$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft File: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft (raw, json) Hash identifier: B0+av0HpC4t5fgN/qujaW6jYbFTbZqrQvxC2vjSbgj8= Subject key identifier: 8C:C3:EF:6A:12:C3:10:67:B8:77:C9:12:8E:EF:C9:16:28:07:F2:08 Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584A719174A2281F9160B7630300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft Manifest number: 010D0C9F4328584482DE472669570C80318247AD Signing time: Mon 07 Jul 2025 22:00:08 +0000 Manifest this update: Mon 07 Jul 2025 22:00:08 +0000 Manifest next update: Thu 10 Jul 2025 22:00:00 +0000 Files and hashes: 1: 8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl (hash: r0CRiRExcFeqJcJBmTGsW8M5zeufBk4hcvmK61yGnCs=) 2: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (hash: NIaGbZvUutT1vgW0VkAzK3bb98hRGDJOjjcSiwTo5kI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:91:74:a2:28:1f:91:60:b7:63:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Jul 7 22:00:08 2025 GMT Not After : Jul 10 22:00:00 2025 GMT Subject: CN=d75a314a-71c2-4fe1-bac4-1f7b3c0b70bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b4:47:78:c0:79:ac:d8:ef:ad:18:29:6c:95: 48:70:c4:3d:e4:fa:78:90:b8:30:05:d8:ca:79:bb: 7f:28:80:9a:8b:f3:05:6f:45:5d:7a:fe:31:b2:5f: 87:2e:20:88:4e:a4:a5:89:54:0b:90:16:8e:7f:d3: 9a:15:0e:04:08:ad:68:bb:f5:72:f0:0f:5b:56:0b: 28:50:f7:4a:94:aa:d3:bb:d5:51:b2:9d:30:85:53: 0d:57:ab:a9:71:71:76:7c:ab:bd:b6:b4:1f:5e:74: e3:58:87:8c:25:38:6c:52:75:20:f8:2e:a7:7f:21: 39:b3:8d:dc:6d:9e:19:8a:de:82:5c:50:e5:06:0b: b7:70:bd:41:0c:7c:3f:75:18:5a:84:fe:32:78:af: 05:c1:77:39:20:4f:d9:dd:f6:41:31:9f:86:f2:99: 54:37:25:41:7b:d0:18:33:e5:77:bd:5b:15:77:08: 25:98:26:a1:46:0d:32:57:e4:1a:d6:2a:15:c7:f9: 48:12:24:33:ae:23:7f:07:db:53:b0:f9:52:92:74: 8a:3d:c0:37:66:e3:78:68:6d:b2:54:48:68:13:ac: 2d:c1:06:e5:b9:f4:33:82:f1:d8:25:92:32:05:41: 68:67:46:71:e6:4f:98:3a:77:5b:af:20:14:08:f9: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:EF:6A:12:C3:10:67:B8:77:C9:12:8E:EF:C9:16:28:07:F2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cc:f0:8b:76:7d:c5:4c:ba:64:31:78:7c:e3:8a:3b:c5:f6: ed:0f:6c:aa:75:0b:73:6e:8a:de:ae:e3:5b:f6:1b:78:4e:81: 3a:40:58:73:b4:d1:fd:4e:3b:63:31:7c:e0:9a:d7:a5:ee:a6: dd:5c:84:2e:9b:ad:48:5d:30:44:b5:71:73:af:34:60:27:bb: ee:58:a9:4f:96:c2:bd:08:ac:37:0c:1b:14:e2:cd:d3:e9:45: e9:9e:da:ed:49:f6:23:a7:e3:d0:a5:36:37:dc:85:24:78:e4: 78:79:02:17:d3:f5:f1:38:39:5e:9c:4c:62:c5:cb:ec:af:7d: 45:03:6a:42:6a:16:28:03:8c:ac:0c:8a:72:65:0a:42:bf:e6: 4b:d6:d3:b7:20:6f:e2:f6:d2:d8:d0:0e:5d:26:d4:ad:0f:23: 96:a0:08:46:fa:79:02:c3:50:1a:07:74:eb:85:8b:23:29:b0: 3c:f7:bf:3d:0d:27:c7:f6:da:89:05:bb:26:1b:8b:6b:02:4a: 16:c2:40:0d:60:bd:e7:c1:59:3a:84:1a:a2:c8:c3:65:f2:2b: dd:85:98:84:07:42:9d:11:ab:ee:7a:07:ff:4a:7e:3b:77:e3: 5d:a9:d2:42:f3:17:bc:74:fa:a7:3f:14:2a:62:2d:45:74:50: 9d:fc:1c:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpxkXSiKB+RYLdjAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI1MDcwNzIyMDAwOFoXDTI1MDcxMDIyMDAwMFowLzEtMCsGA1UEAxMk ZDc1YTMxNGEtNzFjMi00ZmUxLWJhYzQtMWY3YjNjMGI3MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7RHeMB5rNjvrRgpbJVIcMQ95Pp4kLgwBdjK ebt/KICai/MFb0Vdev4xsl+HLiCITqSliVQLkBaOf9OaFQ4ECK1ou/Vy8A9bVgso UPdKlKrTu9VRsp0whVMNV6upcXF2fKu9trQfXnTjWIeMJThsUnUg+C6nfyE5s43c bZ4Zit6CXFDlBgu3cL1BDHw/dRhahP4yeK8FwXc5IE/Z3fZBMZ+G8plUNyVBe9AY M+V3vVsVdwglmCahRg0yV+Qa1ioVx/lIEiQzriN/B9tTsPlSknSKPcA3ZuN4aG2y VEhoE6wtwQblufQzgvHYJZIyBUFoZ0Zx5k+YOndbryAUCPn/OwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIzD72oSwxBnuHfJEo7vyRYoB/IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvOGQ5NThjNDctYzE4Zi00 NmUyLWEzYzMtZWQ0YmEyOWUxYzk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvzPCLdn3FTLpkMXh844o7 xfbtD2yqdQtzboreruNb9ht4ToE6QFhztNH9TjtjMXzgmtel7qbdXIQum61IXTBE tXFzrzRgJ7vuWKlPlsK9CKw3DBsU4s3T6UXpntrtSfYjp+PQpTY33IUkeOR4eQIX 0/XxODlenExixcvsr31FA2pCahYoA4ysDIpyZQpCv+ZL1tO3IG/i9tLY0A5dJtSt DyOWoAhG+nkCw1AaB3TrhYsjKbA89789DSfH9tqJBbsmG4trAkoWwkANYL3nwVk6 hBqiyMNl8ivdhZiEB0KdEavuegf/Sn47d+NdqdJC8xe8dPqnPxQqYi1FdFCd/Byt -----END CERTIFICATE-----Generated at Tue Jul 8 20:48:23 2025 by rpki-client