$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft File: 2e91d8ca-5740-400a-abea-127078fa77ff.mft (raw, json) Hash identifier: ukQhGCztfqfkXnKZXxlrELdjXOJlF67/6ISBv1Gh9m8= Subject key identifier: D6:B9:00:4E:F0:53:04:CF:E9:92:46:75:8F:9D:EB:5C:99:AB:F1:B7 Authority key identifier: 44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D Certificate issuer: /CN=2e91d8ca-5740-400a-abea-127078fa77ff Certificate serial: 010D0C9F4328584A60EF1A7B4B900D750BC9A100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft Manifest number: 010D0C9F4328584073A82F1BD6D4806DAAEEC744 Signing time: Tue 01 Jul 2025 23:00:03 +0000 Manifest this update: Tue 01 Jul 2025 23:00:03 +0000 Manifest next update: Fri 04 Jul 2025 23:00:00 +0000 Files and hashes: 1: 2e91d8ca-5740-400a-abea-127078fa77ff.crl (hash: H2rm4SHo421T13IWgG8BmiBgrePs+gm7ULfHDr7E2MM=) 2: 8e099e1c-8c89-361b-bc31-d649231f7f2e.roa (hash: 2LS/KqPRqOyXelH24MCZSCYekimPIwaktA1Pdoyywx4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:ef:1a:7b:4b:90:0d:75:0b:c9:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e91d8ca-5740-400a-abea-127078fa77ff Validity Not Before: Jul 1 23:00:03 2025 GMT Not After : Jul 4 23:00:00 2025 GMT Subject: CN=139b624c-0167-4ca8-afe1-044029279637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:9d:a0:a7:16:bc:33:36:99:24:dd:c9:70: 4e:96:ad:57:09:7f:9c:79:cb:7f:b6:ef:9a:b4:c8: a9:47:ea:82:0b:04:19:e5:5f:1f:93:d7:91:25:6f: 4d:4c:1e:82:86:94:0a:c4:2f:dc:b2:89:e7:02:91: cf:81:3b:54:4e:5f:bc:9b:20:8d:59:fb:af:36:98: 6a:cf:8a:61:d0:f9:7d:fc:28:4d:23:db:0a:6e:c6: 41:7a:85:e1:e8:66:3c:34:bd:a7:d0:52:79:47:0e: d3:8e:a7:7d:9c:4f:59:18:1a:56:64:dd:40:4e:81: cc:77:60:25:39:c1:b5:78:bb:f2:90:2a:ca:57:cf: 2d:65:5a:57:06:34:05:4b:ec:9f:f1:c7:d8:85:3a: d2:53:4c:c3:e2:7c:1f:83:04:07:64:21:56:aa:33: ec:14:03:28:82:c9:3d:59:b3:1a:aa:92:37:fb:58: f4:a1:a9:b7:41:5c:11:c7:a8:74:dd:3f:e0:68:3a: 8a:16:44:78:50:71:df:60:93:bd:90:a4:be:eb:ff: be:3a:27:62:16:91:bf:e2:92:79:0b:88:ab:b8:8c: fe:87:45:61:7b:6e:1d:95:93:e8:bd:91:78:6e:d4: 9e:ed:a5:49:10:2e:b1:aa:81:36:2e:6f:e1:37:05: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B9:00:4E:F0:53:04:CF:E9:92:46:75:8F:9D:EB:5C:99:AB:F1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff/2e91d8ca-5740-400a-abea-127078fa77ff.crl X509v3 Authority Key Identifier: keyid:44:97:3D:95:18:DC:58:92:8A:57:DE:36:6D:85:8B:FF:4F:69:AB:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e91d8ca-5740-400a-abea-127078fa77ff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f2:18:3c:31:47:bf:24:e4:ad:05:9e:76:d0:70:ad:ad:87: