$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft File: d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft (raw, json) Hash identifier: Zwrvkxzh/gvpzIvjkAle6JO5e6gqBksVOKwiJSEMnZk= Subject key identifier: BD:82:62:BD:15:00:1D:D0:05:E4:57:69:85:44:64:C6:37:78:F5:12 Authority key identifier: 4C:4A:FE:07:71:D0:B2:B0:2D:7A:98:C2:07:B0:E6:A7:22:D0:3B:62 Certificate issuer: /CN=d1e5121b-5846-4ada-9ae3-09da3dcf7b61 Certificate serial: 010D0C9F4328584A30C6D5224136FEB520C16C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft Manifest number: 010D0C9F432858478A6D841388783AB11DE60DB3 Signing time: Sat 14 Jun 2025 17:00:07 +0000 Manifest this update: Sat 14 Jun 2025 17:00:07 +0000 Manifest next update: Mon 16 Jun 2025 17:00:00 +0000 Files and hashes: 1: d1e5121b-5846-4ada-9ae3-09da3dcf7b61.crl (hash: j3pRgh+BL9EiFVRLmkkAOfZlDziI5Q8sTp/RivnS2mg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:c6:d5:22:41:36:fe:b5:20:c1:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e5121b-5846-4ada-9ae3-09da3dcf7b61 Validity Not Before: Jun 14 17:00:07 2025 GMT Not After : Jun 16 17:00:00 2025 GMT Subject: CN=19ac3edb-4fdd-4008-a441-995e0f48fcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:e5:bf:13:1a:a6:97:7d:d9:9b:32:6b:1b: a5:a8:e7:f2:80:ab:4e:09:5c:ba:75:a9:ad:a2:06: 57:5a:5e:24:44:82:ac:11:2d:5a:d9:75:99:4c:00: 72:29:8d:49:c9:48:61:08:84:b7:0f:ef:7f:36:b0: b0:98:31:eb:84:99:09:70:58:58:10:c4:a3:ee:bf: 62:79:3b:56:b5:ff:a9:70:32:2e:bd:0e:2a:78:27: c7:0b:5b:23:b2:5e:45:db:5c:bc:a5:42:03:dd:70: c7:27:8c:36:1e:ad:30:51:c1:40:36:63:fb:ab:8a: 23:0b:cb:78:9d:47:e3:17:8a:df:35:1d:0e:73:71: 69:87:28:44:dd:26:08:0e:24:c8:e6:51:db:2b:4f: 03:69:80:a2:1b:0a:c8:a3:4d:61:a5:9a:a2:2c:33: 2a:2f:7d:33:d2:88:6d:b6:c4:21:86:69:ad:82:03: 11:bf:8c:f2:83:96:ac:3c:cc:92:46:17:aa:b9:1c: f5:16:2a:8b:9f:13:e8:db:45:e4:5a:b7:03:61:38: a9:8d:da:04:9a:f5:2e:84:4c:a4:63:11:9b:55:22: a6:5f:c4:c6:be:84:bd:b4:a9:48:69:8e:f2:cf:d4: ed:64:1a:aa:cd:07:83:7d:e8:a4:08:09:4a:aa:8b: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:62:BD:15:00:1D:D0:05:E4:57:69:85:44:64:C6:37:78:F5:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.crl X509v3 Authority Key Identifier: keyid:4C:4A:FE:07:71:D0:B2:B0:2D:7A:98:C2:07:B0:E6:A7:22:D0:3B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7c:63:62:ab:3d:5c:aa:0d:a4:27:c2:76:d6:55:1e:7c:c0: cf:3a:58:dc:0a:b5:5d:cb:9e:d0:3a:31:ef:b8:59:93:42:c2: 