$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft File: a1d568c5-f4e7-4018-a050-a2f04280e225.mft (raw, json) Hash identifier: PxBX+XWO4p7m9++xLYV6TSMH/x3OwZewHMZCQiVTfyM= Subject key identifier: 41:E1:92:81:08:98:DA:08:8D:39:24:2D:7B:9A:34:E9:D6:35:D6:3B Authority key identifier: 60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 Certificate issuer: /CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Certificate serial: 010D0C9F4328584A69315D9A20527B4EBAC7A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft Manifest number: 010D0C9F43285847DBF247FABDDD04106F411DEE Signing time: Fri 04 Jul 2025 22:00:03 +0000 Manifest this update: Fri 04 Jul 2025 22:00:03 +0000 Manifest next update: Mon 07 Jul 2025 22:00:00 +0000 Files and hashes: 1: a1d568c5-f4e7-4018-a050-a2f04280e225.crl (hash: YAwfX08GW0SKh7rCqibcYK7KsUwgoZE+4ZglzoGnZKg=) 2: e456fbb0-395d-3a80-bce8-b02c3b92dedf.roa (hash: D3B+LBSZqawnVtU32qO5dQFMSTFe50H8VxliApqvSgs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:31:5d:9a:20:52:7b:4e:ba:c7:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d568c5-f4e7-4018-a050-a2f04280e225 Validity Not Before: Jul 4 22:00:03 2025 GMT Not After : Jul 7 22:00:00 2025 GMT Subject: CN=d5ddb0e2-4ab3-42f1-b3cc-31da72f2a013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:66:6e:1a:de:8b:35:59:28:58:18:e5:30:7c: a6:54:5f:cc:7e:ca:b8:91:57:36:8b:d3:eb:80:5e: 3a:85:f3:e7:73:98:7e:e7:e7:e6:3e:80:7a:a5:0f: f6:5b:01:8c:c0:bd:3e:28:9d:2c:35:cb:f5:0e:af: 59:81:80:a0:a4:c2:06:ce:0b:fb:d5:96:cf:b7:16: 80:19:5d:1d:37:d9:e4:a8:59:7b:f0:b2:22:39:db: 8e:bb:6b:28:28:cf:fb:93:0e:a1:c0:e9:fc:b2:71: 87:b8:7d:2d:01:2d:5f:d3:6f:6d:41:5e:e7:3a:06: 0d:09:9d:96:5f:10:dc:f9:f9:1b:f5:55:f7:a0:76: 6a:2d:2e:c8:e7:a8:7d:2c:3f:f9:d7:a6:57:62:2e: 33:7d:6d:46:3f:35:68:5e:da:6c:63:14:72:a8:04: c9:51:ed:e9:e4:7d:34:fe:6d:17:4b:8c:63:50:f6: 9c:91:fc:2d:dc:6c:85:f6:f7:0f:7b:f4:41:41:8a: d0:6c:87:e1:80:34:ed:8b:6f:fe:b2:d6:8d:c4:aa: 1d:d3:de:17:e0:08:6f:90:8f:ec:6a:4d:5e:98:69: 76:a9:1a:4c:41:cc:6f:33:78:8b:e2:ef:68:d2:4d: 66:5c:e0:bc:a3:0d:73:49:7e:82:44:49:31:b6:80: 0b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:92:81:08:98:DA:08:8D:39:24:2D:7B:9A:34:E9:D6:35:D6:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225/a1d568c5-f4e7-4018-a050-a2f04280e225.crl X509v3 Authority Key Identifier: keyid:60:AD:5F:B5:EE:2F:B2:2D:A4:34:0E:D7:19:B5:52:7B:7C:BA:DB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a1d568c5-f4e7-4018-a050-a2f04280e225.