$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft File: 7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft (raw, json) Hash identifier: s9c1zw0vE4kdPgKVqiDzT2l6V3lr63XkKlvHdwCMTGQ= Subject key identifier: 32:FF:58:56:53:D7:82:8D:E8:17:1D:0F:F3:58:BC:5A:14:CF:D6:95 Authority key identifier: 83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 Certificate issuer: /CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Certificate serial: 010D0C9F4328584A79D3BE554B3007E6965E6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft Manifest number: 010D0C9F43285841E4C73BA78FE64BD10BF45B6C Signing time: Thu 10 Jul 2025 21:00:08 +0000 Manifest this update: Thu 10 Jul 2025 21:00:08 +0000 Manifest next update: Sat 12 Jul 2025 21:00:00 +0000 Files and hashes: 1: 7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl (hash: P0Xf2EinoKjoMFoanlhxXY/35ERRkiAGf6zzvuD184E=) 2: f2d111b6-824d-3b08-af7b-3f301d73f479.roa (hash: clJMxRokPI9QYw000DSk0Fw7CClzXHJ3tftGU4hY7gU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:d3:be:55:4b:30:07:e6:96:5e:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7091c4c7-bf4c-4502-bc19-2e3f84b20e6d Validity Not Before: Jul 10 21:00:08 2025 GMT Not After : Jul 12 21:00:00 2025 GMT Subject: CN=ebcc2820-a490-433d-96a6-4afdbcf41408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:34:4f:1e:83:60:67:e0:cf:f7:af:2c:b8: 11:94:61:ec:1c:ce:ca:9d:0c:75:17:5d:82:c6:1c: 3a:78:ec:e1:94:4c:0c:cb:32:da:5f:67:09:8d:10: ad:02:c3:e2:3c:cf:3d:99:56:45:f8:a8:3a:f3:42: 43:46:ae:cd:79:b4:56:e6:58:bb:00:dd:36:72:25: 16:f1:29:ac:15:5d:75:18:55:eb:39:59:d1:50:62: e8:e3:c0:f3:21:9a:bb:fe:71:42:02:38:37:49:98: e8:bf:6e:56:09:35:3c:d6:eb:64:e4:ce:ae:4e:da: a1:bc:b5:fe:66:f8:ef:e2:67:a8:74:5a:8b:4a:38: 5a:78:2c:d0:4b:5f:48:52:0d:f4:47:36:1c:ff:c5: 6b:23:c5:fc:9d:d9:4f:24:d2:15:f5:b5:2a:b5:5e: eb:3f:0c:39:91:88:d1:36:dc:9c:11:35:aa:b5:d6: 21:71:f6:35:cb:87:fa:c9:4f:39:e2:78:92:76:37: b3:3f:70:11:4d:ef:cf:b8:67:3a:bc:60:d6:9b:ac: 33:f3:1f:ed:68:59:3e:7f:39:02:41:87:b3:5a:84: 87:b3:4f:8a:b0:6c:c5:01:ac:02:aa:7b:6a:34:33: 0b:d8:9f:98:eb:17:ac:05:1c:93:e3:9b:cd:b3:57: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:58:56:53:D7:82:8D:E8:17:1D:0F:F3:58:BC:5A:14:CF:D6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.crl X509v3 Authority Key Identifier: keyid:83:B8:A8:9F:0F:86:44:F1:AE:33:39:01:03:92:33:F9:48:B3:99:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7091c4c7-bf4c-4502-bc19-2e3f84b20e6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:7b:83:b3:af:83:ff:5c:0f:dc:6a:34:e2:c8:9e:1d:89:ee: 