$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft File: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft (raw, json) Hash identifier: /QgZf+G1xZbnlZEWMg/qsurk+0+fNmWcm2Ewm35QyfY= Subject key identifier: 5A:A4:ED:CE:2F:07:86:41:05:98:9F:BB:65:F6:D0:59:57:5A:68:6B Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584A73C735604EB45A1D060ED640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft Manifest number: 010D0C9F432858440A57C730C85A71D2060E3A53 Signing time: Tue 08 Jul 2025 17:00:03 +0000 Manifest this update: Tue 08 Jul 2025 17:00:03 +0000 Manifest next update: Fri 11 Jul 2025 17:00:00 +0000 Files and hashes: 1: a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl (hash: ztoH1A6Xor2cWN+rzLm4coKN/rgXT/g2nwFGsgiv/JY=) 2: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (hash: HyVfgYrgz7/bITL78KlEEVb3ljP9mulrRzEM6wIBjr0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:c7:35:60:4e:b4:5a:1d:06:0e:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: Jul 8 17:00:03 2025 GMT Not After : Jul 11 17:00:00 2025 GMT Subject: CN=0db23ba6-8999-4e58-9e17-5e22d0efd026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:eb:d4:e5:55:36:79:98:30:45:82:f5:04: 9f:c9:8d:7c:03:f9:35:c6:68:a8:ec:cb:f7:4f:b5: 42:cf:71:79:22:3e:b5:de:03:12:06:ee:98:3c:ba: 7b:1d:5f:8e:48:24:7f:f3:64:30:12:14:20:cf:6e: 9b:66:c5:a0:b3:24:e5:14:db:10:22:fb:61:33:4a: ad:0e:c6:bd:de:8e:da:5f:59:c2:4e:c1:7d:23:ba: 2a:f1:d3:54:7a:38:1b:f3:08:c2:66:34:b3:eb:28: 64:04:e5:a4:e9:b6:80:0a:61:c9:9b:0c:8e:4e:7d: 48:9b:92:20:29:a0:8a:5d:3a:1c:bb:40:ce:96:22: d2:f7:d3:ed:5f:43:64:36:b8:a0:17:90:66:08:b7: 32:77:e2:31:1a:72:24:6e:25:61:c4:8d:11:e6:eb: 9a:81:7b:c8:6d:ff:0c:35:5c:d6:90:38:dc:17:6e: 5a:83:b2:6d:3c:d7:41:3a:de:23:19:05:82:49:b2: 49:0e:bd:3e:88:84:21:a2:14:92:c0:36:df:99:16: 78:3c:e8:4d:f2:b1:b4:17:fd:53:05:59:c2:63:66: dd:9d:da:a9:b8:16:eb:f2:74:c8:2f:cd:e1:d4:04: 6e:36:a7:64:58:fd:c3:da:d4:76:fd:05:6a:34:0f: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A4:ED:CE:2F:07:86:41:05:98:9F:BB:65:F6:D0:59:57:5A:68:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2d:3c:e8:0d:50:ea:1a:b9:ea:78:13:2e:06:07:aa:0c:f6: e4:2a:d3:fc:6a:2a:88:ae:49:62:34:65:61:67:52:d1:be:ae: 2b:3c:f0:75:0c:a1:08:f7:11:d7:62:21:a8:3e:8f:b3:7b:9a: 5e:74:ea:80:6c:9b:ab:9d:52:43:05:d9:76:01:a2:1e:39:52: fd:15:51:84:56:9c:4c:b6:b8:c1:3f:4d:52:8b:d7:c6:0d:5e: 79:b4:30:e3:3e:ae:21:7e:e8:f3:4a:34:27:3d:dc:cb:af:7d: 81:9f:99:a9:a1:42:40:a5:78:0e:33:bf:d8:8b:b9:13:93:5e: 05:51:0a:d1:0a:f3:42:10:6e:a7:2f:66:f2:8c:d9:cd:0e:2d: 52:b8:c2:00:fe:5f:aa:9a:54:41:ea:3f:06:6c:cd:d4:70:d0: 97:1b:3a:22:99:28:39:30:4d:b6:dc:e7:36:41:20:fe:98:ef: 11:77:20:8e:14:56:2d:87:06:5b:77:4d:8a:de:fe:a7:54:d8: d8:34:4f:cc:b5:59:2f:d8:b3:7e:b5:07:79:4e:d9:de:ae:a2: a3:25:e1:8a:fb:89:7f:3d:10:fc:75:7d:32:3c:5e:e4:d4:59: 2c:a2:5f:af:56:4a:c7:16:e7:51:30:be:21:f8:ca:3f:8a:79: 2c:3c:9d:ce -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzxzVgTrRaHQYO1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI1MDcwODE3MDAwM1oXDTI1MDcxMTE3MDAwMFowLzEtMCsGA1UEAxMk MGRiMjNiYTYtODk5OS00ZTU4LTllMTctNWUyMmQwZWZkMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAjr1OVVNnmYMEWC9QSfyY18A/k1xmio7Mv3 T7VCz3F5Ij613gMSBu6YPLp7HV+OSCR/82QwEhQgz26bZsWgsyTlFNsQIvthM0qt Dsa93o7aX1nCTsF9I7oq8dNUejgb8wjCZjSz6yhkBOWk6baACmHJmwyOTn1Im5Ig KaCKXTocu0DOliLS99PtX0NkNrigF5BmCLcyd+IxGnIkbiVhxI0R5uuagXvIbf8M NVzWkDjcF25ag7JtPNdBOt4jGQWCSbJJDr0+iIQhohSSwDbfmRZ4POhN8rG0F/1T BVnCY2bdndqpuBbr8nTIL83h1ARuNqdkWP3D2tR2/QVqNA8/SQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFqk7c4vB4ZBBZifu2X20FlXWmhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYTJiMmU1MzktYzgxYS00 OGNkLTk1YTUtN2UzZWFlOGFkMmQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzLTzoDVDqGrnqeBMuBgeq DPbkKtP8aiqIrkliNGVhZ1LRvq4rPPB1DKEI9xHXYiGoPo+ze5pedOqAbJurnVJD Bdl2AaIeOVL9FVGEVpxMtrjBP01Si9fGDV55tDDjPq4hfujzSjQnPdzLr32Bn5mp oUJApXgOM7/Yi7kTk14FUQrRCvNCEG6nL2byjNnNDi1SuMIA/l+qmlRB6j8GbM3U cNCXGzoimSg5ME223Oc2QSD+mO8RdyCOFFYthwZbd02K3v6nVNjYNE/MtVkv2LN+ tQd5TtnerqKjJeGK+4l/PRD8dX0yPF7k1Fksol+vVkrHFudRML4h+Mo/inksPJ3O -----END CERTIFICATE-----Generated at Wed Jul 9 11:46:26 2025 by rpki-client