$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft File: d438c823-e424-41a1-9631-aa3b75aea0c7.mft (raw, json) Hash identifier: jXsbJN/6SGEtAnZ3q600i9Hek8xB8oY++tLT4u8kUpQ= Subject key identifier: E7:6A:73:F4:02:3A:F8:1A:5E:AA:7A:B8:BB:C6:1E:75:C7:41:C2:9B Authority key identifier: E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93 Certificate issuer: /CN=d438c823-e424-41a1-9631-aa3b75aea0c7 Certificate serial: 010D0C9F4328584A3B7A68B910A8967226E50600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft Manifest number: 010D0C9F43285849F5C721EFAB492FB8369203D9 Signing time: Wed 18 Jun 2025 13:00:03 +0000 Manifest this update: Wed 18 Jun 2025 13:00:03 +0000 Manifest next update: Fri 20 Jun 2025 13:00:00 +0000 Files and hashes: 1: d438c823-e424-41a1-9631-aa3b75aea0c7.crl (hash: aj3tQm9aVAYw3Kgc3SkBj6AiXb3aegGHErIR9MI6bxY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:68:b9:10:a8:96:72:26:e5:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d438c823-e424-41a1-9631-aa3b75aea0c7 Validity Not Before: Jun 18 13:00:03 2025 GMT Not After : Jun 20 13:00:00 2025 GMT Subject: CN=5044528c-a48e-4e29-ba75-5d991520efd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0e:60:43:80:9e:c0:0c:b7:d2:4e:72:b4:5a: 1a:cd:f3:f4:ff:cb:c8:91:75:c8:8a:c7:34:c4:b5: b2:b1:b0:30:ac:ef:d7:00:a8:26:8f:a5:4f:c9:f4: 2c:89:ac:32:fc:f9:3f:e7:3f:f3:5c:af:d2:92:39: 1e:0e:da:5f:68:06:8a:d6:aa:ad:89:5a:77:a5:bb: c8:d5:9b:0c:cd:81:d2:7d:6c:50:13:fd:a4:6d:29: 51:93:ed:fe:b8:a0:ff:78:ff:2f:de:54:2c:65:ba: dd:f7:ac:b3:83:64:6a:9e:41:b2:da:dd:5c:e8:00: 0f:fe:fc:d6:cc:b2:b9:ef:4f:dc:8b:d2:8f:17:00: 8e:c9:07:19:da:d9:29:fa:05:45:73:eb:69:fd:a7: 17:88:9a:b2:07:66:9e:b0:0e:1d:87:3b:68:c2:f5: f3:54:7f:59:60:9f:09:b2:74:9f:3f:ab:f8:42:ab: f7:bc:a0:a8:f2:b0:16:a2:db:82:10:d5:4d:77:43: aa:bb:af:d0:47:35:0f:3c:25:65:68:c5:ad:f3:fe: dc:7d:68:e6:a9:dd:47:f5:14:5d:57:5b:ae:ed:32: fb:7c:ee:95:21:85:f5:c2:30:66:cb:6f:5f:06:44: e1:20:c3:91:10:e0:91:93:5f:0e:43:1f:96:c3:52: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6A:73:F4:02:3A:F8:1A:5E:AA:7A:B8:BB:C6:1E:75:C7:41:C2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7/d438c823-e424-41a1-9631-aa3b75aea0c7.crl X509v3 Authority Key Identifier: keyid:E3:BC:37:56:85:68:E5:91:F5:8F:9F:FD:DE:D4:16:29:A3:53:D8:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d438c823-e424-41a1-9631-aa3b75aea0c7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:14:ea:35:6a:38:96:46:34:56:c4:b8:c9:48:55:c1:c6:f8: 