$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft File: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft (raw, json) Hash identifier: YX4lpMRXEsHx5twALXgJVuHqHjVSDTIlAXOWlbEBwKo= Subject key identifier: 7D:92:EC:6C:08:51:4D:53:B2:AD:D2:75:72:94:BD:BA:D6:FA:37:A4 Authority key identifier: 74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 Certificate issuer: /CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Certificate serial: 010D0C9F4328584A59F46C959FE130F89E872B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft Manifest number: 010D0C9F43285848CAD46AE0F159F81573C6F856 Signing time: Sun 29 Jun 2025 11:00:08 +0000 Manifest this update: Sun 29 Jun 2025 11:00:08 +0000 Manifest next update: Tue 01 Jul 2025 11:00:00 +0000 Files and hashes: 1: 3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl (hash: zjzq3HX7xXANsdU17VsSXo4tXSpTYoprLVFeIsNvdRw=) 2: cb94f41c-c887-363c-bf41-8dd04e28d9c3.roa (hash: iV3r8mXBIZAMRjVC6HZK2hqoRytrj7JC1RPsfzpv+ug=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:f4:6c:95:9f:e1:30:f8:9e:87:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c68c219-8e71-4151-8d5c-d504fd12b5fb Validity Not Before: Jun 29 11:00:08 2025 GMT Not After : Jul 1 11:00:00 2025 GMT Subject: CN=05ace3a0-aa50-4aeb-82ca-18cade6cebae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:13:1b:b1:5d:23:07:71:dd:7a:07:af:f9: c1:72:39:90:33:56:28:9d:c2:be:ff:48:44:ea:ae: d6:c9:37:1c:3d:a1:37:df:6d:2f:3e:13:c4:d0:16: e8:44:fc:d8:aa:4a:db:0a:d6:4a:60:e7:8c:cf:a3: f2:58:34:49:c8:a8:8a:60:a3:29:9b:f4:13:75:a9: 8d:af:9f:90:75:52:ad:a8:fe:07:9f:11:0b:41:3b: db:c4:2a:87:63:64:7b:d7:a5:e8:6f:60:74:26:db: bd:31:1c:4b:8e:87:2a:4f:b5:28:ac:a8:83:3d:f2: 19:30:d7:b6:72:27:49:d8:ce:eb:77:fc:0b:2f:6e: 7d:e0:d6:75:8c:ec:fd:c7:52:30:c0:5b:be:39:c3: c6:77:34:c6:09:1e:83:b4:0f:be:8a:ff:7b:90:bf: ca:97:f4:04:34:b6:a4:ee:bb:11:90:ae:8b:8f:0c: ec:9b:3b:07:9f:5a:65:b1:88:57:00:3c:fd:6a:18: 20:da:1c:08:d0:fd:94:5c:b1:52:7e:fb:33:40:87: 13:f6:d2:49:f5:29:0d:19:ad:96:69:bf:45:b1:13: 30:17:8d:bd:13:a0:f8:31:af:0d:08:fe:17:b6:31: 10:7f:48:e8:c0:d8:62:5a:cc:c1:b1:8b:b4:2f:0d: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:92:EC:6C:08:51:4D:53:B2:AD:D2:75:72:94:BD:BA:D6:FA:37:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb/3c68c219-8e71-4151-8d5c-d504fd12b5fb.crl X509v3 Authority Key Identifier: keyid:74:66:34:1C:14:36:2D:94:95:DC:F7:6D:89:3E:8D:22:9E:D7:49:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3c68c219-8e71-4151-8d5c-d504fd12b5fb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:62:d2:fa:87:fd:7e:3f:e9:57:9f:36:51:e3:2e:fa:57:b9: d3:2b:61:a5:c0:60:3b:b4:17:b4:8b:05:0c:dd:19:3f:d3:26: af:7f:fc:0f:4a:50:6a:b4:a9:62:be:dc:41:dc:6b:cf:cc:5f: b7:82:8e:ff:72:9c:b9:24:84:c7:15:dc:a7:2c:57:ae:b9:53: 44:c4:de:87:88:c1:61:65:ee:01:77:11:b0:0d:4b:2b:f0:c4: 88:1c:9b:73:4b:86:92:b6:83:b3:62:c5:94:50:6e:60:e6:9c: 57:d5:16:bd:8e:bc:6d:c0:ab:b4:9a:0e:10:b2:f1:72:76:21: ae:2c:8b:72:b7:a6:57:3b:e2:20:d2:fa:01:01:03:16:c6:25: ae:9c:36:9f:80:7c:b8:2f:b8:2a:4c:2f:8e:3f:37:80:51:bc: b7:64:0b:8c:67:69:6e:fa:a6:3d:47:db:4c:30:ef:73:97:43: 6f:10:3b:a0:18:2c:f2:b2:4b:73:24:3b:26:e4:25:6a:fd:2e: 56:ee:b9:b6:b4:e6:9c:a9:8d:44:07:57:f4:68:a7:ad:d4:3d: a0:9e:3a:ed:9c:15:ea:6a:b7:56:0a:76:09:84:30:bf:71:8e: c0:1f:59:ff:16:f8:49:90:fa:a6:42:b9:7e:e3:c7:00:7e:33: 49:e6:01:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZ9GyVn+Ew+J6HK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2OGMyMTktOGU3MS00MTUxLThkNWMtZDUwNGZkMTJi NWZiMB4XDTI1MDYyOTExMDAwOFoXDTI1MDcwMTExMDAwMFowLzEtMCsGA1UEAxMk MDVhY2UzYTAtYWE1MC00YWViLTgyY2EtMThjYWRlNmNlYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK4TG7FdIwdx3XoHr/nBcjmQM1YoncK+/0hE 6q7WyTccPaE3320vPhPE0BboRPzYqkrbCtZKYOeMz6PyWDRJyKiKYKMpm/QTdamN r5+QdVKtqP4HnxELQTvbxCqHY2R716Xob2B0Jtu9MRxLjocqT7UorKiDPfIZMNe2 cidJ2M7rd/wLL2594NZ1jOz9x1IwwFu+OcPGdzTGCR6DtA++iv97kL/Kl/QENLak 7rsRkK6LjwzsmzsHn1plsYhXADz9ahgg2hwI0P2UXLFSfvszQIcT9tJJ9SkNGa2W ab9FsRMwF429E6D4Ma8NCP4XtjEQf0jowNhiWszBsYu0Lw0oQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH2S7GwIUU1Tsq3SdXKUvbrW+jekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYzY4 YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0ZmQxMmI1ZmIvM2M2OGMyMTktOGU3MS00 MTUxLThkNWMtZDUwNGZkMTJiNWZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2M2OGMyMTktOGU3MS00MTUxLThk NWMtZDUwNGZkMTJiNWZiLzNjNjhjMjE5LThlNzEtNDE1MS04ZDVjLWQ1MDRmZDEy YjVmYi5jcmwwHwYDVR0jBBgwFoAUdGY0HBQ2LZSV3PdtiT6NIp7XSSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYzY4YzIxOS04ZTcxLTQxNTEtOGQ1Yy1kNTA0 ZmQxMmI1ZmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZYtL6h/1+P+lXnzZR4y76 V7nTK2GlwGA7tBe0iwUM3Rk/0yavf/wPSlBqtKlivtxB3GvPzF+3go7/cpy5JITH FdynLFeuuVNExN6HiMFhZe4BdxGwDUsr8MSIHJtzS4aStoOzYsWUUG5g5pxX1Ra9 jrxtwKu0mg4QsvFydiGuLItyt6ZXO+Ig0voBAQMWxiWunDafgHy4L7gqTC+OPzeA Uby3ZAuMZ2lu+qY9R9tMMO9zl0NvEDugGCzysktzJDsm5CVq/S5W7rm2tOacqY1E B1f0aKet1D2gnjrtnBXqardWCnYJhDC/cY7AH1n/FvhJkPqmQrl+48cAfjNJ5gH7 -----END CERTIFICATE-----Generated at Mon Jun 30 05:37:59 2025 by rpki-client