$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft File: 42e7c483-059a-47b9-840d-d56605959cf4.mft (raw, json) Hash identifier: XGZmKuNomZEdlQmDHbIAX7qn/AJqshHwe5miQdiVPWo= Subject key identifier: 3B:D2:BE:E5:67:03:5F:B6:88:B5:73:AF:54:7B:D6:8F:3C:63:7A:05 Authority key identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 Certificate issuer: /CN=42e7c483-059a-47b9-840d-d56605959cf4 Certificate serial: 010D0C9F4328584A6000E2553C522469D9AC1200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft Manifest number: 010D0C9F43285840FC51DF680002DF05F234E573 Signing time: Tue 01 Jul 2025 15:00:03 +0000 Manifest this update: Tue 01 Jul 2025 15:00:03 +0000 Manifest next update: Thu 03 Jul 2025 15:00:00 +0000 Files and hashes: 1: 42e7c483-059a-47b9-840d-d56605959cf4.crl (hash: l2p+/m+6mi593p+R1dUqOevaMyg6OuGeu0B+s7Yu4Xw=) 2: 60316776-c861-3030-bcc5-5a653fcff1b8.roa (hash: ygB0+nE9ZW+m6alA0ayP77rvi8d3e1PqBRT9Gf/N08Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:00:e2:55:3c:52:24:69:d9:ac:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7c483-059a-47b9-840d-d56605959cf4 Validity Not Before: Jul 1 15:00:03 2025 GMT Not After : Jul 3 15:00:00 2025 GMT Subject: CN=286b722a-91ce-46ee-bdac-b3d0a3530b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:2d:05:17:9a:73:ca:b5:b3:02:de:78:0f: 05:c4:79:cf:34:da:29:50:e8:d3:b5:04:bb:c5:14: b4:c8:e8:fa:9a:f3:8e:f3:e3:ad:09:f2:3c:2e:88: c7:a2:98:a2:0b:31:3f:ba:df:9a:a5:c5:c6:ff:2c: 81:38:48:25:0f:c2:cf:55:55:52:88:0f:d3:f2:91: cd:8a:6d:f2:fd:78:ee:51:49:9a:11:2f:81:c5:80: 6c:62:68:d8:9d:23:b8:b0:bf:50:e4:4f:fd:3b:8a: 85:93:8c:e5:44:d4:8c:42:85:8f:85:55:e4:54:da: 24:51:bf:62:db:88:0f:17:3e:6f:0a:39:4a:7c:90: d2:31:b6:56:e1:82:71:43:c6:ba:a2:9a:e5:7e:14: 33:09:47:6a:2a:ea:cf:25:50:f4:1f:9e:5a:5c:ff: 2a:cb:6f:aa:17:c7:d3:e6:99:7f:31:d4:1a:81:5f: 89:29:e7:ba:d2:16:47:b6:0f:08:55:f4:92:6c:47: 0a:33:cf:c1:f6:77:66:28:d8:96:f0:cb:65:48:04: 7e:47:4c:eb:a9:96:19:dd:c4:e0:45:4f:c1:4e:5a: 10:71:60:d4:f5:5b:53:83:b8:44:53:a4:0e:04:ca: 67:a4:a8:6a:43:02:d1:a8:3d:75:a7:89:cb:ad:a5: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D2:BE:E5:67:03:5F:B6:88:B5:73:AF:54:7B:D6:8F:3C:63:7A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.crl X509v3 Authority Key Identifier: keyid:92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:4b:d8:e8:20:3f:04:f7:73:05:bc:0b:32:8b:9c:a2:96:ce: 