$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.mft File: c9b25b49-5563-464e-8e82-a149898329f5.mft (raw, json) Hash identifier: xxzm+ROsLu3G2/fk7lFDKqwIsUJPsATjVxFN/4xhCxk= Subject key identifier: 1E:05:DA:02:4C:84:C1:E2:4D:4B:1B:F2:A9:C1:D1:B0:9C:BA:5E:6E Authority key identifier: DD:2A:1C:AF:F1:17:17:D4:F7:08:B8:28:BB:39:8E:D0:6E:70:7E:48 Certificate issuer: /CN=c9b25b49-5563-464e-8e82-a149898329f5 Certificate serial: 010D0C9F4328584A601EB1461B03C3BF9E67AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.mft Manifest number: 010D0C9F4328584073A81CF8C2B5F214ACFD1E91 Signing time: Tue 01 Jul 2025 16:00:08 +0000 Manifest this update: Tue 01 Jul 2025 16:00:08 +0000 Manifest next update: Fri 04 Jul 2025 16:00:00 +0000 Files and hashes: 1: c9b25b49-5563-464e-8e82-a149898329f5.crl (hash: Y9N3dLBjIYuuM/ZJu5GgWHXJGTbvkIAZttACtWPyKDA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:1e:b1:46:1b:03:c3:bf:9e:67:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b25b49-5563-464e-8e82-a149898329f5 Validity Not Before: Jul 1 16:00:08 2025 GMT Not After : Jul 4 16:00:00 2025 GMT Subject: CN=91bb54db-75fd-49f4-920d-3f81c6bff0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:b9:79:d1:3b:06:c6:03:5d:b5:4a:5b:42: a0:f8:21:eb:c9:e6:4d:bd:12:fe:56:a2:2d:c2:34: 5c:f4:62:ec:8a:79:d8:ef:af:cd:be:3e:9d:eb:f0: 45:04:17:d9:74:9f:55:51:79:3c:ae:b2:04:37:51: 2f:85:9f:90:fc:bc:ff:c6:e4:d2:86:c4:4d:9f:ae: d6:27:5c:d3:0b:bd:93:f4:e5:ef:5a:2e:44:28:5c: 05:3a:dd:1c:8d:f0:3c:38:01:87:af:e7:51:ee:2d: 25:b8:df:3c:56:c9:ce:2a:c4:98:b3:63:f7:31:0c: 32:6c:be:9b:7c:07:4a:16:ed:bb:55:71:e2:fb:b7: ce:6f:ef:2a:51:92:de:8b:b3:b5:9f:2e:8d:e8:8b: 04:d0:72:a7:72:7a:d7:8b:8d:d2:e5:04:01:5b:4a: 1a:7d:0f:82:b6:aa:a8:b2:03:33:1a:d8:6f:2d:90: cd:ae:0a:6f:5b:f0:b3:ae:c1:56:9e:a7:11:c0:8b: 6e:99:d9:fd:07:1d:e5:bb:67:32:d8:4a:5d:fa:01: 0e:ac:0a:ff:e0:3b:aa:17:61:bc:e1:3e:4e:74:05: de:49:af:92:49:ff:18:0f:03:08:2a:f4:f1:79:30: 09:a9:89:b2:7d:99:61:97:86:67:3b:e3:a3:9d:cd: 0b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:05:DA:02:4C:84:C1:E2:4D:4B:1B:F2:A9:C1:D1:B0:9C:BA:5E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.crl X509v3 Authority Key Identifier: keyid:DD:2A:1C:AF:F1:17:17:D4:F7:08:B8:28:BB:39:8E:D0:6E:70:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:2c:75:c9:e8:fe:5f:6a:0a:af:ba:9c:a9:3d:73:68:de:be: 4a:6a:60:5e:c8:e4:80:e1:a7:0e:d5:ee:1d:24:1e:50:7d:c6: 