$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: zcRFz4gFRq1IoYSeDvolUqqV8hlk/uift8NaHQT9RgE= Subject key identifier: A1:97:2E:8D:3B:2F:A9:C7:B3:F3:7F:71:94:EA:10:C2:F7:75:4D:03 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F4328584A7568259D9BAA0562E9F961C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A332B Signing time: Wed 09 Jul 2025 07:00:08 +0000 Manifest this update: Wed 09 Jul 2025 07:00:08 +0000 Manifest next update: Fri 11 Jul 2025 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: fXpFuLOxrKf3G3jytIUInemtnxTtEVnjA4Y6JNfJZ8g=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: jX+6rJtU0haW4evg2b3KfWTcqzIi6zGOKn0ki/Ikq+M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:68:25:9d:9b:aa:05:62:e9:f9:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Jul 9 07:00:08 2025 GMT Not After : Jul 11 07:00:00 2025 GMT Subject: CN=d32a6c30-8ea7-49b6-b7f1-439e48dafac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:ff:ef:f5:b7:bc:e7:13:6c:a2:6c:57:9f: b2:9e:ae:4d:fe:0a:51:0d:0a:a8:df:a4:fa:9c:ef: 97:37:88:8c:fb:b1:4d:de:52:b7:f3:f7:50:2d:e0: d4:b9:39:ee:6e:c3:f3:19:4b:9d:b3:d6:73:ef:5e: 83:11:8f:cc:2c:4c:d0:d4:94:b7:8d:5b:07:1f:72: e7:4d:70:a5:81:e5:a8:07:61:6c:98:5b:c7:6b:e2: ed:47:42:7a:05:d5:04:fd:a1:ad:ed:df:5b:28:48: 17:a0:85:e9:6b:b7:e3:ae:d3:71:2a:cd:46:78:45: 63:a2:0d:a9:da:a9:7a:fa:a3:b8:7c:58:a8:a4:75: bc:e1:f6:08:c0:01:34:ce:76:5b:82:11:ad:ab:b2: b3:8f:74:d9:8c:7f:ab:bb:dd:cd:f1:c2:52:d5:d7: 5c:fc:d6:81:2f:ab:7a:11:54:0d:32:7b:71:40:63: 65:61:f5:53:c7:db:06:00:df:4b:48:01:8b:b8:f2: eb:dc:1a:bd:8d:25:a9:f5:a3:92:42:25:07:43:59: 80:94:d8:4c:ba:23:a1:b8:36:53:1b:14:9d:ea:6a: c8:f2:06:c2:92:1e:30:10:d5:91:59:38:8b:72:ac: 08:8f:ba:f3:41:87:01:9c:07:03:cd:a4:f4:6e:be: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:97:2E:8D:3B:2F:A9:C7:B3:F3:7F:71:94:EA:10:C2:F7:75:4D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:56:f1:e4:e4:ba:03:97:4b:a5:03:c0:f8:57:8c:d3:80:4c: 38:51:97:85:72:48:c4:9a:62:4b:bc:ae:b2:5c:9b:04:fa:23: 0a:e1:f9:ce:f8:54:17:70:b1:b4:17:81:e0:b7:b0:a0:34:10: c4:b5:41:fb:29:a0:a0:b5:68:0b:1e:ec:6b:d5:0d:36:d4:ae: 25:0e:8c:c7:7f:b5:09:80:f9:68:e5:2d:de:97:40:ab:10:bc: b0:c7:ad:9a:cf:19:e9:87:f1:b6:7e:6b:43:3a:d1:d9:c5:9b: fe:1d:33:f3:e6:56:09:d3:60:f3:e2:4c:88:03:47:d7:8d:d5: eb:96:c8:3c:a0:d8:dc:ec:f8:aa:a7:c9:ec:f4:2d:f9:b9:76: 8c:74:90:89:78:00:be:c2:a9:78:eb:42:a9:5d:0d:e4:f9:5b: 1e:96:2b:75:02:6a:51:fd:00:52:2e:d5:f0:43:81:6e:87:36: 2e:c8:a3:06:95:29:fd:c7:30:bb:ba:01:71:23:fd:1b:9e:88: 1c:7d:44:1e:91:b8:1c:4f:68:ea:9b:db:1c:26:5c:49:d1:d7: 5d:a6:3c:db:5a:33:ad:f0:a8:4c:88:62:e4:a5:30:32:dd:06: 33:e5:1c:3d:dd:c7:62:8f:94:82:0b:b0:b4:8b:e7:74:f3:67: 6a:a5:68:6e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp1aCWdm6oFYun5YcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI1MDcwOTA3MDAwOFoXDTI1MDcxMTA3MDAwMFowLzEtMCsGA1UEAxMk ZDMyYTZjMzAtOGVhNy00OWI2LWI3ZjEtNDM5ZTQ4ZGFmYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Xb/7/W3vOcTbKJsV5+ynq5N/gpRDQqo36T6 nO+XN4iM+7FN3lK38/dQLeDUuTnubsPzGUuds9Zz716DEY/MLEzQ1JS3jVsHH3Ln TXClgeWoB2FsmFvHa+LtR0J6BdUE/aGt7d9bKEgXoIXpa7fjrtNxKs1GeEVjog2p 2ql6+qO4fFiopHW84fYIwAE0znZbghGtq7Kzj3TZjH+ru93N8cJS1ddc/NaBL6t6 EVQNMntxQGNlYfVTx9sGAN9LSAGLuPLr3Bq9jSWp9aOSQiUHQ1mAlNhMuiOhuDZT GxSd6mrI8gbCkh4wENWRWTiLcqwIj7rzQYcBnAcDzaT0br6uHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKGXLo07L6nHs/N/cZTqEML3dU0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDPVvHk5LoDl0ulA8D4V4zT gEw4UZeFckjEmmJLvK6yXJsE+iMK4fnO+FQXcLG0F4Hgt7CgNBDEtUH7KaCgtWgL Huxr1Q021K4lDozHf7UJgPlo5S3el0CrELywx62azxnph/G2fmtDOtHZxZv+HTPz 5lYJ02Dz4kyIA0fXjdXrlsg8oNjc7Piqp8ns9C35uXaMdJCJeAC+wql460KpXQ3k +Vselit1AmpR/QBSLtXwQ4FuhzYuyKMGlSn9xzC7ugFxI/0bnogcfUQekbgcT2jq m9scJlxJ0dddpjzbWjOt8KhMiGLkpTAy3QYz5Rw93cdij5SCC7C0i+d082dqpWhu -----END CERTIFICATE-----Generated at Thu Jul 10 06:31:18 2025 by rpki-client