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:be:01:38:a3:af:c4:7a:c1:74:cb:35:fe:db:0b:9e:11:b8: 6f:70:4e:50:42:61:10:bd:b5:59:2e:37:57:3e:84:82:79:08: ea:09:2e:b0:b4:fe:cf:27:b7:e0:cf:e1:5c:ea:13:d1:01:30: 88:4f:fc:e8:90:38:26:91:e7:a9:7d:02:5c:40:28:ce:34:16: 6f:60:a5:84:ed:f8:e1:2a:db:96:e7:98:52:e2:4a:62:3b:70: da:a2:d8:1f:ea:10:31:d0:d2:46:1a:63:b4:82:51:34:1a:5f: 0c:1a:1f:ba:65:c9:cc:0c:e9:4c:68:70:01:40:35:d6:24:6a: 91:6b:16:33:4d:7d:47:22:11:18:1b:ee:5d:af:44:7c:48:e3: b9:13:ea:0a:3e:50:44:3a:15:a7:48:51:18:77:b6:8b:87:18: 86:89:c8:ec:b0:2c:50:7a:45:67:98:4b:3f:5c:12:5a:ae:66: ff:f5:d5:f3:7e:da:2e:4f:db:22:3d:0d:09:21:cf:38:32:70: e0:fc:82:00:c8:c3:ee:e7:66:44:f5:1c:92:4d:a2:37:ef:08: 9e:5d:4a:43:a2:e5:e2:4d:60:a5:36:d2:78:29:6b:99:37:76: 98:b6:4b:e1:45:13:db:fe:88:21:59:94:9e:45:8b:ef:71:42: 6a:4b:44:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEppMV2aIFJ7TrrHqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkNTY4YzUtZjRlNy00MDE4LWEwNTAtYTJmMDQyODBl MjI1MB4XDTI1MDcwNDIyMDAwM1oXDTI1MDcwNzIyMDAwMFowLzEtMCsGA1UEAxMk ZDVkZGIwZTItNGFiMy00MmYxLWIzY2MtMzFkYTcyZjJhMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGZuGt6LNVkoWBjlMHymVF/Mfsq4kVc2i9Pr gF46hfPnc5h+5+fmPoB6pQ/2WwGMwL0+KJ0sNcv1Dq9ZgYCgpMIGzgv71ZbPtxaA GV0dN9nkqFl78LIiOduOu2soKM/7kw6hwOn8snGHuH0tAS1f029tQV7nOgYNCZ2W XxDc+fkb9VX3oHZqLS7I56h9LD/516ZXYi4zfW1GPzVoXtpsYxRyqATJUe3p5H00 /m0XS4xjUPackfwt3GyF9vcPe/RBQYrQbIfhgDTti2/+staNxKod094X4AhvkI/s ak1emGl2qRpMQcxvM3iL4u9o0k1mXOC8ow1zSX6CREkxtoALuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEHhkoEImNoIjTkkLXuaNOnWNdY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1 NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYwNDI4MGUyMjUvYTFkNTY4YzUtZjRlNy00 MDE4LWEwNTAtYTJmMDQyODBlMjI1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTFkNTY4YzUtZjRlNy00MDE4LWEw NTAtYTJmMDQyODBlMjI1L2ExZDU2OGM1LWY0ZTctNDAxOC1hMDUwLWEyZjA0Mjgw ZTIyNS5jcmwwHwYDVR0jBBgwFoAUYK1fte4vsi2kNA7XGbVSe3y626AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMWQ1NjhjNS1mNGU3LTQwMTgtYTA1MC1hMmYw NDI4MGUyMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZvgE4o6/EesF0yzX+2wue EbhvcE5QQmEQvbVZLjdXPoSCeQjqCS6wtP7PJ7fgz+Fc6hPRATCIT/zokDgmkeep fQJcQCjONBZvYKWE7fjhKtuW55hS4kpiO3Daotgf6hAx0NJGGmO0glE0Gl8MGh+6 ZcnMDOlMaHABQDXWJGqRaxYzTX1HIhEYG+5dr0R8SOO5E+oKPlBEOhWnSFEYd7aL hxiGicjssCxQekVnmEs/XBJarmb/9dXzftouT9siPQ0JIc84MnDg/IIAyMPu52ZE 9RySTaI37wieXUpDouXiTWClNtJ4KWuZN3aYtkvhRRPb/oghWZSeRYvvcUJqS0TF -----END CERTIFICATE-----Generated at Sat Jul 5 17:58:29 2025 by rpki-client