4a:87:5b:95:21:c8:b1:d4:9c:4c:31:33:0b:bf:77:85:91:91: a4:b2:93:d2:04:67:4f:71:16:8d:84:fe:d8:2d:1b:1d:35:fe: da:64:c6:b7:e4:fe:17:0c:3b:6f:b6:84:e1:cf:82:11:da:0b: f5:4a:98:db:6b:cd:f4:1f:8a:79:ca:45:3e:6b:31:f5:5f:a2: e7:75:56:36:20:1e:11:68:ac:50:6d:46:20:91:cf:8d:19:f7: d8:1e:17:df:c9:4f:88:61:21:f1:a5:4b:6a:98:d0:31:01:5b: 56:fc:d9:01:c1:30:b4:a1:b8:61:93:16:69:cb:e0:79:58:8e: 9f:21:46:2e:74:63:20:17:6c:ee:e7:e7:79:8a:ee:00:22:39: 68:c1:93:5f:76:2f:dc:b5:4c:4f:3c:62:13:c2:6b:14:47:0f: d5:00:7b:9e:4c:98:62:0f:cf:6d:71:6d:ec:41:b7:dc:32:f9: c8:52:ee:c0:85:02:df:70:c3:8d:be:8f:ff:03:06:f1:86:c3: 13:98:13:fe:be:c0:0c:06:c3:7f:fa:9d:68:00:c1:16:46:06: 59:30:ac:e3:ab:dc:84:dd:26:f6:ed:44:48:4d:38:2d:44:fd: c5:21:70:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpgAOJVPFIkadmsEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlN2M0ODMtMDU5YS00N2I5LTg0MGQtZDU2NjA1OTU5 Y2Y0MB4XDTI1MDcwMTE1MDAwM1oXDTI1MDcwMzE1MDAwMFowLzEtMCsGA1UEAxMk Mjg2YjcyMmEtOTFjZS00NmVlLWJkYWMtYjNkMGEzNTMwYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBUtBReac8q1swLeeA8FxHnPNNopUOjTtQS7 xRS0yOj6mvOO8+OtCfI8LojHopiiCzE/ut+apcXG/yyBOEglD8LPVVVSiA/T8pHN im3y/XjuUUmaES+BxYBsYmjYnSO4sL9Q5E/9O4qFk4zlRNSMQoWPhVXkVNokUb9i 24gPFz5vCjlKfJDSMbZW4YJxQ8a6oprlfhQzCUdqKurPJVD0H55aXP8qy2+qF8fT 5pl/MdQagV+JKee60hZHtg8IVfSSbEcKM8/B9ndmKNiW8MtlSAR+R0zrqZYZ3cTg RU/BTloQcWDU9VtTg7hEU6QOBMpnpKhqQwLRqD11p4nLraVIKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDvSvuVnA1+2iLVzr1R71o88Y3oFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MmU3 YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5NTljZjQvNDJlN2M0ODMtMDU5YS00 N2I5LTg0MGQtZDU2NjA1OTU5Y2Y0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDJlN2M0ODMtMDU5YS00N2I5LTg0 MGQtZDU2NjA1OTU5Y2Y0LzQyZTdjNDgzLTA1OWEtNDdiOS04NDBkLWQ1NjYwNTk1 OWNmNC5jcmwwHwYDVR0jBBgwFoAUknU12uq3SBOXqdIgnuvfEt7NyZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2 MDU5NTljZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsS9joID8E93MFvAsyi5yi ls5Kh1uVIcix1JxMMTMLv3eFkZGkspPSBGdPcRaNhP7YLRsdNf7aZMa35P4XDDtv toThz4IR2gv1Spjba830H4p5ykU+azH1X6LndVY2IB4RaKxQbUYgkc+NGffYHhff yU+IYSHxpUtqmNAxAVtW/NkBwTC0obhhkxZpy+B5WI6fIUYudGMgF2zu5+d5iu4A IjlowZNfdi/ctUxPPGITwmsURw/VAHueTJhiD89tcW3sQbfcMvnIUu7AhQLfcMON vo//AwbxhsMTmBP+vsAMBsN/+p1oAMEWRgZZMKzjq9yE3Sb27URITTgtRP3FIXCg -----END CERTIFICATE-----Generated at Wed Jul 2 14:46:10 2025 by rpki-client