$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft File: 24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft (raw, json) Hash identifier: uGu2wHrx20zSmRkagZ5gFY5XmvgWUai1Nrzl++6Pgf4= Subject key identifier: 52:3B:F8:AD:E1:32:E7:F3:F2:4E:2F:25:ED:E0:08:1C:CB:BD:EB:84 Authority key identifier: 8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C Certificate issuer: /CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e Certificate serial: 010D0C9F4328584A3AA9F82F2580C85D76134200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft Manifest number: 010D0C9F432858497CED4AABE9889DAD4ED2B585 Signing time: Wed 18 Jun 2025 06:00:03 +0000 Manifest this update: Wed 18 Jun 2025 06:00:03 +0000 Manifest next update: Sat 21 Jun 2025 06:00:00 +0000 Files and hashes: 1: 1469698d-5721-3dc4-a71b-77c9af5be168.roa (hash: +BX0VvEEB1xtm40Ar9bFHMx9qw0JGBPvmCM1fj0gxbQ=) 2: 24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl (hash: j313ZZlh3BOGwgdhg09N4DAJzzaE1to1M33oD7rXres=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:a9:f8:2f:25:80:c8:5d:76:13:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e Validity Not Before: Jun 18 06:00:03 2025 GMT Not After : Jun 21 06:00:00 2025 GMT Subject: CN=5490a9db-4e39-4a1d-bc42-c062189224f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:95:84:c9:27:3d:b7:7f:f9:a1:5f:3f:7c: 67:3f:a8:71:dd:77:40:49:5e:90:67:27:c1:ff:6e: 1b:1e:00:24:3e:9e:32:ae:2a:27:15:b0:d5:89:08: 6c:d9:c2:3a:e8:7b:dd:3c:c5:66:9d:0f:5e:95:b5: d7:94:d4:49:77:4c:ed:67:e1:42:16:41:c8:d5:08: da:06:eb:39:b5:7d:bd:3f:46:db:7c:34:59:6e:55: 87:e9:3c:05:38:53:5f:c5:dd:0a:60:70:e5:56:6c: e2:8d:2f:59:2b:f5:b9:7a:b6:26:fd:b4:c2:b2:fc: 1d:15:0f:26:82:8b:a9:7e:5f:bc:32:df:9a:f3:6d: 37:0a:0f:2c:e0:bc:b5:22:cd:f3:28:9c:94:7e:f3: f7:15:0c:fa:b2:72:7d:20:4c:91:1b:50:fa:c1:b2: e7:61:d2:c4:7b:3f:2d:52:1c:b0:2d:94:e5:cb:be: e2:15:b3:e7:b7:1b:d9:5b:18:e2:0a:5b:4d:2e:de: 2d:3c:04:c8:52:d7:aa:ef:d5:87:7c:7a:43:44:37: d7:c8:11:6b:55:e2:af:e0:75:8b:cc:a5:0a:d9:79: ff:1b:6e:e6:ff:6f:8a:36:85:e9:49:23:f8:b3:78: 50:39:88:58:b5:55:66:0d:7b:e5:06:28:7b:62:e0: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3B:F8:AD:E1:32:E7:F3:F2:4E:2F:25:ED:E0:08:1C:CB:BD:EB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl X509v3 Authority Key Identifier: keyid:8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4e:a8:92:93:6a:e0:44:66:a2:8c:19:6a:64:48:f5:98:c3: d3:f1:59:ab:1b:dc:56:27:4a:d9:34:f8:de:74:1c:d1:63:85: 25:f5:91:6c:16:c8:68:9e:88:c0:05:f3:6c:51:d9:38:6d:8d: 7d:b7:1f:f2:36:68:42:d9:f8:96:f9:e5:54:ec:61:3a:49:c7: 08:aa:ad:d1:c4:31:29:f2:86:06:70:8d:af:94:95:69:e5:97: b1:47:5e:01:ea:d1:48:df:16:4f:73:eb:18:53:96:a3:a0:f8: e8:18:a4:3a:67:a9:2e:26:41:60:2c:c8:7e:97:2c:39:e7:f0: 39:f8:a6:65:cc:a2:c4:7e:33:e4:53:cf:04:92:e2:8e:28:72: 3b:32:ea:e1:fb:62:45:56:cf:5a:7c:3d:1f:1c:ab:ae:51:2a: 19:5d:31:ff:be:ff:1a:eb:6e:90:25:20:b2:9b:3e:3a:d5:90: 32:fa:25:86:0f:e6:6c:5b:70:51:fd:74:e8:ed:f0:52:52:94: 6e:fe:13:ac:14:89:31:c1:9f:5c:b9:30:60:b8:6b:9f:46:f3: 59:8a:aa:62:64:05:6d:4c:c8:81:3c:69:44:26:1c:9e:0a:74: 85:fd:51:6a:16:f3:ef:79:02:c1:e3:ff:05:7f:aa:c3:66:17: 48:54:9b:0f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo6qfgvJYDIXXYTQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRkNWVjYTAtODRmMS00MmE5LWFiYTYtNDZiMzdmMDdh YTRlMB4XDTI1MDYxODA2MDAwM1oXDTI1MDYyMTA2MDAwMFowLzEtMCsGA1UEAxMk NTQ5MGE5ZGItNGUzOS00YTFkLWJjNDItYzA2MjE4OTIyNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlueVhMknPbd/+aFfP3xnP6hx3XdASV6QZyfB /24bHgAkPp4yrionFbDViQhs2cI66HvdPMVmnQ9elbXXlNRJd0ztZ+FCFkHI1Qja Bus5tX29P0bbfDRZblWH6TwFOFNfxd0KYHDlVmzijS9ZK/W5erYm/bTCsvwdFQ8m goupfl+8Mt+a8203Cg8s4Ly1Is3zKJyUfvP3FQz6snJ9IEyRG1D6wbLnYdLEez8t UhywLZTly77iFbPntxvZWxjiCltNLt4tPATIUteq79WHfHpDRDfXyBFrVeKv4HWL zKUK2Xn/G27m/2+KNoXpSSP4s3hQOYhYtVVmDXvlBih7YuCCzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFI7+K3hMufz8k4vJe3gCBzLveuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNGQ1 ZWNhMC04NGYxLTQyYTktYWJhNi00NmIzN2YwN2FhNGUvMjRkNWVjYTAtODRmMS00 MmE5LWFiYTYtNDZiMzdmMDdhYTRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjRkNWVjYTAtODRmMS00MmE5LWFi YTYtNDZiMzdmMDdhYTRlLzI0ZDVlY2EwLTg0ZjEtNDJhOS1hYmE2LTQ2YjM3ZjA3 YWE0ZS5jcmwwHwYDVR0jBBgwFoAUjiwpDP8/rWrgW3vKoPmVFszpnnwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNGQ1ZWNhMC04NGYxLTQyYTktYWJhNi00NmIz N2YwN2FhNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwTqiSk2rgRGaijBlqZEj1 mMPT8VmrG9xWJ0rZNPjedBzRY4Ul9ZFsFshonojABfNsUdk4bY19tx/yNmhC2fiW +eVU7GE6SccIqq3RxDEp8oYGcI2vlJVp5ZexR14B6tFI3xZPc+sYU5ajoPjoGKQ6 Z6kuJkFgLMh+lyw55/A5+KZlzKLEfjPkU88EkuKOKHI7Murh+2JFVs9afD0fHKuu USoZXTH/vv8a626QJSCymz461ZAy+iWGD+ZsW3BR/XTo7fBSUpRu/hOsFIkxwZ9c uTBguGufRvNZiqpiZAVtTMiBPGlEJhyeCnSF/VFqFvPveQLB4/8Ff6rDZhdIVJsP -----END CERTIFICATE-----Generated at Wed Jun 18 22:54:12 2025 by rpki-client