$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft File: a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft (raw, json) Hash identifier: w5dzXaE04UMyy8duNeeN8B89jOI4NLIGpm1s9jYwonw= Subject key identifier: 3C:C8:92:A5:77:75:6D:DB:43:59:EE:84:B2:B5:F1:AB:3D:13:26:61 Authority key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2 Certificate issuer: /CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac Certificate serial: 010D0C9F4328584A738BB267895305AD6D032600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft Manifest number: 010D0C9F43285848B4E93025F73C4C0DDA1BB5E5 Signing time: Tue 08 Jul 2025 15:00:08 +0000 Manifest this update: Tue 08 Jul 2025 15:00:08 +0000 Manifest next update: Fri 11 Jul 2025 15:00:00 +0000 Files and hashes: 1: 3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa (hash: N2E2TK9UhAsinejFYsShgQqlj4v093YD0nNXBXL9Tro=) 2: a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl (hash: zbVETEDFCznJY1rFih9POFnGw0lPDnsZRf5EUPj4Hg0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:8b:b2:67:89:53:05:ad:6d:03:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac Validity Not Before: Jul 8 15:00:08 2025 GMT Not After : Jul 11 15:00:00 2025 GMT Subject: CN=dd8037cf-d2e7-4293-958a-bdc5867f41e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:3f:ad:2d:07:8e:c9:2b:2e:be:0c:66:31: ef:d5:f1:d1:52:bb:a7:66:e1:04:6f:3d:8d:16:91: b4:ce:e8:36:22:b1:5e:ff:93:e2:b3:08:1d:85:19: dc:0e:0b:fd:9f:7d:c6:87:8e:75:33:86:48:c2:3c: 45:c1:de:43:bd:76:14:c6:05:20:23:ac:a2:02:7b: d2:48:76:ee:1c:74:a3:f9:a2:f8:93:23:06:92:3a: 82:9f:52:95:a8:6b:49:f9:d0:ea:13:33:65:92:14: c2:9d:31:de:0c:ed:86:c2:20:52:37:ea:43:f5:40: 88:33:59:52:31:60:98:58:0f:3f:cf:dc:eb:73:60: 39:44:2f:f9:b6:cd:bc:5c:2b:c3:26:f2:ca:aa:de: 92:ab:e9:e0:8b:c1:22:82:4a:1a:bc:f3:74:68:6a: 58:f4:73:de:96:aa:1f:c8:eb:55:73:17:c0:21:c7: 52:69:df:ae:51:1e:48:0d:6e:2c:de:04:7a:8e:08: 3a:3a:33:e9:4c:da:a3:2b:52:9b:04:88:48:59:af: 24:07:6a:46:1b:fc:fa:c9:35:0e:ce:e8:8a:d6:e4: 67:3b:2b:ff:e6:05:e4:dc:b0:5f:02:67:ae:2d:44: ae:ea:4e:6a:9c:a6:54:9e:8d:1f:c1:f6:98:4e:88: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C8:92:A5:77:75:6D:DB:43:59:EE:84:B2:B5:F1:AB:3D:13:26:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl X509v3 Authority Key Identifier: keyid:EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:11:92:d1:67:78:85:ac:6f:85:29:93:ce:11:11:ef:b5:5a: 