$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft File: d84f9350-fc3d-4239-80bf-db10d2462a4f.mft (raw, json) Hash identifier: Q52w5VyGOOAkN2fERVTsclvJmQueVbK5AHfiKvDyLW0= Subject key identifier: CC:CC:2F:AE:0B:73:FA:B7:C5:68:1D:BA:CF:35:F3:41:E7:4E:50:21 Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Certificate issuer: /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Certificate serial: 010D0C9F4328584A5D3631463B3616ED659FA240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft Manifest number: 010D0C9F4328584073A85AA2BCC5FAD2E02AA021 Signing time: Mon 30 Jun 2025 15:00:03 +0000 Manifest this update: Mon 30 Jun 2025 15:00:03 +0000 Manifest next update: Thu 03 Jul 2025 15:00:00 +0000 Files and hashes: 1: 791de0f2-89d2-3bf0-8407-e85b17cab367.roa (hash: GEY/b4f88vu5jR7E/VNp23OvjxzOU9h9ZzeHWCCTlyo=) 2: d84f9350-fc3d-4239-80bf-db10d2462a4f.crl (hash: AVne11QGc5hzZrYSb79UvWuFM75Ag/InjtP4GOAQANs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:36:31:46:3b:36:16:ed:65:9f:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Validity Not Before: Jun 30 15:00:03 2025 GMT Not After : Jul 3 15:00:00 2025 GMT Subject: CN=d74547f3-04ba-4405-8bfd-0c2304671fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:7d:06:ac:85:5f:24:71:e3:60:d8:97:b7: 7c:21:c1:94:26:34:e8:f9:86:80:ba:b9:be:1f:6d: de:82:df:ca:29:f4:05:48:f7:32:85:f1:6e:5b:a1: 87:4e:f5:3f:e5:93:07:f2:73:4e:17:80:dd:2f:32: 72:2b:5b:ab:41:d3:1b:84:4c:db:4f:33:a0:47:27: cc:25:17:3f:62:c3:fc:c0:c4:d4:d6:d0:31:15:79: e8:fd:9b:18:ec:25:bf:8f:4a:08:ac:3d:e2:26:1d: a5:68:69:50:90:08:9a:1c:d7:9e:0e:ad:a5:3e:13: aa:f1:7b:2e:9b:b7:60:e8:2e:c9:2f:2b:85:3f:55: 34:e5:9f:80:63:53:26:14:c2:d7:9c:bc:cc:d4:e2: 35:ab:00:36:6b:3a:ca:ba:d2:31:93:ff:70:8f:70: ea:32:90:fa:97:f8:ea:03:f4:8c:29:81:1a:5e:7f: 83:ad:f5:e9:23:48:32:d1:1b:c7:5f:ff:b7:85:28: 7a:5c:bc:bf:82:07:0c:a3:f0:02:d1:c4:3e:f3:90: 4c:b7:81:f7:1e:cd:f5:60:8f:d1:b6:a7:52:3b:92: 3c:4a:87:14:03:e9:1f:b6:06:6b:e6:06:27:1b:10: 2b:4b:64:1d:98:92:65:e0:ef:c1:55:01:8e:0e:8f: 74:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CC:2F:AE:0B:73:FA:B7:C5:68:1D:BA:CF:35:F3:41:E7:4E:50:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl X509v3 Authority Key Identifier: keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:28:13:96:79:4b:87:4f:67:ed:05:df:ed:70:36:14:12:20: bb:02:31:68:fd:0b:1a:51:75:45:87:f9:bc:bd:81:32:06:82: 5f:c9:36:f2:ec:51:28:e3:ce:41:18:2c:16:88:58:8f:81:73: 98:5b:6c:6b:7e:15:3b:f9:1e:d8:d8:3a:0d:05:0b:63:f0:da: 78:66:c1:14:52:f9:b1:34:fe:1f:04:3e:fb:9b:95:29:6d:f2: 3d:49:40:46:9c:f7:5a:ce:ec:59:71:57:fb:bc:0a:01:ec:74: 6d:ec:b5:0d:43:b7:6d:91:3a:36:e1:cb:97:a7:48:3a:67:88: b8:9e:3e:1a:26:3d:e8:2c:18:68:f5:6a:fc:56:ff:9d:27:da: 4d:20:7f:4c:8b:bd:7d:ad:37:11:23:50:99:4b:15:58:43:49: 1e:85:0d:e7:29:18:04:62:b5:22:8f:78:f5:2a:0b:3e:ce:aa: 06:9f:9e:ae:59:47:a6:e3:cc:28:91:b7:b9:4d:28:44:47:82: 41:09:cc:43:d5:4d:5d:78:1f:79:1e:98:53:00:3f:b8:20:a8: c1:70:36:5f:00:f1:41:c8:88:a2:a4:5d:47:94:8b:53:97:54: 47:df:45:70:3a:d8:47:7d:3b:52:73:7d:0e:5c:a0:4b:8a:ed: b8:71:38:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdNjFGOzYW7WWfokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0ZjkzNTAtZmMzZC00MjM5LTgwYmYtZGIxMGQyNDYy YTRmMB4XDTI1MDYzMDE1MDAwM1oXDTI1MDcwMzE1MDAwMFowLzEtMCsGA1UEAxMk ZDc0NTQ3ZjMtMDRiYS00NDA1LThiZmQtMGMyMzA0NjcxZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0V9BqyFXyRx42DYl7d8IcGUJjTo+YaAurm+ H23egt/KKfQFSPcyhfFuW6GHTvU/5ZMH8nNOF4DdLzJyK1urQdMbhEzbTzOgRyfM JRc/YsP8wMTU1tAxFXno/ZsY7CW/j0oIrD3iJh2laGlQkAiaHNeeDq2lPhOq8Xsu m7dg6C7JLyuFP1U05Z+AY1MmFMLXnLzM1OI1qwA2azrKutIxk/9wj3DqMpD6l/jq A/SMKYEaXn+DrfXpI0gy0RvHX/+3hSh6XLy/ggcMo/AC0cQ+85BMt4H3Hs31YI/R tqdSO5I8SocUA+kftgZr5gYnGxArS2QdmJJl4O/BVQGODo90EQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMzML64Lc/q3xWgdus8180HnTlAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODRm OTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0NjJhNGYvZDg0ZjkzNTAtZmMzZC00 MjM5LTgwYmYtZGIxMGQyNDYyYTRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg0ZjkzNTAtZmMzZC00MjM5LTgw YmYtZGIxMGQyNDYyYTRmL2Q4NGY5MzUwLWZjM2QtNDIzOS04MGJmLWRiMTBkMjQ2 MmE0Zi5jcmwwHwYDVR0jBBgwFoAUZxr5I5VUwfZBlQs+fBHfIlookIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEw ZDI0NjJhNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFKBOWeUuHT2ftBd/tcDYU EiC7AjFo/QsaUXVFh/m8vYEyBoJfyTby7FEo485BGCwWiFiPgXOYW2xrfhU7+R7Y 2DoNBQtj8Np4ZsEUUvmxNP4fBD77m5UpbfI9SUBGnPdazuxZcVf7vAoB7HRt7LUN Q7dtkTo24cuXp0g6Z4i4nj4aJj3oLBho9Wr8Vv+dJ9pNIH9Mi719rTcRI1CZSxVY Q0kehQ3nKRgEYrUij3j1Kgs+zqoGn56uWUem48wokbe5TShER4JBCcxD1U1deB95 HphTAD+4IKjBcDZfAPFByIiipF1HlItTl1RH30VwOthHfTtSc30OXKBLiu24cTgN -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:42 2025 by rpki-client