$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.mft File: 18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.mft (raw, json) Hash identifier: XYdBCQqzv98M2SPwii92aQfsF86wC01hE52IKqT6c0o= Subject key identifier: 0B:04:D9:37:69:84:57:88:09:12:15:44:58:94:47:10:C5:AC:8C:CB Authority key identifier: 5E:DB:47:B5:30:53:E8:80:06:00:66:00:FD:3E:0C:ED:39:72:51:33 Certificate issuer: /CN=18c1bebe-d1f9-4e18-91eb-c1bad64a3be8 Certificate serial: 010D0C9F4328584ABD4C3A5DFE7D4E32D4E41800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.mft Manifest number: 010D0C9F43285841E489B080B959F2E61478CAA0 Signing time: Mon 04 Aug 2025 01:02:03 +0000 Manifest this update: Mon 04 Aug 2025 01:02:03 +0000 Manifest next update: Tue 05 Aug 2025 19:00:00 +0000 Files and hashes: 1: 18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.crl (hash: NvVhSypSer32wWEMEXzHnxzEExYrY1zrd7BJSOF3mZ8=) 2: dde5cdc2-3c4a-3c42-959f-3fa395e2bfac.roa (hash: XdhfIreCieCaZoJqw7V1H9dqPFM5GIGm7q1MPT1smck=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4c:3a:5d:fe:7d:4e:32:d4:e4:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c1bebe-d1f9-4e18-91eb-c1bad64a3be8 Validity Not Before: Aug 4 01:02:03 2025 GMT Not After : Aug 5 19:00:00 2025 GMT Subject: CN=e3bf5a30-6cdb-447e-80f5-f152f85ace6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:06:b0:70:85:c3:3a:97:58:7b:83:9e:e4: 2d:e2:a0:ce:58:4a:bc:99:96:f8:ad:e7:69:3c:19: dc:5f:f9:3f:c8:42:7d:68:42:9e:40:c1:a8:5d:2c: 40:8d:cb:9d:2b:04:7c:4d:24:9c:db:2e:41:13:4e: 18:df:ed:9f:f7:f3:ae:2d:82:f5:56:cb:70:58:26: e1:80:94:46:45:d9:18:e6:91:9d:26:ea:53:58:0e: 01:c4:9d:9b:e2:f1:eb:e1:60:24:30:ca:aa:f9:3d: 94:fd:e4:63:c8:58:9f:12:f8:ba:00:d4:70:86:12: bd:74:0a:7a:2d:69:63:18:f3:c5:fb:f4:37:52:1d: 9f:16:f6:31:ee:99:35:57:9b:38:21:71:28:11:0e: d0:5c:cb:e3:68:54:d9:54:54:b0:b7:d8:70:47:88: 01:03:1a:44:e0:95:e8:a5:8e:2a:3f:4f:da:1e:9c: cd:aa:66:63:2e:93:bd:47:c0:1a:83:34:64:51:f7: 10:63:cb:2d:c8:1c:ab:ba:20:c5:f3:3b:07:46:9b: 89:51:28:c7:a3:04:bb:54:1b:d2:c7:40:56:5d:56: fa:62:0b:54:05:2e:c6:f9:39:c2:ee:f0:ef:a8:a5: a7:59:c6:44:fb:4c:74:6b:ed:05:e4:a6:26:21:fa: e9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:D9:37:69:84:57:88:09:12:15:44:58:94:47:10:C5:AC:8C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.crl X509v3 Authority Key Identifier: keyid:5E:DB:47:B5:30:53:E8:80:06:00:66:00:FD:3E:0C:ED:39:72:51:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/18c1bebe-d1f9-4e18-91eb-c1bad64a3be8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b6:fe:51:0d:4f:7a:0c:14:a6:ab:df:1e:c9:b2:b7:89:5b: dc:3a:7e:97:ec:10:9a:1f:4c:ce:d5:d3:cd:7a:3b:64:46:a8: 6b:96:2b:14:e3:c5:ad:3f:34:cb:79:cc:1a:ff:7f:c0:e6:bf: 48:b6:48:8d:02:37:e8:a6:be:8c:e7:16:97:ac:f0:e3:e6:31: af:c6:19:c3:95:65:25:1b:09:29:62:33:9b:f5:0d:b6:1b:49: 73:c2:fc:18:2f:98:82:72:1c:6d:8f:ef:d0:55:43:37:11:1e: 09:9e:3b:94:de:d8:c7:46:81:f2:38:15:a0:13:8e:16:5d:54: e2:11:9d:ef:5b:04:f6:ef:94:4b:dc:ec:75:88:7f:f3:e2:7f: e7:0c:52:2b:ff:16:93:63:5e:41:41:a3:87:07:94:4d:c7:3e: 15:62:0c:ce:0c:ed:35:1c:c9:d0:f4:01:cc:d4:76:2a:d8:e1: d6:08:02:06:3b:c5:0b:97:31:a9:03:cd:37:c0:b1:44:f4:11: 9a:9b:da:41:a5:20:d4:85:d2:e7:59:00:86:43:e5:97:a5:dd: 65:53:06:86:1b:bc:6a:dd:89:55:ab:65:84:42:f1:bf:1b:b7: 7a:6c:2a:dd:9b:e6:5f:9d:ba:cf:33:b0:ff:bd:bd:dc:79:9d: f6:bc:c4:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9TDpd/n1OMtTkGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThjMWJlYmUtZDFmOS00ZTE4LTkxZWItYzFiYWQ2NGEz YmU4MB4XDTI1MDgwNDAxMDIwM1oXDTI1MDgwNTE5MDAwMFowLzEtMCsGA1UEAxMk ZTNiZjVhMzAtNmNkYi00NDdlLTgwZjUtZjE1MmY4NWFjZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv08GsHCFwzqXWHuDnuQt4qDOWEq8mZb4redp PBncX/k/yEJ9aEKeQMGoXSxAjcudKwR8TSSc2y5BE04Y3+2f9/OuLYL1VstwWCbh gJRGRdkY5pGdJupTWA4BxJ2b4vHr4WAkMMqq+T2U/eRjyFifEvi6ANRwhhK9dAp6 LWljGPPF+/Q3Uh2fFvYx7pk1V5s4IXEoEQ7QXMvjaFTZVFSwt9hwR4gBAxpE4JXo pY4qP0/aHpzNqmZjLpO9R8AagzRkUfcQY8styByruiDF8zsHRpuJUSjHowS7VBvS x0BWXVb6YgtUBS7G+TnC7vDvqKWnWcZE+0x0a+0F5KYmIfrpCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAsE2TdphFeICRIVRFiURxDFrIzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xOGMx YmViZS1kMWY5LTRlMTgtOTFlYi1jMWJhZDY0YTNiZTgvMThjMWJlYmUtZDFmOS00 ZTE4LTkxZWItYzFiYWQ2NGEzYmU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMThjMWJlYmUtZDFmOS00ZTE4LTkx ZWItYzFiYWQ2NGEzYmU4LzE4YzFiZWJlLWQxZjktNGUxOC05MWViLWMxYmFkNjRh M2JlOC5jcmwwHwYDVR0jBBgwFoAUXttHtTBT6IAGAGYA/T4M7TlyUTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xOGMxYmViZS1kMWY5LTRlMTgtOTFlYi1jMWJh ZDY0YTNiZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOtv5RDU96DBSmq98eybK3 iVvcOn6X7BCaH0zO1dPNejtkRqhrlisU48WtPzTLecwa/3/A5r9ItkiNAjfopr6M 5xaXrPDj5jGvxhnDlWUlGwkpYjOb9Q22G0lzwvwYL5iCchxtj+/QVUM3ER4JnjuU 3tjHRoHyOBWgE44WXVTiEZ3vWwT275RL3Ox1iH/z4n/nDFIr/xaTY15BQaOHB5RN xz4VYgzODO01HMnQ9AHM1HYq2OHWCAIGO8ULlzGpA803wLFE9BGam9pBpSDUhdLn WQCGQ+WXpd1lUwaGG7xq3YlVq2WEQvG/G7d6bCrdm+ZfnbrPM7D/vb3ceZ32vMQI -----END CERTIFICATE-----Generated at Mon Aug 4 14:16:32 2025 by rpki-client