$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft File: 1a059caa-dd4f-4480-a089-c3da1959a314.mft (raw, json) Hash identifier: a+pk3VXLxJ5M5ODJ6VVGz6y7Obj2yq4qk2A+H4tUPrA= Subject key identifier: 20:E3:98:F2:DD:F8:7C:41:A4:59:CF:F7:3E:22:A8:3F:70:44:1C:44 Authority key identifier: F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42 Certificate issuer: /CN=1a059caa-dd4f-4480-a089-c3da1959a314 Certificate serial: 010D0C9F4328584A585387B4230D60F8B130AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft Manifest number: 010D0C9F43285845E5594BF55BD0C6C214853782 Signing time: Sat 28 Jun 2025 21:00:08 +0000 Manifest this update: Sat 28 Jun 2025 21:00:08 +0000 Manifest next update: Tue 01 Jul 2025 21:00:00 +0000 Files and hashes: 1: 1a059caa-dd4f-4480-a089-c3da1959a314.crl (hash: C9wIOL6jxEeMltr2BtszboD26wrqOOPX1P0aJzA+UYg=) 2: e4d0207a-085a-31a1-871e-eafcc1a16dab.roa (hash: rQCo3OUJV9vT5Apxl3BGazwF27aijzhMmz2Y052LVe0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:53:87:b4:23:0d:60:f8:b1:30:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a059caa-dd4f-4480-a089-c3da1959a314 Validity Not Before: Jun 28 21:00:08 2025 GMT Not After : Jul 1 21:00:00 2025 GMT Subject: CN=24d13e2f-83e6-4b0e-8461-d38e76da0368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:e6:58:5b:18:74:99:fd:bb:3b:5c:f4:55: bf:28:2b:56:6c:ff:41:05:52:09:11:3f:ee:01:85: 9d:a6:65:3d:13:9c:3e:eb:9c:6f:42:ec:64:e0:31: 47:69:96:cd:f4:3f:d3:8f:6d:f6:b1:a2:54:1a:ff: 1d:b7:41:9f:45:9b:bf:ed:25:ed:c1:3d:1f:7a:39: 21:35:9c:31:d0:a1:76:dd:ee:58:bf:34:e9:8b:a7: a5:53:2e:dc:87:cc:3c:90:b4:a8:96:7e:8e:c0:29: d3:98:02:08:ad:ed:d9:24:34:1c:84:49:35:e6:16: 96:b6:2d:0d:55:1d:f9:20:41:89:47:79:9a:06:1f: 7f:03:d3:32:cb:a3:f5:5a:5b:05:d2:5e:d5:6f:a4: 2a:0b:55:4f:0d:c1:ae:8f:26:37:29:8f:9d:ba:a4: 6a:60:af:6d:d5:36:25:f5:b4:a2:cd:a7:dd:b0:82: b7:d3:01:95:4b:89:d6:7f:e4:69:5c:61:df:e3:79: 1e:74:aa:78:b2:51:dc:04:90:c5:e3:f6:a6:e4:5d: 72:84:fc:44:e2:50:62:72:48:47:eb:ad:95:9c:86: 40:fc:f1:e5:64:ed:7c:ad:ef:9a:eb:be:5e:3e:7c: 7b:96:a6:30:6e:85:75:a5:af:82:4d:68:4c:be:88: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:98:F2:DD:F8:7C:41:A4:59:CF:F7:3E:22:A8:3F:70:44:1C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314/1a059caa-dd4f-4480-a089-c3da1959a314.crl X509v3 Authority Key Identifier: keyid:F4:5A:93:65:33:74:A3:67:AB:AA:8E:F7:17:B4:4D:40:ED:E2:B7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1a059caa-dd4f-4480-a089-c3da1959a314.