$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft File: 4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft (raw, json) Hash identifier: vVBxN4kCdBZLZ3GjFks3hsiAxMq1SHj3XkYkwG4f0Lo= Subject key identifier: CD:9F:FE:D4:C8:D1:5C:B1:DD:FF:59:B8:27:32:B9:58:AC:0D:85:BE Authority key identifier: F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C Certificate issuer: /CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5 Certificate serial: 010D0C9F4328584A745C2553582663CF48C98E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft Manifest number: 010D0C9F43285845CC440DC7025BFBE78DEB62B6 Signing time: Tue 08 Jul 2025 22:00:09 +0000 Manifest this update: Tue 08 Jul 2025 22:00:09 +0000 Manifest next update: Thu 10 Jul 2025 22:00:00 +0000 Files and hashes: 1: 4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl (hash: rotKmxVlG2I8DwWHJh8X25pGyfugimXs6QV7fz350Zg=) 2: 821b0144-f20d-3232-8bec-514d962865a2.roa (hash: Wp7GD2xrhHoXOykSVASGiIyQ8g9Jt9ABnyO7ohKNnc0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:5c:25:53:58:26:63:cf:48:c9:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf672d6-9c85-4ec6-b6e5-5747cefd10c5 Validity Not Before: Jul 8 22:00:09 2025 GMT Not After : Jul 10 22:00:00 2025 GMT Subject: CN=d0ad0ea0-691a-4b92-9f89-aee30d9367a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:68:7c:4b:2f:9b:a9:69:82:b8:96:8b:99: 6e:3c:7f:41:61:be:eb:ae:b3:8e:bb:a7:1c:02:c6: be:1e:45:be:bc:7c:28:7f:2c:a0:0c:bf:93:28:9a: a4:1e:e7:59:c6:76:2a:0f:a3:33:c3:fd:56:00:3a: 3b:be:82:e7:14:3f:37:32:fb:39:d2:5c:9a:93:61: 6a:57:e2:c0:aa:58:94:78:51:74:b8:20:97:69:f0: 68:7d:f7:1b:61:89:5c:30:bb:ec:19:65:2d:05:7e: 35:95:15:3a:ad:49:2f:04:4a:8b:0c:2b:0f:38:32: df:cf:68:d6:bc:e7:9c:ab:b3:06:f7:45:d9:8f:91: be:b2:d9:bf:e8:78:b6:2b:9d:a6:8a:e3:e4:2a:c3: 92:d9:95:01:ee:bf:0f:a6:69:e2:0d:b0:d1:6e:30: 3a:d1:3b:75:44:78:64:f6:6f:18:06:dc:f2:53:9c: ab:d8:37:43:6c:33:54:2a:87:95:8d:4c:25:fd:7f: a2:42:41:26:66:3c:ce:a8:ed:9f:8b:61:77:3a:83: 6f:49:47:4f:04:e5:44:50:61:8c:55:19:49:4d:96: 44:bb:d4:9e:0a:36:9d:b7:9a:eb:7d:d4:79:b7:d0: 65:ac:0f:11:7a:a9:ec:f2:d9:c5:f4:33:a4:de:9d: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:FE:D4:C8:D1:5C:B1:DD:FF:59:B8:27:32:B9:58:AC:0D:85:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.crl X509v3 Authority Key Identifier: keyid:F8:F5:F0:64:63:B8:20:52:B9:92:25:83:2B:FD:89:42:DE:99:6F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cf672d6-9c85-4ec6-b6e5-5747cefd10c5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:45:11:36:45:2f:61:93:a1:7a:c8:14:3e:a0:51:0d:ce:a7: