$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: UIZnikrtc97eBh0fYcKTkRtQfe9icsK02NnabPOzJHw= Subject key identifier: 27:70:11:11:56:0B:0A:8F:A4:55:25:9E:73:0A:C6:DC:71:93:39:3B Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584ABDFDE226478903A94ADBDF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3345 Signing time: Mon 04 Aug 2025 07:00:03 +0000 Manifest this update: Mon 04 Aug 2025 07:00:03 +0000 Manifest next update: Wed 06 Aug 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: fXpFuLOxrKf3G3jytIUInemtnxTtEVnjA4Y6JNfJZ8g=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: vQ1AlClHddlW5Y8uya+xpW7d10KjsTkF12kqVlx61dI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:fd:e2:26:47:89:03:a9:4a:db:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Aug 4 07:00:03 2025 GMT Not After : Aug 6 07:00:00 2025 GMT Subject: CN=b70713db-e97d-4c78-9300-a9ff3d24f8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:5d:2d:1e:bf:bf:ee:f6:08:e6:14:1b:31: 49:2b:29:51:2a:d7:92:af:15:ad:65:e5:6f:63:44: a3:07:d8:17:fd:ff:92:ac:85:35:0c:53:25:bb:42: 07:42:02:95:60:58:8c:a1:ea:4f:a0:08:37:7a:47: 9b:c8:92:1c:bf:cd:40:52:91:4a:82:8c:d3:87:46: 84:f9:0f:98:f0:53:1b:7c:23:2b:ae:85:01:53:b9: 9a:ac:f2:0d:24:b9:45:b9:1f:66:22:23:48:c6:1e: be:9d:3e:69:1f:e3:32:2e:7b:af:5d:ee:43:f8:b4: 4f:ee:50:ce:23:5f:7d:88:a5:46:33:8a:27:ce:58: b7:99:0e:b3:5d:1f:82:5c:13:ab:34:4b:a2:d5:cd: eb:c2:ab:de:b2:08:17:75:3a:12:de:ac:9f:ec:cc: 10:1a:d3:b0:b9:9d:0f:68:7e:f7:70:1b:45:0c:2a: 59:2b:5b:38:04:7f:57:fe:3c:88:8f:5c:86:ae:f2: 80:39:35:27:1f:0f:cb:35:03:0f:68:65:50:3d:36: 3b:0d:19:71:7c:a4:05:13:0b:15:c4:cf:90:80:6b: 74:1e:12:10:a1:01:0f:27:27:03:94:db:8b:ca:28: d0:11:95:6b:ba:bc:53:8f:8d:22:32:2f:15:cb:07: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:11:11:56:0B:0A:8F:A4:55:25:9E:73:0A:C6:DC:71:93:39:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:77:12:38:d4:15:57:90:de:fe:c5:06:23:7f:90:97:fc:1d: 31:ea:6f:ea:0b:63:ae:e3:e4:54:60:fa:09:44:b9:83:35:02: d8:a7:6f:c0:a9:a2:9f:e9:0d:7d:55:17:96:88:f3:14:2a:c4: 7b:14:22:70:d6:6e:b2:d0:07:93:12:7e:76:4f:4a:3b:d1:dd: bb:d9:97:6b:6c:4f:b4:c5:1a:e4:51:20:a8:20:91:fa:8f:2b: 68:32:6b:14:2b:f2:94:aa:bc:6d:49:21:bd:37:89:be:13:83: e7:25:e8:7d:35:39:af:b9:23:99:9a:a5:44:50:54:ea:fd:f6: 3e:f2:fc:78:40:62:32:4f:1e:d2:11:76:1e:53:10:2b:19:6d: 82:47:fd:85:1b:0e:c2:8a:e0:92:c3:05:60:dc:63:15:a6:e4: 2c:d3:e4:49:4b:a1:86:b0:d8:c3:6a:cf:8b:b5:a0:47:bf:7c: ea:81:db:6a:4e:bb:f9:55:d1:88:ad:1d:40:65:a5:6c:72:54: 75:09:75:6a:da:64:72:c0:9c:59:dc:36:c7:64:af:77:9d:dc: c9:8e:fc:4a:c7:81:46:6f:de:ac:4c:4d:fd:0e:1b:95:1c:2d: 7b:b2:81:84:c9:fc:4e:f7:50:c2:11:1d:02:64:bf:41:35:7d: bf:b1:6e:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9/eImR4kDqUrb3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDgwNDA3MDAwM1oXDTI1MDgwNjA3MDAwMFowLzEtMCsGA1UEAxMk YjcwNzEzZGItZTk3ZC00Yzc4LTkzMDAtYTlmZjNkMjRmOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzpdLR6/v+72COYUGzFJKylRKteSrxWtZeVv Y0SjB9gX/f+SrIU1DFMlu0IHQgKVYFiMoepPoAg3ekebyJIcv81AUpFKgozTh0aE +Q+Y8FMbfCMrroUBU7marPINJLlFuR9mIiNIxh6+nT5pH+MyLnuvXe5D+LRP7lDO I199iKVGM4onzli3mQ6zXR+CXBOrNEui1c3rwqvesggXdToS3qyf7MwQGtOwuZ0P aH73cBtFDCpZK1s4BH9X/jyIj1yGrvKAOTUnHw/LNQMPaGVQPTY7DRlxfKQFEwsV xM+QgGt0HhIQoQEPJycDlNuLyijQEZVrurxTj40iMi8VywfEmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCdwERFWCwqPpFUlnnMKxtxxkzk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLdxI41BVXkN7+xQYjf5CX /B0x6m/qC2Ou4+RUYPoJRLmDNQLYp2/AqaKf6Q19VReWiPMUKsR7FCJw1m6y0AeT En52T0o70d272ZdrbE+0xRrkUSCoIJH6jytoMmsUK/KUqrxtSSG9N4m+E4PnJeh9 NTmvuSOZmqVEUFTq/fY+8vx4QGIyTx7SEXYeUxArGW2CR/2FGw7CiuCSwwVg3GMV puQs0+RJS6GGsNjDas+LtaBHv3zqgdtqTrv5VdGIrR1AZaVsclR1CXVq2mRywJxZ 3DbHZK93ndzJjvxKx4FGb96sTE39DhuVHC17soGEyfxO91DCER0CZL9BNX2/sW60 -----END CERTIFICATE-----Generated at Mon Aug 4 21:54:52 2025 by rpki-client