$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft File: 7c74b511-7d11-4209-84c2-f7b800242a7b.mft (raw, json) Hash identifier: gBSZx/bYagxCOMEk4FtQZokR7Qz37OXru9Ivtz7uwBU= Subject key identifier: 64:DA:C1:02:6A:DB:34:4D:73:3E:59:CF:E3:7C:45:F9:14:FC:F5:DF Authority key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Certificate issuer: /CN=7c74b511-7d11-4209-84c2-f7b800242a7b Certificate serial: 010D0C9F4328584A5FE32166521FD87FE114B180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft Manifest number: 010D0C9F4328584073A855906714643088FFBAA2 Signing time: Tue 01 Jul 2025 14:00:08 +0000 Manifest this update: Tue 01 Jul 2025 14:00:08 +0000 Manifest next update: Thu 03 Jul 2025 14:00:00 +0000 Files and hashes: 1: 7c74b511-7d11-4209-84c2-f7b800242a7b.crl (hash: 9WyPlT2FSIpoVcpO6ZKnoG/wTp3fCoosMpX3uYWH3Fw=) 2: d3a2508e-0220-3c1b-9180-e11c07412c6c.roa (hash: Yx+ou7mcAWza9heB0ulF4sLzhKTi1d89QmiHmyK2Uv0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:e3:21:66:52:1f:d8:7f:e1:14:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Validity Not Before: Jul 1 14:00:08 2025 GMT Not After : Jul 3 14:00:00 2025 GMT Subject: CN=d23cf3d9-a815-4f03-817b-ac7f20611d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:2c:24:4d:e2:5f:a9:1f:58:3e:f0:29:92: 9a:d8:ba:57:65:d2:0c:61:da:1a:97:b4:d0:90:9f: ca:b5:b5:38:04:69:19:1f:48:43:2d:b8:5f:12:17: 7d:84:90:00:96:34:71:94:25:ef:09:6a:41:82:b9: 31:e9:51:77:e5:66:23:91:c1:f2:45:fa:38:d1:8a: 31:be:e7:f4:02:98:1e:29:1f:2b:45:a1:e8:08:52: 4b:45:a3:f0:6f:59:78:87:47:d0:9b:80:86:86:b4: ec:af:c5:f8:10:d4:96:f1:a8:39:0b:2c:4a:62:e1: 7a:ea:f0:86:ef:43:7c:c0:d3:4c:05:49:dd:15:f3: 42:ad:ed:ba:8b:48:c7:d0:aa:f9:30:f2:1f:b2:a0: 32:dd:5a:37:76:98:dd:79:78:ed:3f:2b:77:e3:99: b7:55:1f:62:fb:c8:ed:b0:94:1c:23:22:0c:96:ea: ff:7e:06:38:d7:af:f5:36:6b:d5:60:e5:61:a4:eb: 69:61:0a:9f:58:a6:82:b7:bd:89:cf:23:07:67:bd: 7a:88:5b:5d:09:b2:39:72:53:d6:86:95:74:e4:1a: cc:12:f5:01:c9:4a:4d:8f:fa:52:ad:cb:c2:56:03: 10:66:85:34:10:e0:d1:7e:76:b5:ec:12:6c:04:21: 06:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DA:C1:02:6A:DB:34:4D:73:3E:59:CF:E3:7C:45:F9:14:FC:F5:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl X509v3 Authority Key Identifier: keyid:76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:be:5c:64:be:50:2f:61:4a:2c:e8:ce:0a:cf:52:76:30:ed: e8:f9:5b:9e:70:b1:86:da:f6:cf:c0:28:88:3a:08:97:dc:e9: 13:8c:4b:36:4f:d2:6b:fa:a8:6a:62:87:86:40:c6:d9:ab:a7: 85:42:d7:1e:11:df:6e:80:88:b2:b1:5f:0a:7b:30:8d:47:8a: 9e:03:89:a4:4e:42:7e:93:88:21:4d:1b:28:d9:81:ab:1b:cf: 64:e3:73:a4:ca:6d:db:45:2c:00:c3:a7:5d:9d:27:27:14:2a: ee:48:22:88:df:63:55:34:2f:98:89:e7:25:50:fc:49:12:62: d0:3f:a2:61:a2:13:c0:06:a0:9d:8f:ce:bf:45:23:89:02:71: c3:06:4a:17:7f:32:5f:2e:82:d7:e5:e0:d7:5d:7a:a8:1e:b7: 4d:20:f5:4f:5e:1c:14:c4:dd:a6:e9:58:26:7d:3c:df:ce:07: 6b:64:0f:7c:62:8c:e8:9b:50:df:8e:75:36:20:d5:6d:35:50: 02:99:aa:a5:b4:8f:ef:d4:eb:fc:38:a7:67:53:03:88:5d:ab: 5f:a4:e4:e5:09:33:d2:c6:b3:fc:2d:fd:69:77:c1:fc:0e:e5: 80:81:54:04:29:bf:29:c4:d2:01:c9:91:f8:12:66:09:92:14: a3:d5:a2:d5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpf4yFmUh/Yf+EUsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQy YTdiMB4XDTI1MDcwMTE0MDAwOFoXDTI1MDcwMzE0MDAwMFowLzEtMCsGA1UEAxMk ZDIzY2YzZDktYTgxNS00ZjAzLTgxN2ItYWM3ZjIwNjExZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GgsJE3iX6kfWD7wKZKa2LpXZdIMYdoal7TQ kJ/KtbU4BGkZH0hDLbhfEhd9hJAAljRxlCXvCWpBgrkx6VF35WYjkcHyRfo40Yox vuf0ApgeKR8rRaHoCFJLRaPwb1l4h0fQm4CGhrTsr8X4ENSW8ag5CyxKYuF66vCG 70N8wNNMBUndFfNCre26i0jH0Kr5MPIfsqAy3Vo3dpjdeXjtPyt345m3VR9i+8jt sJQcIyIMlur/fgY416/1NmvVYOVhpOtpYQqfWKaCt72JzyMHZ716iFtdCbI5clPW hpV05BrMEvUByUpNj/pSrcvCVgMQZoU0EODRfna17BJsBCEGwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGTawQJq2zRNcz5Zz+N8RfkU/PXfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0 YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvN2M3NGI1MTEtN2QxMS00 MjA5LTg0YzItZjdiODAwMjQyYTdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M3NGI1MTEtN2QxMS00MjA5LTg0 YzItZjdiODAwMjQyYTdiLzdjNzRiNTExLTdkMTEtNDIwOS04NGMyLWY3YjgwMDI0 MmE3Yi5jcmwwHwYDVR0jBBgwFoAUdrk2h7hOo9mzUTQCIdYSL4LkLOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4 MDAyNDJhN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtvlxkvlAvYUos6M4Kz1J2 MO3o+VuecLGG2vbPwCiIOgiX3OkTjEs2T9Jr+qhqYoeGQMbZq6eFQtceEd9ugIiy sV8KezCNR4qeA4mkTkJ+k4ghTRso2YGrG89k43Okym3bRSwAw6ddnScnFCruSCKI 32NVNC+YieclUPxJEmLQP6JhohPABqCdj86/RSOJAnHDBkoXfzJfLoLX5eDXXXqo HrdNIPVPXhwUxN2m6VgmfTzfzgdrZA98Yozom1DfjnU2INVtNVACmaqltI/v1Ov8 OKdnUwOIXatfpOTlCTPSxrP8Lf1pd8H8DuWAgVQEKb8pxNIByZH4EmYJkhSj1aLV -----END CERTIFICATE-----Generated at Wed Jul 2 11:44:49 2025 by rpki-client