$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft File: 5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft (raw, json) Hash identifier: lVrGFj2ONxyp0mQ8rZHe+sjbCAA5XFNl8sV6u9VRXc0= Subject key identifier: 65:06:C2:11:40:E0:8A:8B:A1:E6:6E:EB:ED:99:CE:77:B6:25:51:AD Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Certificate serial: 010D0C9F4328584A34D91328B5BD3F0A48CAF9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft Manifest number: 010D0C9F432858424A1F419397D895C14179A0ED Signing time: Mon 16 Jun 2025 04:00:08 +0000 Manifest this update: Mon 16 Jun 2025 04:00:08 +0000 Manifest next update: Thu 19 Jun 2025 04:00:00 +0000 Files and hashes: 1: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (hash: k8wllzMNKGl22wLmbsNIyB8N2dlRTxJL2ef7SgfBMq4=) 2: 5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl (hash: 6Ai0/xx2wBEuRMjCSaTCm5UlMPW9W5ayQEL+cyERaSg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:d9:13:28:b5:bd:3f:0a:48:ca:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Validity Not Before: Jun 16 04:00:08 2025 GMT Not After : Jun 19 04:00:00 2025 GMT Subject: CN=6fa75cd1-eee5-4620-bcd5-387a5c5e0294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:03:ef:dd:a9:8e:38:1c:3d:5b:64:49:aa:eb: af:d1:ba:c6:6c:53:44:68:ad:f2:ec:08:16:72:3b: de:67:de:8d:5c:72:e4:16:5b:02:12:44:e8:a5:e3: 03:5f:c5:60:32:d9:1a:2c:85:42:b7:77:1d:ff:6b: 63:cd:60:18:c1:16:83:5c:6c:a0:ca:1b:f8:10:26: 23:3f:3b:65:87:87:0e:70:00:f3:bf:82:12:40:f1: 40:34:f8:9c:fa:87:b0:29:b9:a8:60:ee:59:35:c4: 88:42:26:ef:4c:4e:89:21:6c:19:98:77:12:ed:86: ba:79:f7:f6:58:19:d8:f0:06:bc:3d:58:16:56:72: fc:26:fc:f6:c9:03:2a:7a:3d:35:eb:f8:15:5c:25: 04:1a:e2:34:49:99:f9:75:0f:fa:aa:8c:1c:35:29: 5f:40:80:86:ad:37:7a:14:45:19:dc:f3:6b:31:e8: b4:d3:22:30:bc:fc:1b:9a:f4:28:82:b3:6f:21:f9: 0f:f2:a6:6a:79:f4:77:c9:e8:a0:64:ea:cb:5c:38: 47:7c:3b:ac:82:91:b4:20:62:59:7d:d0:92:7b:a1: 8f:76:92:1c:eb:e9:df:1d:dd:8e:da:ec:98:47:bd: 0d:53:bf:44:fd:0c:ef:24:54:06:33:8d:ab:87:ad: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:C2:11:40:E0:8A:8B:A1:E6:6E:EB:ED:99:CE:77:B6:25:51:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl X509v3 Authority Key Identifier: keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b3:94:43:be:dd:0b:e4:d2:41:a7:ef:21:81:61:cb:93:7d: 5a:2a:a9:75:a1:5f:96:a6:05:51:8d:e3:13:b7:66:af:57:e7: 26:a7:45:0c:20:bc:92:1c:2c:99:e4:9d:2c:12:9a:71:8d:d2: 6f:42:76:84:c8:e7:d9:4b:39:e6:61:f9:71:6f:7f:a3:04:32: 89:b9:30:6a:45:53:e1:73:65:5a:7a:7b:cd:3d:16:21:8f:20: 19:97:df:72:63:88:83:da:f3:c9:a2:13:e5:43:d5:82:8f:c3: fe:89:ae:84:46:d1:bd:ff:46:b6:eb:28:ad:fc:1e:7d:7d:ed: 30:f1:fe:a6:22:42:b9:28:62:a4:e1:e5:b6:14:b0:bf:a7:b7: d5:09:14:1d:28:c1:c8:35:57:ca:23:e7:1f:13:5d:9e:9f:93: 6d:d9:c5:61:5c:df:14:21:a5:b4:bc:46:5a:56:44:0c:ce:f4: 3b:a5:bd:c5:8f:96:88:39:3d:09:e7:ac:73:5f:51:8a:2e:61: c1:e1:48:3a:5e:5a:d5:24:54:cf:f0:47:04:ee:68:e4:37:79: 86:cc:4f:e0:e5:db:bb:a2:1f:03:9a:95:4c:4d:4c:b0:27:c0: 25:86:a2:97:e3:a1:06:28:10:09:03:2c:e9:93:5d:71:34:ad: de:bf:0b:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo02RMotb0/CkjK+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmY5NmEtMmFmNS00YmIwLTljOTgtZGI4YjlhOGE5 YzQ4MB4XDTI1MDYxNjA0MDAwOFoXDTI1MDYxOTA0MDAwMFowLzEtMCsGA1UEAxMk NmZhNzVjZDEtZWVlNS00NjIwLWJjZDUtMzg3YTVjNWUwMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAPv3amOOBw9W2RJquuv0brGbFNEaK3y7AgW cjveZ96NXHLkFlsCEkTopeMDX8VgMtkaLIVCt3cd/2tjzWAYwRaDXGygyhv4ECYj Pztlh4cOcADzv4ISQPFANPic+oewKbmoYO5ZNcSIQibvTE6JIWwZmHcS7Ya6eff2 WBnY8Aa8PVgWVnL8Jvz2yQMqej016/gVXCUEGuI0SZn5dQ/6qowcNSlfQICGrTd6 FEUZ3PNrMei00yIwvPwbmvQogrNvIfkP8qZqefR3yeigZOrLXDhHfDusgpG0IGJZ fdCSe6GPdpIc6+nfHd2O2uyYR70NU79E/QzvJFQGM42rh61+1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGUGwhFA4IqLoeZu6+2Zzne2JVGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDEy Zjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhiOWE4YTljNDgvNTAxMmY5NmEtMmFmNS00 YmIwLTljOTgtZGI4YjlhOGE5YzQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxMmY5NmEtMmFmNS00YmIwLTlj OTgtZGI4YjlhOGE5YzQ4LzUwMTJmOTZhLTJhZjUtNGJiMC05Yzk4LWRiOGI5YThh OWM0OC5jcmwwHwYDVR0jBBgwFoAUHl+PVLvCW2Sa4uFRL+U2SPr1+i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDEyZjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhi OWE4YTljNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrs5RDvt0L5NJBp+8hgWHL k31aKql1oV+WpgVRjeMTt2avV+cmp0UMILySHCyZ5J0sEppxjdJvQnaEyOfZSznm Yflxb3+jBDKJuTBqRVPhc2VaenvNPRYhjyAZl99yY4iD2vPJohPlQ9WCj8P+ia6E RtG9/0a26yit/B59fe0w8f6mIkK5KGKk4eW2FLC/p7fVCRQdKMHINVfKI+cfE12e n5Nt2cVhXN8UIaW0vEZaVkQMzvQ7pb3Fj5aIOT0J56xzX1GKLmHB4Ug6XlrVJFTP 8EcE7mjkN3mGzE/g5du7oh8DmpVMTUywJ8AlhqKX46EGKBAJAyzpk11xNK3evwuI -----END CERTIFICATE-----Generated at Mon Jun 16 11:04:26 2025 by rpki-client