2f:23:69:77:ef:64:c8:a4:a8:46:71:6c:6a:45:de:cd:2d:88: 4c:29:97:0e:45:92:11:00:4c:f7:91:c6:d7:d4:43:c9:a4:0f: df:ba:b8:14:3b:df:2a:37:7f:c4:3d:99:64:86:39:f3:a4:46: 45:b0:10:60:97:af:6e:08:17:8c:95:01:4f:19:34:0a:c4:cc: c3:62:f7:f0:db:5a:fe:3d:8f:11:6b:54:4f:d2:84:95:97:82: e7:5a:ad:44:36:b5:f6:f1:7d:54:1a:33:d9:29:a7:40:2b:f4: db:2a:50:26:9d:e5:ca:29:47:ff:c4:04:56:e9:96:29:1d:93: 52:2f:15:eb:0f:da:cc:d0:41:f2:ae:4e:7c:6a:7b:58:81:71: a8:08:0c:15:0d:40:48:60:92:74:7e:4d:11:ed:5e:f0:41:44: 46:c3:b6:f4:c9:67:81:ff:05:dc:1f:6d:06:7f:07:9c:38:ec: 09:f4:3c:4c:b3:78:6e:e4:2f:ea:dc:72:a1:9a:9d:41:cf:0d: 6c:be:43:32:4d:b4:c6:c4:aa:10:cd:e0:e7:bc:7b:19:1c:95: b2:a0:0f:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEowxtUiQTb+tSDBbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFlNTEyMWItNTg0Ni00YWRhLTlhZTMtMDlkYTNkY2Y3 YjYxMB4XDTI1MDYxNDE3MDAwN1oXDTI1MDYxNjE3MDAwMFowLzEtMCsGA1UEAxMk MTlhYzNlZGItNGZkZC00MDA4LWE0NDEtOTk1ZTBmNDhmY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbLlvxMappd92ZsyaxulqOfygKtOCVy6damt ogZXWl4kRIKsES1a2XWZTAByKY1JyUhhCIS3D+9/NrCwmDHrhJkJcFhYEMSj7r9i eTtWtf+pcDIuvQ4qeCfHC1sjsl5F21y8pUID3XDHJ4w2Hq0wUcFANmP7q4ojC8t4 nUfjF4rfNR0Oc3FphyhE3SYIDiTI5lHbK08DaYCiGwrIo01hpZqiLDMqL30z0oht tsQhhmmtggMRv4zyg5asPMySRhequRz1FiqLnxPo20XkWrcDYTipjdoEmvUuhEyk YxGbVSKmX8TGvoS9tKlIaY7yz9TtZBqqzQeDfeikCAlKqoti+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL2CYr0VAB3QBeRXaYVEZMY3ePUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMWU1 MTIxYi01ODQ2LTRhZGEtOWFlMy0wOWRhM2RjZjdiNjEvZDFlNTEyMWItNTg0Ni00 YWRhLTlhZTMtMDlkYTNkY2Y3YjYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDFlNTEyMWItNTg0Ni00YWRhLTlh ZTMtMDlkYTNkY2Y3YjYxL2QxZTUxMjFiLTU4NDYtNGFkYS05YWUzLTA5ZGEzZGNm N2I2MS5jcmwwHwYDVR0jBBgwFoAUTEr+B3HQsrAtepjCB7DmpyLQO2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMWU1MTIxYi01ODQ2LTRhZGEtOWFlMy0wOWRh M2RjZjdiNjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDfGNiqz1cqg2kJ8J21lUe fMDPOljcCrVdy57QOjHvuFmTQsIvI2l372TIpKhGcWxqRd7NLYhMKZcORZIRAEz3 kcbX1EPJpA/furgUO98qN3/EPZlkhjnzpEZFsBBgl69uCBeMlQFPGTQKxMzDYvfw 21r+PY8Ra1RP0oSVl4LnWq1ENrX28X1UGjPZKadAK/TbKlAmneXKKUf/xARW6ZYp HZNSLxXrD9rM0EHyrk58antYgXGoCAwVDUBIYJJ0fk0R7V7wQURGw7b0yWeB/wXc H20GfwecOOwJ9DxMs3hu5C/q3HKhmp1Bzw1svkMyTbTGxKoQzeDnvHsZHJWyoA+x -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:59 2025 by rpki-client