$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: XqhMqXVj2gRZ0fnMBMH2n+EGuPEiJ7RMRllOP3D1MZM= Subject key identifier: 8F:B3:3A:09:F5:E0:58:6A:9B:15:8F:88:ED:F6:67:EF:D8:1C:8A:CB Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584A5F30693F583A3E2AD7F10C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F183F Signing time: Tue 01 Jul 2025 08:00:03 +0000 Manifest this update: Tue 01 Jul 2025 08:00:03 +0000 Manifest next update: Thu 03 Jul 2025 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: v4UYexaLymUFRuTY3Fwommq+UxdgQ/HC4HErtk9YOcE=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: X94718anR2CPjNWHShUgZYH+oX+1XHWfRU4l+PrFYaY=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: ULbS/f0NayUy+vPF2/PlI+oVa0l7TbGg7MB0rvTD1Fs=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: TKG58H2TiAsPim6IOZeR6vPB43t8UPzxwphZc7WyMmg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:30:69:3f:58:3a:3e:2a:d7:f1:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Jul 1 08:00:03 2025 GMT Not After : Jul 3 08:00:00 2025 GMT Subject: CN=4d7e9900-df81-4e5a-b4f1-adf15fbd8c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bc:71:b4:42:71:75:c8:05:c3:38:8c:f8:40: 52:33:af:1f:b6:b4:7a:ae:73:9b:ac:38:d4:65:a2: e1:7b:02:5f:2f:52:66:f7:7d:bf:56:0c:a1:3c:3d: 48:d8:f0:4f:c7:2a:4a:92:42:bc:6d:f7:1b:64:af: ad:e1:8c:0e:73:14:72:f8:19:85:ce:77:ab:05:82: 9b:b0:cd:fe:a7:34:01:00:1b:d8:18:9a:a6:f8:05: ee:29:6a:b3:49:a7:71:72:36:29:d2:69:fe:f5:69: 21:d4:ca:54:d3:c3:a7:6b:0d:aa:ca:a2:1f:ca:65: 55:05:63:8b:fc:46:fe:bb:58:76:2f:fc:48:ad:50: 06:44:24:f7:90:48:4a:5b:65:11:ea:2f:ee:15:cb: b7:bb:0e:fd:17:2d:b3:1f:cd:80:c1:c5:75:3b:dc: 04:e1:e4:ee:2f:3c:7f:fa:bb:f7:34:4e:99:11:74: e5:96:03:64:d7:9c:62:8b:96:af:f3:4d:75:1f:d2: a1:da:e2:66:6c:0d:88:a3:cc:a8:89:a7:7c:b8:2f: 75:32:94:be:3e:2b:20:df:5c:ac:48:11:3e:58:6f: ee:37:a4:5a:bc:d0:2a:58:64:4e:06:01:95:9b:99: c0:49:63:7b:c8:d6:eb:c3:e9:22:85:0f:5f:97:a0: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B3:3A:09:F5:E0:58:6A:9B:15:8F:88:ED:F6:67:EF:D8:1C:8A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:18:6e:22:eb:2c:4f:67:be:e7:38:65:80:f5:32:83:65:63: ac:1e:15:ab:11:b8:de:c6:73:0c:82:7e:f0:f5:48:65:65:96: 2b:fc:49:34:67:8c:39:3f:db:1e:c4:96:1e:72:0e:f2:16:f3: a6:b9:31:fb:c7:eb:29:62:e5:92:6c:a2:63:5f:bb:09:cc:8c: 04:56:3e:31:35:43:22:e9:18:f2:98:ad:bd:07:9d:f8:a9:44: 35:a8:bc:ff:ff:d0:40:b4:b2:9e:68:cb:97:ad:21:bd:50:d9: 30:a2:72:c6:52:44:e3:e4:19:11:92:da:8b:3e:f8:eb:4e:fc: ea:11:72:08:42:ab:55:58:c8:dc:b1:6c:67:03:83:09:93:fb: ab:17:91:71:df:fa:c2:43:21:b5:8a:ac:05:a1:21:e9:0a:fc: db:31:2d:88:36:05:97:64:9c:79:eb:ff:27:4b:ad:c9:23:3a: 6b:a9:f7:42:d6:f8:dc:c0:08:f2:7a:b3:a1:b6:c7:e0:ae:dd: ae:63:74:bc:49:2f:59:04:bd:10:bd:81:52:29:f7:c7:58:e0: d8:94:07:30:f8:a4:9c:b2:9b:76:2b:3c:7a:39:99:59:57:7c: 70:b4:47:fb:22:61:0b:68:1f:57:06:e5:6e:e6:d0:73:8a:d7: 2c:21:f5:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpfMGk/WDo+KtfxDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI1MDcwMTA4MDAwM1oXDTI1MDcwMzA4MDAwMFowLzEtMCsGA1UEAxMk NGQ3ZTk5MDAtZGY4MS00ZTVhLWI0ZjEtYWRmMTVmYmQ4YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbxxtEJxdcgFwziM+EBSM68ftrR6rnObrDjU ZaLhewJfL1Jm932/VgyhPD1I2PBPxypKkkK8bfcbZK+t4YwOcxRy+BmFznerBYKb sM3+pzQBABvYGJqm+AXuKWqzSadxcjYp0mn+9Wkh1MpU08Onaw2qyqIfymVVBWOL /Eb+u1h2L/xIrVAGRCT3kEhKW2UR6i/uFcu3uw79Fy2zH82AwcV1O9wE4eTuLzx/ +rv3NE6ZEXTllgNk15xii5av8011H9Kh2uJmbA2Io8yoiad8uC91MpS+Pisg31ys SBE+WG/uN6RavNAqWGROBgGVm5nASWN7yNbrw+kihQ9fl6COdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+zOgn14FhqmxWPiO32Z+/YHIrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJGG4i6yxPZ77nOGWA9TKD ZWOsHhWrEbjexnMMgn7w9UhlZZYr/Ek0Z4w5P9sexJYecg7yFvOmuTH7x+spYuWS bKJjX7sJzIwEVj4xNUMi6RjymK29B534qUQ1qLz//9BAtLKeaMuXrSG9UNkwonLG UkTj5BkRktqLPvjrTvzqEXIIQqtVWMjcsWxnA4MJk/urF5Fx3/rCQyG1iqwFoSHp CvzbMS2INgWXZJx56/8nS63JIzprqfdC1vjcwAjyerOhtsfgrt2uY3S8SS9ZBL0Q vYFSKffHWODYlAcw+KScspt2Kzx6OZlZV3xwtEf7ImELaB9XBuVu5tBzitcsIfW1 -----END CERTIFICATE-----Generated at Tue Jul 1 14:04:13 2025 by rpki-client