$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft File: d648fae7-947d-4ab0-9d26-c1da38e440ef.mft (raw, json) Hash identifier: nXZpZUbTC3RWsGHNRUk/EPTb8j/SdJpinpE7Vj4izk0= Subject key identifier: 0A:05:9A:C2:12:85:B1:97:AB:2E:38:93:A4:0D:39:3C:98:DE:D7:4F Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Certificate issuer: /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Certificate serial: 010D0C9F4328584A7155DD9758F91A1D46FD4540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft Manifest number: 010D0C9F43285849304E2F67EDAADDD0B217B336 Signing time: Mon 07 Jul 2025 20:00:03 +0000 Manifest this update: Mon 07 Jul 2025 20:00:03 +0000 Manifest next update: Wed 09 Jul 2025 20:00:00 +0000 Files and hashes: 1: d648fae7-947d-4ab0-9d26-c1da38e440ef.crl (hash: NBr87JuoY5F+ZD9gQH+cZr+9OJzfYG4diENwGa1kOnA=) 2: ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa (hash: pXQjNQCTQtmKY101rH4OziLw+FZQEqTfE2nziTUP9h0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:55:dd:97:58:f9:1a:1d:46:fd:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Validity Not Before: Jul 7 20:00:03 2025 GMT Not After : Jul 9 20:00:00 2025 GMT Subject: CN=afd350c7-ba9e-44d2-ba06-a6ed969e2ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0e:91:12:51:d7:51:d1:28:1a:dc:6e:41:2e: 66:b6:ef:b8:2a:e9:22:f4:e4:a9:25:d7:72:08:51: e9:4b:00:79:1b:80:f0:ce:d5:05:18:c0:0b:ee:e1: 00:3d:cb:c3:28:e6:b5:9c:a5:9a:52:2d:b4:cd:b4: e4:91:f8:09:e6:a0:c1:ab:6d:57:a9:a7:db:63:11: 37:15:3e:7f:5e:7e:18:ba:e1:10:18:5e:35:12:30: cc:9e:8e:11:56:13:b0:13:43:f7:ff:b7:1b:07:27: 19:24:b7:64:01:24:3b:34:0f:f3:7b:0d:75:be:e2: 7c:74:87:c1:16:93:01:c3:ea:d8:4e:ba:c1:c3:89: ca:b9:0e:b6:fb:0e:78:e2:31:88:51:47:a8:11:a4: 9c:0d:97:7b:5c:2c:24:e9:10:9f:b9:7f:21:a4:98: 32:43:0b:40:3f:78:aa:25:f3:2d:32:1e:d9:2f:81: 55:96:61:0c:3f:f7:f2:63:1b:70:e6:82:95:67:29: 2d:e9:15:04:76:6d:3b:80:c1:a9:90:27:bf:6d:97: f3:e5:01:6c:ca:ea:49:63:f6:c3:62:f9:70:ea:71: 84:7d:3a:26:f0:a6:b9:b8:a3:c4:43:cd:48:57:42: c0:19:ee:09:1d:87:8b:a3:8b:09:9d:23:44:a0:dc: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:9A:C2:12:85:B1:97:AB:2E:38:93:A4:0D:39:3C:98:DE:D7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl X509v3 Authority Key Identifier: keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0e:49:a5:af:5a:b0:f3:9b:7a:c3:7b:73:9e:fa:39:b3:c2: 53:21:ef:01:a2:9b:e2:3b:72:61:65:04:7a:43:0f:ad:41:79: bc:73:5d:5c:7c:37:5f:11:23:f6:23:f5:ea:6d:2b:e0:bf:ad: 6d:bb:e6:20:8d:b7:f3:f1:6c:75:fb:f9:1f:97:e8:de:36:e3: 45:4c:62:46:33:4f:c1:1f:69:68:fd:09:81:4f:37:82:14:c3: 08:6e:7b:7b:87:af:7e:81:bf:7f:38:c4:16:2a:ba:6e:c7:c2: fe:33:1b:22:5c:46:d7:ac:82:e7:10:b0:55:f8:a9:11:03:18: c7:d8:58:24:10:cc:da:08:9c:67:a7:c2:06:21:58:1e:c5:0f: 98:51:ed:27:f1:7c:50:9a:98:ca:c3:c7:2c:f8:46:b3:60:42: 9c:68:78:c6:d6:9f:75:62:d7:bb:0f:ce:5f:3f:5f:0c:d1:2c: 64:59:69:72:4d:c4:d3:e0:dc:5f:25:52:03:ee:40:b0:4c:c9: ec:ed:4d:73:8b:5d:f1:89:0e:43:94:db:c5:f8:02:78:3d:72: 8d:aa:f3:1d:28:e0:38:91:9f:19:80:38:0a:d7:e2:5c:20:d1: 33:62:03:35:04:53:dd:59:34:df:95:30:a2:5f:15:93:5e:05: 48:28:01:1b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpxVd2XWPkaHUb9RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0 MGVmMB4XDTI1MDcwNzIwMDAwM1oXDTI1MDcwOTIwMDAwMFowLzEtMCsGA1UEAxMk YWZkMzUwYzctYmE5ZS00NGQyLWJhMDYtYTZlZDk2OWUyY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q6RElHXUdEoGtxuQS5mtu+4Kuki9OSpJddy CFHpSwB5G4DwztUFGMAL7uEAPcvDKOa1nKWaUi20zbTkkfgJ5qDBq21XqafbYxE3 FT5/Xn4YuuEQGF41EjDMno4RVhOwE0P3/7cbBycZJLdkASQ7NA/zew11vuJ8dIfB FpMBw+rYTrrBw4nKuQ62+w544jGIUUeoEaScDZd7XCwk6RCfuX8hpJgyQwtAP3iq JfMtMh7ZL4FVlmEMP/fyYxtw5oKVZykt6RUEdm07gMGpkCe/bZfz5QFsyupJY/bD Yvlw6nGEfTom8Ka5uKPEQ81IV0LAGe4JHYeLo4sJnSNEoNz+WQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAoFmsIShbGXqy44k6QNOTyY3tdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4 ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvZDY0OGZhZTctOTQ3ZC00 YWIwLTlkMjYtYzFkYTM4ZTQ0MGVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0 NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh MzhlNDQwZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdDkmlr1qw85t6w3tznvo5 s8JTIe8BopviO3JhZQR6Qw+tQXm8c11cfDdfESP2I/XqbSvgv61tu+Ygjbfz8Wx1 +/kfl+jeNuNFTGJGM0/BH2lo/QmBTzeCFMMIbnt7h69+gb9/OMQWKrpux8L+Mxsi XEbXrILnELBV+KkRAxjH2FgkEMzaCJxnp8IGIVgexQ+YUe0n8XxQmpjKw8cs+Eaz YEKcaHjG1p91Yte7D85fP18M0SxkWWlyTcTT4NxfJVID7kCwTMns7U1zi13xiQ5D lNvF+AJ4PXKNqvMdKOA4kZ8ZgDgK1+JcINEzYgM1BFPdWTTflTCiXxWTXgVIKAEb -----END CERTIFICATE-----Generated at Tue Jul 8 18:24:39 2025 by rpki-client