$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft (raw, json) Hash identifier: 1lSEWtXUpQUD1ZKifd+ab2ie1V7RSz/6SKXnXlq6q80= Subject key identifier: B0:5A:AB:D6:97:65:8A:93:D8:91:7A:88:C9:01:98:CE:DF:7E:49:41 Authority key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Certificate issuer: /CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Certificate serial: 010D0C9F4328584A629BE757B7E847B225371520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft Manifest number: 010D0C9F4328584A629AFAFAF4C26B8EDA69CE82 Signing time: Wed 02 Jul 2025 13:24:03 +0000 Manifest this update: Wed 02 Jul 2025 13:24:03 +0000 Manifest next update: Sat 05 Jul 2025 13:00:00 +0000 Files and hashes: 1: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl (hash: szUrNQzeerUplLfP/mOBsK1AA10PDRf25H0F7+SPG0U=) 2: 9b8f3de7-adff-3b45-8b51-de811d42f4ce.roa (hash: +FdN3s/LkaXoBQCP55FUkqFwGk875HCrJd/wAFV77Ms=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:9b:e7:57:b7:e8:47:b2:25:37:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Validity Not Before: Jul 2 13:24:03 2025 GMT Not After : Jul 5 13:00:00 2025 GMT Subject: CN=12a4ded5-6eed-44df-86d1-2e240d53633d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:bc:71:95:ab:e5:1a:a7:81:31:51:da:c8: 16:76:2b:06:f9:10:a3:8a:a2:78:42:a9:85:5d:a2: f1:1b:f6:22:b7:8b:e4:c0:e0:94:36:ec:ff:ab:f3: 95:49:a4:c4:35:0b:e2:22:08:11:bb:fb:f1:93:d4: f7:34:05:88:a8:ba:a9:f2:8e:0a:c6:9d:fe:1c:8b: ff:51:84:12:56:96:ed:cd:70:59:df:0b:b7:64:c3: b9:8d:25:97:04:86:9d:30:89:02:2d:f6:06:66:bc: e6:9c:36:e3:f1:fc:e4:13:a5:f6:bd:92:f0:6e:86: d8:4c:66:1b:8d:18:48:ee:dd:45:ba:ab:43:57:60: 78:a2:31:de:61:81:80:1e:ee:1f:92:a7:f2:e9:a1: 27:c1:c7:0d:de:74:50:ca:b6:e4:e3:8a:0d:a1:75: 67:3f:bc:d9:38:c0:26:77:b4:61:68:6a:67:7b:70: 27:92:c6:d4:9f:79:33:af:a2:ea:d8:1c:03:7d:73: 9e:e1:fa:38:46:74:c8:61:ee:a6:92:28:ad:c5:1d: d8:f9:d1:92:f5:9d:da:77:87:31:9b:02:a0:f2:38: 24:ab:59:4b:fe:d9:63:f1:27:84:1c:19:f4:6a:7c: cd:5e:c8:45:0a:9c:a3:c8:de:62:36:b3:52:c7:60: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5A:AB:D6:97:65:8A:93:D8:91:7A:88:C9:01:98:CE:DF:7E:49:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.crl X509v3 Authority Key Identifier: keyid:78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:53:46:76:2d:43:01:0d:ef:04:53:70:3e:b7:a5:7e:46:a2: 77:06:a9:2a:60:35:d4:8e:a2:d2:52:4d:21:06:66:a9:01:2b: 33:a2:94:13:9f:1e:c4:f2:b3:a6:60:7a:76:2c:6a:8f:8c:f6: f0:da:d3:48:11:5b:03:38:d9:33:e6:49:16:ea:58:2c:65:6e: 82:79:04:9a:bd:d0:7a:f8:16:98:72:8b:81:ad:15:3d:bc:6b: 48:f4:c7:46:10:23:06:37:2b:dc:18:17:d8:51:2b:3c:15:c7: 85:44:be:a4:3f:32:c5:b9:20:2b:bf:bb:d3:e0:a7:ca:be:e4: 4e:d8:08:75:84:2a:b2:04:d0:8a:3a:e2:32:72:2b:83:c3:e2: ad:93:cc:1e:35:a3:23:09:b8:e1:f1:7f:8e:e6:9c:23:9c:4c: de:37:5c:89:00:b4:ca:77:05:89:ef:5a:52:9e:34:8f:ae:db: f8:f6:59:bb:81:a4:55:46:99:65:b9:4a:a1:4f:42:49:62:47: 5d:80:04:81:22:57:4f:1b:af:34:d2:6d:d2:48:35:e3:ca:9c: de:e3:e3:39:56:58:bf:99:fe:ac:71:69:f7:01:c0:ac:41:b1: 18:69:f8:b7:07:c6:04:6c:27:25:2b:ee:09:5b:a3:38:69:d3: 18:91:a5:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpim+dXt+hHsiU3FSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRh YzJiMB4XDTI1MDcwMjEzMjQwM1oXDTI1MDcwNTEzMDAwMFowLzEtMCsGA1UEAxMk MTJhNGRlZDUtNmVlZC00NGRmLTg2ZDEtMmUyNDBkNTM2MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivu8cZWr5RqngTFR2sgWdisG+RCjiqJ4QqmF XaLxG/Yit4vkwOCUNuz/q/OVSaTENQviIggRu/vxk9T3NAWIqLqp8o4Kxp3+HIv/ UYQSVpbtzXBZ3wu3ZMO5jSWXBIadMIkCLfYGZrzmnDbj8fzkE6X2vZLwbobYTGYb jRhI7t1FuqtDV2B4ojHeYYGAHu4fkqfy6aEnwccN3nRQyrbk44oNoXVnP7zZOMAm d7RhaGpne3AnksbUn3kzr6Lq2BwDfXOe4fo4RnTIYe6mkiitxR3Y+dGS9Z3ad4cx mwKg8jgkq1lL/tlj8SeEHBn0anzNXshFCpyjyN5iNrNSx2BXRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLBaq9aXZYqT2JF6iMkBmM7ffklBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDIw YTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvODAyMGEzOTktN2U4My00 YmI1LThkOGQtZTQyNGUyZWRhYzJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODAyMGEzOTktN2U4My00YmI1LThk OGQtZTQyNGUyZWRhYzJiLzgwMjBhMzk5LTdlODMtNGJiNS04ZDhkLWU0MjRlMmVk YWMyYi5jcmwwHwYDVR0jBBgwFoAUeBxTEnLOMDBJLVBrmal/6fZM5X0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0 ZTJlZGFjMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAU0Z2LUMBDe8EU3A+t6V+ RqJ3BqkqYDXUjqLSUk0hBmapASszopQTnx7E8rOmYHp2LGqPjPbw2tNIEVsDONkz 5kkW6lgsZW6CeQSavdB6+BaYcouBrRU9vGtI9MdGECMGNyvcGBfYUSs8FceFRL6k PzLFuSArv7vT4KfKvuRO2Ah1hCqyBNCKOuIyciuDw+Ktk8weNaMjCbjh8X+O5pwj nEzeN1yJALTKdwWJ71pSnjSPrtv49lm7gaRVRplluUqhT0JJYkddgASBIldPG680 0m3SSDXjypze4+M5Vli/mf6scWn3AcCsQbEYafi3B8YEbCclK+4JW6M4adMYkaUN -----END CERTIFICATE-----Generated at Thu Jul 3 19:14:48 2025 by rpki-client