$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b/1706e0d8-e011-467d-826a-d35676974d6b.mft File: 1706e0d8-e011-467d-826a-d35676974d6b.mft (raw, json) Hash identifier: SSxyY5hO7qbTIz4gwGFSMdFjUgAbRtKI2/Rs/Eg7I5o= Subject key identifier: 44:26:04:1D:F8:D3:95:5B:0B:4E:AC:84:81:99:19:63:CC:90:2F:A2 Authority key identifier: 6A:2D:16:1E:69:0D:C5:71:01:E1:39:AF:AA:E8:91:49:A7:BE:5C:6E Certificate issuer: /CN=1706e0d8-e011-467d-826a-d35676974d6b Certificate serial: 010D0C9F4328584A6077FCF822F5B11B4FD4F83B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b/1706e0d8-e011-467d-826a-d35676974d6b.mft Manifest number: 010D0C9F432858418B39C0D56703AA711E3D5CAA Signing time: Tue 01 Jul 2025 19:00:03 +0000 Manifest this update: Tue 01 Jul 2025 19:00:03 +0000 Manifest next update: Fri 04 Jul 2025 19:00:00 +0000 Files and hashes: 1: 1706e0d8-e011-467d-826a-d35676974d6b.crl (hash: AgHq8q6LsYs+KB41SYNOhy1ew/DK3Kl42wgxG7lMxD8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b/1706e0d8-e011-467d-826a-d35676974d6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b/1706e0d8-e011-467d-826a-d35676974d6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:77:fc:f8:22:f5:b1:1b:4f:d4:f8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1706e0d8-e011-467d-826a-d35676974d6b Validity Not Before: Jul 1 19:00:03 2025 GMT Not After : Jul 4 19:00:00 2025 GMT Subject: CN=a6eb2a4d-1eea-4a4a-812f-af313bf73e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:53:a3:21:2b:80:f1:7b:4a:3f:4c:e6:5d: 42:f8:78:ac:ee:6f:d8:c4:99:f2:4a:1f:ab:ac:26: 1e:2e:3a:95:3b:df:3b:59:49:ba:eb:06:0b:b8:a5: a9:53:ec:69:76:17:8c:98:7a:2d:f9:86:18:ef:48: 55:52:27:74:91:c9:19:c2:d2:d8:6b:f9:de:08:bc: 2f:53:5b:d0:ed:2a:a1:df:27:f4:07:0f:73:99:2a: 48:5f:1d:d5:a1:db:42:8c:64:69:86:90:25:ff:63: 53:d6:43:2f:3b:23:e0:c6:e8:8f:94:47:fa:23:bb: 91:74:fe:56:02:c7:0d:86:ba:b6:7f:fc:d4:e1:8c: ff:b8:c1:e3:65:d4:f9:01:3d:62:04:0b:d2:cb:bb: 4a:bc:1b:45:7e:9d:43:e8:16:ea:71:05:84:70:e6: 2c:b2:d1:68:23:c0:53:76:f8:26:1f:7e:c6:2c:f5: 75:e1:67:c3:ab:f8:73:c1:e2:26:5e:37:93:48:1b: 86:3b:9c:cb:ec:d5:c6:ff:52:61:55:66:21:5f:11: c1:cc:1a:fb:2d:0d:12:d3:51:31:0e:44:f5:7b:b7: 00:08:5b:a7:03:24:3b:b6:da:ca:fd:71:b4:9b:aa: a4:36:cb:18:88:2d:ec:3b:e0:1d:d0:7f:e6:8d:ec: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:04:1D:F8:D3:95:5B:0B:4E:AC:84:81:99:19:63:CC:90:2F:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b/1706e0d8-e011-467d-826a-d35676974d6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b/1706e0d8-e011-467d-826a-d35676974d6b.crl X509v3 Authority Key Identifier: