$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft File: 4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft (raw, json) Hash identifier: 8SuLU+ngQ5ZIlWyDDjscs7pYvM6gKC2XAaA1cs4wa30= Subject key identifier: 7D:2C:5A:85:F3:FB:56:61:60:03:F3:83:3B:E9:AA:A9:AB:AB:AA:BE Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Certificate serial: 010D0C9F4328584A76AFB53783A1EE44850B1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft Manifest number: 010D0C9F4328584073A820B7BA7FD11DDCD1E7AC Signing time: Wed 09 Jul 2025 18:00:08 +0000 Manifest this update: Wed 09 Jul 2025 18:00:08 +0000 Manifest next update: Sat 12 Jul 2025 18:00:00 +0000 Files and hashes: 1: 4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl (hash: luZquKzbduE3EKo/prhUmpuusLJxwhTKISyiSmSMnfM=) 2: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (hash: cBkArcP4ihKFeDdZEF0bTYhQBOSHHTTECvK//HbtD5Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:af:b5:37:83:a1:ee:44:85:0b:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Validity Not Before: Jul 9 18:00:08 2025 GMT Not After : Jul 12 18:00:00 2025 GMT Subject: CN=fa4bb6a2-052d-4418-bcbd-db4d2c90ea7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:b3:68:39:8c:70:a6:92:64:42:6e:32:da: 4f:50:2e:d4:d9:78:8c:f0:67:e5:61:9f:b5:58:fc: 88:99:f1:b7:bb:32:9a:77:9f:c6:2a:b6:b5:14:19: ad:6b:4a:5c:aa:9a:d6:a1:29:6c:98:75:12:5a:8c: 4b:6a:82:a8:94:cc:0d:72:3e:b4:c7:49:cf:60:a8: ca:5f:07:d9:ef:b9:15:d8:b7:09:1c:79:e6:55:0d: b6:f9:56:c6:bb:e6:b8:13:0c:20:82:7d:f5:81:87: 92:0a:d0:2e:03:99:6c:c5:7b:19:f7:9e:8e:f4:88: fa:09:c1:01:75:6b:e9:09:c6:11:b0:a4:be:94:5d: 2d:ac:a5:69:97:12:ce:e5:d4:b2:1d:d1:f0:e9:d2: 56:96:85:96:a0:d5:11:b0:85:37:b8:ac:1f:71:91: 61:0b:01:ed:22:26:dc:51:71:f9:e5:37:e5:e5:09: e6:72:1f:e7:09:d1:2b:35:41:94:40:9d:b5:69:88: 1b:cb:75:a9:b7:0a:20:f0:b5:fe:e1:be:87:1c:fc: dd:28:0b:ce:f1:bc:97:11:66:7a:36:3a:4c:81:5e: 24:18:47:1d:41:6c:44:68:31:bd:eb:af:1b:17:c4: 97:38:43:98:08:4c:4b:20:90:45:5d:53:85:29:ae: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2C:5A:85:F3:FB:56:61:60:03:F3:83:3B:E9:AA:A9:AB:AB:AA:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl X509v3 Authority Key Identifier: keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e2:34:cd:e6:09:52:c9:0e:26:7f:d6:be:d7:ed:64:83:8f: 0d:87:58:dd:7e:d6:a2:e9:50:5d:4b:48:f3:28:d9:a5:68:d6: 99:41:a9:b6:e1:16:3d:57:42:b0:3d:9b:56:4a:d9:02:26:35: 99:26:19:f3:87:14:54:e2:5b:71:61:18:5a:41:54:32:89:08: 3a:31:fd:5f:bf:b6:52:b0:52:01:70:ee:d2:7f:10:b7:76:22: af:c8:78:42:d0:81:63:11:48:d9:80:8d:18:a5:09:1c:4b:51: e1:12:46:c1:f1:8d:c2:9f:04:aa:2a:95:fd:80:bf:3d:f2:04: 7e:cb:6b:11:19:cd:65:f7:79:d5:ef:ea:59:ca:6a:d0:9a:ca: 85:8c:ca:c8:e3:d5:2f:55:29:9e:4c:79:cc:1e:95:41:00:ba: 59:c0:84:41:71:a8:82:b9:db:f9:08:27:27:29:5c:5a:df:4b: 0a:d3:cd:ee:1e:f3:83:89:63:bc:ad:51:8c:68:0d:76:f7:e6: 13:a7:4b:de:cc:9e:0e:69:be:18:d7:2a:97:cb:4b:ea:42:a9: f7:be:e6:12:39:cd:32:57:fc:f0:4c:a0:b4:1b:94:2a:14:26: c8:f9:85:f9:f8:9a:49:da:62:47:88:da:9a:0b:8d:03:b6:19: eb:e4:ef:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp2r7U3g6HuRIULE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzZjY3MTctMjA0OC00NGMxLWFlNzctNTBlNWNlNmU5 ZGVhMB4XDTI1MDcwOTE4MDAwOFoXDTI1MDcxMjE4MDAwMFowLzEtMCsGA1UEAxMk ZmE0YmI2YTItMDUyZC00NDE4LWJjYmQtZGI0ZDJjOTBlYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKzaDmMcKaSZEJuMtpPUC7U2XiM8GflYZ+1 WPyImfG3uzKad5/GKra1FBmta0pcqprWoSlsmHUSWoxLaoKolMwNcj60x0nPYKjK XwfZ77kV2LcJHHnmVQ22+VbGu+a4Ewwggn31gYeSCtAuA5lsxXsZ956O9Ij6CcEB dWvpCcYRsKS+lF0trKVplxLO5dSyHdHw6dJWloWWoNURsIU3uKwfcZFhCwHtIibc UXH55Tfl5Qnmch/nCdErNUGUQJ21aYgby3Wptwog8LX+4b6HHPzdKAvO8byXEWZ6 NjpMgV4kGEcdQWxEaDG9668bF8SXOEOYCExLIJBFXVOFKa7gTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH0sWoXz+1ZhYAPzgzvpqqmrq6q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNm NjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1Y2U2ZTlkZWEvNGMzZjY3MTctMjA0OC00 NGMxLWFlNzctNTBlNWNlNmU5ZGVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGMzZjY3MTctMjA0OC00NGMxLWFl NzctNTBlNWNlNmU5ZGVhLzRjM2Y2NzE3LTIwNDgtNDRjMS1hZTc3LTUwZTVjZTZl OWRlYS5jcmwwHwYDVR0jBBgwFoAUGznG6Jb5p5VqOxqjxSoENpY+TaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNmNjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1 Y2U2ZTlkZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAt4jTN5glSyQ4mf9a+1+1k g48Nh1jdftai6VBdS0jzKNmlaNaZQam24RY9V0KwPZtWStkCJjWZJhnzhxRU4ltx YRhaQVQyiQg6Mf1fv7ZSsFIBcO7SfxC3diKvyHhC0IFjEUjZgI0YpQkcS1HhEkbB 8Y3CnwSqKpX9gL898gR+y2sRGc1l93nV7+pZymrQmsqFjMrI49UvVSmeTHnMHpVB ALpZwIRBcaiCudv5CCcnKVxa30sK083uHvODiWO8rVGMaA129+YTp0vezJ4Oab4Y 1yqXy0vqQqn3vuYSOc0yV/zwTKC0G5QqFCbI+YX5+JpJ2mJHiNqaC40Dthnr5O9o -----END CERTIFICATE-----Generated at Wed Jul 9 20:55:56 2025 by rpki-client