$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft File: 60853e5b-d7a9-4bc8-8250-635257ad49bd.mft (raw, json) Hash identifier: h4TKG5Li7V1ThTgl4I967DUgDP8YuL18d5bQTINkeZ0= Subject key identifier: C7:9D:31:29:D0:D0:22:BF:AE:CD:E6:D5:F3:75:D8:07:2C:33:96:AF Authority key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Certificate issuer: /CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Certificate serial: 010D0C9F4328584A6A96BF67B89D01D523537480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft Manifest number: 010D0C9F4328584073A84E78ECEA632F1F498C26 Signing time: Sat 05 Jul 2025 10:00:08 +0000 Manifest this update: Sat 05 Jul 2025 10:00:08 +0000 Manifest next update: Mon 07 Jul 2025 10:00:00 +0000 Files and hashes: 1: 443219a0-efe0-327e-b60e-0844a2070c85.roa (hash: K9YeiJUfBg+2us2BCnKjbUEJ2O00GvtGUNqa0kF4D4c=) 2: 60853e5b-d7a9-4bc8-8250-635257ad49bd.crl (hash: F7uNdfWeOupx3Su7f+GO1208onKzuAyUL7wt9+R7+OY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:96:bf:67:b8:9d:01:d5:23:53:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Validity Not Before: Jul 5 10:00:08 2025 GMT Not After : Jul 7 10:00:00 2025 GMT Subject: CN=ad622b82-af04-4300-ab46-aaa86c4ab325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:f8:39:4e:b9:be:0d:d1:7b:e0:59:f1:eb: 87:81:20:87:c2:18:7c:8c:19:59:22:f7:8e:38:63: 74:6f:67:96:d8:a0:71:03:a6:1a:40:5b:e0:0c:e8: 85:be:a3:46:55:bf:80:f2:b6:d7:45:b6:f0:a1:96: 00:de:cb:cc:11:d0:85:d5:05:33:01:66:0e:2a:92: 12:19:53:8f:4a:e5:b3:71:97:a0:3f:58:1a:e9:94: 46:6f:2c:29:5a:3e:56:1b:0e:ab:8e:6e:82:f5:38: 20:33:2c:d9:3b:98:02:bd:33:a1:41:c0:3b:e5:27: d9:5d:f5:2c:d1:ae:46:36:48:a4:5a:18:63:10:8a: 4b:90:18:56:0e:89:49:34:8d:9f:49:c2:82:ed:5e: ac:e9:22:92:09:34:2f:f1:b0:57:fd:1a:7d:1f:24: eb:6c:33:c1:48:a8:32:b2:60:3f:5a:77:4e:93:90: 9e:51:29:98:af:23:46:69:5c:25:02:70:bd:11:7a: ec:d1:2c:aa:bd:30:ab:6c:21:5a:e3:52:4e:cb:45: 1d:19:c7:f0:f6:e4:c1:98:25:be:9e:b0:0d:c3:5a: ef:cd:99:cf:d8:98:85:b9:0b:a9:e8:fa:be:85:84: 48:1c:17:e3:6e:af:a4:5c:bb:10:0b:8c:42:b0:5f: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9D:31:29:D0:D0:22:BF:AE:CD:E6:D5:F3:75:D8:07:2C:33:96:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl X509v3 Authority Key Identifier: keyid:4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2f:fc:49:7d:9a:3d:35:66:2c:b8:69:0c:46:5b:e4:1a:da: 38:9d:8d:63:be:88:53:5e:38:74:24:95:ba:69:7d:f9:f3:e0: eb:b2:62:77:f5:8b:b5:0c:84:e6:b9:a8:0d:59:66:12:b3:53: ee:88:5d:5c:ac:03:4b:b9:89:76:fc:1a:aa:25:89:92:12:b7: 3e:b4:c9:ca:b5:6f:72:2c:e0:8d:7f:53:74:d2:04:f0:fc:9e: 68:48:f3:83:8e:03:3c:d7:31:66:5e:96:53:5e:a0:ba:33:46: ad:43:76:8f:e3:8f:71:6c:8c:02:13:61:ff:89:84:b1:ce:fe: 36:fb:4a:b8:f3:5e:b2:6f:ee:d6:8e:9d:e5:cd:67:d4:4b:eb: 94:2b:13:59:e9:22:d9:e3:5d:d3:ac:00:b9:6a:89:97:04:64: 60:d8:81:9d:ee:8b:45:6f:11:c2:5e:e9:1f:df:24:ff:b7:46: be:58:90:15:be:f9:92:ea:0b:52:20:20:43:da:2e:97:db:12: e7:3e:71:07:b4:32:04:96:d6:cb:a7:2d:7f:39:48:7b:34:d2: 4c:63:72:7a:54:19:c8:7b:14:7e:8d:2a:cd:be:4e:41:14:39: 4b:3c:28:22:fa:29:01:57:b1:63:a6:ff:4b:a0:20:51:49:05: 6d:29:a5:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpqlr9nuJ0B1SNTdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA4NTNlNWItZDdhOS00YmM4LTgyNTAtNjM1MjU3YWQ0 OWJkMB4XDTI1MDcwNTEwMDAwOFoXDTI1MDcwNzEwMDAwMFowLzEtMCsGA1UEAxMk YWQ2MjJiODItYWYwNC00MzAwLWFiNDYtYWFhODZjNGFiMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD34OU65vg3Re+BZ8euHgSCHwhh8jBlZIveO OGN0b2eW2KBxA6YaQFvgDOiFvqNGVb+A8rbXRbbwoZYA3svMEdCF1QUzAWYOKpIS GVOPSuWzcZegP1ga6ZRGbywpWj5WGw6rjm6C9TggMyzZO5gCvTOhQcA75SfZXfUs 0a5GNkikWhhjEIpLkBhWDolJNI2fScKC7V6s6SKSCTQv8bBX/Rp9HyTrbDPBSKgy smA/WndOk5CeUSmYryNGaVwlAnC9EXrs0SyqvTCrbCFa41JOy0UdGcfw9uTBmCW+ nrANw1rvzZnP2JiFuQup6Pq+hYRIHBfjbq+kXLsQC4xCsF/ggwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMedMSnQ0CK/rs3m1fN12AcsM5avMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDg1 M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdhZDQ5YmQvNjA4NTNlNWItZDdhOS00 YmM4LTgyNTAtNjM1MjU3YWQ0OWJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA4NTNlNWItZDdhOS00YmM4LTgy NTAtNjM1MjU3YWQ0OWJkLzYwODUzZTViLWQ3YTktNGJjOC04MjUwLTYzNTI1N2Fk NDliZC5jcmwwHwYDVR0jBBgwFoAUS6rgAPA5EjKMW8AEIsmsDzs1DygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUy NTdhZDQ5YmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFL/xJfZo9NWYsuGkMRlvk Gto4nY1jvohTXjh0JJW6aX358+DrsmJ39Yu1DITmuagNWWYSs1PuiF1crANLuYl2 /BqqJYmSErc+tMnKtW9yLOCNf1N00gTw/J5oSPODjgM81zFmXpZTXqC6M0atQ3aP 449xbIwCE2H/iYSxzv42+0q4816yb+7Wjp3lzWfUS+uUKxNZ6SLZ413TrAC5aomX BGRg2IGd7otFbxHCXukf3yT/t0a+WJAVvvmS6gtSICBD2i6X2xLnPnEHtDIEltbL py1/OUh7NNJMY3J6VBnIexR+jSrNvk5BFDlLPCgi+ikBV7Fjpv9LoCBRSQVtKaUQ -----END CERTIFICATE-----Generated at Sat Jul 5 21:57:14 2025 by rpki-client