32:b9:70:af:ed:94:60:09:45:9e:46:8e:09:c0:3a:26:84:c2: 89:aa:f0:90:7a:95:89:66:f0:66:3a:5a:6a:46:17:ac:3b:66: d3:5e:05:80:b7:d8:3f:fb:74:ed:a4:ac:03:01:ef:65:9d:bf: 39:7b:47:1c:4d:4b:28:36:b6:eb:73:a9:1b:00:9e:a0:fc:5d: 1e:76:f5:1d:b3:60:0f:5e:6f:7b:45:e7:9c:e3:13:b7:aa:ce: 43:52:f3:f1:53:0c:f1:13:c3:ff:b7:f0:c8:a8:fd:67:ec:6a: 67:7c:43:03:a0:c6:f6:f0:bb:fa:42:fa:f0:85:4b:95:a8:b2: 56:ba:b2:8c:8d:0c:32:81:bd:87:54:6b:f3:c1:ac:09:70:07: 20:ce:60:5a:43:db:23:33:f5:c0:6f:9b:6b:e6:cf:39:9a:89: 23:76:5c:da:76:a2:c2:6f:5c:27:b1:7d:e5:24:69:e2:0c:dc: 3c:f4:55:ce:50:20:eb:5e:db:bf:b2:be:21:43:11:84:b9:c8: 58:12:b0:94:6f:38:4d:11:36:9d:22:5b:87:b8:9f:6e:47:65: f1:9f:f5:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgHrFGGwPDv55nqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzliMjViNDktNTU2My00NjRlLThlODItYTE0OTg5ODMy OWY1MB4XDTI1MDcwMTE2MDAwOFoXDTI1MDcwNDE2MDAwMFowLzEtMCsGA1UEAxMk OTFiYjU0ZGItNzVmZC00OWY0LTkyMGQtM2Y4MWM2YmZmMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRi5edE7BsYDXbVKW0Kg+CHryeZNvRL+VqIt wjRc9GLsinnY76/Nvj6d6/BFBBfZdJ9VUXk8rrIEN1EvhZ+Q/Lz/xuTShsRNn67W J1zTC72T9OXvWi5EKFwFOt0cjfA8OAGHr+dR7i0luN88VsnOKsSYs2P3MQwybL6b fAdKFu27VXHi+7fOb+8qUZLei7O1ny6N6IsE0HKncnrXi43S5QQBW0oafQ+Ctqqo sgMzGthvLZDNrgpvW/CzrsFWnqcRwItumdn9Bx3lu2cy2Epd+gEOrAr/4DuqF2G8 4T5OdAXeSa+SSf8YDwMIKvTxeTAJqYmyfZlhl4ZnO+Ojnc0LiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB4F2gJMhMHiTUsb8qnB0bCcul5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOWIy NWI0OS01NTYzLTQ2NGUtOGU4Mi1hMTQ5ODk4MzI5ZjUvYzliMjViNDktNTU2My00 NjRlLThlODItYTE0OTg5ODMyOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzliMjViNDktNTU2My00NjRlLThl ODItYTE0OTg5ODMyOWY1L2M5YjI1YjQ5LTU1NjMtNDY0ZS04ZTgyLWExNDk4OTgz MjlmNS5jcmwwHwYDVR0jBBgwFoAU3Socr/EXF9T3CLgouzmO0G5wfkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jOWIyNWI0OS01NTYzLTQ2NGUtOGU4Mi1hMTQ5 ODk4MzI5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeLHXJ6P5fagqvupypPXNo 3r5KamBeyOSA4acO1e4dJB5QfcYyuXCv7ZRgCUWeRo4JwDomhMKJqvCQepWJZvBm OlpqRhesO2bTXgWAt9g/+3TtpKwDAe9lnb85e0ccTUsoNrbrc6kbAJ6g/F0edvUd s2APXm97Reec4xO3qs5DUvPxUwzxE8P/t/DIqP1n7GpnfEMDoMb28Lv6QvrwhUuV qLJWurKMjQwygb2HVGvzwawJcAcgzmBaQ9sjM/XAb5tr5s85mokjdlzadqLCb1wn sX3lJGniDNw89FXOUCDrXtu/sr4hQxGEuchYErCUbzhNETadIluHuJ9uR2Xxn/XS -----END CERTIFICATE-----Generated at Tue Jul 1 23:26:05 2025 by rpki-client