$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft File: d5f40b37-0b89-4790-9a53-8f690461c4ff.mft (raw, json) Hash identifier: rxkfBen1CQFLPhOuUE9LjVvnZHRTj1mlHOwG7yE1Bek= Subject key identifier: 3E:7C:2D:E2:95:0E:D7:4A:0F:51:5D:C5:98:CD:DC:9B:67:1A:FB:99 Authority key identifier: 52:4B:B0:DB:FC:00:35:CF:36:6F:69:55:09:87:E2:02:ED:6D:4C:A9 Certificate issuer: /CN=d5f40b37-0b89-4790-9a53-8f690461c4ff Certificate serial: 010D0C9F4328584A62E9526F8249A28849E97A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft Manifest number: 010D0C9F43285849AD8DA8D10F358034F35F2AC4 Signing time: Wed 02 Jul 2025 16:00:03 +0000 Manifest this update: Wed 02 Jul 2025 16:00:03 +0000 Manifest next update: Fri 04 Jul 2025 16:00:00 +0000 Files and hashes: 1: c86827f2-2366-35c4-a6fd-8c5f617121e8.roa (hash: TcNh30lWycbZJGfOAo1fnACeeXzS7xoqZq5Fvz46yTg=) 2: d5f40b37-0b89-4790-9a53-8f690461c4ff.crl (hash: c2mQp3rWnzYz6bajDXNaXouFhXvJemAMjfvfxXUt7EM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:e9:52:6f:82:49:a2:88:49:e9:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f40b37-0b89-4790-9a53-8f690461c4ff Validity Not Before: Jul 2 16:00:03 2025 GMT Not After : Jul 4 16:00:00 2025 GMT Subject: CN=909ea48c-63bd-4a6b-b87d-036d28dd4914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:4b:cf:60:3c:f1:6a:41:b9:a2:3b:e6:f0: 70:53:92:2f:e7:55:6f:86:03:b8:0a:bd:61:f1:de: 44:e0:c2:9d:80:2c:31:12:d5:4d:c1:84:19:25:9c: d9:56:a2:bf:d2:3c:f5:00:05:3d:54:ac:4f:18:e0: 21:cb:18:5a:20:be:25:41:07:67:b7:8b:19:79:dc: 34:25:ad:cb:91:d3:ac:0c:f4:1a:f0:8e:aa:da:a6: c0:33:4c:93:40:24:fc:f9:3c:47:74:ba:f8:cf:3b: a6:be:41:84:ab:af:8c:f0:57:78:15:a9:05:c1:91: 8d:ba:db:d0:a3:73:12:24:fa:62:bf:5c:a3:b6:f5: 4c:2b:46:46:0c:35:e2:35:c3:d2:d9:28:17:e9:1b: 70:e7:fe:16:e1:37:54:42:1b:27:f2:f0:ec:73:44: 93:8d:3d:f8:f7:14:ad:28:e2:d1:8c:d2:d3:ae:de: 23:f9:4d:ae:04:16:bb:a6:7e:b0:f1:ae:eb:a4:d1: 28:0d:aa:46:eb:dd:e0:61:9f:77:bd:0e:94:d3:f3: 03:89:18:88:25:7a:4e:c8:1b:16:46:28:de:4b:ce: ce:c4:17:63:74:c4:89:16:29:bf:66:e2:a1:b1:fc: 04:dc:de:a6:82:c5:e5:b4:15:bd:7a:75:7c:86:a2: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7C:2D:E2:95:0E:D7:4A:0F:51:5D:C5:98:CD:DC:9B:67:1A:FB:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff/d5f40b37-0b89-4790-9a53-8f690461c4ff.crl X509v3 Authority Key Identifier: keyid:52:4B:B0:DB:FC:00:35:CF:36:6F:69:55:09:87:E2:02:ED:6D:4C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d5f40b37-0b89-4790-9a53-8f690461c4ff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:61:54:f6:43:b5:4a:3d:59:49:c1:45:11:3c:21:21:ab:1e: 