bd:47:b9:56:11:18:c3:c4:21:49:a4:49:af:fb:84:38:74:d5: 5f:1a:2d:4c:29:49:d5:8f:fb:81:ac:7b:45:5f:cb:fd:11:24: 6a:7a:25:64:22:08:67:18:c6:5d:ea:fd:6c:61:c7:d5:1d:97: fa:14:ec:e1:d1:19:00:b8:ee:29:67:ed:ef:3a:3e:cc:91:d3: 2a:e2:5f:65:3c:77:01:18:62:36:6c:f8:c5:6d:fb:5e:38:44: 00:fd:ad:bd:39:54:35:5a:76:5a:97:cb:cf:46:63:ea:b4:5c: 6a:ff:18:74:cb:c1:64:65:c2:6e:c2:4c:ca:c2:31:32:6b:fb: ef:21:c0:1c:b8:99:c9:b9:88:fb:1a:54:81:07:8c:d9:5e:ed: 40:0e:94:3e:4a:e4:35:d1:cf:94:1f:26:c1:ba:25:4c:39:07: 8d:b0:31:fe:a5:44:90:05:31:54:24:b2:1c:fb:64:21:9b:53: 90:80:83:d0:ec:6e:77:34:82:f5:6d:f7:20:62:3d:15:5c:47: 89:f0:db:57:85:c1:c3:64:41:b2:f1:77:c2:e9:31:24:95:47: 8d:37:be:96:6d:29:a1:98:68:ac:e4:83:bb:91:57:04:df:8b: a3:a6:f3:e5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpg7xp7S5ANdQvJoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU5MWQ4Y2EtNTc0MC00MDBhLWFiZWEtMTI3MDc4ZmE3 N2ZmMB4XDTI1MDcwMTIzMDAwM1oXDTI1MDcwNDIzMDAwMFowLzEtMCsGA1UEAxMk MTM5YjYyNGMtMDE2Ny00Y2E4LWFmZTEtMDQ0MDI5Mjc5NjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbmdoKcWvDM2mSTdyXBOlq1XCX+cect/tu+a tMipR+qCCwQZ5V8fk9eRJW9NTB6ChpQKxC/csonnApHPgTtUTl+8myCNWfuvNphq z4ph0Pl9/ChNI9sKbsZBeoXh6GY8NL2n0FJ5Rw7Tjqd9nE9ZGBpWZN1AToHMd2Al OcG1eLvykCrKV88tZVpXBjQFS+yf8cfYhTrSU0zD4nwfgwQHZCFWqjPsFAMogsk9 WbMaqpI3+1j0oam3QVwRx6h03T/gaDqKFkR4UHHfYJO9kKS+6/++OidiFpG/4pJ5 C4iruIz+h0Vhe24dlZPovZF4btSe7aVJEC6xqoE2Lm/hNwV3JwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNa5AE7wUwTP6ZJGdY+d61yZq/G3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTkx ZDhjYS01NzQwLTQwMGEtYWJlYS0xMjcwNzhmYTc3ZmYvMmU5MWQ4Y2EtNTc0MC00 MDBhLWFiZWEtMTI3MDc4ZmE3N2ZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU5MWQ4Y2EtNTc0MC00MDBhLWFi ZWEtMTI3MDc4ZmE3N2ZmLzJlOTFkOGNhLTU3NDAtNDAwYS1hYmVhLTEyNzA3OGZh NzdmZi5jcmwwHwYDVR0jBBgwFoAURJc9lRjcWJKKV942bYWL/09pq20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTkxZDhjYS01NzQwLTQwMGEtYWJlYS0xMjcw NzhmYTc3ZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm8hg8MUe/JOStBZ520HCt rYe9R7lWERjDxCFJpEmv+4Q4dNVfGi1MKUnVj/uBrHtFX8v9ESRqeiVkIghnGMZd 6v1sYcfVHZf6FOzh0RkAuO4pZ+3vOj7MkdMq4l9lPHcBGGI2bPjFbfteOEQA/a29 OVQ1WnZal8vPRmPqtFxq/xh0y8FkZcJuwkzKwjEya/vvIcAcuJnJuYj7GlSBB4zZ Xu1ADpQ+SuQ10c+UHybBuiVMOQeNsDH+pUSQBTFUJLIc+2Qhm1OQgIPQ7G53NIL1 bfcgYj0VXEeJ8NtXhcHDZEGy8XfC6TEklUeNN76WbSmhmGis5IO7kVcE34ujpvPl -----END CERTIFICATE-----Generated at Wed Jul 2 20:04:10 2025 by rpki-client