$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: gtucWAMJpzSLmT237ed1YipJpYeqSBNtO6xK3At/OVI= Subject key identifier: CF:79:21:DC:58:6E:D0:1A:41:58:00:25:3E:2E:26:F2:E0:D8:6F:9E Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584A653CE4D4751B081FCCBE3500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B5FF9 Signing time: Thu 03 Jul 2025 12:00:03 +0000 Manifest this update: Thu 03 Jul 2025 12:00:03 +0000 Manifest next update: Sat 05 Jul 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: HnHuSukrJeUg0RxaKhsKvUcH0awxWXLzfnu/EJ5QZnY=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: bpBKp1SaYf8hR2O75B62PSOFDbsfhu+qvlAI/bnp4go=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:3c:e4:d4:75:1b:08:1f:cc:be:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Jul 3 12:00:03 2025 GMT Not After : Jul 5 12:00:00 2025 GMT Subject: CN=50a02a3e-63e2-4fe7-841c-e5cdd6ff4a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:ff:9a:90:7f:af:5c:3f:95:49:54:74:6b: c9:b9:a5:ec:14:42:bb:5e:d9:2d:6b:89:5d:00:6b: eb:cf:03:ba:d8:3c:1b:a1:99:ad:36:50:5a:a1:b7: fa:26:6b:d4:02:17:b9:f4:21:43:5d:12:10:de:46: 5c:56:2a:07:9b:f2:44:19:cc:5d:cc:10:86:8c:82: 0e:4e:54:eb:f4:96:e3:ca:00:0a:47:22:88:7c:4b: 42:e1:fd:6b:d6:fe:6b:77:9a:ec:fa:25:6e:e2:a6: 89:18:16:f2:16:91:4b:b5:3d:c8:9a:23:1f:f1:e8: 1f:37:80:4f:df:15:90:db:21:11:9a:c9:1c:b1:39: 7f:42:92:08:80:a6:66:54:5d:c5:7b:a4:de:22:3b: 71:71:d5:09:48:1a:f2:c5:08:1c:99:94:59:61:37: 31:a4:72:60:45:cb:62:29:6f:f5:cd:9c:88:ba:10: 78:3d:22:e4:d1:ce:e0:bb:69:eb:c4:c4:fd:77:2d: ee:9b:c3:e9:75:4d:28:8e:ef:47:8c:bd:12:2c:9a: b5:80:ba:b7:dc:9c:2c:b6:1d:53:e9:85:d2:c1:09: 16:68:a3:7c:ba:bc:c9:1b:7b:4f:8f:dc:56:34:58: 8d:56:0c:05:f8:ed:df:a3:54:a0:c4:22:08:ec:f6: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:79:21:DC:58:6E:D0:1A:41:58:00:25:3E:2E:26:F2:E0:D8:6F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:00:1b:cd:f1:14:15:0c:e8:7d:f2:1e:05:7f:37:c2:0d:4e: 8e:2f:79:a8:64:02:7c:e2:0a:87:69:5b:5c:ca:b6:32:97:13: b7:1c:28:48:4b:8d:ed:af:8f:0d:a8:d7:18:29:31:0c:3a:83: fd:ab:62:05:3e:37:12:a8:10:e2:34:0b:0d:28:42:fc:b0:d9: 02:c5:0b:ff:96:dc:d9:d9:a3:0c:58:30:a8:ab:20:4f:df:ab: 14:1e:f9:c2:36:c1:a0:5a:40:dd:0b:0e:88:03:a3:1e:75:5f: cc:22:ac:2a:17:c7:e2:44:38:07:6c:9b:a1:14:82:d5:50:11: 62:cd:e6:b4:bd:3a:13:92:2d:e2:ba:77:b9:fb:e7:58:bf:db: 1e:c6:0f:ef:5e:1e:69:34:a0:a1:73:6b:d6:3b:76:39:22:fe: 44:15:32:a5:74:7d:e3:8d:72:91:c0:84:c3:83:46:ab:68:fd: d5:e9:c4:99:11:8f:90:47:42:f9:03:02:96:65:3a:05:32:fa: b9:be:38:58:ba:54:dc:5b:94:74:42:3e:65:8e:68:f7:ed:43: a8:84:24:f3:5f:0d:97:ec:8b:eb:74:28:c0:c0:bb:59:d6:da: 47:74:35:ba:f8:18:87:36:0f:8a:16:77:dd:b6:21:ce:fd:ca: 25:37:90:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEplPOTUdRsIH8y+NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDcwMzEyMDAwM1oXDTI1MDcwNTEyMDAwMFowLzEtMCsGA1UEAxMk NTBhMDJhM2UtNjNlMi00ZmU3LTg0MWMtZTVjZGQ2ZmY0YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFD/mpB/r1w/lUlUdGvJuaXsFEK7Xtkta4ld AGvrzwO62DwboZmtNlBaobf6JmvUAhe59CFDXRIQ3kZcVioHm/JEGcxdzBCGjIIO TlTr9JbjygAKRyKIfEtC4f1r1v5rd5rs+iVu4qaJGBbyFpFLtT3ImiMf8egfN4BP 3xWQ2yERmskcsTl/QpIIgKZmVF3Fe6TeIjtxcdUJSBryxQgcmZRZYTcxpHJgRcti KW/1zZyIuhB4PSLk0c7gu2nrxMT9dy3um8PpdU0oju9HjL0SLJq1gLq33Jwsth1T 6YXSwQkWaKN8urzJG3tPj9xWNFiNVgwF+O3fo1SgxCII7PbrCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM95IdxYbtAaQVgAJT4uJvLg2G+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3ABvN8RQVDOh98h4FfzfC DU6OL3moZAJ84gqHaVtcyrYylxO3HChIS43tr48NqNcYKTEMOoP9q2IFPjcSqBDi NAsNKEL8sNkCxQv/ltzZ2aMMWDCoqyBP36sUHvnCNsGgWkDdCw6IA6MedV/MIqwq F8fiRDgHbJuhFILVUBFizea0vToTki3iune5++dYv9sexg/vXh5pNKChc2vWO3Y5 Iv5EFTKldH3jjXKRwITDg0araP3V6cSZEY+QR0L5AwKWZToFMvq5vjhYulTcW5R0 Qj5ljmj37UOohCTzXw2X7IvrdCjAwLtZ1tpHdDW6+BiHNg+KFnfdtiHO/colN5Cm -----END CERTIFICATE-----Generated at Thu Jul 3 13:39:40 2025 by rpki-client