$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft File: 0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft (raw, json) Hash identifier: khxga09Mi1NXSA1ufuli1a9Kyuukq6zAOz6MH6rvcVs= Subject key identifier: 08:38:97:00:80:81:85:60:8C:A1:EE:CA:42:6D:F7:F0:BD:68:82:56 Authority key identifier: 72:1E:5B:49:43:8E:C0:C9:5D:40:79:8B:A7:88:77:8F:A9:54:CB:3A Certificate issuer: /CN=0a4f730e-74f5-4c41-9c06-be5d40c9917d Certificate serial: 010D0C9F4328584A5941B5B2D5CE9D457E01A900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft Manifest number: 010D0C9F4328584073A8405DFBDECC1988FB8D0B Signing time: Sun 29 Jun 2025 05:00:03 +0000 Manifest this update: Sun 29 Jun 2025 05:00:03 +0000 Manifest next update: Tue 01 Jul 2025 05:00:00 +0000 Files and hashes: 1: 0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl (hash: jsuC7RAOfyDEhE1EGaaQ0F4FMEhuUgxxRj8XEyEPcBo=) 2: 46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer (hash: mzmUUWoaLbGnGJNY129JLHOApI0imQ4X6z0Ofuhn4ns=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:59:41:b5:b2:d5:ce:9d:45:7e:01:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4f730e-74f5-4c41-9c06-be5d40c9917d Validity Not Before: Jun 29 05:00:03 2025 GMT Not After : Jul 1 05:00:00 2025 GMT Subject: CN=6bf26c9a-9274-4a3d-b9cd-88d145d4e275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:17:4f:c0:80:30:2a:d3:47:35:a2:9c:8e:5d: ed:88:bf:23:f0:7b:0a:93:50:a5:8e:fc:94:14:1d: 1f:1b:49:54:6a:97:2a:37:e8:84:47:cb:4e:01:68: 03:e2:c3:cb:2d:e0:a3:16:c6:71:e9:df:00:61:73: 5b:c5:6a:17:e2:0d:12:53:cb:87:a9:86:d2:69:1e: 75:79:26:bc:0c:8b:0d:f4:fc:8b:f7:f1:1d:67:24: 5d:03:8d:e2:4e:f7:8e:05:21:e1:cc:71:48:91:25: c4:eb:4f:83:72:2b:91:b5:f7:31:5c:03:63:23:ff: 11:91:22:ab:a0:ad:90:79:3c:ee:76:b8:85:a9:cb: be:fb:bf:a1:de:43:0f:e8:58:c5:09:c0:63:9c:9f: 1b:44:71:74:b1:23:c3:65:a2:1c:3f:c4:8a:f9:53: 39:d6:76:bc:85:90:ea:c2:38:00:ce:c1:5c:fd:38: 09:db:ab:5e:4d:cb:f9:b7:33:2a:fa:c1:ae:96:22: 1f:90:7e:53:d9:4b:e5:35:8c:1a:07:15:6e:66:25: 1d:bb:83:96:01:0b:0b:86:04:55:75:ef:c1:bd:4c: 66:4d:33:4b:7a:02:82:80:f5:9a:e0:88:53:90:7c: 65:2f:37:1b:71:7c:5d:7f:7e:db:7d:ae:a7:c6:62: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:97:00:80:81:85:60:8C:A1:EE:CA:42:6D:F7:F0:BD:68:82:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl X509v3 Authority Key Identifier: keyid:72:1E:5B:49:43:8E:C0:C9:5D:40:79:8B:A7:88:77:8F:A9:54:CB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c2:7c:70:b4:ec:97:e2:a7:d8:45:c7:cb:86:91:ec:71:79: 