66:e4:a8:6b:d6:d4:b2:d0:b2:22:7f:9e:5c:51:cc:02:b8:dd: cb:c6:5e:c9:d3:eb:cc:bf:ef:b6:10:68:b0:b8:4c:68:b2:d3: 71:18:db:c8:ef:6c:62:82:69:fe:b2:dd:9d:c9:5a:5e:e8:d2: da:83:be:de:7f:1a:20:5e:f3:91:12:f3:0e:41:79:6a:a0:d1: 6f:46:c3:4b:08:50:bf:ed:76:d8:32:74:5d:ee:3f:a5:37:bc: d0:16:2a:ed:42:57:96:5b:66:18:63:b9:cd:75:83:c0:96:39: 4a:f9:33:5d:9c:e2:df:bf:2c:01:ad:dc:62:62:49:2d:c1:a5: 6c:0b:c1:21:7d:eb:e9:1a:ba:15:f2:5a:20:fb:18:f4:cd:ba: 90:3a:a9:d2:08:82:d8:bc:c7:e2:1f:03:07:91:64:c2:3a:17: 26:fb:e0:13:b8:b0:42:1f:06:85:b5:ab:ef:23:84:20:a7:65: bb:ec:d3:c2:18:87:1a:f5:5c:ec:0b:d0:11:d6:43:89:91:f3: da:a4:d1:f0:49:2e:3e:d6:1b:c9:bc:04:d4:93:48:14:9b:bd: 5a:11:d8:81:ca:67:5d:a8:32:66:c9:14:f6:a4:7d:a4:32:99: 26:7c:84:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo7emi5EKiWciblBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQzOGM4MjMtZTQyNC00MWExLTk2MzEtYWEzYjc1YWVh MGM3MB4XDTI1MDYxODEzMDAwM1oXDTI1MDYyMDEzMDAwMFowLzEtMCsGA1UEAxMk NTA0NDUyOGMtYTQ4ZS00ZTI5LWJhNzUtNWQ5OTE1MjBlZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw5gQ4CewAy30k5ytFoazfP0/8vIkXXIisc0 xLWysbAwrO/XAKgmj6VPyfQsiawy/Pk/5z/zXK/SkjkeDtpfaAaK1qqtiVp3pbvI 1ZsMzYHSfWxQE/2kbSlRk+3+uKD/eP8v3lQsZbrd96yzg2RqnkGy2t1c6AAP/vzW zLK570/ci9KPFwCOyQcZ2tkp+gVFc+tp/acXiJqyB2aesA4dhztowvXzVH9ZYJ8J snSfP6v4Qqv3vKCo8rAWotuCENVNd0Oqu6/QRzUPPCVlaMWt8/7cfWjmqd1H9RRd V1uu7TL7fO6VIYX1wjBmy29fBkThIMOREOCRk18OQx+Ww1JvoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOdqc/QCOvgaXqp6uLvGHnXHQcKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNDM4 YzgyMy1lNDI0LTQxYTEtOTYzMS1hYTNiNzVhZWEwYzcvZDQzOGM4MjMtZTQyNC00 MWExLTk2MzEtYWEzYjc1YWVhMGM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDQzOGM4MjMtZTQyNC00MWExLTk2 MzEtYWEzYjc1YWVhMGM3L2Q0MzhjODIzLWU0MjQtNDFhMS05NjMxLWFhM2I3NWFl YTBjNy5jcmwwHwYDVR0jBBgwFoAU47w3VoVo5ZH1j5/93tQWKaNT2JMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNDM4YzgyMy1lNDI0LTQxYTEtOTYzMS1hYTNi NzVhZWEwYzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeFOo1ajiWRjRWxLjJSFXB xvhm5Khr1tSy0LIif55cUcwCuN3Lxl7J0+vMv++2EGiwuExostNxGNvI72xigmn+ st2dyVpe6NLag77efxogXvOREvMOQXlqoNFvRsNLCFC/7XbYMnRd7j+lN7zQFirt QleWW2YYY7nNdYPAljlK+TNdnOLfvywBrdxiYkktwaVsC8EhfevpGroV8log+xj0 zbqQOqnSCILYvMfiHwMHkWTCOhcm++ATuLBCHwaFtavvI4Qgp2W77NPCGIca9Vzs C9AR1kOJkfPapNHwSS4+1hvJvATUk0gUm71aEdiBymddqDJmyRT2pH2kMpkmfIQX -----END CERTIFICATE-----Generated at Wed Jun 18 17:42:56 2025 by rpki-client