$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft File: c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft (raw, json) Hash identifier: yUDTU0m6APVumt6gJiOnn5QigZItdDcnG702OxlnUxk= Subject key identifier: B3:6E:43:28:9D:65:9B:D2:4A:84:2C:96:53:A8:D4:E8:AE:67:9D:02 Authority key identifier: B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64 Certificate issuer: /CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b Certificate serial: 010D0C9F4328584A1B608BDD8638FFF71B8B6360 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft Manifest number: 010D0C9F4328584073A825EBB32607DFA2D9AD0A Signing time: Sat 07 Jun 2025 01:02:03 +0000 Manifest this update: Sat 07 Jun 2025 01:02:03 +0000 Manifest next update: Sun 08 Jun 2025 21:00:00 +0000 Files and hashes: 1: 76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa (hash: KW7XjWqwbNXMFeVTNudrANvRYcgrSfPU9f42WXhOgbM=) 2: c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl (hash: GxMO/NrXbIbqFD/gAjFUy3hNWYeAnhaPu34+BFVTME8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:8b:dd:86:38:ff:f7:1b:8b:63:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b Validity Not Before: Jun 7 01:02:03 2025 GMT Not After : Jun 8 21:00:00 2025 GMT Subject: CN=3a1ff3f4-4029-41fb-935b-69df727d6d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:20:f2:29:7f:08:38:61:e4:b6:f3:cc:15: 78:bd:b3:83:b7:2e:b2:7e:17:15:c7:3f:cf:bc:2b: ad:e8:dd:7d:1b:57:e0:5b:58:cc:33:57:a1:dc:c9: b5:5f:30:dc:8d:7b:10:90:64:dd:c0:6b:89:30:a7: 7f:32:68:ab:ae:e0:66:94:ad:d5:56:ff:dd:f1:3f: 76:1d:89:8c:c7:d1:43:9b:06:2a:ce:b1:d1:6b:82: 82:21:3e:97:cc:e1:a5:5e:93:05:3a:d0:36:93:0e: 4b:c7:be:6c:f3:95:99:bc:af:ce:d1:82:ef:88:97: 13:72:ff:e4:52:9b:90:b7:53:83:2e:8c:49:0e:14: 3d:ab:b5:47:9c:e0:5e:e7:68:5b:1d:b4:24:32:8a: fe:3c:55:98:ab:f5:00:86:5e:85:14:bc:da:ff:26: 3b:3f:d9:b0:3e:e2:4d:91:cf:44:05:ba:0f:49:cc: 15:24:16:fc:44:05:53:bc:2a:99:c0:da:c4:db:db: 41:af:52:7e:6b:54:47:03:38:e7:5c:1d:c5:30:3c: 2d:05:46:cb:08:f2:6f:3e:84:86:48:87:5f:f8:39: 1d:29:44:b7:ba:bf:29:1c:b1:e8:e8:39:da:d1:d2: 02:95:2a:da:18:6e:1a:74:72:59:ee:c9:08:93:3a: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:43:28:9D:65:9B:D2:4A:84:2C:96:53:A8:D4:E8:AE:67:9D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl X509v3 Authority Key Identifier: keyid:B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e9:25:75:c2:22:01:e7:55:4e:49:a2:6d:ce:3e:6f:46:e2: 0d:cb:be:49:26:8b:c1:f4:e0:bd:48:28:32:41:71:a0:96:5b: 80:13:0c:27:12:89:ac:bb:bb:c9:ff:e3:45:df:a6:bf:83:c6: da:68:19:bc:75:d7:3d:29:e0:8e:26:7a:a2:59:ea:e1:95:53: 79:15:7a:e7:54:ad:0e:3a:57:32:e6:f3:5c:de:97:8e:70:55: c8:ae:30:d9:cf:66:1d:eb:0c:60:60:a8:88:b6:60:33:41:9f: b7:bf:d8:6e:5a:8c:5b:0b:c0:c7:2c:dc:9d:89:30:e6:47:47: a7:f7:c4:e0:7c:c2:8c:02:e0:d7:42:33:6c:81:e4:6d:49:ab: de:17:8e:40:78:4a:07:72:26:49:77:6b:c6:98:1e:1a:52:b6: 2a:5d:57:ec:a0:e0:e4:d1:57:82:2d:bc:d3:fa:52:37:3b:8c: 1a:ba:52:74:54:8b:9d:b4:08:ba:5f:a2:e1:a4:34:5f:b4:3a: 13:9c:68:5a:b8:93:0c:f0:96:de:d2:fc:f6:8f:74:38:cb:d2: cf:e0:ce:07:1d:cf:20:dd:60:34:21:61:07:2b:11:3d:c8:de: 25:9b:51:50:3d:6a:c5:ad:36:f3:2a:c3:5d:76:9b:7d:28:bc: 25:2f:d2:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEobYIvdhjj/9xuLY2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUyNTZlNDgtODhmOS00MTNkLWExYmYtZTE0ZWFhYjJl NTFiMB4XDTI1MDYwNzAxMDIwM1oXDTI1MDYwODIxMDAwMFowLzEtMCsGA1UEAxMk M2ExZmYzZjQtNDAyOS00MWZiLTkzNWItNjlkZjcyN2Q2ZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu4g8il/CDhh5LbzzBV4vbODty6yfhcVxz/P vCut6N19G1fgW1jMM1eh3Mm1XzDcjXsQkGTdwGuJMKd/MmirruBmlK3VVv/d8T92 HYmMx9FDmwYqzrHRa4KCIT6XzOGlXpMFOtA2kw5Lx75s85WZvK/O0YLviJcTcv/k UpuQt1ODLoxJDhQ9q7VHnOBe52hbHbQkMor+PFWYq/UAhl6FFLza/yY7P9mwPuJN kc9EBboPScwVJBb8RAVTvCqZwNrE29tBr1J+a1RHAzjnXB3FMDwtBUbLCPJvPoSG SIdf+DkdKUS3ur8pHLHo6Dna0dIClSraGG4adHJZ7skIkzo83wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLNuQyidZZvSSoQsllOo1OiuZ50CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1 NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRlYWFiMmU1MWIvYzUyNTZlNDgtODhmOS00 MTNkLWExYmYtZTE0ZWFhYjJlNTFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzUyNTZlNDgtODhmOS00MTNkLWEx YmYtZTE0ZWFhYjJlNTFiL2M1MjU2ZTQ4LTg4ZjktNDEzZC1hMWJmLWUxNGVhYWIy ZTUxYi5jcmwwHwYDVR0jBBgwFoAUuYhX1woZZQSM7UsZsiTlYuJ3i2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRl YWFiMmU1MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA66SV1wiIB51VOSaJtzj5v RuINy75JJovB9OC9SCgyQXGglluAEwwnEomsu7vJ/+NF36a/g8baaBm8ddc9KeCO JnqiWerhlVN5FXrnVK0OOlcy5vNc3peOcFXIrjDZz2Yd6wxgYKiItmAzQZ+3v9hu WoxbC8DHLNydiTDmR0en98TgfMKMAuDXQjNsgeRtSaveF45AeEoHciZJd2vGmB4a UrYqXVfsoODk0VeCLbzT+lI3O4waulJ0VIudtAi6X6LhpDRftDoTnGhauJMM8Jbe 0vz2j3Q4y9LP4M4HHc8g3WA0IWEHKxE9yN4lm1FQPWrFrTbzKsNddpt9KLwlL9Id -----END CERTIFICATE-----Generated at Sat Jun 7 22:25:00 2025 by rpki-client