$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft File: f12fc670-c513-43aa-8e45-f34564e90e81.mft (raw, json) Hash identifier: oDMX0+WyJrRPZwtmaJtf6LRzCoAgSgiUcFvxuc5gIkM= Subject key identifier: 91:D9:55:99:57:C2:CB:52:38:08:F3:7D:EB:D4:9B:F9:27:E2:8D:CD Authority key identifier: 75:3A:62:0A:EE:46:05:7C:39:EA:E6:F9:0B:58:89:86:B1:AF:3E:B1 Certificate issuer: /CN=f12fc670-c513-43aa-8e45-f34564e90e81 Certificate serial: 010D0C9F4328584A5D362D5CF8C159F5063C1650 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft Manifest number: 010D0C9F43285843E02A169654EB8F6C5E50FAE2 Signing time: Mon 30 Jun 2025 15:00:03 +0000 Manifest this update: Mon 30 Jun 2025 15:00:03 +0000 Manifest next update: Wed 02 Jul 2025 15:00:00 +0000 Files and hashes: 1: c28a51ed-dc7f-3858-bec2-29f49065de63.roa (hash: CJripH6Z4PBiqbdF/vAG4docZVoHUjgt4bGM1NAUOXs=) 2: f12fc670-c513-43aa-8e45-f34564e90e81.crl (hash: Dm3R+sdj48FUH9AYYErBm262Ehmfnz92XCXcpRSZJX4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:36:2d:5c:f8:c1:59:f5:06:3c:16:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f12fc670-c513-43aa-8e45-f34564e90e81 Validity Not Before: Jun 30 15:00:03 2025 GMT Not After : Jul 2 15:00:00 2025 GMT Subject: CN=24cb0bf9-038f-43c7-99b9-a0c5273efb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:ed:1e:53:4f:db:ca:1d:68:f4:32:ef:98: 63:94:68:2f:61:de:3e:4e:d2:7d:6d:d0:5d:30:51: 81:e5:72:30:98:76:ff:55:92:1d:79:29:bc:ee:d3: b6:9a:40:48:68:26:c7:12:41:80:5a:76:f0:7d:35: f2:90:18:0b:95:74:c8:16:a2:71:36:ec:e1:10:3c: 5e:4b:1d:96:3c:86:14:7e:c0:8c:7f:01:e6:ad:42: ca:53:0b:4d:a7:a1:12:2b:2b:66:6e:73:30:e7:24: ff:48:ff:a7:6c:3e:c1:21:9c:92:97:07:94:79:07: 02:6b:52:7c:ba:b1:90:25:fa:c6:c5:2c:f4:68:04: 02:96:19:11:f4:dc:25:9a:a5:be:76:9b:4b:9d:63: 84:d9:2a:1d:f9:5f:9d:bd:f3:36:70:48:34:d7:a4: 6e:ea:e5:39:69:46:53:82:47:b7:f2:7b:9e:aa:10: 4c:d7:8c:b6:03:81:f6:4d:e9:89:e8:4f:4d:77:c1: 8c:39:1b:73:20:47:c1:0d:ca:04:ab:f3:5a:3d:9d: 8a:e2:38:0a:e6:56:0f:5b:13:b1:64:92:16:f0:6a: da:8e:64:e9:a6:3f:ba:0e:13:ea:88:35:fd:42:4a: 28:41:46:f4:77:f0:04:73:3b:fc:95:61:2c:0e:cd: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D9:55:99:57:C2:CB:52:38:08:F3:7D:EB:D4:9B:F9:27:E2:8D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81/f12fc670-c513-43aa-8e45-f34564e90e81.crl X509v3 Authority Key Identifier: keyid:75:3A:62:0A:EE:46:05:7C:39:EA:E6:F9:0B:58:89:86:B1:AF:3E:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f12fc670-c513-43aa-8e45-f34564e90e81.