$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft File: c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft (raw, json) Hash identifier: LUb/udk+fL69q9evybAi2lRT1mX7V4VldMROdz7/5P0= Subject key identifier: 2C:34:97:31:FD:2E:C4:56:79:38:13:5B:45:94:79:66:E0:E9:76:89 Authority key identifier: D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C Certificate issuer: /CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Certificate serial: 010D0C9F4328584A601EB0C9676D547615CDDB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft Manifest number: 010D0C9F4328584073A81CB12D51632932675AF3 Signing time: Tue 01 Jul 2025 16:00:08 +0000 Manifest this update: Tue 01 Jul 2025 16:00:08 +0000 Manifest next update: Fri 04 Jul 2025 16:00:00 +0000 Files and hashes: 1: 950d8c36-ddb0-3620-b235-c13e150e45f1.roa (hash: PxbNhfhXiKVmgVem++zyVXH8R6pRpHyOI3jR663GaEc=) 2: c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl (hash: l9yGTVxVHV6TUw0PPeha7ggsBDWXb6nTJFXorgLMH40=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:1e:b0:c9:67:6d:54:76:15:cd:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Validity Not Before: Jul 1 16:00:08 2025 GMT Not After : Jul 4 16:00:00 2025 GMT Subject: CN=2bd14356-71f4-4ee7-af70-d15436a81d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:eb:5d:eb:af:69:fa:9b:f9:f5:50:f2:74:7f: ef:27:7b:5c:6c:77:f8:12:96:dc:4a:f5:b0:71:b8: 17:86:06:fb:30:93:33:c5:e5:b5:d9:f7:bb:4d:8c: 28:7e:3e:2a:82:4c:15:56:8c:d0:c4:dd:67:94:6d: 3b:8f:24:39:97:e4:06:a6:a5:e7:0f:c2:a5:e8:eb: b8:d9:30:be:ba:5b:25:59:fb:83:10:4d:84:21:89: 85:bc:a0:97:eb:3c:77:be:c8:8e:d0:67:40:65:e2: 50:7d:a1:71:31:9d:f0:1e:de:2a:32:6d:b0:a8:1c: 10:ff:a1:d5:c8:6c:0d:9d:63:2c:b0:4f:8b:51:a5: 90:4f:61:ff:69:89:d3:77:53:59:ea:1d:6d:01:27: 20:90:55:55:04:9e:65:66:85:07:14:8a:cc:d7:93: 82:32:2e:54:f9:ec:3a:9c:03:35:0f:44:df:b4:b6: 9d:34:57:bf:21:cb:8c:51:45:28:b2:57:9b:51:fe: 7b:44:7e:6f:c7:f6:77:c5:6c:ec:6a:dd:94:5c:39: ec:ec:69:d0:89:8a:4f:46:11:23:f6:36:a9:45:3d: 49:03:69:81:33:a7:cf:ae:3e:af:0e:94:e0:f8:ca: df:51:93:11:2a:b4:9a:6e:d8:47:0a:20:81:6a:78: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:34:97:31:FD:2E:C4:56:79:38:13:5B:45:94:79:66:E0:E9:76:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl X509v3 Authority Key Identifier: keyid:D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cb:9d:29:7a:14:15:31:72:2c:dd:b9:3e:16:2f:b7:cc:ee: af:64:d8:c1:01:a3:6e:74:58:e7:19:87:16:a6:49:1a:9f:0f: b5:dc:91:43:57:28:a0:1f:29:7f:e7:bc:e8:45:e9:ac:fc:37: 9e:31:6b:d9:b6:81:22:78:77:27:51:da:dc:2b:b8:4c:31:6c: 6b:90:11:4b:11:3c:d5:56:eb:7b:ce:0d:22:18:47:18:03:72: e3:bb:f1:f6:4e:34:56:64:fd:47:38:76:1a:c4:b6:96:25:e3: 51:02:9c:c3:4e:b9:94:08:4d:b4:c3:67:93:09:9e:65:c6:c7: 93:3c:92:d4:8f:d5:d3:3d:43:44:9f:b6:19:ae:69:30:bb:35: 7f:1e:dc:d1:67:70:01:b4:43:fb:79:5a:3b:d6:68:a3:6b:fd: 54:92:70:d2:56:7a:76:e3:46:ec:9b:49:c5:fe:16:68:25:3e: 64:24:53:d1:35:4d:b6:df:7d:c6:f7:bf:c2:55:c5:b4:9f:7d: ac:ef:c5:33:ad:01:0a:d8:88:d7:9c:a5:f3:42:85:03:4d:92: b2:73:5b:ad:8e:ca:97:b5:66:73:82:23:37:35:ba:56:26:09: ec:63:5c:a8:53:58:c5:08:a6:75:16:97:ed:3e:11:2b:7c:3e: fc:4f:53:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgHrDJZ21UdhXN20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcxYjZhNzYtOGY3Ni00NjM1LWI2ZmQtZmRhYWQ2ZjIx NTA0MB4XDTI1MDcwMTE2MDAwOFoXDTI1MDcwNDE2MDAwMFowLzEtMCsGA1UEAxMk MmJkMTQzNTYtNzFmNC00ZWU3LWFmNzAtZDE1NDM2YTgxZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiutd669p+pv59VDydH/vJ3tcbHf4EpbcSvWw cbgXhgb7MJMzxeW12fe7TYwofj4qgkwVVozQxN1nlG07jyQ5l+QGpqXnD8Kl6Ou4 2TC+ulslWfuDEE2EIYmFvKCX6zx3vsiO0GdAZeJQfaFxMZ3wHt4qMm2wqBwQ/6HV yGwNnWMssE+LUaWQT2H/aYnTd1NZ6h1tAScgkFVVBJ5lZoUHFIrM15OCMi5U+ew6 nAM1D0TftLadNFe/IcuMUUUoslebUf57RH5vx/Z3xWzsat2UXDns7GnQiYpPRhEj 9japRT1JA2mBM6fPrj6vDpTg+MrfUZMRKrSabthHCiCBanguIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCw0lzH9LsRWeTgTW0WUeWbg6XaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFi NmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFhZDZmMjE1MDQvYzcxYjZhNzYtOGY3Ni00 NjM1LWI2ZmQtZmRhYWQ2ZjIxNTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzcxYjZhNzYtOGY3Ni00NjM1LWI2 ZmQtZmRhYWQ2ZjIxNTA0L2M3MWI2YTc2LThmNzYtNDYzNS1iNmZkLWZkYWFkNmYy MTUwNC5jcmwwHwYDVR0jBBgwFoAU2Y6s/TWDQKtPQkUnIXqRhyDVBFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFiNmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFh ZDZmMjE1MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDy50pehQVMXIs3bk+Fi+3 zO6vZNjBAaNudFjnGYcWpkkanw+13JFDVyigHyl/57zoRems/DeeMWvZtoEieHcn UdrcK7hMMWxrkBFLETzVVut7zg0iGEcYA3Lju/H2TjRWZP1HOHYaxLaWJeNRApzD TrmUCE20w2eTCZ5lxseTPJLUj9XTPUNEn7YZrmkwuzV/HtzRZ3ABtEP7eVo71mij a/1UknDSVnp240bsm0nF/hZoJT5kJFPRNU22333G97/CVcW0n32s78UzrQEK2IjX nKXzQoUDTZKyc1utjsqXtWZzgiM3NbpWJgnsY1yoU1jFCKZ1FpftPhErfD78T1Nh -----END CERTIFICATE-----Generated at Tue Jul 1 23:55:52 2025 by rpki-client