$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft File: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft (raw, json) Hash identifier: jhE5glEX7UAD3k6WqLM70s1Ju3mL8O3Rv7a/9ZsjYNQ= Subject key identifier: D4:98:08:3F:C6:99:46:55:D0:42:0F:C9:9A:09:54:26:94:FC:0F:9B Authority key identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Certificate issuer: /CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Certificate serial: 010D0C9F4328584A63607DCDA0AB00FADB424180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft Manifest number: 010D0C9F43285842C6C9E02817B8F26EA9F2E24A Signing time: Wed 02 Jul 2025 20:00:08 +0000 Manifest this update: Wed 02 Jul 2025 20:00:08 +0000 Manifest next update: Sat 05 Jul 2025 20:00:00 +0000 Files and hashes: 1: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl (hash: SotZe2iwgNGOZQRhM35OKGI5fAqm7jlVl0Zo526ViIk=) 2: e1c348d1-400a-3695-8d76-c4ba654fc779.roa (hash: zkCkixFMKvNNOiHRqrHZK9UvmQucRJnfVIwQjkuqSZI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:60:7d:cd:a0:ab:00:fa:db:42:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Validity Not Before: Jul 2 20:00:08 2025 GMT Not After : Jul 5 20:00:00 2025 GMT Subject: CN=8332e0aa-4b09-46ae-8348-414f8e6455a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:c0:f3:5d:72:1c:aa:5e:e8:7c:50:53:55: 41:c8:de:76:74:51:e1:54:4b:37:a0:66:b5:e6:2a: 4f:1a:1a:16:08:c5:e2:90:e4:e2:2e:07:24:51:af: 96:95:5a:b3:be:de:9d:b2:b9:b7:b0:49:90:35:cf: 34:3e:00:63:83:4a:75:16:8e:0a:04:9e:d1:39:85: 82:98:7b:c6:11:a4:cd:aa:f5:03:f5:a6:37:e5:f3: 2d:db:e1:21:5c:36:68:6d:5b:1c:81:97:6e:91:c1: c8:43:f5:aa:a9:5b:6b:df:68:34:b1:c5:39:9e:79: d1:bb:14:6b:ed:39:08:4b:ab:5c:ef:90:87:d9:d5: 2b:0a:cc:a8:a1:49:ba:37:1c:e5:80:39:02:a1:69: fe:47:91:03:91:e6:28:48:29:11:b9:32:e3:ed:1c: 93:f0:8d:74:0f:1c:d7:bb:51:5b:20:07:aa:8c:8a: b1:49:94:dd:ee:19:98:70:1b:1a:23:38:7d:ca:a0: fd:bc:d9:87:83:1c:2f:4e:6e:72:ce:2f:1a:ed:8d: 85:03:d5:0f:bf:a9:60:b7:44:f1:0c:a1:47:84:6d: b6:2d:05:2c:64:cb:e8:31:db:08:58:52:18:cd:30: e6:f6:c6:3a:c5:37:b7:53:20:db:3f:15:5c:6a:a9: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:08:3F:C6:99:46:55:D0:42:0F:C9:9A:09:54:26:94:FC:0F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.crl X509v3 Authority Key Identifier: keyid:57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8c:40:c9:8b:5a:19:2b:26:2e:a6:bd:ca:af:2b:7e:48:9b: 5c:b7:a3:fa:cf:7e:c8:b5:95:f3:18:f5:7e:5a:14:7a:f7:af: 22:67:4d:b1:d9:48:0a:3c:55:92:73:a7:26:65:90:c5:e7:e7: e0:92:6c:ee:79:7c:8e:a9:b5:e7:82:e5:ab:22:2c:27:78:92: 76:ce:41:19:2e:4f:48:bc:35:5f:94:67:07:bd:b0:97:6a:ff: 60:2b:cb:90:e6:91:d0:9d:91:8e:b8:3b:61:68:9d:3d:88:8f: 3a:ad:f5:c4:d2:b4:a9:3a:17:67:15:e3:11:9b:27:64:d3:d9: 37:3c:50:9d:22:4e:2e:19:0f:28:19:7b:d1:df:7d:29:2d:cb: 37:9b:25:cd:30:15:11:f5:d9:b2:1d:b0:78:96:3e:68:67:e2: 07:f3:df:d4:f3:95:15:8d:83:a4:e3:e2:fd:1a:26:58:f5:e2: 6a:89:3f:8d:83:54:7b:e1:7c:f1:d1:03:04:a6:3d:6f:58:86: 5b:d1:a7:07:84:cb:80:2d:da:a0:db:e5:2f:54:5f:5e:42:d7: 3d:9b:01:89:98:93:fb:63:54:b6:3f:06:22:14:de:2a:c3:37: af:6b:fa:24:43:4f:6d:f7:fd:bb:3d:f6:99:dd:48:ec:2c:fe: 56:51:55:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjYH3NoKsA+ttCQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY2M2ZkOTYtODkwNy00NTc0LThlMDctNzlhOGM3ZmQ4 YzdhMB4XDTI1MDcwMjIwMDAwOFoXDTI1MDcwNTIwMDAwMFowLzEtMCsGA1UEAxMk ODMzMmUwYWEtNGIwOS00NmFlLTgzNDgtNDE0ZjhlNjQ1NWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTHA811yHKpe6HxQU1VByN52dFHhVEs3oGa1 5ipPGhoWCMXikOTiLgckUa+WlVqzvt6dsrm3sEmQNc80PgBjg0p1Fo4KBJ7ROYWC mHvGEaTNqvUD9aY35fMt2+EhXDZobVscgZdukcHIQ/WqqVtr32g0scU5nnnRuxRr 7TkIS6tc75CH2dUrCsyooUm6NxzlgDkCoWn+R5EDkeYoSCkRuTLj7RyT8I10DxzX u1FbIAeqjIqxSZTd7hmYcBsaIzh9yqD9vNmHgxwvTm5yzi8a7Y2FA9UPv6lgt0Tx DKFHhG22LQUsZMvoMdsIWFIYzTDm9sY6xTe3UyDbPxVcaql97QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNSYCD/GmUZV0EIPyZoJVCaU/A+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjYz ZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4YzdmZDhjN2EvMGY2M2ZkOTYtODkwNy00 NTc0LThlMDctNzlhOGM3ZmQ4YzdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGY2M2ZkOTYtODkwNy00NTc0LThl MDctNzlhOGM3ZmQ4YzdhLzBmNjNmZDk2LTg5MDctNDU3NC04ZTA3LTc5YThjN2Zk OGM3YS5jcmwwHwYDVR0jBBgwFoAUV3YO0itJrxtVoAn4P8BxiC9D6fUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4 YzdmZDhjN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBijEDJi1oZKyYupr3Kryt+ SJtct6P6z37ItZXzGPV+WhR6968iZ02x2UgKPFWSc6cmZZDF5+fgkmzueXyOqbXn guWrIiwneJJ2zkEZLk9IvDVflGcHvbCXav9gK8uQ5pHQnZGOuDthaJ09iI86rfXE 0rSpOhdnFeMRmydk09k3PFCdIk4uGQ8oGXvR330pLcs3myXNMBUR9dmyHbB4lj5o Z+IH89/U85UVjYOk4+L9GiZY9eJqiT+Ng1R74Xzx0QMEpj1vWIZb0acHhMuALdqg 2+UvVF9eQtc9mwGJmJP7Y1S2PwYiFN4qwzeva/okQ09t9/27PfaZ3UjsLP5WUVUq -----END CERTIFICATE-----Generated at Thu Jul 3 18:36:20 2025 by rpki-client