$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft File: 88d13a4f-a038-4d71-9494-9d48fef32c35.mft (raw, json) Hash identifier: T9WkB65wivGp6yBlkZP/+yn3tquUVL4SRi13ZyYAlEk= Subject key identifier: 5C:19:42:45:D6:9D:E6:3E:42:18:C6:52:76:63:4B:96:E4:C2:4E:B1 Authority key identifier: 59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 Certificate issuer: /CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Certificate serial: 010D0C9F4328584A6D9CF1ABE7422E823E357B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft Manifest number: 010D0C9F4328584A1462E2890A10EA2C98908861 Signing time: Sun 06 Jul 2025 12:00:03 +0000 Manifest this update: Sun 06 Jul 2025 12:00:03 +0000 Manifest next update: Wed 09 Jul 2025 12:00:00 +0000 Files and hashes: 1: 88d13a4f-a038-4d71-9494-9d48fef32c35.crl (hash: ycn8ZxZc2Kyb27gTNFlFl4VGSoFdPYngWAynmYJr0mM=) 2: eacecb68-5cde-3ce5-8b25-6b94e45fac7f.roa (hash: PATjuCg6ZBw0E/XBy5alo+Kaz30mWS/b3dZK2QkrL4g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:9c:f1:ab:e7:42:2e:82:3e:35:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88d13a4f-a038-4d71-9494-9d48fef32c35 Validity Not Before: Jul 6 12:00:03 2025 GMT Not After : Jul 9 12:00:00 2025 GMT Subject: CN=c02965df-c86f-4f41-a911-2540899a3096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:65:01:d8:c6:9b:55:6b:d1:5c:9a:e3:2f: 53:89:61:dd:6e:28:fd:22:fe:f7:56:d3:a5:d0:79: 94:92:24:99:b6:e5:30:c3:be:06:81:93:5d:57:37: 96:e0:f4:ae:e1:1d:df:51:40:8d:74:1d:73:60:5e: 4a:b7:1c:ba:01:d4:ac:10:d1:d0:58:0d:5e:e7:b4: d8:7d:54:a8:ff:92:eb:2d:9d:8a:81:1d:44:79:17: 44:39:cf:9f:5d:11:be:64:15:e1:95:61:3a:51:d2: e8:8d:07:12:78:0b:7e:42:c6:8d:77:5a:5e:b5:04: 9f:c1:00:62:34:9d:dd:6d:b1:5f:6f:a0:03:b4:5a: db:a9:b6:10:95:3c:a5:18:5d:35:68:94:39:23:a7: 34:82:f2:f3:85:42:0f:85:b0:63:ba:ce:ad:3f:66: ba:ca:9b:98:a7:de:b5:ab:f2:df:01:99:99:f3:40: eb:15:e6:17:9a:49:18:99:38:cf:ea:01:c4:ed:bb: ea:66:db:e3:7e:c9:e7:5e:6b:12:1d:15:8e:d0:6b: 77:8c:0a:0e:00:64:ef:46:19:1d:63:f7:4c:68:a9: 6a:ed:a0:21:1b:e7:b0:a9:4c:cd:f5:23:eb:9a:dd: e8:63:1c:e2:ba:3b:39:fd:d2:fd:61:9d:7e:52:8b: d0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:19:42:45:D6:9D:E6:3E:42:18:C6:52:76:63:4B:96:E4:C2:4E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35/88d13a4f-a038-4d71-9494-9d48fef32c35.crl X509v3 Authority Key Identifier: keyid:59:E2:B0:53:21:17:65:02:8F:55:06:74:F4:76:F6:06:FB:8F:72:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/88d13a4f-a038-4d71-9494-9d48fef32c35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:59:b2:ac:e8:d2:40:5c:f3:d5:cf:3a:6f:83:bb:30:14:42: