$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft File: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft (raw, json) Hash identifier: L2P2ZArrKSnayPbTZA9M9hpwDCdfkAvTXUxUjGPcLpk= Subject key identifier: 22:29:D4:24:E7:0E:30:D5:D2:24:F8:C7:9E:60:B3:E0:6B:27:DE:D9 Authority key identifier: D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1 Certificate issuer: /CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3 Certificate serial: 010D0C9F4328584A62E9562AB24CA8E493947440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft Manifest number: 010D0C9F43285849490D0FADC3DA076F134F50A7 Signing time: Wed 02 Jul 2025 16:00:03 +0000 Manifest this update: Wed 02 Jul 2025 16:00:03 +0000 Manifest next update: Fri 04 Jul 2025 16:00:00 +0000 Files and hashes: 1: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl (hash: hrTR/oRj3MEiX2c2v3L/KI1WCsvr4CcpcQEZAu31LPw=) 2: dc9bc937-e8ce-3bad-acc7-766bfc1c52ea.roa (hash: 2BewOwevzGcVbVEM6NY0kHACbcBzGS2RdYIClIEs+ng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:e9:56:2a:b2:4c:a8:e4:93:94:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3 Validity Not Before: Jul 2 16:00:03 2025 GMT Not After : Jul 4 16:00:00 2025 GMT Subject: CN=1a1134b1-8f35-41b8-a8a3-95d14d0a1759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:ca:58:24:4c:bc:f7:18:3c:7c:48:ab:d4: 92:af:a8:7e:b3:21:3d:fe:12:34:6b:4c:ed:d9:b0: de:6b:84:82:15:2a:e8:0b:49:b6:f1:69:1b:97:c6: c2:eb:54:72:ff:d0:a3:54:98:06:d9:56:1d:16:e2: 39:4f:0c:7f:fe:11:20:ab:fc:e4:62:a1:78:e2:cc: f9:56:94:9f:cb:20:6f:bc:68:f7:94:04:fe:df:a5: da:7f:04:46:a3:d1:35:d3:83:5e:fa:e2:b5:67:a3: 3f:25:05:38:77:69:b4:1f:08:ba:e9:89:7d:a3:94: 9d:3e:2c:4c:9d:46:fb:d8:f3:41:b5:32:ac:93:bf: 4c:4b:f4:c2:79:05:ea:cc:19:40:54:b4:a7:4a:54: ef:8a:03:10:a9:ec:8e:96:78:96:f7:16:93:c6:a3: 49:fe:31:b8:ec:11:90:04:d6:f4:b3:09:c6:af:47: 7c:67:da:91:95:a1:df:cc:f3:c6:03:5d:22:e1:4c: 62:d2:9c:0a:42:81:d7:6f:08:85:60:89:1f:56:cf: f2:05:58:ce:32:10:b4:a1:4a:62:43:46:f1:ae:be: 02:b7:9c:af:fc:40:6a:ac:6b:96:91:06:bf:58:5b: 7f:08:e1:fd:ee:09:b3:c5:5a:c3:96:0b:ad:75:20: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:D4:24:E7:0E:30:D5:D2:24:F8:C7:9E:60:B3:E0:6B:27:DE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl X509v3 Authority Key Identifier: keyid:D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7c:00:e8:04:e9:75:30:36:0f:d6:b0:cd:6d:e5:ac:da:03: e9:fb:4d:9e:6a:d1:99:0b:03:5a:32:74:ec:62:9b:49:9a:e9: 6d:19:98:9c:58:7a:7f:c9:f4:4d:eb:bb:d0:04:37:76:f6:18: a3:a3:24:93:35:d2:61:8d:74:12:09:98:c0:71:39:38:8a:53: 18:16:1f:6e:c3:e2:17:bb:b6:59:05:69:94:c4:f3:64:d0:b9: bf:d8:ff:ad:cf:23:d8:3f:95:90:a0:21:0a:dc:10:0b:0c:e9: 07:93:75:fe:82:c6:b1:17:45:c8:51:69:05:63:04:dd:d9:2b: 71:39:ea:32:97:78:6f:c1:91:72:14:79:08:63:41:12:aa:d1: d6:df:5b:64:c9:63:ed:67:c2:14:ce:29:72:90:35:22:2a:5b: 63:82:42:c1:8e:0c:1e:a3:0c:a5:7f:fc:84:8a:57:12:b0:dd: 32:e2:fe:98:db:7c:b5:29:f5:d8:72:bc:33:15:a5:ac:2f:a4: e4:d5:49:9b:88:a7:09:d4:21:ed:7e:35:4d:06:d1:95:42:87: ec:30:bb:f7:6c:05:e8:b6:ed:ec:dd:c3:99:ac:4e:a9:ce:d7: 1d:43:97:7d:70:25:3c:5b:b9:09:2b:4a:e9:83:fe:cf:97:18: 1b:a0:91:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpi6VYqskyo5JOUdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y1OGFkOTgtMGU1ZS00ODVkLWJkNWQtNWM2MjA5MzJi NmMzMB4XDTI1MDcwMjE2MDAwM1oXDTI1MDcwNDE2MDAwMFowLzEtMCsGA1UEAxMk MWExMTM0YjEtOGYzNS00MWI4LWE4YTMtOTVkMTRkMGExNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPfKWCRMvPcYPHxIq9SSr6h+syE9/hI0a0zt 2bDea4SCFSroC0m28Wkbl8bC61Ry/9CjVJgG2VYdFuI5Twx//hEgq/zkYqF44sz5 VpSfyyBvvGj3lAT+36XafwRGo9E104Ne+uK1Z6M/JQU4d2m0Hwi66Yl9o5SdPixM nUb72PNBtTKsk79MS/TCeQXqzBlAVLSnSlTvigMQqeyOlniW9xaTxqNJ/jG47BGQ BNb0swnGr0d8Z9qRlaHfzPPGA10i4Uxi0pwKQoHXbwiFYIkfVs/yBVjOMhC0oUpi Q0bxrr4Ct5yv/EBqrGuWkQa/WFt/COH97gmzxVrDlgutdSA3awIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCIp1CTnDjDV0iT4x55gs+BrJ97ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjU4 YWQ5OC0wZTVlLTQ4NWQtYmQ1ZC01YzYyMDkzMmI2YzMvM2Y1OGFkOTgtMGU1ZS00 ODVkLWJkNWQtNWM2MjA5MzJiNmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y1OGFkOTgtMGU1ZS00ODVkLWJk NWQtNWM2MjA5MzJiNmMzLzNmNThhZDk4LTBlNWUtNDg1ZC1iZDVkLTVjNjIwOTMy YjZjMy5jcmwwHwYDVR0jBBgwFoAU08uEixKxfGKcDORU0y8NC/DoR7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjU4YWQ5OC0wZTVlLTQ4NWQtYmQ1ZC01YzYy MDkzMmI2YzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDfADoBOl1MDYP1rDNbeWs 2gPp+02eatGZCwNaMnTsYptJmultGZicWHp/yfRN67vQBDd29hijoySTNdJhjXQS CZjAcTk4ilMYFh9uw+IXu7ZZBWmUxPNk0Lm/2P+tzyPYP5WQoCEK3BALDOkHk3X+ gsaxF0XIUWkFYwTd2StxOeoyl3hvwZFyFHkIY0ESqtHW31tkyWPtZ8IUzilykDUi KltjgkLBjgweowylf/yEilcSsN0y4v6Y23y1KfXYcrwzFaWsL6Tk1UmbiKcJ1CHt fjVNBtGVQofsMLv3bAXotu3s3cOZrE6pztcdQ5d9cCU8W7kJK0rpg/7PlxgboJFj -----END CERTIFICATE-----Generated at Thu Jul 3 13:09:21 2025 by rpki-client