$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: ryZ04oK6FG0U/Nzwd1qo+FfoIlg42DWNj6HIFpjd3zM= Subject key identifier: 38:81:DC:A4:DA:03:66:75:9F:BC:3B:02:58:7D:5A:94:59:D0:F4:C9 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584A75FD0BB758CF4267D3414F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1A85 Signing time: Wed 09 Jul 2025 12:00:08 +0000 Manifest this update: Wed 09 Jul 2025 12:00:08 +0000 Manifest next update: Sat 12 Jul 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: JMKC1Mw8NO6qR3c04ODoLgdA2gqqPGHwuO7AJIQA2D0=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: 0DpeYtz7v3IF33Ejt/xK7N5svRX+mtK+/kILsZzNDs4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:fd:0b:b7:58:cf:42:67:d3:41:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Jul 9 12:00:08 2025 GMT Not After : Jul 12 12:00:00 2025 GMT Subject: CN=5b09f8ae-3467-4d27-9982-94da4842be8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d5:c8:b6:ac:ed:ad:66:a0:b1:dd:4a:93:dd: da:4c:c6:9d:70:67:64:c9:b0:07:89:eb:a3:da:47: d9:dc:a7:95:5e:b1:d2:2f:94:5d:43:ed:de:18:8c: 8f:89:b1:d8:83:5c:4b:11:fe:8e:be:a0:03:a9:2f: b3:61:12:dc:2a:d2:bd:81:6b:b2:28:21:a8:7f:5d: 7f:dc:54:da:cb:2a:f6:72:63:29:3d:fe:68:c4:3e: 33:f8:7b:da:29:1b:66:6a:b6:4b:75:47:15:6e:5c: 7d:9c:a7:bc:4a:a1:43:9b:96:f4:b3:b3:c3:fa:18: f0:c1:f7:ad:1f:0c:ee:a2:34:0c:32:d6:ca:3e:e4: 1f:da:f3:30:20:cf:90:58:72:51:98:56:e1:ad:48: 9e:45:d1:c4:d9:65:b2:62:9c:e1:c7:b2:e6:ee:09: bb:92:81:74:4a:ec:88:15:35:c2:9d:1a:88:97:29: 62:68:4c:15:45:46:2f:d4:48:f4:46:9f:f1:7f:0c: 57:a2:bc:de:6b:77:2a:04:69:17:7c:48:94:17:37: 0a:9a:fd:c4:1e:7d:eb:a6:bd:12:98:40:07:63:f0: cf:4a:0d:97:46:4f:71:39:a9:27:ed:7d:1e:31:01: 93:01:7f:fb:29:de:67:5d:dd:91:cf:3a:d6:35:47: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:81:DC:A4:DA:03:66:75:9F:BC:3B:02:58:7D:5A:94:59:D0:F4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:12:1a:45:38:fd:bf:66:3e:6d:4b:06:49:0a:62:3c:17:5e: 27:59:85:d9:09:ec:1c:32:91:e9:96:46:65:b0:cc:77:ca:8e: fb:6e:42:e2:b8:cf:39:9a:00:6b:b2:21:3f:ac:36:8e:f3:73: ca:d5:54:30:38:a5:4b:c1:f7:9e:6c:2c:e6:1e:0d:d3:7c:5f: 95:ac:7d:80:30:9e:72:02:d3:2c:f3:d5:8f:ab:c4:72:e6:8a: a8:c1:a3:92:26:95:09:bb:c5:2d:7c:b2:ab:a5:3b:38:a3:8d: 26:b7:f7:e0:df:7a:de:88:97:12:1b:a5:87:06:c6:2e:79:11: 7b:ff:28:93:fb:17:44:88:17:d2:f6:bd:e7:6f:0a:e1:9b:f6: 84:bb:50:0a:b4:64:68:7a:35:4c:ba:8c:3e:bd:3a:b6:0c:05: 2e:ae:1d:1d:ab:6b:b9:57:31:a8:16:70:1f:92:41:9e:3a:2b: 1b:a1:ac:8e:ad:ca:07:6b:10:7f:d6:79:84:7d:bb:8b:b9:78: 33:04:02:2f:5e:25:c7:c6:54:1e:4c:e8:da:af:87:8e:95:d0: 75:7a:19:03:53:da:b3:2f:f7:7b:d1:ea:12:ed:0b:fa:02:71: 5d:d1:d8:ae:23:b1:c4:16:3d:fd:4a:d2:7d:d5:41:da:eb:02: 0b:28:86:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1/Qu3WM9CZ9NBTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MDcwOTEyMDAwOFoXDTI1MDcxMjEyMDAwMFowLzEtMCsGA1UEAxMk NWIwOWY4YWUtMzQ2Ny00ZDI3LTk5ODItOTRkYTQ4NDJiZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tXItqztrWagsd1Kk93aTMadcGdkybAHieuj 2kfZ3KeVXrHSL5RdQ+3eGIyPibHYg1xLEf6OvqADqS+zYRLcKtK9gWuyKCGof11/ 3FTayyr2cmMpPf5oxD4z+HvaKRtmarZLdUcVblx9nKe8SqFDm5b0s7PD+hjwwfet HwzuojQMMtbKPuQf2vMwIM+QWHJRmFbhrUieRdHE2WWyYpzhx7Lm7gm7koF0SuyI FTXCnRqIlyliaEwVRUYv1Ej0Rp/xfwxXorzea3cqBGkXfEiUFzcKmv3EHn3rpr0S mEAHY/DPSg2XRk9xOakn7X0eMQGTAX/7Kd5nXd2RzzrWNUdJrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDiB3KTaA2Z1n7w7Alh9WpRZ0PTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoEhpFOP2/Zj5tSwZJCmI8 F14nWYXZCewcMpHplkZlsMx3yo77bkLiuM85mgBrsiE/rDaO83PK1VQwOKVLwfee bCzmHg3TfF+VrH2AMJ5yAtMs89WPq8Ry5oqowaOSJpUJu8UtfLKrpTs4o40mt/fg 33reiJcSG6WHBsYueRF7/yiT+xdEiBfS9r3nbwrhm/aEu1AKtGRoejVMuow+vTq2 DAUurh0dq2u5VzGoFnAfkkGeOisboayOrcoHaxB/1nmEfbuLuXgzBAIvXiXHxlQe TOjar4eOldB1ehkDU9qzL/d70eoS7Qv6AnFd0diuI7HEFj39StJ91UHa6wILKIbG -----END CERTIFICATE-----Generated at Wed Jul 9 20:07:00 2025 by rpki-client