bf:7f:e9:f2:29:64:a1:5d:55:bd:8e:52:79:2b:14:50:b7:54: 32:5a:22:6d:6f:56:15:7a:6b:03:ce:80:5f:a4:3b:f4:14:33: 0e:a5:8a:6a:a8:4c:94:04:b2:1b:ea:0b:91:ff:4f:56:b1:b7: 56:87:8b:31:79:21:0a:1e:12:4a:b8:26:c4:7f:34:5a:75:f2: 1f:d5:ee:8c:29:f3:10:bf:97:04:65:2e:56:47:e6:1e:14:e8: 5c:ad:f8:63:a3:f5:e6:8b:57:37:03:63:60:89:9a:99:71:40: 01:e3:06:f6:7d:c7:da:2b:0c:84:a6:ef:2d:2e:39:67:1a:73: be:1f:3b:51:43:0e:5b:a9:ad:97:a9:33:c9:ac:d5:60:29:10: 6a:ee:0d:30:11:50:10:e6:12:33:26:f5:3b:54:16:77:cc:0f: b6:f2:42:3f:c0:5b:8b:d6:27:2c:09:53:3d:99:44:f0:cb:c8: 84:f3:62:94:2e:f4:a6:57:31:17:b8:0e:82:79:97:10:dd:6b: 98:65:ea:43:f5:e6:26:71:af:61:66:7a:9c:d2:7a:fc:2a:0e: b0:ef:31:4b:5f:de:d4:bb:b8:2a:e9:af:8e:44:59:30:e9:70: 53:17:53:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEptnPGr50Iugj41e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkMTNhNGYtYTAzOC00ZDcxLTk0OTQtOWQ0OGZlZjMy YzM1MB4XDTI1MDcwNjEyMDAwM1oXDTI1MDcwOTEyMDAwMFowLzEtMCsGA1UEAxMk YzAyOTY1ZGYtYzg2Zi00ZjQxLWE5MTEtMjU0MDg5OWEzMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+dlAdjGm1Vr0Vya4y9TiWHdbij9Iv73VtOl 0HmUkiSZtuUww74GgZNdVzeW4PSu4R3fUUCNdB1zYF5Ktxy6AdSsENHQWA1e57TY fVSo/5LrLZ2KgR1EeRdEOc+fXRG+ZBXhlWE6UdLojQcSeAt+QsaNd1petQSfwQBi NJ3dbbFfb6ADtFrbqbYQlTylGF01aJQ5I6c0gvLzhUIPhbBjus6tP2a6ypuYp961 q/LfAZmZ80DrFeYXmkkYmTjP6gHE7bvqZtvjfsnnXmsSHRWO0Gt3jAoOAGTvRhkd Y/dMaKlq7aAhG+ewqUzN9SPrmt3oYxziujs5/dL9YZ1+UovQ7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFwZQkXWneY+QhjGUnZjS5bkwk6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84OGQx M2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4ZmVmMzJjMzUvODhkMTNhNGYtYTAzOC00 ZDcxLTk0OTQtOWQ0OGZlZjMyYzM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODhkMTNhNGYtYTAzOC00ZDcxLTk0 OTQtOWQ0OGZlZjMyYzM1Lzg4ZDEzYTRmLWEwMzgtNGQ3MS05NDk0LTlkNDhmZWYz MmMzNS5jcmwwHwYDVR0jBBgwFoAUWeKwUyEXZQKPVQZ09Hb2BvuPcoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84OGQxM2E0Zi1hMDM4LTRkNzEtOTQ5NC05ZDQ4 ZmVmMzJjMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwWbKs6NJAXPPVzzpvg7sw FEK/f+nyKWShXVW9jlJ5KxRQt1QyWiJtb1YVemsDzoBfpDv0FDMOpYpqqEyUBLIb 6guR/09WsbdWh4sxeSEKHhJKuCbEfzRadfIf1e6MKfMQv5cEZS5WR+YeFOhcrfhj o/Xmi1c3A2NgiZqZcUAB4wb2fcfaKwyEpu8tLjlnGnO+HztRQw5bqa2XqTPJrNVg KRBq7g0wEVAQ5hIzJvU7VBZ3zA+28kI/wFuL1icsCVM9mUTwy8iE82KULvSmVzEX uA6CeZcQ3WuYZepD9eYmca9hZnqc0nr8Kg6w7zFLX97Uu7gq6a+ORFkw6XBTF1O3 -----END CERTIFICATE-----Generated at Mon Jul 7 08:32:10 2025 by rpki-client