keyid:6A:2D:16:1E:69:0D:C5:71:01:E1:39:AF:AA:E8:91:49:A7:BE:5C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1706e0d8-e011-467d-826a-d35676974d6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0b:0a:35:eb:a3:cf:a3:d1:33:ac:72:17:85:72:c9:a8:62: 09:99:08:8a:36:3d:6c:20:67:dc:0d:5f:c2:ff:43:3c:a5:49: 37:32:55:15:e8:03:39:54:a0:c8:8d:e9:ac:7f:5b:43:21:71: 4b:1a:3f:fa:f5:fc:e3:f5:bd:9a:06:8e:ad:43:c1:ba:05:89: 88:b5:9b:43:48:67:33:52:4f:49:0f:ab:92:fd:02:1b:d6:91: da:6e:fc:52:29:f1:88:2c:4a:11:bf:04:f2:de:8e:93:3b:3b: df:9c:0d:16:19:1d:3e:f2:c5:30:8b:f6:95:d1:99:09:fa:64: 36:da:de:74:b3:0c:16:21:a1:63:49:38:9e:f3:22:b3:ee:93: f2:06:f2:ae:42:46:47:cb:f5:25:07:b0:72:3a:93:fa:e4:02: ee:7f:94:66:88:79:16:f5:a7:ef:4b:27:a3:bc:ff:3c:26:64: db:af:a5:7c:82:52:d4:07:14:58:c3:9c:7b:91:2f:f9:8b:70: bc:2d:e7:0c:9d:4b:59:13:1e:30:88:b3:c5:0f:68:1d:80:0f: ab:d4:db:a0:2a:ac:0b:ab:7e:c5:1e:25:95:e7:87:4e:c1:51: 8c:57:e0:2b:e6:04:45:52:80:da:11:21:40:83:d1:66:92:ce: f6:81:93:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgd/z4IvWxG0/U+DswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcwNmUwZDgtZTAxMS00NjdkLTgyNmEtZDM1Njc2OTc0 ZDZiMB4XDTI1MDcwMTE5MDAwM1oXDTI1MDcwNDE5MDAwMFowLzEtMCsGA1UEAxMk YTZlYjJhNGQtMWVlYS00YTRhLTgxMmYtYWYzMTNiZjczZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL1ToyErgPF7Sj9M5l1C+His7m/YxJnySh+r rCYeLjqVO987WUm66wYLuKWpU+xpdheMmHot+YYY70hVUid0kckZwtLYa/neCLwv U1vQ7Sqh3yf0Bw9zmSpIXx3VodtCjGRphpAl/2NT1kMvOyPgxuiPlEf6I7uRdP5W AscNhrq2f/zU4Yz/uMHjZdT5AT1iBAvSy7tKvBtFfp1D6BbqcQWEcOYsstFoI8BT dvgmH37GLPV14WfDq/hzweImXjeTSBuGO5zL7NXG/1JhVWYhXxHBzBr7LQ0S01Ex DkT1e7cACFunAyQ7ttrK/XG0m6qkNssYiC3sO+Ad0H/mjezSZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEQmBB3405VbC06shIGZGWPMkC+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNzA2 ZTBkOC1lMDExLTQ2N2QtODI2YS1kMzU2NzY5NzRkNmIvMTcwNmUwZDgtZTAxMS00 NjdkLTgyNmEtZDM1Njc2OTc0ZDZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTcwNmUwZDgtZTAxMS00NjdkLTgy NmEtZDM1Njc2OTc0ZDZiLzE3MDZlMGQ4LWUwMTEtNDY3ZC04MjZhLWQzNTY3Njk3 NGQ2Yi5jcmwwHwYDVR0jBBgwFoAUai0WHmkNxXEB4TmvquiRSae+XG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNzA2ZTBkOC1lMDExLTQ2N2QtODI2YS1kMzU2 NzY5NzRkNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtCwo166PPo9EzrHIXhXLJ qGIJmQiKNj1sIGfcDV/C/0M8pUk3MlUV6AM5VKDIjemsf1tDIXFLGj/69fzj9b2a Bo6tQ8G6BYmItZtDSGczUk9JD6uS/QIb1pHabvxSKfGILEoRvwTy3o6TOzvfnA0W GR0+8sUwi/aV0ZkJ+mQ22t50swwWIaFjSTie8yKz7pPyBvKuQkZHy/UlB7ByOpP6 5ALuf5RmiHkW9afvSyejvP88JmTbr6V8glLUBxRYw5x7kS/5i3C8LecMnUtZEx4w iLPFD2gdgA+r1NugKqwLq37FHiWV54dOwVGMV+Ar5gRFUoDaESFAg9Fmks72gZNM -----END CERTIFICATE-----Generated at Wed Jul 2 15:53:27 2025 by rpki-client