40:c5:d2:53:83:85:30:8a:4d:8c:f2:92:12:d5:71:1c:10:00: 2e:a8:1f:ab:e0:dd:bc:7a:06:c6:c2:bb:b2:15:7e:34:28:15: 39:cf:d8:cc:6a:b5:74:31:72:63:3c:a3:98:29:1f:66:8d:13: a8:77:18:86:ae:6b:b8:73:bf:c2:e8:e2:1d:7f:3e:d9:6a:71: 81:1f:26:fb:b2:7b:07:da:ef:ea:02:6c:8b:07:62:5e:23:33: ca:c2:36:9b:16:49:7a:0f:db:36:00:ca:b2:22:cd:a4:a0:93: df:6a:1d:95:b7:8c:93:16:fa:62:61:12:bb:21:75:15:b4:8a: c8:26:07:30:39:8f:83:6a:68:76:9c:44:39:aa:88:b4:d3:55: ab:da:c5:bf:69:f8:df:e6:b4:7f:d1:fe:c0:23:11:fa:9a:04: 7f:a8:c7:d7:27:2b:94:19:03:9c:fc:49:08:34:92:e0:19:33: b5:dc:f0:0a:21:7e:14:ed:1a:1a:5c:88:db:fa:1f:4d:24:2c: a5:bd:6c:39:fb:ed:ed:51:42:6c:e2:b4:b3:d0:7e:10:9a:1c: 27:9d:8e:93:e0:68:16:10:48:4d:42:af:a3:2a:8d:de:bd:16: f7:be:0a:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpzi7JniVMFrW0DJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkYjVjMDktNDU5MC00NGI1LTgwMjMtZmE0YmRkOGQ1 YmFjMB4XDTI1MDcwODE1MDAwOFoXDTI1MDcxMTE1MDAwMFowLzEtMCsGA1UEAxMk ZGQ4MDM3Y2YtZDJlNy00MjkzLTk1OGEtYmRjNTg2N2Y0MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdc/rS0HjskrLr4MZjHv1fHRUrunZuEEbz2N FpG0zug2IrFe/5PiswgdhRncDgv9n33Gh451M4ZIwjxFwd5DvXYUxgUgI6yiAnvS SHbuHHSj+aL4kyMGkjqCn1KVqGtJ+dDqEzNlkhTCnTHeDO2GwiBSN+pD9UCIM1lS MWCYWA8/z9zrc2A5RC/5ts28XCvDJvLKqt6Sq+ngi8EigkoavPN0aGpY9HPelqof yOtVcxfAIcdSad+uUR5IDW4s3gR6jgg6OjPpTNqjK1KbBIhIWa8kB2pGG/z6yTUO zuiK1uRnOyv/5gXk3LBfAmeuLUSu6k5qnKZUno0fwfaYToiPbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDzIkqV3dW3bQ1nuhLK18as9EyZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMWRi NWMwOS00NTkwLTQ0YjUtODAyMy1mYTRiZGQ4ZDViYWMvYTFkYjVjMDktNDU5MC00 NGI1LTgwMjMtZmE0YmRkOGQ1YmFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTFkYjVjMDktNDU5MC00NGI1LTgw MjMtZmE0YmRkOGQ1YmFjL2ExZGI1YzA5LTQ1OTAtNDRiNS04MDIzLWZhNGJkZDhk NWJhYy5jcmwwHwYDVR0jBBgwFoAU7rwCsiNn8mpRWhZ/XnIjvJYNQKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMWRiNWMwOS00NTkwLTQ0YjUtODAyMy1mYTRi ZGQ4ZDViYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1EZLRZ3iFrG+FKZPOERHv tVpAxdJTg4Uwik2M8pIS1XEcEAAuqB+r4N28egbGwruyFX40KBU5z9jMarV0MXJj PKOYKR9mjROodxiGrmu4c7/C6OIdfz7ZanGBHyb7snsH2u/qAmyLB2JeIzPKwjab Fkl6D9s2AMqyIs2koJPfah2Vt4yTFvpiYRK7IXUVtIrIJgcwOY+Damh2nEQ5qoi0 01Wr2sW/afjf5rR/0f7AIxH6mgR/qMfXJyuUGQOc/EkINJLgGTO13PAKIX4U7Roa XIjb+h9NJCylvWw5++3tUUJs4rSz0H4QmhwnnY6T4GgWEEhNQq+jKo3evRb3vgp0 -----END CERTIFICATE-----Generated at Wed Jul 9 06:07:52 2025 by rpki-client