$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.mft File: b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.mft (raw, json) Hash identifier: JNkMicS9g6gSvSOvW6xLI64wlqJPojBO+RiYEhe5kTw= Subject key identifier: CB:71:5B:6F:7C:65:37:26:B6:F5:6C:8D:BC:B3:15:71:D8:14:21:EC Authority key identifier: 17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50 Certificate issuer: /CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a Certificate serial: 010D0C9F4328584A6324F1B3DAEA620A6F1B3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.mft Manifest number: 010D0C9F4328584073A8218BAEBAD12616DD8E8A Signing time: Wed 02 Jul 2025 18:00:10 +0000 Manifest this update: Wed 02 Jul 2025 18:00:10 +0000 Manifest next update: Fri 04 Jul 2025 18:00:00 +0000 Files and hashes: 1: b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.crl (hash: r/6CScZenL0oGZ3EqGVYV5hKxd9wDBAzhzx/Yrw81Bc=) 2: c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa (hash: XmdjY+HB5CvHp8GdznoP4ZAYJfFBBc1PnIGvQvPYMmc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:24:f1:b3:da:ea:62:0a:6f:1b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a Validity Not Before: Jul 2 18:00:10 2025 GMT Not After : Jul 4 18:00:00 2025 GMT Subject: CN=be294fb1-8959-46a4-a0a0-a4c228eec294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:9f:25:e6:b0:be:ac:47:fe:84:f6:12:e5: 7c:b0:c8:e3:64:f0:ed:55:d8:5a:15:b1:2d:a5:5a: 13:8a:32:04:b9:01:f4:1d:28:bd:50:18:50:30:c0: 2c:ed:77:c8:a6:b9:7c:6d:b1:b7:84:7e:8a:11:54: 6c:f6:f5:c9:4c:ea:c0:39:d7:6e:d2:81:6b:b2:d0: a6:a8:ca:79:eb:16:a2:31:fd:9b:25:db:76:1c:7b: 3f:fd:fe:4c:5f:01:0c:57:57:bb:f6:1a:e9:11:c8: 2b:42:85:24:6b:32:76:24:41:10:a4:ba:5b:ff:2b: 59:64:99:eb:03:50:84:c8:3d:23:88:3c:57:64:ae: 9c:b2:a5:53:50:23:b6:65:94:b8:59:c2:8a:35:e0: 1f:c8:25:61:ea:38:b6:38:fe:98:89:b5:75:46:19: 27:ba:f8:0f:c0:b0:6a:bb:41:e5:50:7c:fa:16:20: b9:21:93:01:38:8d:d6:19:e0:7d:a6:25:21:27:9a: 83:67:60:fb:96:ac:c9:78:98:52:6d:4b:22:d4:56: eb:7d:41:77:68:4d:94:94:16:2a:16:09:b4:8c:0b: 63:aa:fd:de:92:3d:4d:d0:0d:9e:52:83:96:89:0a: 79:df:65:7a:ea:58:de:a2:93:9c:0d:24:cc:78:a3: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:71:5B:6F:7C:65:37:26:B6:F5:6C:8D:BC:B3:15:71:D8:14:21:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.crl X509v3 Authority Key Identifier: keyid:17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:05:ae:96:d4:b1:c9:4e:92:1e:fb:d8:01:6b:5f:ac:7c:af: 