$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: 0G6bM9AaJOEDGmzxWQLtcVE06y1g8RHYH0A7NwlUrRE= Subject key identifier: CB:0C:F1:8D:77:67:16:46:96:ED:1A:4D:F0:0E:EC:92:28:31:FC:D4 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584A356DEF45E0E46AE64E487CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022414 Signing time: Mon 16 Jun 2025 09:00:03 +0000 Manifest this update: Mon 16 Jun 2025 09:00:03 +0000 Manifest next update: Thu 19 Jun 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: WbJKyfEksAKpNyrmjc9CJvYVJ9VBdZVgbFRIt5vCfRQ=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: NoEz5lOOZlDcTBR3IcR10wZOoc5q/ZXVMu/eaxgB2GU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:6d:ef:45:e0:e4:6a:e6:4e:48:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Jun 16 09:00:03 2025 GMT Not After : Jun 19 09:00:00 2025 GMT Subject: CN=7a8759c5-fa02-4ebd-91c2-75c9fc5142ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:37:5e:39:29:44:fd:b2:eb:06:61:04:3b:8f: 5c:a6:5c:94:b4:e7:9e:07:9a:57:0a:f3:a4:3f:ca: 19:7c:d7:f4:7a:ec:ec:82:d7:48:a9:ea:2b:95:02: c6:88:37:c0:4b:eb:98:90:46:49:62:03:e4:0d:43: cb:d5:fb:f2:9d:0b:c7:c1:c1:8c:34:ee:22:76:b2: a2:55:e9:15:d9:43:6c:dc:0b:e6:24:75:75:88:03: c2:1f:5a:2e:7f:74:6b:78:2b:c8:b2:2a:1c:1a:45: 7e:96:16:5e:60:5f:cd:b4:e7:39:54:0a:c9:4e:12: 86:5a:1b:74:42:aa:3d:a3:1f:9a:b6:28:00:f6:3b: 5d:4b:66:f1:67:40:0a:3f:42:0e:f7:8a:d3:fa:41: e0:6a:c0:36:ec:0c:bf:d5:21:ab:8d:4b:42:ed:e2: d2:94:86:a8:85:ce:80:ac:81:3b:f3:25:fd:fe:8b: 8b:68:f8:9a:e3:ad:10:0e:58:bd:b7:ce:51:a9:d2: 8e:5e:38:4b:65:9b:94:c2:4b:10:52:49:1d:78:a4: 63:4f:d2:98:9f:51:ab:0c:28:29:98:68:9b:d0:90: 2b:67:b5:b1:8a:7e:dc:88:e7:b3:56:66:03:ee:a2: 48:2e:ba:f5:6c:a2:aa:26:28:c8:5f:eb:4c:e5:ed: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:F1:8D:77:67:16:46:96:ED:1A:4D:F0:0E:EC:92:28:31:FC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:47:9c:ca:53:e5:c4:68:53:bf:7f:a9:01:60:9d:5a:e5:7b: 05:29:5e:7d:d5:5d:90:9b:90:60:11:2a:b1:1e:d8:d1:82:fc: e3:a7:75:7a:4f:cc:02:a4:d8:73:1b:ed:ec:f1:6c:75:5c:a1: 5a:e3:d6:da:cb:c7:50:38:27:7e:d8:01:45:25:ca:de:b8:9b: b5:25:98:5b:0c:a1:59:64:68:93:59:84:17:f1:e0:1c:99:34: 05:98:d6:17:f9:b5:41:df:5f:64:c2:a2:72:61:95:64:8f:2f: 7f:38:db:7c:e1:70:6f:77:3a:e3:3c:12:d0:f3:a4:50:2b:cf: 36:15:a3:6b:a1:7d:5e:4c:80:8e:c0:fa:1d:84:c5:b7:93:18: c1:b3:c8:25:84:60:b9:76:69:e5:16:86:cc:1a:25:04:a9:34: 0d:ce:0d:c2:11:6e:cb:d2:ba:0f:06:fc:2c:d2:ae:01:0c:d4: 6d:d4:6a:56:1d:89:e7:95:23:43:9b:a1:c9:90:b9:97:aa:37: fe:38:b4:67:00:66:62:67:f8:f7:7a:ac:40:ba:aa:7c:36:da: e5:9c:e0:ab:7e:3f:76:0e:03:7f:b4:e6:be:74:74:8a:4a:22: f0:d0:03:e6:80:00:a7:c0:73:93:71:c9:6a:e2:11:66:7e:f4: 3c:c1:03:09 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo1be9F4ORq5k5IfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDYxNjA5MDAwM1oXDTI1MDYxOTA5MDAwMFowLzEtMCsGA1UEAxMk N2E4NzU5YzUtZmEwMi00ZWJkLTkxYzItNzVjOWZjNTE0MmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTdeOSlE/bLrBmEEO49cplyUtOeeB5pXCvOk P8oZfNf0euzsgtdIqeorlQLGiDfAS+uYkEZJYgPkDUPL1fvynQvHwcGMNO4idrKi VekV2UNs3AvmJHV1iAPCH1ouf3RreCvIsiocGkV+lhZeYF/NtOc5VArJThKGWht0 Qqo9ox+atigA9jtdS2bxZ0AKP0IO94rT+kHgasA27Ay/1SGrjUtC7eLSlIaohc6A rIE78yX9/ouLaPia460QDli9t85RqdKOXjhLZZuUwksQUkkdeKRjT9KYn1GrDCgp mGib0JArZ7Wxin7ciOezVmYD7qJILrr1bKKqJijIX+tM5e0aTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMsM8Y13ZxZGlu0aTfAO7JIoMfzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKR5zKU+XEaFO/f6kBYJ1a 5XsFKV591V2Qm5BgESqxHtjRgvzjp3V6T8wCpNhzG+3s8Wx1XKFa49bay8dQOCd+ 2AFFJcreuJu1JZhbDKFZZGiTWYQX8eAcmTQFmNYX+bVB319kwqJyYZVkjy9/ONt8 4XBvdzrjPBLQ86RQK882FaNroX1eTICOwPodhMW3kxjBs8glhGC5dmnlFobMGiUE qTQNzg3CEW7L0roPBvws0q4BDNRt1GpWHYnnlSNDm6HJkLmXqjf+OLRnAGZiZ/j3 eqxAuqp8NtrlnOCrfj92DgN/tOa+dHSKSiLw0APmgACnwHOTcclq4hFmfvQ8wQMJ -----END CERTIFICATE-----Generated at Mon Jun 16 19:28:30 2025 by rpki-client