4BYxD/SUAh3PBDO6yrdWDlifk0BY/NCg= Subject key identifier: 3E:E5:E9:F4:32:A2:60:EF:D6:38:29:54:AD:17:20:99:02:A1:46:57 Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F4328584A5C83831328C8ECA5D52C77C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft Manifest number: 010D0C9F4328584073A84B5EB96B10DEBF636C15 Signing time: Mon 30 Jun 2025 09:00:03 +0000 Manifest this update: Mon 30 Jun 2025 09:00:03 +0000 Manifest next update: Thu 03 Jul 2025 09:00:00 +0000 Files and hashes: 1: 0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl (hash: pMWbm5ZVCLGIsToDgNlc83nrSHJAiBGh/DsDsuCLEGQ=) 2: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (hash: I43eTWfoTX4aZOS+c/BZuyooYJ00tJPzmXi/gY5jw5c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:83:83:13:28:c8:ec:a5:d5:2c:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: Jun 30 09:00:03 2025 GMT Not After : Jul 3 09:00:00 2025 GMT Subject: CN=8b3f09ec-bee6-46c0-ad74-e77a417618c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6c:09:00:0c:8f:b0:fc:3f:98:a9:3f:44:e7: a9:64:61:bf:d4:6f:e6:cd:a4:dd:f2:54:29:32:0d: a7:55:38:cc:70:c9:db:7b:b4:94:7b:75:f6:c9:e7: 2f:cb:ca:18:44:4b:ef:60:66:33:c9:9b:26:9a:c8: 76:7f:cd:5c:b0:24:26:f0:61:7a:be:2d:a9:b4:64: e5:bb:7e:af:c2:b8:73:e9:5a:18:7f:4f:eb:e3:43: cc:92:ab:c6:49:ed:fd:0e:d9:5e:c0:31:b8:3e:a3: 07:a2:22:29:ca:d9:62:2f:76:a5:9a:21:17:6a:3a: 64:00:fd:02:69:ed:97:76:7c:bb:95:43:34:72:10: 27:18:5d:35:ab:15:21:76:23:7d:64:0c:b7:08:35: d5:b8:e1:27:21:e8:26:b3:e4:c5:0a:ad:8d:f3:b4: f8:c3:a3:cf:ba:a8:1c:f6:d7:4d:9b:4d:97:e2:91: 7d:77:80:42:59:69:e5:85:a4:91:0b:68:9c:07:25: 70:f6:a5:76:e2:8c:7e:97:52:3a:3f:98:62:f8:06: c0:81:56:c0:45:dc:a5:b8:a9:d4:ee:67:a7:26:ce: eb:c9:63:56:7f:4c:2d:33:a9:84:32:93:51:77:38: c3:f1:6f:dd:1a:e9:bc:2b:90:fc:e6:30:fc:5d:bd: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E5:E9:F4:32:A2:60:EF:D6:38:29:54:AD:17:20:99:02:A1:46:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a5:96:2b:ca:4c:de:4b:40:48:2b:76:2a:68:1c:ca:97:cb: 98:57:e8:0d:c1:9c:a5:dc:d4:80:c3:b2:3e:56:b8:7d:50:75: 07:2c:a3:47:fa:85:0a:8b:69:90:9b:b0:44:5b:6b:0f:8b:b1: d2:a2:ec:5b:df:89:10:65:df:76:2d:c2:9d:b1:ff:de:0b:e1: a6:96:47:08:bb:a3:31:dd:0b:30:de:04:b4:bb:13:ac:4e:86: 88:d0:2c:c0:b7:dd:ac:ad:08:99:8f:81:0e:17:d1:99:39:85: 52:f8:27:64:b3:01:7d:da:e3:f3:2e:2e:cb:47:19:00:df:c0: 68:8e:a4:e4:bc:ab:01:1b:34:3a:83:e1:0d:b6:05:76:97:8d: 16:af:13:8f:e0:e1:88:6b:a2:5b:77:52:73:cb:9e:05:dd:b0: 78:f2:40:b0:e2:b1:4d:cb:07:b8:cf:19:11:47:14:da:41:5c: ad:26:cd:68:78:14:8c:5c:bc:fd:d5:b2:0a:e6:86:c1:4a:37: 43:fc:b9:d5:76:85:01:49:68:28:89:8a:c6:d7:87:5a:3d:b9: f6:5c:80:5d:ac:26:30:0e:82:92:1a:8d:e7:02:a2:5b:78:01: b2:44:f8:69:da:ee:0f:49:27:e3:21:7c:c5:c8:aa:cb:ac:e8: 68:0f:6b:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpcg4MTKMjspdUsd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI1MDYzMDA5MDAwM1oXDTI1MDcwMzA5MDAwMFowLzEtMCsGA1UEAxMk OGIzZjA5ZWMtYmVlNi00NmMwLWFkNzQtZTc3YTQxNzYxOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2wJAAyPsPw/mKk/ROepZGG/1G/mzaTd8lQp Mg2nVTjMcMnbe7SUe3X2yecvy8oYREvvYGYzyZsmmsh2f81csCQm8GF6vi2ptGTl u36vwrhz6VoYf0/r40PMkqvGSe39DtlewDG4PqMHoiIpytliL3almiEXajpkAP0C ae2Xdny7lUM0chAnGF01qxUhdiN9ZAy3CDXVuOEnIegms+TFCq2N87T4w6PPuqgc 9tdNm02X4pF9d4BCWWnlhaSRC2icByVw9qV24ox+l1I6P5hi+AbAgVbARdyluKnU 7menJs7ryWNWf0wtM6mEMpNRdzjD8W/dGum8K5D85jD8Xb11nwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD7l6fQyomDv1jgpVK0XIJkCoUZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvMGE1YTg5MDktM2FhZi00 NGU4LWIwZDYtYzUwN2U1NTBkMDU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQpZYrykzeS0BIK3YqaBzK l8uYV+gNwZyl3NSAw7I+Vrh9UHUHLKNH+oUKi2mQm7BEW2sPi7HSouxb34kQZd92 LcKdsf/eC+GmlkcIu6Mx3Qsw3gS0uxOsToaI0CzAt92srQiZj4EOF9GZOYVS+Cdk swF92uPzLi7LRxkA38BojqTkvKsBGzQ6g+ENtgV2l40WrxOP4OGIa6Jbd1Jzy54F 3bB48kCw4rFNywe4zxkRRxTaQVytJs1oeBSMXLz91bIK5obBSjdD/LnVdoUBSWgo iYrG14daPbn2XIBdrCYwDoKSGo3nAqJbeAGyRPhp2u4PSSfjIXzFyKrLrOhoD2uu -----END CERTIFICATE-----Generated at Tue Jul 1 06:51:41 2025 by rpki-client