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8d:aa:61:e4:9b:e0:94:43:77:e8:7c:7b:77:16:ec:55:1f: c6:24:99:a2:e3:22:36:28:8c:d8:78:39:ac:e4:c7:4e:cc:14: 8a:6f:d3:04:c6:4d:7b:4c:59:4d:22:0b:08:c7:72:6b:e3:87: ce:42:af:8e:f2:00:99:4b:f9:1e:05:f3:20:9c:45:5c:d4:ba: d9:e8:3a:a9:58:6b:d6:3a:76:e4:49:be:88:c2:d2:f3:f8:44: 1b:11:2a:a9:d2:ee:1b:98:20:84:a2:2f:5e:3c:a7:b2:b6:b3: 19:4c:53:b3:74:87:ea:19:c4:b4:33:9c:d7:b2:2d:2f:69:00: 40:7c:3b:cc:14:f0:b9:34:b9:4b:9d:1f:5a:5f:a3:6b:02:5e: d6:d5:db:48:ac:44:77:62:65:12:0d:06:c4:9f:67:7f:b1:f4: 24:6f:5c:1d:8d:ac:92:c6:20:8b:80:0d:2a:b9:d4:6b:90:b0: f3:4b:0c:a1:fe:5e:4b:9c:5d:42:7f:2a:5d:7e:52:50:65:74: c0:e8:70:06:f2:95:fd:25:8a:07:2f:4b:c7:65:ba:11:2c:03: 4f:9c:ee:cf:44:aa:6f:d2:b7:a6:a5:59:9e:a8:d5:db:a2:2f: 93:47:6b:8c:cd:2f:c2:f5:80:2b:33:9c:83:90:2b:32:16:80: e4:bb:7f:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpYU4e0Iw1g+LEwrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEwNTljYWEtZGQ0Zi00NDgwLWEwODktYzNkYTE5NTlh MzE0MB4XDTI1MDYyODIxMDAwOFoXDTI1MDcwMTIxMDAwMFowLzEtMCsGA1UEAxMk MjRkMTNlMmYtODNlNi00YjBlLTg0NjEtZDM4ZTc2ZGEwMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6/mWFsYdJn9uztc9FW/KCtWbP9BBVIJET/u AYWdpmU9E5w+65xvQuxk4DFHaZbN9D/Tj232saJUGv8dt0GfRZu/7SXtwT0fejkh NZwx0KF23e5YvzTpi6elUy7ch8w8kLSoln6OwCnTmAIIre3ZJDQchEk15haWti0N VR35IEGJR3maBh9/A9Myy6P1WlsF0l7Vb6QqC1VPDcGujyY3KY+duqRqYK9t1TYl 9bSizafdsIK30wGVS4nWf+RpXGHf43kedKp4slHcBJDF4/am5F1yhPxE4lBickhH 662VnIZA/PHlZO18re+a675ePnx7lqYwboV1pa+CTWhMvoifOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCDjmPLd+HxBpFnP9z4iqD9wRBxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYTA1 OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2RhMTk1OWEzMTQvMWEwNTljYWEtZGQ0Zi00 NDgwLWEwODktYzNkYTE5NTlhMzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWEwNTljYWEtZGQ0Zi00NDgwLWEw ODktYzNkYTE5NTlhMzE0LzFhMDU5Y2FhLWRkNGYtNDQ4MC1hMDg5LWMzZGExOTU5 YTMxNC5jcmwwHwYDVR0jBBgwFoAU9FqTZTN0o2erqo73F7RNQO3it0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xYTA1OWNhYS1kZDRmLTQ0ODAtYTA4OS1jM2Rh MTk1OWEzMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJjaph5JvglEN36Hx7dxbs VR/GJJmi4yI2KIzYeDms5MdOzBSKb9MExk17TFlNIgsIx3Jr44fOQq+O8gCZS/ke BfMgnEVc1LrZ6DqpWGvWOnbkSb6IwtLz+EQbESqp0u4bmCCEoi9ePKeytrMZTFOz dIfqGcS0M5zXsi0vaQBAfDvMFPC5NLlLnR9aX6NrAl7W1dtIrER3YmUSDQbEn2d/ sfQkb1wdjaySxiCLgA0qudRrkLDzSwyh/l5LnF1CfypdflJQZXTA6HAG8pX9JYoH L0vHZboRLANPnO7PRKpv0rempVmeqNXboi+TR2uMzS/C9YArM5yDkCsyFoDku39m -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:58 2025 by rpki-client