$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft File: a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft (raw, json) Hash identifier: mVcgOS5kKnpCo0hB7ymXAQRb13aPVxHfhy6MqWTKI40= Subject key identifier: B1:46:3C:90:B9:09:8B:F3:CC:A2:E0:82:15:3B:94:31:5D:E5:6F:DD Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 Certificate issuer: /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Certificate serial: 010D0C9F4328584A33CD0B0BEBA727DD9F1E3F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft Manifest number: 010D0C9F4328584073A824D2523E0DBF021CA894 Signing time: Sun 15 Jun 2025 19:00:03 +0000 Manifest this update: Sun 15 Jun 2025 19:00:03 +0000 Manifest next update: Wed 18 Jun 2025 19:00:00 +0000 Files and hashes: 1: a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl (hash: f2wbld9KYD+SE9j2SoSes6gczkKSgSeKy+MwcXnF+ho=) 2: af253897-34b0-302d-99ea-bc80edc69de5.roa (hash: +0CMxTBkzXUxSV855t+KgP0dodYXzV8OObn1TBiquFo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:cd:0b:0b:eb:a7:27:dd:9f:1e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18 Validity Not Before: Jun 15 19:00:03 2025 GMT Not After : Jun 18 19:00:00 2025 GMT Subject: CN=40363d02-a8a4-4326-affc-f1a17cce5b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:72:76:03:0a:32:8e:9a:16:ed:76:30:d5: 6c:88:90:94:4c:df:45:72:15:74:f7:15:ed:9a:42: 7a:af:10:59:ce:3c:54:4c:4f:b8:22:11:b6:4f:e8: 8d:f9:64:b9:c2:c9:aa:ab:ed:97:b7:d1:01:c4:56: d5:68:3d:72:f3:5a:97:30:a9:52:29:0e:b3:c6:7b: 0a:47:c8:be:d3:bd:92:68:fc:5b:1c:e9:75:54:4c: 5e:b8:bb:6a:f3:a8:74:a8:c6:40:39:45:d8:fb:4f: 10:0e:66:41:b5:ff:f3:9b:0c:fb:e6:ad:ae:76:6b: 63:7e:94:49:d3:3b:27:79:84:0f:73:65:cf:6f:7c: bf:67:ec:96:51:e9:69:ce:7a:67:c5:b5:36:a0:86: 56:69:4a:bf:22:b7:22:08:c9:28:fc:db:e2:f2:53: fd:8b:52:c7:c5:6a:0e:20:0f:3f:12:14:37:13:2c: e0:17:1f:65:fa:51:d8:83:9e:e0:4a:58:e6:d4:fb: 6c:21:12:8b:0c:2e:06:b4:1a:5d:63:4c:ad:06:03: 35:d0:e6:14:9f:ca:c0:dd:07:55:aa:44:de:f2:61: a1:11:f1:51:27:22:05:a3:8f:10:4f:7b:9c:74:2a: a6:ab:89:78:c2:59:89:ec:8a:4c:7d:e1:93:ae:6e: 61:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:3C:90:B9:09:8B:F3:CC:A2:E0:82:15:3B:94:31:5D:E5:6F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl X509v3 Authority Key Identifier: keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8e:0a:b8:4c:1d:61:8e:bc:6a:31:90:79:0f:d7:4b:5b:cd: a3:b1:da:34:8d:0d:ed:6a:5e:60:16:32:de:66:3a:b3:67:c1: a1:55:48:d4:34:ef:c3:42:b2:cb:a9:a5:fa:25:5f:f8:dc:86: e1:19:95:60:a1:c6:ab:57:b8:d7:2e:97:69:e8:9d:aa:f2:9e: 60:27:55:58:2f:18:cf:be:34:f1:12:95:42:d6:02:3e:93:d2: 38:1b:07:fb:16:68:1f:11:35:e5:34:86:44:63:33:16:e2:ae: be:21:53:ba:9b:54:a3:0d:84:37:5b:48:56:a4:f6:5a:52:bf: 3e:66:89:e7:c6:8c:8f:7a:81:f3:d2:08:a9:6f:b6:3e:97:f4: 3c:b8:33:f2:08:03:15:1b:31:77:ae:79:ef:fd:1f:34:15:ff: 17:7c:76:00:25:35:f4:34:79:a5:d4:66:5b:b4:35:c7:b3:79: 98:ce:bf:37:88:19:73:95:25:70:fb:7b:c6:70:d5:5b:c9:44: 86:f3:69:ff:b2:ec:2d:e9:92:6e:aa:91:cc:d3:ff:50:a6:26: 16:80:68:48:f3:c1:34:c6:86:43:90:97:eb:41:60:87:52:bc: 07:49:6e:ae:4d:df:3e:f2:0e:72:bb:c6:92:2c:da:a8:c5:9a: 1a:96:eb:4f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEozzQsL66cn3Z8ePwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTAyYTE3NzUtZTNlZi00ZDVlLWE5MzQtMWQ0MjA0ZTFj YTE4MB4XDTI1MDYxNTE5MDAwM1oXDTI1MDYxODE5MDAwMFowLzEtMCsGA1UEAxMk NDAzNjNkMDItYThhNC00MzI2LWFmZmMtZjFhMTdjY2U1YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IZydgMKMo6aFu12MNVsiJCUTN9FchV09xXt mkJ6rxBZzjxUTE+4IhG2T+iN+WS5wsmqq+2Xt9EBxFbVaD1y81qXMKlSKQ6zxnsK R8i+072SaPxbHOl1VExeuLtq86h0qMZAOUXY+08QDmZBtf/zmwz75q2udmtjfpRJ 0zsneYQPc2XPb3y/Z+yWUelpznpnxbU2oIZWaUq/IrciCMko/Nvi8lP9i1LHxWoO IA8/EhQ3EyzgFx9l+lHYg57gSljm1PtsIRKLDC4GtBpdY0ytBgM10OYUn8rA3QdV qkTe8mGhEfFRJyIFo48QT3ucdCqmq4l4wlmJ7IpMfeGTrm5hJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLFGPJC5CYvzzKLgghU7lDFd5W/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJh MTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQyMDRlMWNhMTgvYTAyYTE3NzUtZTNlZi00 ZDVlLWE5MzQtMWQ0MjA0ZTFjYTE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTAyYTE3NzUtZTNlZi00ZDVlLWE5 MzQtMWQ0MjA0ZTFjYTE4L2EwMmExNzc1LWUzZWYtNGQ1ZS1hOTM0LTFkNDIwNGUx Y2ExOC5jcmwwHwYDVR0jBBgwFoAUYDR67fAhJVvGkAa1VwaTNKpdNTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMDJhMTc3NS1lM2VmLTRkNWUtYTkzNC0xZDQy MDRlMWNhMTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMjgq4TB1hjrxqMZB5D9dL W82jsdo0jQ3tal5gFjLeZjqzZ8GhVUjUNO/DQrLLqaX6JV/43IbhGZVgocarV7jX Lpdp6J2q8p5gJ1VYLxjPvjTxEpVC1gI+k9I4Gwf7FmgfETXlNIZEYzMW4q6+IVO6 m1SjDYQ3W0hWpPZaUr8+ZonnxoyPeoHz0gipb7Y+l/Q8uDPyCAMVGzF3rnnv/R80 Ff8XfHYAJTX0NHml1GZbtDXHs3mYzr83iBlzlSVw+3vGcNVbyUSG82n/suwt6ZJu qpHM0/9QpiYWgGhI88E0xoZDkJfrQWCHUrwHSW6uTd8+8g5yu8aSLNqoxZoalutP -----END CERTIFICATE-----Generated at Sun Jun 15 23:13:00 2025 by rpki-client