$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft File: a1e8ecad-d5af-414e-8573-f698bbb23263.mft (raw, json) Hash identifier: t3uR9BzzlTgT4MlqQrjJeC3D+3U2pEVk+3ZZyFOpm2E= Subject key identifier: 72:58:02:B0:F3:63:63:CD:93:50:6F:65:A9:53:5D:C9:A2:91:C8:45 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584A39091C02C4067A56702B95C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft Manifest number: 010D0C9F432858425EDAC7AACB665475A0DFF961 Signing time: Tue 17 Jun 2025 16:00:07 +0000 Manifest this update: Tue 17 Jun 2025 16:00:07 +0000 Manifest next update: Fri 20 Jun 2025 16:00:00 +0000 Files and hashes: 1: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (hash: c8W4mUEwymiiuUv2IgnZEghwnpQVBYoIf0TLvwj7jVw=) 2: a1e8ecad-d5af-414e-8573-f698bbb23263.crl (hash: iaKvoNW7oWqDDHuarA7FMf89RUmrNwNOKLikenRExwY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:09:1c:02:c4:06:7a:56:70:2b:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Jun 17 16:00:07 2025 GMT Not After : Jun 20 16:00:00 2025 GMT Subject: CN=c2e897a5-7078-4c88-a810-44c55984d97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:35:47:a3:d4:1f:7d:eb:57:84:75:e2:57: d4:9f:e1:78:11:e5:2f:37:e8:7a:49:a5:d7:35:1b: ab:ca:51:72:89:6a:f5:ac:fe:1f:38:8e:66:c4:45: 8e:ea:93:a2:f5:8f:03:69:9d:b4:1a:ea:f8:d4:88: db:a4:c1:fa:50:ae:1e:f5:0f:d2:e6:d0:8f:05:c2: e9:f5:61:55:18:54:c7:66:1e:3d:d2:b8:d7:00:58: 61:91:ee:49:9c:9a:34:21:b7:52:18:a8:00:1f:b8: 75:94:db:73:41:45:17:8a:67:33:d8:98:99:23:0b: 68:34:09:87:47:79:88:a9:cb:14:28:37:5c:6f:31: 7f:b3:fc:c5:c6:66:95:fd:3d:9d:0e:b3:a1:9f:8f: 81:7d:56:d4:32:53:c0:f3:28:ab:03:49:42:3f:02: 5e:a0:0f:6d:3b:1e:4b:89:b1:04:40:68:0c:23:ef: 49:b0:e5:b9:5a:c8:75:bd:1f:45:ab:b6:11:00:c0: c5:6a:1b:f6:28:b0:b4:52:19:98:56:86:de:4a:1b: 32:c9:ed:9b:a6:f8:42:0c:1b:15:fa:7b:5e:76:63: cf:0a:b2:4d:0b:be:cd:a3:51:ec:61:9b:05:20:9e: 8a:03:56:b3:bc:47:a1:24:65:dd:eb:65:cc:90:33: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:58:02:B0:F3:63:63:CD:93:50:6F:65:A9:53:5D:C9:A2:91:C8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a1:5a:00:95:5d:ca:34:05:82:02:38:8b:b5:ac:6b:64:c2: d2:fd:4c:45:3d:2f:4f:62:2d:7b:10:14:de:cf:00:48:91:dc: bd:1a:e2:fc:d3:5d:73:a8:08:00:3b:4d:22:69:3a:4c:a5:2a: 36:8d:ef:8b:93:43:4d:ec:c7:b4:df:a5:e5:18:0d:bf:5b:a0: 0a:8b:33:f7:19:6d:87:43:7c:ed:5f:62:15:4a:42:ef:ba:ab: d6:e9:1f:9d:84:a1:fe:67:68:ca:86:02:9d:be:a6:13:1d:c1: 90:b0:a0:6c:bc:74:0b:7b:3b:6b:0b:ca:95:f4:4f:d1:7a:a9: 7e:b0:6f:a3:f0:c2:da:60:7d:8f:78:cb:7d:81:ef:18:b8:f7: 24:8c:97:3e:a4:3f:4b:d2:1f:d1:c3:b4:1a:92:ea:3c:ee:51: c0:01:75:70:c6:2d:fa:5a:72:78:14:62:b9:67:60:4d:d1:35: ac:3c:fb:c4:3e:81:2a:17:66:65:7d:41:39:10:e8:bc:fb:83: a7:22:d3:96:40:ba:d2:10:8e:ac:33:59:df:b5:da:8c:f9:67: d7:8b:cc:27:ff:73:c8:0b:a0:42:c0:19:b7:8e:c5:fa:ec:fd: e8:b5:d8:77:2f:08:50:d7:fa:0c:b3:5f:f5:8c:aa:e6:f8:87: 68:49:3b:0b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo5CRwCxAZ6VnArlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MDYxNzE2MDAwN1oXDTI1MDYyMDE2MDAwMFowLzEtMCsGA1UEAxMk YzJlODk3YTUtNzA3OC00Yzg4LWE4MTAtNDRjNTU5ODRkOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7c1R6PUH33rV4R14lfUn+F4EeUvN+h6SaXX NRurylFyiWr1rP4fOI5mxEWO6pOi9Y8DaZ20Gur41IjbpMH6UK4e9Q/S5tCPBcLp 9WFVGFTHZh490rjXAFhhke5JnJo0IbdSGKgAH7h1lNtzQUUXimcz2JiZIwtoNAmH R3mIqcsUKDdcbzF/s/zFxmaV/T2dDrOhn4+BfVbUMlPA8yirA0lCPwJeoA9tOx5L ibEEQGgMI+9JsOW5Wsh1vR9Fq7YRAMDFahv2KLC0UhmYVobeShsyye2bpvhCDBsV +ntedmPPCrJNC77No1HsYZsFIJ6KA1azvEehJGXd62XMkDMfnQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHJYArDzY2PNk1BvZalTXcmikchFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvYTFlOGVjYWQtZDVhZi00 MTRlLTg1NzMtZjY5OGJiYjIzMjYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAoVoAlV3KNAWCAjiLtaxr ZMLS/UxFPS9PYi17EBTezwBIkdy9GuL8011zqAgAO00iaTpMpSo2je+Lk0NN7Me0 36XlGA2/W6AKizP3GW2HQ3ztX2IVSkLvuqvW6R+dhKH+Z2jKhgKdvqYTHcGQsKBs vHQLeztrC8qV9E/Reql+sG+j8MLaYH2PeMt9ge8YuPckjJc+pD9L0h/Rw7Qakuo8 7lHAAXVwxi36WnJ4FGK5Z2BN0TWsPPvEPoEqF2ZlfUE5EOi8+4OnItOWQLrSEI6s M1nftdqM+WfXi8wn/3PIC6BCwBm3jsX67P3otdh3LwhQ1/oMs1/1jKrm+IdoSTsL -----END CERTIFICATE-----Generated at Wed Jun 18 09:44:35 2025 by rpki-client