$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.mft File: 3752157d-7469-4299-be2c-f236b195fc08.mft (raw, json) Hash identifier: NjYNP/bSCBC8p9XmKoEdjH65UKfE2GZtIhbHxHnJCJo= Subject key identifier: D7:FD:2A:60:6D:78:65:25:9A:56:A2:E6:19:0B:AF:11:AC:9D:81:91 Authority key identifier: 60:D1:EE:9C:FF:32:AE:98:E4:17:39:4E:F0:D9:12:0F:70:9E:46:9D Certificate issuer: /CN=3752157d-7469-4299-be2c-f236b195fc08 Certificate serial: 010D0C9F4328584A5E06ACC5087C91DABB2BCA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.mft Manifest number: 010D0C9F4328584894317293F32A686EB93FCC64 Signing time: Mon 30 Jun 2025 22:00:08 +0000 Manifest this update: Mon 30 Jun 2025 22:00:08 +0000 Manifest next update: Thu 03 Jul 2025 22:00:00 +0000 Files and hashes: 1: 3752157d-7469-4299-be2c-f236b195fc08.crl (hash: o5aM/j2WVav0WTcJntmbBZdNw5nNUQUjwvUfENpHs08=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:06:ac:c5:08:7c:91:da:bb:2b:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3752157d-7469-4299-be2c-f236b195fc08 Validity Not Before: Jun 30 22:00:08 2025 GMT Not After : Jul 3 22:00:00 2025 GMT Subject: CN=1aa9f1ca-0c7a-4580-8b9a-ab12c51d3242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:d4:12:ca:58:29:9f:12:15:74:27:c0:a6: a9:95:fa:47:0c:b1:5b:bb:0d:a5:94:6f:1e:2a:6d: 5c:cb:5e:63:a1:09:4e:8d:94:19:c4:c3:ad:5a:b5: 53:7e:31:0b:34:6b:49:62:40:16:0e:2b:46:1b:2f: cf:60:ef:12:e9:bb:f0:c0:0b:bc:13:16:95:76:cc: 0f:15:52:7a:81:38:6e:16:31:26:91:18:71:9c:78: 07:d7:65:62:53:c3:68:97:61:ff:03:91:a0:8b:6e: de:d3:6e:39:54:eb:40:6c:19:3d:4e:cb:e5:5d:f7: b7:92:55:af:a9:af:77:08:54:5e:62:27:5c:1e:14: c8:94:fa:8c:7f:3e:ff:0d:b3:c9:2d:4d:32:1e:80: 56:05:98:97:2d:a8:05:d3:d7:4b:d3:eb:26:1c:82: 4b:e3:02:02:6b:5c:bf:10:5a:c1:c4:58:2f:f4:e9: 33:e6:31:f1:0c:f9:1d:83:69:1c:e7:31:d9:ad:b3: 2b:e7:ee:1b:e3:8a:0a:5c:84:82:09:90:d9:5b:67: e4:27:51:8e:3d:6b:5f:ec:19:7b:88:5c:99:62:f6: 88:d5:97:df:5d:2b:ba:14:f7:55:fa:58:7f:16:c1: 36:ec:b9:a7:24:66:6e:e9:5c:05:16:89:d3:fc:ac: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:2A:60:6D:78:65:25:9A:56:A2:E6:19:0B:AF:11:AC:9D:81:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.crl X509v3 Authority Key Identifier: keyid:60:D1:EE:9C:FF:32:AE:98:E4:17:39:4E:F0:D9:12:0F:70:9E:46:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8a:f8:08:17:e6:20:10:82:ec:66:b5:18:15:36:f5:3b:23: 6f:8d:f8:d3:36:e1:f7:fe:49:27:44:df:73:e3:7b:99:be:00: b6:77:0c:a9:23:46:0c:23:a4:96:95:08:59:d1:17:8f:14:2e: 47:e5:c1:79:5e:41:52:87:a4:89:04:16:f8:48:c1:a8:6c:23: 5d:30:d9:33:a4:a3:9e:ed:4a:90:80:2a:01:3b:ce:8e:44:36: 86:78:80:ca:13:40:3b:f3:69:19:26:03:64:7b:82:70:4f:e5: 90:c8:7f:f1:ed:e0:8d:15:55:6b:fa:42:37:04:dc:07:65:b1: 79:be:44:81:81:8d:ba:cc:cc:da:62:4f:1c:22:f8:05:13:9d: 5a:a5:69:18:d1:22:03:70:0c:2e:79:40:89:dd:72:58:d9:7d: 06:16:bc:29:23:bc:bb:3c:f6:96:a6:e2:5a:d6:c4:1e:84:73: 54:92:9e:2b:5e:88:8c:da:70:87:f9:6c:77:93:c3:6f:74:09: 77:39:8d:d8:ee:ba:a2:56:9f:03:f6:fb:63:b7:3b:26:0b:ff: 17:d6:8b:a3:46:75:aa:1a:06:a4:9a:06:1f:0f:78:0d:3a:d8: 10:53:db:df:de:71:74:80:11:1a:5a:12:7e:45:ff:21:cc:90: dc:6f:dc:7b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeBqzFCHyR2rsrygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc1MjE1N2QtNzQ2OS00Mjk5LWJlMmMtZjIzNmIxOTVm YzA4MB4XDTI1MDYzMDIyMDAwOFoXDTI1MDcwMzIyMDAwMFowLzEtMCsGA1UEAxMk MWFhOWYxY2EtMGM3YS00NTgwLThiOWEtYWIxMmM1MWQzMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm17UEspYKZ8SFXQnwKaplfpHDLFbuw2llG8e Km1cy15joQlOjZQZxMOtWrVTfjELNGtJYkAWDitGGy/PYO8S6bvwwAu8ExaVdswP FVJ6gThuFjEmkRhxnHgH12ViU8Nol2H/A5Ggi27e0245VOtAbBk9TsvlXfe3klWv qa93CFReYidcHhTIlPqMfz7/DbPJLU0yHoBWBZiXLagF09dL0+smHIJL4wICa1y/ EFrBxFgv9Okz5jHxDPkdg2kc5zHZrbMr5+4b44oKXISCCZDZW2fkJ1GOPWtf7Bl7 iFyZYvaI1ZffXSu6FPdV+lh/FsE27LmnJGZu6VwFFonT/KxInQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNf9KmBteGUlmlai5hkLrxGsnYGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNzUy MTU3ZC03NDY5LTQyOTktYmUyYy1mMjM2YjE5NWZjMDgvMzc1MjE1N2QtNzQ2OS00 Mjk5LWJlMmMtZjIzNmIxOTVmYzA4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzc1MjE1N2QtNzQ2OS00Mjk5LWJl MmMtZjIzNmIxOTVmYzA4LzM3NTIxNTdkLTc0NjktNDI5OS1iZTJjLWYyMzZiMTk1 ZmMwOC5jcmwwHwYDVR0jBBgwFoAUYNHunP8yrpjkFzlO8NkSD3CeRp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNzUyMTU3ZC03NDY5LTQyOTktYmUyYy1mMjM2 YjE5NWZjMDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDivgIF+YgEILsZrUYFTb1 OyNvjfjTNuH3/kknRN9z43uZvgC2dwypI0YMI6SWlQhZ0RePFC5H5cF5XkFSh6SJ BBb4SMGobCNdMNkzpKOe7UqQgCoBO86ORDaGeIDKE0A782kZJgNke4JwT+WQyH/x 7eCNFVVr+kI3BNwHZbF5vkSBgY26zMzaYk8cIvgFE51apWkY0SIDcAwueUCJ3XJY 2X0GFrwpI7y7PPaWpuJa1sQehHNUkp4rXoiM2nCH+Wx3k8NvdAl3OY3Y7rqiVp8D 9vtjtzsmC/8X1oujRnWqGgakmgYfD3gNOtgQU9vf3nF0gBEaWhJ+Rf8hzJDcb9x7 -----END CERTIFICATE-----Generated at Tue Jul 1 05:07:17 2025 by rpki-client