26:aa:9f:7e:d9:07:5b:22:98:a0:9e:d9:45:c1:b7:94:46:9f: 05:fe:5b:af:84:28:a1:d2:27:65:b7:71:6a:e4:2a:f0:04:66: e3:d6:93:7c:13:10:54:62:cf:b3:58:92:af:2a:7a:06:34:62: 6d:c5:5b:a5:38:eb:d8:d7:64:33:c9:92:86:a7:5d:c5:e4:68: c3:1f:38:f9:20:18:fe:d2:e1:69:11:18:2e:16:f3:bb:a3:e0: 9e:54:2d:0a:5b:1e:00:b2:cd:22:73:80:c5:42:80:9f:13:3e: d4:83:b9:8c:e7:81:71:cf:57:45:21:52:e1:14:6a:7c:70:19: b6:34:64:2e:e6:b8:b9:66:bb:7a:12:df:ee:53:5a:30:64:b0: 81:66:c2:72:f2:17:55:e9:f9:71:5d:5b:00:22:6e:30:5b:89: 1d:91:47:b5:37:cc:53:21:48:4a:6e:ac:a6:a2:bf:7d:08:8a: b6:cf:17:5a:0b:38:9e:79:43:ab:ee:43:91:30:a0:82:bd:77: 99:4f:d4:ee:cf:d3:e1:fa:2c:f2:6d:40:88:ed:59:33:66:40: c1:b4:9b:62:99:04:e7:91:ae:1f:b1:30:c2:81:03:f0:8f:63: 42:0d:e3:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp5075VSzAH5pZeYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA5MWM0YzctYmY0Yy00NTAyLWJjMTktMmUzZjg0YjIw ZTZkMB4XDTI1MDcxMDIxMDAwOFoXDTI1MDcxMjIxMDAwMFowLzEtMCsGA1UEAxMk ZWJjYzI4MjAtYTQ5MC00MzNkLTk2YTYtNGFmZGJjZjQxNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5U0Tx6DYGfgz/evLLgRlGHsHM7KnQx1F12C xhw6eOzhlEwMyzLaX2cJjRCtAsPiPM89mVZF+Kg680JDRq7NebRW5li7AN02ciUW 8SmsFV11GFXrOVnRUGLo48DzIZq7/nFCAjg3SZjov25WCTU81utk5M6uTtqhvLX+ Zvjv4meodFqLSjhaeCzQS19IUg30RzYc/8VrI8X8ndlPJNIV9bUqtV7rPww5kYjR NtycETWqtdYhcfY1y4f6yU854niSdjezP3ARTe/PuGc6vGDWm6wz8x/taFk+fzkC QYezWoSHs0+KsGzFAawCqntqNDML2J+Y6xesBRyT45vNs1fopQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDL/WFZT14KN6BcdD/NYvFoUz9aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MDkx YzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNmODRiMjBlNmQvNzA5MWM0YzctYmY0Yy00 NTAyLWJjMTktMmUzZjg0YjIwZTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzA5MWM0YzctYmY0Yy00NTAyLWJj MTktMmUzZjg0YjIwZTZkLzcwOTFjNGM3LWJmNGMtNDUwMi1iYzE5LTJlM2Y4NGIy MGU2ZC5jcmwwHwYDVR0jBBgwFoAUg7ionw+GRPGuMzkBA5Iz+UizmecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MDkxYzRjNy1iZjRjLTQ1MDItYmMxOS0yZTNm ODRiMjBlNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOe4Ozr4P/XA/cajTiyJ4d ie4mqp9+2QdbIpigntlFwbeURp8F/luvhCih0idlt3Fq5CrwBGbj1pN8ExBUYs+z WJKvKnoGNGJtxVulOOvY12QzyZKGp13F5GjDHzj5IBj+0uFpERguFvO7o+CeVC0K Wx4Ass0ic4DFQoCfEz7Ug7mM54Fxz1dFIVLhFGp8cBm2NGQu5ri5Zrt6Et/uU1ow ZLCBZsJy8hdV6flxXVsAIm4wW4kdkUe1N8xTIUhKbqymor99CIq2zxdaCzieeUOr 7kORMKCCvXeZT9Tuz9Ph+izybUCI7VkzZkDBtJtimQTnka4fsTDCgQPwj2NCDeP+ -----END CERTIFICATE-----Generated at Fri Jul 11 04:34:16 2025 by rpki-client