$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft File: a58da523-4991-493a-95ce-ff1c2b97244a.mft (raw, json) Hash identifier: ZzJ0ojS/sEXYV4EjwxvGzOyjvFafvzzW1Lo7Y+L7HEI= Subject key identifier: 86:EF:CD:DB:1B:1C:1F:4D:93:C3:F5:81:37:15:3E:B9:B6:17:45:D1 Authority key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Certificate issuer: /CN=a58da523-4991-493a-95ce-ff1c2b97244a Certificate serial: 010D0C9F4328584AA51952DC0DA5683744AE4240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft Manifest number: 010D0C9F432858499BF921459E6C07D47C6BD225 Signing time: Sat 26 Jul 2025 09:00:08 +0000 Manifest this update: Sat 26 Jul 2025 09:00:08 +0000 Manifest next update: Mon 28 Jul 2025 09:00:00 +0000 Files and hashes: 1: 94b63554-10f5-3368-a9cc-4d31e3421b4f.roa (hash: bFXFJaCDJZDDdY2BpV9ALfGpwf8pRyv5OTFmu77oZy0=) 2: a58da523-4991-493a-95ce-ff1c2b97244a.crl (hash: yO7uhA8UBjQ+98js2/0BdxcAYiwj1OSGU27K/+87oso=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:19:52:dc:0d:a5:68:37:44:ae:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58da523-4991-493a-95ce-ff1c2b97244a Validity Not Before: Jul 26 09:00:08 2025 GMT Not After : Jul 28 09:00:00 2025 GMT Subject: CN=e4aa8a4b-7f0f-4210-b4ce-d9fa1c810dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:32:af:00:74:b9:69:9d:31:ed:c9:6f:8b: 5f:dc:ed:87:eb:5f:73:00:47:b7:07:69:a4:2b:91: 13:84:9c:f0:d3:70:9b:55:71:c4:c2:c6:b1:a5:c7: 7b:e0:56:a0:64:b0:e9:3f:4a:d6:f9:22:cb:a9:3c: ca:db:77:91:44:3d:2e:91:20:2d:2d:3f:41:37:ca: 49:9c:0c:b0:23:8c:55:18:93:bd:d8:41:8a:f6:b2: af:cc:17:a4:e6:20:07:01:d0:51:cb:ab:0c:f6:d3: 5b:bc:54:18:ed:ef:8b:65:9c:72:51:79:99:f7:ca: 4c:73:0f:0e:9f:05:85:7c:6f:e6:14:b8:af:5b:18: 3b:28:72:14:b3:25:95:e5:e1:f1:24:f8:49:2c:45: da:03:6d:00:1a:f2:ae:79:8a:3d:45:92:39:64:49: 60:f1:cd:4d:a2:20:03:e7:c6:ad:61:a2:90:cf:91: 08:06:cb:29:b3:50:2c:bf:d5:17:45:20:e7:37:44: 04:e9:c5:60:94:28:39:54:31:d7:71:3f:03:66:19: 0a:96:77:e4:b0:d8:5f:08:cf:0e:fc:a7:78:91:12: 77:57:14:00:fb:ba:09:b4:1f:8b:ec:ed:8b:13:b0: 78:ad:a6:fb:07:0e:4d:1f:db:69:44:35:64:c0:2c: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EF:CD:DB:1B:1C:1F:4D:93:C3:F5:81:37:15:3E:B9:B6:17:45:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl X509v3 Authority Key Identifier: keyid:70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:81:56:ab:05:7f:ac:55:74:cf:b5:ca:f2:74:96:3c:c5:d1: b4:79:85:7a:48:13:d6:2d:00:ee:b5:0d:ad:98:16:a6:73:03: 7d:4c:80:cb:27:fd:cd:3b:6f:64:fe:d8:78:4b:c8:30:09:2d: 34:8a:6c:22:41:52:a8:55:80:1b:92:c5:da:96:3f:9b:cc:55: 3b:9d:cb:0c:d1:74:61:0c:74:3d:ce:8c:0a:2b:a3:8b:56:ca: c5:b1:63:bd:a3:06:d2:a7:31:49:64:5e:f0:c1:fb:67:ac:5c: 19:61:ec:b7:4c:c4:16:56:b0:67:e9:2b:f5:8c:59:3a:55:89: 5e:eb:a9:d9:14:d0:d9:73:ca:fd:90:42:7b:6d:aa:ce:ed:00: d8:a1:e6:70:76:e8:11:4f:75:05:ee:47:b4:10:6a:b4:a9:60: e5:32:47:62:f1:ad:45:7b:03:a7:aa:57:0c:23:7e:db:ac:e4: 2d:b7:43:1e:80:19:73:8f:a3:55:5b:ba:70:59:fb:aa:4b:5b: e2:bd:fa:43:0e:06:47:98:4d:59:fb:8b:00:ec:81:70:a6:f9: ea:94:f9:e8:bb:4f:d5:a8:8d:ef:7e:a7:9e:00:9d:8d:b6:62: 5c:0c:0a:cd:97:16:af:7c:8d:04:4c:43:04:16:83:8d:55:03: 36:23:4d:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEqlGVLcDaVoN0SuQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcy NDRhMB4XDTI1MDcyNjA5MDAwOFoXDTI1MDcyODA5MDAwMFowLzEtMCsGA1UEAxMk ZTRhYThhNGItN2YwZi00MjEwLWI0Y2UtZDlmYTFjODEwZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP8yrwB0uWmdMe3Jb4tf3O2H619zAEe3B2mk K5EThJzw03CbVXHEwsaxpcd74FagZLDpP0rW+SLLqTzK23eRRD0ukSAtLT9BN8pJ nAywI4xVGJO92EGK9rKvzBek5iAHAdBRy6sM9tNbvFQY7e+LZZxyUXmZ98pMcw8O nwWFfG/mFLivWxg7KHIUsyWV5eHxJPhJLEXaA20AGvKueYo9RZI5ZElg8c1NoiAD 58atYaKQz5EIBssps1Asv9UXRSDnN0QE6cVglCg5VDHXcT8DZhkKlnfksNhfCM8O /Kd4kRJ3VxQA+7oJtB+L7O2LE7B4rab7Bw5NH9tpRDVkwCzl7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIbvzdsbHB9Nk8P1gTcVPrm2F0XRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNThk YTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvYTU4ZGE1MjMtNDk5MS00 OTNhLTk1Y2UtZmYxYzJiOTcyNDRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU4ZGE1MjMtNDk5MS00OTNhLTk1 Y2UtZmYxYzJiOTcyNDRhL2E1OGRhNTIzLTQ5OTEtNDkzYS05NWNlLWZmMWMyYjk3 MjQ0YS5jcmwwHwYDVR0jBBgwFoAUcMxislMRXOoXY0zWR+dAW/NcAgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFj MmI5NzI0NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9gVarBX+sVXTPtcrydJY8 xdG0eYV6SBPWLQDutQ2tmBamcwN9TIDLJ/3NO29k/th4S8gwCS00imwiQVKoVYAb ksXalj+bzFU7ncsM0XRhDHQ9zowKK6OLVsrFsWO9owbSpzFJZF7wwftnrFwZYey3 TMQWVrBn6Sv1jFk6VYle66nZFNDZc8r9kEJ7barO7QDYoeZwdugRT3UF7ke0EGq0 qWDlMkdi8a1FewOnqlcMI37brOQtt0MegBlzj6NVW7pwWfuqS1vivfpDDgZHmE1Z +4sA7IFwpvnqlPnou0/VqI3vfqeeAJ2NtmJcDArNlxavfI0ETEMEFoONVQM2I01m -----END CERTIFICATE-----Generated at Sat Jul 26 10:24:01 2025 by rpki-client