$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft File: 4b2ad884-5960-46cd-bf60-910c222c8cfc.mft (raw, json) Hash identifier: eSVcspHZROVUqaN6A2kOuIOJxAYRUW06I1sxTkXL8jI= Subject key identifier: D2:F8:60:1B:A6:71:68:0E:70:C7:32:C9:F1:9A:66:FB:59:7D:7C:7F Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Certificate serial: 010D0C9F4328584A6324F13726E0DA7AE7CEA840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft Manifest number: 010D0C9F43285843229417832873A3606DB2BE8A Signing time: Wed 02 Jul 2025 18:00:10 +0000 Manifest this update: Wed 02 Jul 2025 18:00:10 +0000 Manifest next update: Fri 04 Jul 2025 18:00:00 +0000 Files and hashes: 1: 4b2ad884-5960-46cd-bf60-910c222c8cfc.crl (hash: aL5+Jb5EOTov52CYVi/WE+4lZux3pXNue82tZeqHOxc=) 2: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (hash: kqG/KnMbc5kIRhYx4z7hl5GzaZj7exxMsUFfpEgsH0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:24:f1:37:26:e0:da:7a:e7:ce:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Validity Not Before: Jul 2 18:00:10 2025 GMT Not After : Jul 4 18:00:00 2025 GMT Subject: CN=db00f385-93f8-4952-b322-644b11fcb719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:7c:1d:90:3e:3b:c5:89:65:29:e9:78:c4: 7c:86:29:87:d1:fd:40:1c:3b:cc:4d:8e:42:ca:6e: 34:47:bc:56:5d:01:45:22:b3:b7:5a:33:6e:f5:eb: 0b:14:01:1c:17:12:08:22:57:2f:87:db:10:86:0c: 18:97:c3:ad:a1:05:b8:3f:95:d2:06:13:a0:14:26: 90:5c:bf:d7:f6:d7:6e:d9:58:db:82:c3:3f:0a:dc: 2a:ea:81:09:25:5c:42:df:37:4d:fe:ea:20:2d:c9: 00:97:39:d4:2f:14:1d:de:ac:87:5b:b0:78:6a:a5: c5:56:b8:8e:7f:50:19:7f:37:15:99:97:7c:f8:c9: 0c:77:c1:1f:54:16:1b:f3:21:1d:0c:4e:44:f6:d1: 19:6e:dd:64:77:e9:e8:4c:ad:96:96:47:01:25:4b: 4c:44:46:cb:ea:92:93:89:49:eb:d1:51:7b:83:79: e9:25:fb:34:1f:49:20:71:71:72:1b:f7:55:01:8d: 09:8d:38:88:15:bc:da:96:76:a6:91:bc:8d:fa:10: 7c:0f:89:b2:cc:5e:c8:76:3f:e4:e1:63:46:67:fd: 60:f0:1d:3e:28:56:c8:57:f9:8a:a7:73:b5:18:a3: ad:75:38:c1:21:8b:26:78:c3:ba:43:a5:34:f0:35: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:60:1B:A6:71:68:0E:70:C7:32:C9:F1:9A:66:FB:59:7D:7C:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl X509v3 Authority Key Identifier: keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b6:da:ea:4b:f1:bd:73:4c:b8:59:58:09:20:92:f7:d1:b5: 7d:11:e7:06:f5:27:d6:a8:f1:1c:8d:9a:0b:3a:15:72:93:b5: 7e:46:9d:b6:b2:a1:c8:1a:ca:a5:bd:63:c8:f1:20:75:f3:1e: f5:73:d1:90:7f:12:ea:6f:6e:fc:9e:e1:16:f7:3b:9b:6d:bf: ab:60:87:e5:74:37:f0:58:82:8d:9f:94:2c:8f:c1:a8:81:9a: 58:8e:91:a7:6e:b8:06:61:b4:cc:a0:8b:50:0d:6e:64:33:ad: fe:8c:6b:b5:a1:ee:6a:4c:f4:de:93:e1:50:f7:34:12:7e:a5: 51:8e:07:57:e7:75:6b:90:cf:b1:4a:fd:23:5c:dc:44:c9:fe: b5:76:8c:22:e3:85:5e:c5:49:29:bc:e4:ef:1e:f4:3c:c9:ca: 85:c2:f6:67:a6:58:e2:62:57:ab:9b:c1:69:bc:ac:e2:61:f7: ed:e5:8b:6d:53:7a:e0:30:9b:78:e3:04:52:f5:cf:ee:b7:50: 94:77:3c:2c:0c:b9:8b:92:13:60:1c:88:78:68:23:54:12:61: 0e:93:b8:35:d0:3f:c0:7b:70:44:9d:42:4a:ca:f5:ab:dd:11: 3e:69:49:93:cb:3d:e4:94:3d:48:fc:e2:d6:7e:33:ad:6c:e0: 98:5f:ef:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpjJPE3JuDaeufOqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4 Y2ZjMB4XDTI1MDcwMjE4MDAxMFoXDTI1MDcwNDE4MDAwMFowLzEtMCsGA1UEAxMk ZGIwMGYzODUtOTNmOC00OTUyLWIzMjItNjQ0YjExZmNiNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoF8HZA+O8WJZSnpeMR8himH0f1AHDvMTY5C ym40R7xWXQFFIrO3WjNu9esLFAEcFxIIIlcvh9sQhgwYl8OtoQW4P5XSBhOgFCaQ XL/X9tdu2VjbgsM/Ctwq6oEJJVxC3zdN/uogLckAlznULxQd3qyHW7B4aqXFVriO f1AZfzcVmZd8+MkMd8EfVBYb8yEdDE5E9tEZbt1kd+noTK2WlkcBJUtMREbL6pKT iUnr0VF7g3npJfs0H0kgcXFyG/dVAY0JjTiIFbzalnamkbyN+hB8D4myzF7Idj/k 4WNGZ/1g8B0+KFbIV/mKp3O1GKOtdTjBIYsmeMO6Q6U08DVigwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNL4YBumcWgOcMcyyfGaZvtZfXx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvNGIyYWQ4ODQtNTk2MC00 NmNkLWJmNjAtOTEwYzIyMmM4Y2ZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj MjIyYzhjZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwttrqS/G9c0y4WVgJIJL3 0bV9EecG9SfWqPEcjZoLOhVyk7V+Rp22sqHIGsqlvWPI8SB18x71c9GQfxLqb278 nuEW9zubbb+rYIfldDfwWIKNn5Qsj8GogZpYjpGnbrgGYbTMoItQDW5kM63+jGu1 oe5qTPTek+FQ9zQSfqVRjgdX53VrkM+xSv0jXNxEyf61dowi44VexUkpvOTvHvQ8 ycqFwvZnpljiYlerm8FpvKziYfft5YttU3rgMJt44wRS9c/ut1CUdzwsDLmLkhNg HIh4aCNUEmEOk7g10D/Ae3BEnUJKyvWr3RE+aUmTyz3klD1I/OLWfjOtbOCYX+9w -----END CERTIFICATE-----Generated at Thu Jul 3 00:13:46 2025 by rpki-client