f4:3f:44:77:23:f8:f7:54:ef:08:64:08:88:76:b0:86:1c:43: 79:66:15:52:19:13:43:c4:08:70:74:7f:8a:1e:c3:73:cb:36: 06:67:7d:aa:33:45:eb:0f:39:03:a9:8f:f4:1f:68:46:d7:59: a4:e5:d1:47:3a:85:58:a2:4a:6d:12:40:6c:bd:5c:d5:22:63: f5:c5:f6:94:a2:50:c5:25:0a:a7:31:81:38:30:79:c2:1e:c5: 39:47:c1:8c:bc:c7:60:98:23:e1:d2:65:d5:73:e3:d7:73:50: 71:7e:60:3a:3d:b2:2e:c8:26:04:c3:59:2b:b1:76:c5:ce:29: be:93:2a:1e:d6:41:d2:0b:ea:b9:9e:5d:c0:bd:75:9e:8a:e6: cc:58:e5:82:3f:42:0e:d7:5f:c5:e3:bb:6d:34:2b:6f:e5:b2: b1:45:97:72:f0:dc:3f:6d:8c:7d:53:0e:87:ea:18:13:ba:0a: be:56:fa:3d:ca:de:d3:26:8e:67:4e:9b:51:a4:8e:9c:d8:f7: 9a:30:9c:f2:f6:49:0d:78:92:3d:2d:fc:da:42:a0:0e:e1:29: fa:3a:71:32:46:78:92:85:85:8c:5c:e4:00:42:0d:83:39:ff: 9a:c9:ed:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0XCVTWCZjz0jJjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNmNjcyZDYtOWM4NS00ZWM2LWI2ZTUtNTc0N2NlZmQx MGM1MB4XDTI1MDcwODIyMDAwOVoXDTI1MDcxMDIyMDAwMFowLzEtMCsGA1UEAxMk ZDBhZDBlYTAtNjkxYS00YjkyLTlmODktYWVlMzBkOTM2N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAdofEsvm6lpgriWi5luPH9BYb7rrrOOu6cc Asa+HkW+vHwofyygDL+TKJqkHudZxnYqD6Mzw/1WADo7voLnFD83Mvs50lyak2Fq V+LAqliUeFF0uCCXafBoffcbYYlcMLvsGWUtBX41lRU6rUkvBEqLDCsPODLfz2jW vOecq7MG90XZj5G+stm/6Hi2K52miuPkKsOS2ZUB7r8PpmniDbDRbjA60Tt1RHhk 9m8YBtzyU5yr2DdDbDNUKoeVjUwl/X+iQkEmZjzOqO2fi2F3OoNvSUdPBOVEUGGM VRlJTZZEu9SeCjadt5rrfdR5t9BlrA8Reqns8tnF9DOk3p0d3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM2f/tTI0Vyx3f9ZuCcyuVisDYW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80Y2Y2 NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3Y2VmZDEwYzUvNGNmNjcyZDYtOWM4NS00 ZWM2LWI2ZTUtNTc0N2NlZmQxMGM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGNmNjcyZDYtOWM4NS00ZWM2LWI2 ZTUtNTc0N2NlZmQxMGM1LzRjZjY3MmQ2LTljODUtNGVjNi1iNmU1LTU3NDdjZWZk MTBjNS5jcmwwHwYDVR0jBBgwFoAU+PXwZGO4IFK5kiWDK/2JQt6Zb5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80Y2Y2NzJkNi05Yzg1LTRlYzYtYjZlNS01NzQ3 Y2VmZDEwYzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChRRE2RS9hk6F6yBQ+oFEN zqf0P0R3I/j3VO8IZAiIdrCGHEN5ZhVSGRNDxAhwdH+KHsNzyzYGZ32qM0XrDzkD qY/0H2hG11mk5dFHOoVYokptEkBsvVzVImP1xfaUolDFJQqnMYE4MHnCHsU5R8GM vMdgmCPh0mXVc+PXc1BxfmA6PbIuyCYEw1krsXbFzim+kyoe1kHSC+q5nl3AvXWe iubMWOWCP0IO11/F47ttNCtv5bKxRZdy8Nw/bYx9Uw6H6hgTugq+Vvo9yt7TJo5n TptRpI6c2PeaMJzy9kkNeJI9LfzaQqAO4Sn6OnEyRniShYWMXOQAQg2DOf+aye2h -----END CERTIFICATE-----Generated at Wed Jul 9 16:59:17 2025 by rpki-client