$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft File: 3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft (raw, json) Hash identifier: d+hNsxa72ZXIZlG8+jWma5xr6gn9bNCDysS17dlFGAQ= Subject key identifier: 36:9C:0C:E4:D8:68:DC:64:BC:3D:1A:7A:A4:A9:CB:80:A6:F3:E0:0D Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 Certificate issuer: /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Certificate serial: 010D0C9F4328584A5E9B872C25CAA53D56A92700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft Manifest number: 010D0C9F4328584073A8393752AC1CE1AEC895A4 Signing time: Tue 01 Jul 2025 03:00:03 +0000 Manifest this update: Tue 01 Jul 2025 03:00:03 +0000 Manifest next update: Thu 03 Jul 2025 03:00:00 +0000 Files and hashes: 1: 3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl (hash: V/SC9tGm0XI8m8lJY4zReZfRtC/2eSpQgm41BeSrO2o=) 2: 6758e236-250b-3365-a146-9e1a9f1e2a79.roa (hash: Hi2YnOTLBc56p2kATGl7h8aePuYQkPurspjXps8jG0c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:9b:87:2c:25:ca:a5:3d:56:a9:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Validity Not Before: Jul 1 03:00:03 2025 GMT Not After : Jul 3 03:00:00 2025 GMT Subject: CN=19484b39-06ca-449b-8c81-f651a92a840f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:d9:51:e1:12:f8:01:c4:ad:91:eb:28:b0: c7:cb:4e:b9:e2:b7:81:bc:c2:91:11:da:55:b3:24: a3:2e:08:4c:c6:1c:76:9a:b2:75:8e:81:9d:58:81: be:26:eb:ee:cd:5e:57:c0:53:f0:e2:ff:27:54:79: f6:c1:9b:e5:a3:c4:aa:7a:c1:da:27:6a:e7:d6:83: 21:76:9c:4d:ae:e2:1f:e0:c2:59:1b:0e:0c:46:c0: 2b:dd:b4:72:7b:ae:c1:60:82:5b:ff:95:b2:a8:a5: 67:15:8b:42:3a:66:d7:24:17:4a:c2:e9:39:d3:49: cb:e8:f6:fe:d5:34:d2:95:62:25:d6:e0:4d:5e:a3: 2a:6c:47:96:53:65:33:c1:a9:72:0c:4f:32:49:f5: 75:c1:f5:b0:34:b9:70:b8:62:a5:9e:99:3e:95:02: 40:4d:ae:10:5f:2b:c7:3a:67:1a:e4:b1:f2:83:35: a1:01:59:90:6e:84:f6:dd:9a:40:11:3b:5d:a2:c8: 56:0b:2a:c3:bf:7c:81:7d:3a:31:d8:b9:2e:00:52: 01:06:8e:40:f6:99:50:f1:7e:04:8b:aa:af:4c:f6: e7:30:e0:73:2b:98:c7:84:dc:24:bf:22:fd:de:a6: f7:87:40:71:47:36:65:50:8c:e8:e7:38:eb:b2:c9: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:0C:E4:D8:68:DC:64:BC:3D:1A:7A:A4:A9:CB:80:A6:F3:E0:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl X509v3 Authority Key Identifier: keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:66:30:35:c1:de:ab:98:7b:03:ba:7c:62:10:7f:09:51:79: e5:c4:b1:f4:c0:1f:67:57:0b:cf:02:b7:a7:22:eb:cf:96:31: ce:64:27:f8:c1:8b:d5:27:6c:ac:ed:36:a3:d6:7a:35:32:0f: 1c:67:6a:68:38:28:95:fe:f8:37:53:86:38:f6:ca:09:82:89: 1d:f0:21:1a:42:25:ba:d4:64:78:99:d7:b5:4a:68:ae:5d:ba: a3:0e:42:f1:a2:68:61:4a:5d:35:21:43:ec:fe:c6:6b:1c:e7: 4d:e7:b0:ac:6c:b9:f8:d0:8d:af:66:19:2b:c7:4e:f1:72:f7: d0:46:d2:58:02:27:0d:aa:a5:03:4e:c6:49:85:53:bb:df:28: d9:48:a1:b8:13:58:8f:da:44:6d:83:64:72:5a:64:f4:35:21: de:5a:b1:bf:a6:d6:74:31:92:d9:61:3c:67:54:88:ed:5d:a8: ee:21:6c:d7:ed:82:2e:b7:79:1c:ed:5e:23:17:a2:00:6f:ed: 50:21:1c:57:98:a8:12:4a:29:6d:65:d7:cf:23:fc:14:84:69: 7a:f8:f5:fe:77:8e:44:a3:0e:54:1d:24:ee:00:38:69:7f:b3: 3e:53:d8:31:62:c6:48:37:f7:5b:4a:de:16:21:7d:bb:6b:75: 2f:ed:80:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpem4csJcqlPVapJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3YmYtZTUxYmEwMjlk NDRjMB4XDTI1MDcwMTAzMDAwM1oXDTI1MDcwMzAzMDAwMFowLzEtMCsGA1UEAxMk MTk0ODRiMzktMDZjYS00NDliLThjODEtZjY1MWE5MmE4NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3zZUeES+AHErZHrKLDHy0654reBvMKREdpV sySjLghMxhx2mrJ1joGdWIG+JuvuzV5XwFPw4v8nVHn2wZvlo8SqesHaJ2rn1oMh dpxNruIf4MJZGw4MRsAr3bRye67BYIJb/5WyqKVnFYtCOmbXJBdKwuk500nL6Pb+ 1TTSlWIl1uBNXqMqbEeWU2UzwalyDE8ySfV1wfWwNLlwuGKlnpk+lQJATa4QXyvH Omca5LHygzWhAVmQboT23ZpAETtdoshWCyrDv3yBfTox2LkuAFIBBo5A9plQ8X4E i6qvTPbnMOBzK5jHhNwkvyL93qb3h0BxRzZlUIzo5zjrsskqZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDacDOTYaNxkvD0aeqSpy4Cm8+ANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlm NjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFiYTAyOWQ0NGMvM2M5ZjYwZDQtY2ZiZC00 ZjZkLTk3YmYtZTUxYmEwMjlkNDRjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3 YmYtZTUxYmEwMjlkNDRjLzNjOWY2MGQ0LWNmYmQtNGY2ZC05N2JmLWU1MWJhMDI5 ZDQ0Yy5jcmwwHwYDVR0jBBgwFoAUDxcdvoCm4oEQi7dn8WDJN3kHwLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlmNjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFi YTAyOWQ0NGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQZjA1wd6rmHsDunxiEH8J UXnlxLH0wB9nVwvPArenIuvPljHOZCf4wYvVJ2ys7Taj1no1Mg8cZ2poOCiV/vg3 U4Y49soJgokd8CEaQiW61GR4mde1SmiuXbqjDkLxomhhSl01IUPs/sZrHOdN57Cs bLn40I2vZhkrx07xcvfQRtJYAicNqqUDTsZJhVO73yjZSKG4E1iP2kRtg2RyWmT0 NSHeWrG/ptZ0MZLZYTxnVIjtXajuIWzX7YIut3kc7V4jF6IAb+1QIRxXmKgSSilt ZdfPI/wUhGl6+PX+d45Eow5UHSTuADhpf7M+U9gxYsZIN/dbSt4WIX27a3Uv7YAR -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:06 2025 by rpki-client