$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft File: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft (raw, json) Hash identifier: Rf7AWlCo7YglVGweBqRqVfnirLPx72wSu5vYMXpgHFk= Subject key identifier: BB:CE:3F:59:EE:E5:30:11:8C:27:49:14:BE:3D:70:3D:41:F8:AD:6D Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584A761AD4A4ABC6B780AE1FD600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft Manifest number: 010D0C9F432858499C71461369702FC777490DCF Signing time: Wed 09 Jul 2025 13:00:08 +0000 Manifest this update: Wed 09 Jul 2025 13:00:08 +0000 Manifest next update: Sat 12 Jul 2025 13:00:00 +0000 Files and hashes: 1: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl (hash: AZhszFxgNj8zyQwIouZAFUCsbifjhfEgEywR3yl+Zok=) 2: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (hash: PfGqQEk8hbLX1GdeH4WofEsiPjt9sX7RKU9t3NwcVLc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1a:d4:a4:ab:c6:b7:80:ae:1f:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Jul 9 13:00:08 2025 GMT Not After : Jul 12 13:00:00 2025 GMT Subject: CN=afd8ee40-5b58-46e4-9541-c945949718d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:46:64:88:62:1e:39:5c:73:db:de:d0:29: 45:1f:1c:fd:b0:b8:62:d8:48:3f:f7:11:22:b9:27: c2:cd:fe:5d:77:a9:3f:76:a0:d2:cc:54:b8:cc:1a: f6:35:2a:61:be:4c:a9:ea:91:2e:9b:7b:f1:81:6d: 4f:c2:53:81:0c:46:5f:54:f8:05:67:38:c5:13:c0: 40:09:12:a4:5d:8a:c2:64:a8:99:42:a1:0d:80:50: 57:e3:72:4e:4a:8b:cb:ec:e7:fc:41:6b:df:52:08: 7e:35:dd:3b:cf:72:37:41:95:87:48:68:a0:ca:06: 8f:46:9b:6c:71:e3:8e:03:96:8d:bf:3c:aa:7f:35: 46:b4:1d:1a:9e:f7:6a:4c:c9:aa:01:2b:77:17:5a: 32:b1:44:b4:ea:cc:91:43:53:5d:66:ca:11:97:9e: 97:ee:43:4e:9a:e6:0e:33:91:6e:58:1b:5a:02:de: 1a:8c:39:95:ff:6a:f7:c5:af:1b:0d:c7:95:50:22: cc:8c:07:9b:23:f0:93:88:61:cd:8c:2e:03:94:1c: b1:38:66:29:55:d3:01:a0:93:dd:76:21:09:df:c8: f7:82:23:9b:9d:cc:13:75:1e:af:ab:19:ae:66:a4: 4a:a0:d0:4d:42:74:3e:fb:9c:83:86:c7:d3:f6:66: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CE:3F:59:EE:E5:30:11:8C:27:49:14:BE:3D:70:3D:41:F8:AD:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:bd:88:49:26:78:d8:91:0f:cc:c9:c7:66:5b:23:21:a7:15: fd:35:74:16:bc:aa:68:c0:e3:91:aa:13:90:22:d6:e7:c3:1e: 54:12:88:75:43:b2:29:74:50:59:fc:ca:2d:b3:e0:9b:72:10: 71:3b:75:41:9c:aa:cf:31:c3:70:9a:ce:6f:c5:db:fe:d9:2f: ac:d8:68:75:b5:85:5f:69:60:05:54:56:11:27:ec:64:e5:46: e1:da:65:b7:21:7b:c0:6e:d4:7c:b2:c3:bb:ae:78:87:f0:f7: ba:cc:5f:aa:8c:f2:03:f5:ee:63:01:51:02:e9:85:fd:b4:de: 18:11:46:5b:35:3a:cf:7a:85:95:02:6f:0b:17:1f:d7:ea:c1: 1a:03:02:02:f9:dd:4d:9b:78:5c:60:6a:e5:f6:72:95:cf:52: dd:c5:09:23:e8:39:37:5e:91:31:ac:15:cd:2b:a2:ef:38:a8: 8b:aa:40:9b:f7:9d:5e:f7:5c:60:69:d5:26:69:32:58:fb:21: 70:69:a3:94:ad:de:95:fc:5e:7f:00:f2:37:3c:e9:2f:78:fd: 26:ec:9b:2d:06:38:05:44:92:e0:2c:0e:21:01:03:82:7e:34: cb:5d:e3:ec:20:68:c6:3d:2a:18:ec:43:cf:1e:da:38:6f:2f: e0:f8:be:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2GtSkq8a3gK4f1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI1MDcwOTEzMDAwOFoXDTI1MDcxMjEzMDAwMFowLzEtMCsGA1UEAxMk YWZkOGVlNDAtNWI1OC00NmU0LTk1NDEtYzk0NTk0OTcxOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsthGZIhiHjlcc9ve0ClFHxz9sLhi2Eg/9xEi uSfCzf5dd6k/dqDSzFS4zBr2NSphvkyp6pEum3vxgW1PwlOBDEZfVPgFZzjFE8BA CRKkXYrCZKiZQqENgFBX43JOSovL7Of8QWvfUgh+Nd07z3I3QZWHSGigygaPRpts ceOOA5aNvzyqfzVGtB0anvdqTMmqASt3F1oysUS06syRQ1NdZsoRl56X7kNOmuYO M5FuWBtaAt4ajDmV/2r3xa8bDceVUCLMjAebI/CTiGHNjC4DlByxOGYpVdMBoJPd diEJ38j3giObncwTdR6vqxmuZqRKoNBNQnQ++5yDhsfT9mbznwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLvOP1nu5TARjCdJFL49cD1B+K1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvMzNkMWE2YjQtOTAwMy00 YzFkLTlhNDgtMDI3MGJlNGFmNTBhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByvYhJJnjYkQ/MycdmWyMh pxX9NXQWvKpowOORqhOQItbnwx5UEoh1Q7IpdFBZ/Mots+CbchBxO3VBnKrPMcNw ms5vxdv+2S+s2Gh1tYVfaWAFVFYRJ+xk5Ubh2mW3IXvAbtR8ssO7rniH8Pe6zF+q jPID9e5jAVEC6YX9tN4YEUZbNTrPeoWVAm8LFx/X6sEaAwIC+d1Nm3hcYGrl9nKV z1LdxQkj6Dk3XpExrBXNK6LvOKiLqkCb951e91xgadUmaTJY+yFwaaOUrd6V/F5/ API3POkveP0m7JstBjgFRJLgLA4hAQOCfjTLXePsIGjGPSoY7EPPHto4by/g+L4m -----END CERTIFICATE-----Generated at Thu Jul 10 02:05:28 2025 by rpki-client