$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: 5nGWDABswJLC1t6omlT5Qeh2gipCguH4GBU+S1EZNz4= Subject key identifier: 65:89:E5:5B:CF:F1:FF:02:E4:F9:F1:73:4E:35:19:27:BE:90:9B:3B Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F4328584A38389C20BEEBF1C2F5CEDE48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A3294 Signing time: Tue 17 Jun 2025 09:00:03 +0000 Manifest this update: Tue 17 Jun 2025 09:00:03 +0000 Manifest next update: Thu 19 Jun 2025 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: uA6d9v3Ke88TbQ7aunJ8evwvWjUJzdlzqL99/rm2pss=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: 65R1A+yo6YxqELe9Nfy46iorcMvBkXMghu1d/UTaOnU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:38:9c:20:be:eb:f1:c2:f5:ce:de:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: Jun 17 09:00:03 2025 GMT Not After : Jun 19 09:00:00 2025 GMT Subject: CN=b4895a1c-5476-41ee-941f-4f25d5bd9408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:f6:98:d4:c0:1c:b2:36:26:2a:dc:e8:bf: 47:b8:d3:82:43:ec:e3:e2:be:f8:24:f7:aa:6a:ac: 46:a3:af:38:39:c7:6b:aa:8c:2c:fd:ee:9d:b1:62: d3:6c:33:79:6a:45:c0:93:63:63:91:85:b5:86:f7: ca:7f:6b:29:3a:7f:04:63:de:43:0e:c9:d2:a2:e9: 5b:c8:e1:ff:1d:0d:db:89:e2:20:1e:e2:56:7f:35: 6f:e4:f4:85:11:d5:7e:8e:bf:25:ee:7a:ee:3f:8f: f7:17:40:4f:0b:39:fd:84:7a:fe:5b:96:cf:fa:2e: dc:cc:9b:ef:87:08:74:2f:04:3a:31:47:11:3b:5d: a6:87:a1:17:fe:ee:3c:a7:7c:c5:a6:da:31:33:c9: b0:5f:5b:e0:4b:cc:86:4b:ff:03:fe:cc:05:3e:07: f8:86:d3:ad:aa:fd:29:dd:44:12:be:2e:8a:ff:5b: b4:7e:ae:d5:80:8a:63:c4:97:b0:e2:88:b3:c3:11: b9:ed:a7:01:19:04:b0:5c:97:cb:2e:56:e8:93:bf: 6f:ae:ea:ec:a0:77:6c:57:2d:5f:4a:13:00:22:d6: 97:00:53:0f:88:b1:df:47:f9:94:5c:6a:ae:40:67: 51:71:ed:17:ae:86:6e:ee:e6:1a:b3:91:be:07:ff: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:89:E5:5B:CF:F1:FF:02:E4:F9:F1:73:4E:35:19:27:BE:90:9B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a7:1d:2c:ee:66:ca:05:93:ca:bf:00:c6:f2:88:e2:df:73: 81:97:81:7f:61:54:82:fe:84:fb:b3:e6:9c:85:e2:b7:7a:f3: 10:62:c6:eb:f4:18:81:b4:41:73:16:da:19:06:df:c9:e0:a6: e5:5b:38:16:82:08:a5:77:fc:84:c8:f9:2a:fe:f2:88:97:c2: 05:40:8b:9e:36:6e:d3:f7:da:55:e9:1c:86:3e:95:36:d3:c2: 5f:7e:36:e2:47:2c:4c:ac:10:6a:67:df:38:e0:12:c1:c2:03: a9:2b:1c:89:c5:b7:67:03:15:96:73:c7:a4:78:03:e0:fd:03: 56:c8:ca:3f:e2:d0:a5:39:7e:c1:ad:ac:14:df:0f:47:79:03: b8:d9:90:93:ae:05:9d:52:9d:5f:b5:9d:5d:61:7e:dd:e3:37: 09:99:78:76:ab:f3:61:b1:d8:45:4e:7b:0f:0f:2e:51:53:0a: 92:f5:5c:06:07:cd:c4:ce:31:eb:ae:6b:86:d1:66:32:b0:8f: d2:f9:49:93:96:05:a7:d4:26:88:9a:a6:ee:fc:9b:91:dd:6b: e3:96:18:1d:2c:3c:be:30:1a:2e:dd:09:4c:cb:5e:ea:5f:11: ec:10:ec:5b:a9:24:d3:5c:fd:61:0f:88:39:71:6a:71:5d:8e: dd:78:a2:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo4OJwgvuvxwvXO3kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI1MDYxNzA5MDAwM1oXDTI1MDYxOTA5MDAwMFowLzEtMCsGA1UEAxMk YjQ4OTVhMWMtNTQ3Ni00MWVlLTk0MWYtNGYyNWQ1YmQ5NDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QL2mNTAHLI2Jirc6L9HuNOCQ+zj4r74JPeq aqxGo684Ocdrqows/e6dsWLTbDN5akXAk2NjkYW1hvfKf2spOn8EY95DDsnSoulb yOH/HQ3bieIgHuJWfzVv5PSFEdV+jr8l7nruP4/3F0BPCzn9hHr+W5bP+i7czJvv hwh0LwQ6MUcRO12mh6EX/u48p3zFptoxM8mwX1vgS8yGS/8D/swFPgf4htOtqv0p 3UQSvi6K/1u0fq7VgIpjxJew4oizwxG57acBGQSwXJfLLlbok79vrursoHdsVy1f ShMAItaXAFMPiLHfR/mUXGquQGdRce0XroZu7uYas5G+B/9cmQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGWJ5VvP8f8C5Pnxc041GSe+kJs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7px0s7mbKBZPKvwDG8oji 33OBl4F/YVSC/oT7s+acheK3evMQYsbr9BiBtEFzFtoZBt/J4KblWzgWggild/yE yPkq/vKIl8IFQIueNm7T99pV6RyGPpU208JffjbiRyxMrBBqZ9844BLBwgOpKxyJ xbdnAxWWc8ekeAPg/QNWyMo/4tClOX7BrawU3w9HeQO42ZCTrgWdUp1ftZ1dYX7d 4zcJmXh2q/NhsdhFTnsPDy5RUwqS9VwGB83EzjHrrmuG0WYysI/S+UmTlgWn1CaI mqbu/JuR3WvjlhgdLDy+MBou3QlMy17qXxHsEOxbqSTTXP1hD4g5cWpxXY7deKLb -----END CERTIFICATE-----Generated at Tue Jun 17 16:15:24 2025 by rpki-client