$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft File: 2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft (raw, json) Hash identifier: iiNmsKyMo7d0XhSFMQPLDtGHfDpZ1wcQe++JPeo+vso= Subject key identifier: 43:C9:FF:3D:3A:D7:52:0A:EA:98:A7:55:4D:CF:D8:3D:5C:17:07:D8 Authority key identifier: 7D:86:71:DE:D5:6B:91:F0:6D:00:DF:55:59:AB:10:19:DE:FE:C5:A6 Certificate issuer: /CN=2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d Certificate serial: 010D0C9F4328584A5D362EB05B09ED7791DC1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft Manifest number: 010D0C9F432858413F56422DAE6FED71B86A15C4 Signing time: Mon 30 Jun 2025 15:00:03 +0000 Manifest this update: Mon 30 Jun 2025 15:00:03 +0000 Manifest next update: Thu 03 Jul 2025 15:00:00 +0000 Files and hashes: 1: 2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl (hash: 4Iy4EbNf8JRLqNlpx9T48lO7bwmGlokgdR/6feCURgE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:36:2e:b0:5b:09:ed:77:91:dc:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d Validity Not Before: Jun 30 15:00:03 2025 GMT Not After : Jul 3 15:00:00 2025 GMT Subject: CN=a2caee68-6815-445b-b612-1f07b694b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:52:b8:5b:e6:02:8a:f1:17:57:fd:de:b1: 40:a7:e9:97:5d:a6:bf:fd:57:58:6b:e6:94:c6:36: 9f:78:11:8a:fc:8e:7f:2e:b7:64:d0:8a:71:a6:2e: 89:f2:b7:05:92:11:34:f1:16:45:6d:f5:2d:48:5e: fc:35:33:7d:09:dd:b1:c0:7f:b4:e6:56:c4:b8:d0: 2a:98:ea:ce:b5:ab:14:cc:51:c7:af:d5:d3:7f:3b: 01:a4:78:88:a6:6a:40:87:94:52:dd:6d:58:94:94: 73:ae:f5:6a:bc:b3:22:9f:ef:46:b9:96:48:ac:13: 60:10:90:17:d0:c1:f2:35:90:a6:cc:f9:9a:c0:60: 5e:52:d4:15:8c:fe:63:d2:ce:ed:76:f3:19:f9:39: 9e:ab:b9:4e:a6:88:f9:dc:5f:b2:0a:43:6a:b9:20: 2b:43:f6:89:54:6c:98:1f:2e:1b:18:7d:39:ec:9a: 37:b9:9d:4d:ad:eb:5b:24:79:fc:21:32:b7:16:d6: 64:85:4e:1c:fb:ea:ab:ab:4f:37:5a:94:23:69:ea: 05:2d:bc:fe:1e:35:67:ac:d6:7c:13:67:42:9f:05: 73:e8:66:40:d9:82:ad:d9:d9:e4:73:5d:32:51:cc: c3:7e:e9:fb:b4:f8:13:ac:42:15:d8:f5:b4:4d:80: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C9:FF:3D:3A:D7:52:0A:EA:98:A7:55:4D:CF:D8:3D:5C:17:07:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.crl X509v3 Authority Key Identifier: keyid:7D:86:71:DE:D5:6B:91:F0:6D:00:DF:55:59:AB:10:19:DE:FE:C5:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d2ac759-ad3f-4a8a-988d-9b9eb6594c3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:19:b5:28:3b:0b:91:58:56:41:a8:f9:b1:3e:dd:25:ac:88: d8:46:ab:dd:eb:e2:88:5d:d3:86:61:02:eb:a3:98:89:d3:54: 91:44:cd:92:11:01:29:16:83:ed:6c:df:8d:11:59:65:23:00: 51:9e:27:71:88:16:43:00:5d:08:a8:be:6d:99:2d:ec:80:4b: be:06:1c:6a:dc:1d:5f:65:8c:45:7f:a1:8f:32:36:76:b0:85: d3:30:b5:f5:1f:2e:11:e8:5d:87:01:01:02:4e:ca:60:db:f9: 37:54:e6:9f:4e:59:00:8f:86:c1:64:df:a8:13:88:08:72:47: b6:20:99:77:f2:93:37:ad:87:b0:94:0d:82:56:da:6a:54:b8: e3:4c:80:9f:d4:45:bd:04:2b:32:13:a8:f6:67:12:59:77:24: d9:68:e2:b4:51:f8:fc:2c:a2:5d:78:23:ee:46:4a:6b:6a:35: 90:c8:ae:d7:90:7d:94:dd:7c:d5:16:79:88:4d:5d:01:65:23: cf:b3:c8:41:d1:eb:a0:6c:37:dc:0a:f6:34:eb:8f:b3:56:9b: a8:12:a9:4c:3e:e1:37:d4:60:30:50:ee:00:46:46:b9:e7:f0: 94:32:0e:19:10:79:e3:21:53:a1:74:b5:b0:07:ee:e1:67:6c: 05:f0:9e:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdNi6wWwntd5HcFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyYWM3NTktYWQzZi00YThhLTk4OGQtOWI5ZWI2NTk0 YzNkMB4XDTI1MDYzMDE1MDAwM1oXDTI1MDcwMzE1MDAwMFowLzEtMCsGA1UEAxMk YTJjYWVlNjgtNjgxNS00NDViLWI2MTItMWYwN2I2OTRiOWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZZSuFvmAorxF1f93rFAp+mXXaa//VdYa+aU xjafeBGK/I5/Lrdk0Ipxpi6J8rcFkhE08RZFbfUtSF78NTN9Cd2xwH+05lbEuNAq mOrOtasUzFHHr9XTfzsBpHiIpmpAh5RS3W1YlJRzrvVqvLMin+9GuZZIrBNgEJAX 0MHyNZCmzPmawGBeUtQVjP5j0s7tdvMZ+Tmeq7lOpoj53F+yCkNquSArQ/aJVGyY Hy4bGH057Jo3uZ1NretbJHn8ITK3FtZkhU4c++qrq083WpQjaeoFLbz+HjVnrNZ8 E2dCnwVz6GZA2YKt2dnkc10yUczDfun7tPgTrEIV2PW0TYDfIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEPJ/z0611IK6pinVU3P2D1cFwfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDJh Yzc1OS1hZDNmLTRhOGEtOTg4ZC05YjllYjY1OTRjM2QvMmQyYWM3NTktYWQzZi00 YThhLTk4OGQtOWI5ZWI2NTk0YzNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQyYWM3NTktYWQzZi00YThhLTk4 OGQtOWI5ZWI2NTk0YzNkLzJkMmFjNzU5LWFkM2YtNGE4YS05ODhkLTliOWViNjU5 NGMzZC5jcmwwHwYDVR0jBBgwFoAUfYZx3tVrkfBtAN9VWasQGd7+xaYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDJhYzc1OS1hZDNmLTRhOGEtOTg4ZC05Yjll YjY1OTRjM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2GbUoOwuRWFZBqPmxPt0l rIjYRqvd6+KIXdOGYQLro5iJ01SRRM2SEQEpFoPtbN+NEVllIwBRnidxiBZDAF0I qL5tmS3sgEu+Bhxq3B1fZYxFf6GPMjZ2sIXTMLX1Hy4R6F2HAQECTspg2/k3VOaf TlkAj4bBZN+oE4gIcke2IJl38pM3rYewlA2CVtpqVLjjTICf1EW9BCsyE6j2ZxJZ dyTZaOK0Ufj8LKJdeCPuRkprajWQyK7XkH2U3XzVFnmITV0BZSPPs8hB0eugbDfc CvY064+zVpuoEqlMPuE31GAwUO4ARka55/CUMg4ZEHnjIVOhdLWwB+7hZ2wF8J6n -----END CERTIFICATE-----Generated at Tue Jul 1 04:06:39 2025 by rpki-client