1c:e2:71:cc:30:84:78:c0:49:19:42:82:fd:3f:4a:8d:80:1e: 2c:db:fb:1b:75:6c:d1:31:52:ab:b5:a4:d3:9f:6e:c6:ee:de: 3d:3c:f0:6d:36:6d:b2:d9:79:16:d0:dc:fe:28:0d:66:28:19: 21:9b:56:2e:09:4b:bb:aa:a1:0b:aa:43:14:a5:b4:c2:56:76: 28:25:7c:ba:91:b6:7d:ed:03:ce:da:6a:da:4c:fe:f3:f6:2a: f0:74:49:df:cc:03:5d:e7:a5:1a:34:e4:3b:63:10:50:51:db: 2c:57:47:93:06:8c:39:91:46:2a:ca:b6:fe:f9:c7:5a:0b:64: 33:a8:45:7f:02:ad:53:8a:f0:a5:d0:53:73:34:f0:6a:80:a8: 52:24:fb:2c:72:ec:a6:23:99:06:2d:b3:6a:50:fc:eb:61:34: f0:80:57:10:f9:3f:9f:8d:b8:c8:a1:cd:02:a8:0d:4c:34:57: 94:8d:45:a2:74:5d:8f:54:d1:da:b5:41:10:b5:88:12:f0:a0: b8:e1:2c:d7:ef:a9:2e:2b:66:fe:fd:51:0e:61:46:d1:bd:1e: 10:76:2b:b8:cd:4d:71:eb:eb:f7:b7:f6:4b:e7:37:59:61:8a: 13:fc:1c:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpi6VJvgkmiiEnpegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmNDBiMzctMGI4OS00NzkwLTlhNTMtOGY2OTA0NjFj NGZmMB4XDTI1MDcwMjE2MDAwM1oXDTI1MDcwNDE2MDAwMFowLzEtMCsGA1UEAxMk OTA5ZWE0OGMtNjNiZC00YTZiLWI4N2QtMDM2ZDI4ZGQ0OTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVVLz2A88WpBuaI75vBwU5Iv51VvhgO4Cr1h 8d5E4MKdgCwxEtVNwYQZJZzZVqK/0jz1AAU9VKxPGOAhyxhaIL4lQQdnt4sZedw0 Ja3LkdOsDPQa8I6q2qbAM0yTQCT8+TxHdLr4zzumvkGEq6+M8Fd4FakFwZGNutvQ o3MSJPpiv1yjtvVMK0ZGDDXiNcPS2SgX6Rtw5/4W4TdUQhsn8vDsc0STjT349xSt KOLRjNLTrt4j+U2uBBa7pn6w8a7rpNEoDapG693gYZ93vQ6U0/MDiRiIJXpOyBsW RijeS87OxBdjdMSJFim/ZuKhsfwE3N6mgsXltBW9enV8hqKlZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD58LeKVDtdKD1FdxZjN3JtnGvuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNWY0 MGIzNy0wYjg5LTQ3OTAtOWE1My04ZjY5MDQ2MWM0ZmYvZDVmNDBiMzctMGI4OS00 NzkwLTlhNTMtOGY2OTA0NjFjNGZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDVmNDBiMzctMGI4OS00NzkwLTlh NTMtOGY2OTA0NjFjNGZmL2Q1ZjQwYjM3LTBiODktNDc5MC05YTUzLThmNjkwNDYx YzRmZi5jcmwwHwYDVR0jBBgwFoAUUkuw2/wANc82b2lVCYfiAu1tTKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kNWY0MGIzNy0wYjg5LTQ3OTAtOWE1My04ZjY5 MDQ2MWM0ZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhYVT2Q7VKPVlJwUURPCEh qx4c4nHMMIR4wEkZQoL9P0qNgB4s2/sbdWzRMVKrtaTTn27G7t49PPBtNm2y2XkW 0Nz+KA1mKBkhm1YuCUu7qqELqkMUpbTCVnYoJXy6kbZ97QPO2mraTP7z9irwdEnf zANd56UaNOQ7YxBQUdssV0eTBow5kUYqyrb++cdaC2QzqEV/Aq1TivCl0FNzNPBq gKhSJPsscuymI5kGLbNqUPzrYTTwgFcQ+T+fjbjIoc0CqA1MNFeUjUWidF2PVNHa tUEQtYgS8KC44SzX76kuK2b+/VEOYUbRvR4Qdiu4zU1x6+v3t/ZL5zdZYYoT/Bw7 -----END CERTIFICATE-----Generated at Thu Jul 3 16:53:34 2025 by rpki-client