72:52:ad:37:ce:14:d5:ba:c4:64:9b:08:75:dc:c3:cb:0c:ea: 2c:f3:3f:e9:61:00:7e:5a:12:28:ba:65:7d:51:19:a9:ac:29: 19:25:c9:63:87:a3:a3:2a:88:a2:79:e1:04:6c:45:05:84:14: 89:73:d5:68:2f:e3:38:ae:bf:d7:9a:ac:5e:2e:5e:72:ea:35: 75:07:5a:fb:fd:f9:9d:30:b3:87:41:00:78:8b:6a:4e:e0:59: 76:82:b0:49:a0:8b:0f:72:5a:e4:cf:d2:59:b9:db:f0:a2:7d: ff:78:90:93:92:fe:85:53:9c:b6:46:a7:0a:16:e7:62:7f:8b: eb:5a:8f:76:47:c8:11:9c:d9:00:60:8c:96:5a:cd:0f:78:b0: af:9d:3d:24:25:2e:2d:55:c4:e9:60:40:22:09:b3:59:ff:0b: 72:15:90:20:16:f2:09:08:38:04:7d:90:70:0f:e8:08:28:d9: 93:3f:80:9f:3d:79:56:97:74:bc:98:68:37:50:7b:7c:4a:42: b1:0c:74:7e:e3:58:17:66:10:39:ba:c3:49:6d:ca:d2:e4:d6: 5d:e2:7d:f7:30:d5:35:38:8a:56:d6:b3:8b:77:d1:a8:e6:c6: f9:c3:ca:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjJPGz2upiCm8bM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmYmJmMzMtZjRjNS00YTBmLTgxOTgtZjVhYjc5YTY5 YTZhMB4XDTI1MDcwMjE4MDAxMFoXDTI1MDcwNDE4MDAwMFowLzEtMCsGA1UEAxMk YmUyOTRmYjEtODk1OS00NmE0LWEwYTAtYTRjMjI4ZWVjMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ufJeawvqxH/oT2EuV8sMjjZPDtVdhaFbEt pVoTijIEuQH0HSi9UBhQMMAs7XfIprl8bbG3hH6KEVRs9vXJTOrAOddu0oFrstCm qMp56xaiMf2bJdt2HHs//f5MXwEMV1e79hrpEcgrQoUkazJ2JEEQpLpb/ytZZJnr A1CEyD0jiDxXZK6csqVTUCO2ZZS4WcKKNeAfyCVh6ji2OP6YibV1RhknuvgPwLBq u0HlUHz6FiC5IZMBOI3WGeB9piUhJ5qDZ2D7lqzJeJhSbUsi1FbrfUF3aE2UlBYq Fgm0jAtjqv3ekj1N0A2eUoOWiQp532V66ljeopOcDSTMeKOEswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMtxW298ZTcmtvVsjbyzFXHYFCHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGZi YmYzMy1mNGM1LTRhMGYtODE5OC1mNWFiNzlhNjlhNmEvYjRmYmJmMzMtZjRjNS00 YTBmLTgxOTgtZjVhYjc5YTY5YTZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRmYmJmMzMtZjRjNS00YTBmLTgx OTgtZjVhYjc5YTY5YTZhL2I0ZmJiZjMzLWY0YzUtNGEwZi04MTk4LWY1YWI3OWE2 OWE2YS5jcmwwHwYDVR0jBBgwFoAUF8dC8U9umDnAjpm7q1NL8CeMn1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGZiYmYzMy1mNGM1LTRhMGYtODE5OC1mNWFi NzlhNjlhNmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsBa6W1LHJTpIe+9gBa1+s fK9yUq03zhTVusRkmwh13MPLDOos8z/pYQB+WhIoumV9URmprCkZJcljh6OjKoii eeEEbEUFhBSJc9VoL+M4rr/XmqxeLl5y6jV1B1r7/fmdMLOHQQB4i2pO4Fl2grBJ oIsPclrkz9JZudvwon3/eJCTkv6FU5y2RqcKFudif4vrWo92R8gRnNkAYIyWWs0P eLCvnT0kJS4tVcTpYEAiCbNZ/wtyFZAgFvIJCDgEfZBwD+gIKNmTP4CfPXlWl3S8 mGg3UHt8SkKxDHR+41gXZhA5usNJbcrS5NZd4n33MNU1OIpW1rOLd9Go5sb5w8os -----END CERTIFICATE-----Generated at Thu Jul 3 06:05:06 2025 by rpki-client