41:e7:b6:5d:71:4c:4d:cc:3a:fc:f4:04:6a:ec:4f:7b:03:71: bd:a8:5b:88:6d:cb:9b:45:aa:cd:de:9e:dd:5f:db:2c:7b:6a: 8f:2d:6e:85:e8:78:fa:dc:d9:bf:ef:53:2f:25:6c:10:63:a6: 55:5b:a0:01:2a:fe:af:2a:73:e8:88:24:67:6f:bf:b5:2a:5a: a6:89:8c:dd:b8:d0:b2:6e:36:16:e8:ed:0f:eb:78:a7:54:87: c3:e6:ac:e3:c6:60:eb:ad:85:11:18:df:72:a6:a2:5b:ea:89: b4:0c:0b:7e:6f:34:1f:86:5e:a2:5c:48:aa:a2:3c:fb:52:b3: 89:d2:be:9b:fe:8e:cc:37:d4:8b:42:85:26:b7:1f:6d:ab:d0: d0:c0:4f:65:2c:08:68:da:e9:9a:f6:c7:d5:18:0a:69:3d:6a: cf:73:47:b6:7f:8a:11:84:83:d7:c8:b6:5e:96:9b:94:64:dd: e1:e2:0e:cd:ef:5d:84:0a:63:94:e1:cc:85:30:06:1a:4c:c2: 54:38:51:63:dd:76:f1:f0:7a:05:26:ee:e7:e4:b2:f8:b3:bc: 22:45:af:9a:8f:3c:4d:14:19:c6:b3:55:ad:a6:22:93:2d:cf: 00:0e:46:29 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpZQbWy1c6dRX4BqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0ZjczMGUtNzRmNS00YzQxLTljMDYtYmU1ZDQwYzk5 MTdkMB4XDTI1MDYyOTA1MDAwM1oXDTI1MDcwMTA1MDAwMFowLzEtMCsGA1UEAxMk NmJmMjZjOWEtOTI3NC00YTNkLWI5Y2QtODhkMTQ1ZDRlMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBdPwIAwKtNHNaKcjl3tiL8j8HsKk1CljvyU FB0fG0lUapcqN+iER8tOAWgD4sPLLeCjFsZx6d8AYXNbxWoX4g0SU8uHqYbSaR51 eSa8DIsN9PyL9/EdZyRdA43iTveOBSHhzHFIkSXE60+DciuRtfcxXANjI/8RkSKr oK2QeTzudriFqcu++7+h3kMP6FjFCcBjnJ8bRHF0sSPDZaIcP8SK+VM51na8hZDq wjgAzsFc/TgJ26teTcv5tzMq+sGuliIfkH5T2UvlNYwaBxVuZiUdu4OWAQsLhgRV de/BvUxmTTNLegKCgPWa4IhTkHxlLzcbcXxdf37bfa6nxmKlfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAg4lwCAgYVgjKHuykJt9/C9aIJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTRm NzMwZS03NGY1LTRjNDEtOWMwNi1iZTVkNDBjOTkxN2QvMGE0ZjczMGUtNzRmNS00 YzQxLTljMDYtYmU1ZDQwYzk5MTdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE0ZjczMGUtNzRmNS00YzQxLTlj MDYtYmU1ZDQwYzk5MTdkLzBhNGY3MzBlLTc0ZjUtNGM0MS05YzA2LWJlNWQ0MGM5 OTE3ZC5jcmwwHwYDVR0jBBgwFoAUch5bSUOOwMldQHmLp4h3j6lUyzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTRmNzMwZS03NGY1LTRjNDEtOWMwNi1iZTVk NDBjOTkxN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiwnxwtOyX4qfYRcfLhpHs cXlB57ZdcUxNzDr89ARq7E97A3G9qFuIbcubRarN3p7dX9sse2qPLW6F6Hj63Nm/ 71MvJWwQY6ZVW6ABKv6vKnPoiCRnb7+1KlqmiYzduNCybjYW6O0P63inVIfD5qzj xmDrrYURGN9ypqJb6om0DAt+bzQfhl6iXEiqojz7UrOJ0r6b/o7MN9SLQoUmtx9t q9DQwE9lLAho2uma9sfVGAppPWrPc0e2f4oRhIPXyLZelpuUZN3h4g7N712ECmOU 4cyFMAYaTMJUOFFj3Xbx8HoFJu7n5LL4s7wiRa+ajzxNFBnGs1WtpiKTLc8ADkYp -----END CERTIFICATE-----Generated at Sun Jun 29 07:26:07 2025 by rpki-client