$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft File: 3a033ee1-5d03-497a-8120-3969593cdf7e.mft (raw, json) Hash identifier: xnAJ37/bV9kDvaJVoUGxM202dbp9RS089WiDAL21O/E= Subject key identifier: 71:AA:C9:0A:E8:AC:46:AD:8E:9B:99:9E:23:E6:51:FD:4D:F2:A2:BA Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584A5A894EC133DB868E90629180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft Manifest number: 010D0C9F4328584534EC3BF001B4FD74E407FFE3 Signing time: Sun 29 Jun 2025 16:00:08 +0000 Manifest this update: Sun 29 Jun 2025 16:00:08 +0000 Manifest next update: Wed 02 Jul 2025 16:00:00 +0000 Files and hashes: 1: 3a033ee1-5d03-497a-8120-3969593cdf7e.crl (hash: 2jFNT631o+G2YPpK6tb56dlgqE6hJGoFpKVAXwBT2ok=) 2: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (hash: qhY5LPDyNOfLV+3BMpovE4qNROgY8qjIRrnhElAKyUU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:89:4e:c1:33:db:86:8e:90:62:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Jun 29 16:00:08 2025 GMT Not After : Jul 2 16:00:00 2025 GMT Subject: CN=a884d897-a9e5-46e0-a2f1-554b69ef5f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:17:f4:63:a6:9f:7a:5e:8f:e3:ea:4f:19: a9:6f:b3:a4:95:59:aa:1f:7e:61:5c:d7:a2:9b:b4: 95:6e:02:9a:ec:90:a4:75:72:09:2f:d8:5a:d0:c0: 2a:e1:16:ac:80:ec:dd:f6:b7:46:bc:cc:03:69:3f: a8:44:fa:2a:e1:f9:6a:83:5c:39:ae:0f:64:26:63: d1:54:c9:bc:88:88:a0:88:20:ab:98:9a:d2:fb:82: ab:b2:6f:d5:0d:eb:35:d8:3c:b1:d4:95:55:36:7d: cb:7d:e0:55:1b:aa:45:df:12:db:2c:ea:e5:9c:03: bc:d7:b2:89:48:fc:f9:45:4e:df:ef:84:62:a3:9b: 01:c6:51:b4:8a:ec:d9:d6:37:ce:4d:1d:f0:31:73: b1:47:2c:1e:8c:0c:11:00:2c:f1:4c:cc:fa:45:4c: b1:75:04:da:cc:73:5c:ff:72:83:0e:6b:94:7c:92: 27:cd:15:20:b8:cd:33:91:64:64:f8:b0:c3:d1:53: 19:27:f9:58:91:2a:b2:41:8b:e6:32:ac:13:09:4a: e9:fb:fa:45:dd:ea:d5:f7:6a:3a:c2:13:ea:37:f5: 4f:fd:76:1b:cc:07:3b:c4:ad:31:91:02:d8:7f:27: 84:34:23:ae:8c:6e:dd:a4:c1:11:c8:d3:6e:8d:ca: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:C9:0A:E8:AC:46:AD:8E:9B:99:9E:23:E6:51:FD:4D:F2:A2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:da:19:26:11:59:46:24:3e:66:c4:87:d0:2b:4d:78:24:08: a0:b9:f0:c7:43:af:fc:50:98:d3:b3:bc:06:7f:c9:b1:73:9f: 98:42:c6:55:7d:cf:4c:18:a3:27:55:a9:b9:6e:57:f7:c5:27: a0:25:51:95:6e:c0:00:77:3d:7e:67:03:db:4a:2d:89:00:ff: 42:4d:42:f7:0c:b6:42:12:c4:16:84:d8:61:c7:da:f5:4c:50: 5c:c3:f3:d2:27:79:a6:5f:cd:86:62:7a:3a:33:31:17:ad:bb: b9:52:6d:a5:17:6d:1e:c1:3d:05:98:c9:2c:19:b9:85:36:3d: b4:6e:d4:e8:32:f8:10:2e:25:b8:1b:0e:a5:90:73:5f:72:14: 92:c0:e0:00:b1:4a:f1:e9:9d:fc:ce:0f:1d:d6:7b:4e:99:00: 22:a0:6c:1c:08:13:10:ae:09:e0:07:f9:75:ab:c9:9e:a2:6b: c3:38:d6:0f:c2:a9:33:8f:ad:73:f1:ef:20:9c:54:ce:18:bd: 33:aa:5d:a8:a8:e4:20:92:11:44:c2:17:96:9d:79:b6:10:a6: e9:21:56:71:68:f7:15:87:c6:af:a2:d8:87:9b:f6:f5:ff:8f: db:54:e5:ac:06:14:d9:70:10:b0:6d:32:bc:18:fc:43:fc:d4: a3:f4:0c:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpaiU7BM9uGjpBikYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MDYyOTE2MDAwOFoXDTI1MDcwMjE2MDAwMFowLzEtMCsGA1UEAxMk YTg4NGQ4OTctYTllNS00NmUwLWEyZjEtNTU0YjY5ZWY1ZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaIX9GOmn3pej+PqTxmpb7OklVmqH35hXNei m7SVbgKa7JCkdXIJL9ha0MAq4RasgOzd9rdGvMwDaT+oRPoq4flqg1w5rg9kJmPR VMm8iIigiCCrmJrS+4Krsm/VDes12Dyx1JVVNn3LfeBVG6pF3xLbLOrlnAO817KJ SPz5RU7f74Rio5sBxlG0iuzZ1jfOTR3wMXOxRywejAwRACzxTMz6RUyxdQTazHNc /3KDDmuUfJInzRUguM0zkWRk+LDD0VMZJ/lYkSqyQYvmMqwTCUrp+/pF3erV92o6 whPqN/VP/XYbzAc7xK0xkQLYfyeENCOujG7dpMERyNNujcqUVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHGqyQrorEatjpuZniPmUf1N8qK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvM2EwMzNlZTEtNWQwMy00 OTdhLTgxMjAtMzk2OTU5M2NkZjdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBy2hkmEVlGJD5mxIfQK014 JAigufDHQ6/8UJjTs7wGf8mxc5+YQsZVfc9MGKMnVam5blf3xSegJVGVbsAAdz1+ ZwPbSi2JAP9CTUL3DLZCEsQWhNhhx9r1TFBcw/PSJ3mmX82GYno6MzEXrbu5Um2l F20ewT0FmMksGbmFNj20btToMvgQLiW4Gw6lkHNfchSSwOAAsUrx6Z38zg8d1ntO mQAioGwcCBMQrgngB/l1q8meomvDONYPwqkzj61z8e8gnFTOGL0zql2oqOQgkhFE wheWnXm2EKbpIVZxaPcVh8avotiHm/b1/4/bVOWsBhTZcBCwbTK8GPxD/NSj9Axa -----END CERTIFICATE-----Generated at Mon Jun 30 13:51:26 2025 by rpki-client