$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft File: a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft (raw, json) Hash identifier: J8kjVASXYqjJdbk0NX80s8XZseNtRVsNGSvx7pK2sBM= Subject key identifier: 0E:22:DF:9A:E7:7F:EB:A4:74:F9:B3:54:7D:3E:F5:68:6E:ED:46:E3 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584A73502209F71F4F04BC141080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft Manifest number: 010D0C9F4328584234D1D19DE3CDB1A5D85D2A8D Signing time: Tue 08 Jul 2025 13:00:08 +0000 Manifest this update: Tue 08 Jul 2025 13:00:08 +0000 Manifest next update: Fri 11 Jul 2025 13:00:00 +0000 Files and hashes: 1: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (hash: pN+zdFG0Eqo/A/ys3CboXir3jA52DTsgok3zVmAVSa0=) 2: a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl (hash: iWTdwbfmk/vQptNwP1tqmY4UKJEC2IosXIHVLM7uZRs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:50:22:09:f7:1f:4f:04:bc:14:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Jul 8 13:00:08 2025 GMT Not After : Jul 11 13:00:00 2025 GMT Subject: CN=402485bc-689c-413e-aaa9-2a725f8a02a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:67:7f:64:2f:09:f6:49:81:d8:fa:d3:3c: 8f:a4:86:df:5a:41:46:1f:2f:75:1b:f8:73:a6:ec: d3:86:11:bb:98:7a:df:e8:23:7a:ca:b3:0e:38:13: 81:ff:aa:bf:3f:d8:f3:56:0a:b1:b3:c6:e2:14:05: 4a:81:c4:55:17:45:e6:0e:7a:98:24:65:19:8f:04: e2:94:6d:25:40:46:b7:52:50:82:58:a2:8f:e2:2b: b4:52:dd:99:99:73:60:05:b4:ce:b8:4c:5c:bc:67: 33:59:44:40:9e:7c:03:44:33:e4:67:ea:6e:8b:6f: 7f:85:73:bb:80:63:46:9d:77:eb:51:c2:4b:33:cc: 3f:f5:50:ed:47:34:e0:40:7b:23:2a:6f:2c:20:79: 6b:75:ad:fa:59:fe:1e:c5:02:eb:d2:4d:00:12:b3: f7:45:ed:3b:37:70:0a:db:45:af:7c:67:2b:0a:9c: 89:de:68:15:67:4d:da:d5:39:d2:3f:03:18:d8:9c: 11:99:96:d3:76:e0:94:ff:b0:ce:30:83:b9:52:b1: 9e:7a:60:93:fc:49:26:75:91:f5:72:3d:25:95:96: 31:c6:21:96:52:a7:11:11:78:be:9b:57:a6:42:c6: bd:f3:5e:4e:19:12:90:93:66:ea:3f:fe:7a:ed:dd: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:22:DF:9A:E7:7F:EB:A4:74:F9:B3:54:7D:3E:F5:68:6E:ED:46:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8a:91:60:8a:96:20:89:f5:06:7b:67:53:f6:38:a9:52:29: 87:3b:68:a0:75:90:41:60:21:91:7d:47:e6:0d:df:4a:01:b5: f1:54:51:c0:a2:26:e4:1f:1c:64:b8:ed:4c:a4:66:9f:40:a0: 00:43:58:ad:d5:b1:50:ee:f6:dd:d0:75:9b:bf:c8:2c:1e:74: 91:09:16:e3:ab:96:de:34:24:1b:48:54:21:97:c6:22:47:64: b5:42:91:90:b5:7f:85:16:8a:4a:de:47:19:21:73:bd:b6:f0: 7c:18:ff:bd:8b:a2:40:fd:c3:47:39:33:0b:df:60:22:ee:95: 0c:01:ad:66:f4:dd:9f:db:94:ec:1f:7c:9f:1b:69:6a:2c:38: fe:f6:b2:83:1e:cd:1e:30:c4:58:10:56:0b:f6:d7:7d:d7:e9: 18:b3:9d:86:7c:48:c0:bd:ce:ee:a1:fc:46:03:ff:4e:ae:c2: f2:25:78:a3:af:c9:0d:4e:c4:75:27:e2:6f:cf:80:75:57:96: 31:a3:ea:d8:48:74:b3:ee:61:19:31:4b:a7:f4:7a:69:62:b4: 4c:e6:99:15:ab:11:1e:ea:49:b1:f9:18:c9:38:f9:fa:c7:68: 05:6f:07:f0:ed:b1:5c:d0:f8:1d:f4:a0:44:b2:bc:58:c2:40: ad:d2:0c:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzUCIJ9x9PBLwUEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI1MDcwODEzMDAwOFoXDTI1MDcxMTEzMDAwMFowLzEtMCsGA1UEAxMk NDAyNDg1YmMtNjg5Yy00MTNlLWFhYTktMmE3MjVmOGEwMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhINnf2QvCfZJgdj60zyPpIbfWkFGHy91G/hz puzThhG7mHrf6CN6yrMOOBOB/6q/P9jzVgqxs8biFAVKgcRVF0XmDnqYJGUZjwTi lG0lQEa3UlCCWKKP4iu0Ut2ZmXNgBbTOuExcvGczWURAnnwDRDPkZ+pui29/hXO7 gGNGnXfrUcJLM8w/9VDtRzTgQHsjKm8sIHlrda36Wf4exQLr0k0AErP3Re07N3AK 20WvfGcrCpyJ3mgVZ03a1TnSPwMY2JwRmZbTduCU/7DOMIO5UrGeemCT/EkmdZH1 cj0llZYxxiGWUqcREXi+m1emQsa9815OGRKQk2bqP/567d2azQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA4i35rnf+ukdPmzVH0+9Whu7UbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvYTk0MzVhMzgtYmI4OS00 ZmNmLTllNWYtN2E2ZTUzYjJkM2JkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBipFgipYgifUGe2dT9jip UimHO2igdZBBYCGRfUfmDd9KAbXxVFHAoibkHxxkuO1MpGafQKAAQ1it1bFQ7vbd 0HWbv8gsHnSRCRbjq5beNCQbSFQhl8YiR2S1QpGQtX+FFopK3kcZIXO9tvB8GP+9 i6JA/cNHOTML32Ai7pUMAa1m9N2f25TsH3yfG2lqLDj+9rKDHs0eMMRYEFYL9td9 1+kYs52GfEjAvc7uofxGA/9OrsLyJXijr8kNTsR1J+Jvz4B1V5Yxo+rYSHSz7mEZ MUun9HppYrRM5pkVqxEe6kmx+RjJOPn6x2gFbwfw7bFc0Pgd9KBEsrxYwkCt0gxR -----END CERTIFICATE-----Generated at Wed Jul 9 12:04:53 2025 by rpki-client