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c8:ff:e6:62:d0:6d:08:32:2b:3c:69:14:f0:0b:49:67:e4: 5d:83:46:e4:31:22:c0:ef:10:e5:1e:fe:68:8a:16:29:18:88: 45:81:75:74:22:39:d8:31:ff:cc:56:0b:59:52:87:7c:47:6d: b3:e5:f9:62:de:b4:b4:a8:24:73:b1:62:24:c9:21:cb:20:10: 5e:b3:64:44:23:78:9c:b9:12:ed:89:72:5c:9e:55:54:18:c2: 2a:74:9c:7d:d0:15:35:e1:a0:44:05:04:15:74:cc:12:28:8b: cc:7c:55:d3:fa:4e:02:d1:8e:09:4a:b9:41:44:1a:5f:44:ba: ea:b4:58:c8:a0:c2:32:be:2b:52:fb:ee:0d:bb:d1:2d:2e:b2: 74:f0:af:58:db:c7:5e:ce:56:a9:b7:99:6c:14:5a:66:49:e0: ba:39:c0:a9:e6:ae:94:f2:39:0f:ad:0c:96:99:b7:ad:8d:0e: 75:7c:60:35:26:5b:d5:29:46:d3:f8:e3:6d:16:ca:a5:4c:c6: fd:e6:01:58:32:c1:87:69:f4:21:cf:62:78:02:8a:d4:0d:91: c0:8c:27:ea:ec:ac:42:28:5d:02:cf:76:6c:96:39:e4:05:cb: f9:98:3d:c6:ab:48:f4:56:3a:72:3b:62:81:7d:7f:78:0c:d6: 4e:dd:47:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpdNi1c+MFZ9QY8FlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEyZmM2NzAtYzUxMy00M2FhLThlNDUtZjM0NTY0ZTkw ZTgxMB4XDTI1MDYzMDE1MDAwM1oXDTI1MDcwMjE1MDAwMFowLzEtMCsGA1UEAxMk MjRjYjBiZjktMDM4Zi00M2M3LTk5YjktYTBjNTI3M2VmYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiLtHlNP28odaPQy75hjlGgvYd4+TtJ9bdBd MFGB5XIwmHb/VZIdeSm87tO2mkBIaCbHEkGAWnbwfTXykBgLlXTIFqJxNuzhEDxe Sx2WPIYUfsCMfwHmrULKUwtNp6ESKytmbnMw5yT/SP+nbD7BIZySlweUeQcCa1J8 urGQJfrGxSz0aAQClhkR9NwlmqW+dptLnWOE2Sod+V+dvfM2cEg016Ru6uU5aUZT gke38nueqhBM14y2A4H2TemJ6E9Nd8GMORtzIEfBDcoEq/NaPZ2K4jgK5lYPWxOx ZJIW8GrajmTppj+6DhPqiDX9QkooQUb0d/AEczv8lWEsDs2FgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJHZVZlXwstSOAjzfevUm/kn4o3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMTJm YzY3MC1jNTEzLTQzYWEtOGU0NS1mMzQ1NjRlOTBlODEvZjEyZmM2NzAtYzUxMy00 M2FhLThlNDUtZjM0NTY0ZTkwZTgxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjEyZmM2NzAtYzUxMy00M2FhLThl NDUtZjM0NTY0ZTkwZTgxL2YxMmZjNjcwLWM1MTMtNDNhYS04ZTQ1LWYzNDU2NGU5 MGU4MS5jcmwwHwYDVR0jBBgwFoAUdTpiCu5GBXw56ub5C1iJhrGvPrEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMTJmYzY3MC1jNTEzLTQzYWEtOGU0NS1mMzQ1 NjRlOTBlODEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcyP/mYtBtCDIrPGkU8AtJ Z+Rdg0bkMSLA7xDlHv5oihYpGIhFgXV0IjnYMf/MVgtZUod8R22z5fli3rS0qCRz sWIkySHLIBBes2REI3icuRLtiXJcnlVUGMIqdJx90BU14aBEBQQVdMwSKIvMfFXT +k4C0Y4JSrlBRBpfRLrqtFjIoMIyvitS++4Nu9EtLrJ08K9Y28dezlapt5lsFFpm SeC6OcCp5q6U8jkPrQyWmbetjQ51fGA1JlvVKUbT+ONtFsqlTMb95gFYMsGHafQh z2J4AorUDZHAjCfq7KxCKF0Cz3ZsljnkBcv5mD3Gq0j0VjpyO2KBfX94DNZO3UeV -----END CERTIFICATE-----Generated at Tue Jul 1 09:31:31 2025 by rpki-client