$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: pssPgIYgGudWdb6TbnsIS91tLsn4f0eCPk6nk5EO0mE= Subject key identifier: EC:02:E3:B8:60:1A:AC:AF:AD:92:31:2F:2B:B1:91:CC:FA:E3:B0:C8 Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F4328584A59062629C151E005BCAF9420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924AA0 Signing time: Sun 29 Jun 2025 03:00:03 +0000 Manifest this update: Sun 29 Jun 2025 03:00:03 +0000 Manifest next update: Tue 01 Jul 2025 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: U0P/CA8YsEywBKTRaNy9Z26pEGTqtFJGyiLOIYYgUu0=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: 0yuXDe/V5yrebTmccQTKcppbQUO88MIvANLycg0IN/k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:06:26:29:c1:51:e0:05:bc:af:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Jun 29 03:00:03 2025 GMT Not After : Jul 1 03:00:00 2025 GMT Subject: CN=04ff5fe3-2460-413c-b748-b57f8c58f559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:25:a5:4e:1f:f9:5a:44:c0:93:29:6d:12: 8a:1d:9d:66:e7:00:50:5f:01:99:cf:01:1b:9b:1d: c9:44:96:4d:27:ac:05:1d:94:3e:f9:31:b8:8c:5d: 27:4c:13:cd:aa:a1:4a:e1:a2:1f:ae:f6:8a:cf:1b: 7a:28:ee:d9:6d:27:75:4b:1a:ba:5b:2d:ba:a6:a3: 12:67:17:26:cb:67:fc:82:50:3d:59:c9:79:f3:41: fc:7c:05:4d:a7:7f:a6:e7:c1:1f:27:e6:1a:16:10: c7:ff:24:d2:5b:3e:e1:40:38:40:50:09:3c:b5:0f: 32:7b:01:90:9f:b2:8b:d6:e2:75:b4:80:95:e6:1f: be:be:48:83:d5:65:85:7c:fa:76:5a:0c:fd:37:97: 23:41:58:31:cc:7b:63:14:b3:26:fe:b1:9b:c7:a7: 4e:0d:c7:52:f4:36:aa:d5:f2:a5:50:2a:5c:0b:39: ec:ec:c5:87:1d:5c:f9:08:41:b7:12:5c:52:1e:91: 59:f0:2d:12:4c:b2:4c:e5:07:ea:89:1e:b6:e7:97: ad:bc:b8:55:14:58:57:28:d0:ad:c6:42:e4:39:fb: fd:22:a5:40:7d:22:81:51:ad:ec:d5:1d:27:83:b6: 8f:e4:6a:dc:cd:ba:f7:b3:c0:e9:06:2f:30:e4:37: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:02:E3:B8:60:1A:AC:AF:AD:92:31:2F:2B:B1:91:CC:FA:E3:B0:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ae:73:8e:e8:2e:ba:0c:ef:e8:42:e2:de:90:eb:ff:d1:d2: bb:2f:c1:13:b8:97:b0:b9:c8:e6:a3:51:c9:ac:fa:7c:9f:07: 18:62:c3:81:07:46:2e:6f:53:bc:22:bf:cf:c9:0f:87:d0:be: 0a:4a:de:21:33:15:f9:48:dd:8e:1e:82:db:bb:e1:00:94:1c: a5:a5:cc:9e:c1:89:3e:01:38:1b:98:23:5d:e1:94:b0:ed:f4: 03:36:57:ae:61:ea:e8:c7:14:20:bf:ee:66:9a:c7:15:f3:41: 97:2e:eb:4d:d8:85:a5:f4:51:b3:24:e1:7e:b1:ee:67:ad:03: d6:b8:23:af:f6:04:2d:2b:23:35:e3:71:a9:ad:c8:54:28:ee: df:9d:d2:c4:78:0f:79:54:d1:fc:a1:2f:a6:fa:31:8f:55:cf: 36:1c:6b:19:e3:9b:7e:7b:ef:51:d3:62:63:de:13:56:c8:01: a4:f6:f0:92:4e:af:91:5c:8e:73:35:4c:b3:2e:ee:1c:d0:88: c1:1c:bc:94:7a:b8:c4:ba:58:1d:52:6f:13:48:a2:43:c8:2e: c2:1f:9a:0c:bd:da:a2:37:60:5a:e5:2f:c0:b8:58:39:ed:1a: 4f:de:c2:3a:ec:57:34:02:2c:d2:71:8d:8e:41:ea:3c:e8:f2: 24:18:ad:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZBiYpwVHgBbyvlCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI1MDYyOTAzMDAwM1oXDTI1MDcwMTAzMDAwMFowLzEtMCsGA1UEAxMk MDRmZjVmZTMtMjQ2MC00MTNjLWI3NDgtYjU3ZjhjNThmNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFYlpU4f+VpEwJMpbRKKHZ1m5wBQXwGZzwEb mx3JRJZNJ6wFHZQ++TG4jF0nTBPNqqFK4aIfrvaKzxt6KO7ZbSd1Sxq6Wy26pqMS Zxcmy2f8glA9Wcl580H8fAVNp3+m58EfJ+YaFhDH/yTSWz7hQDhAUAk8tQ8yewGQ n7KL1uJ1tICV5h++vkiD1WWFfPp2Wgz9N5cjQVgxzHtjFLMm/rGbx6dODcdS9Daq 1fKlUCpcCzns7MWHHVz5CEG3ElxSHpFZ8C0STLJM5QfqiR6255etvLhVFFhXKNCt xkLkOfv9IqVAfSKBUa3s1R0ng7aP5Grczbr3s8DpBi8w5DfmzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOwC47hgGqyvrZIxLyuxkcz647DIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9rnOO6C66DO/oQuLekOv/ 0dK7L8ETuJewucjmo1HJrPp8nwcYYsOBB0Yub1O8Ir/PyQ+H0L4KSt4hMxX5SN2O HoLbu+EAlBylpcyewYk+ATgbmCNd4ZSw7fQDNleuYeroxxQgv+5mmscV80GXLutN 2IWl9FGzJOF+se5nrQPWuCOv9gQtKyM143GprchUKO7fndLEeA95VNH8oS+m+jGP Vc82HGsZ45t+e+9R02Jj3hNWyAGk9vCSTq+RXI5zNUyzLu4c0IjBHLyUerjEulgd Um8TSKJDyC7CH5oMvdqiN2Ba5S/AuFg57RpP3sI67Fc0AizScY2OQeo86PIkGK1r -----END CERTIFICATE-----Generated at Sun Jun 29 09:49:58 2025 by rpki-client