$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft File: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft (raw, json) Hash identifier: 2CYL+ZdJYxfvDYFPRDggcDB4TwxZPOWh7wpgJScibKA= Subject key identifier: B8:E2:E4:2D:F1:8C:00:EE:40:AE:22:D6:A3:9C:66:17:F8:2E:C0:A7 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584A770909B45978FFE75C8DD040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft Manifest number: 010D0C9F4328584073A829E3051185C1AED5AC16 Signing time: Wed 09 Jul 2025 21:00:08 +0000 Manifest this update: Wed 09 Jul 2025 21:00:08 +0000 Manifest next update: Sat 12 Jul 2025 21:00:00 +0000 Files and hashes: 1: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (hash: dvyqsV5W+7CvW2xOcwqYPKrrYkhVLzmZMHXvO2S/NpE=) 2: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl (hash: agnU+ZDjoiPtcQodLXbA4gmBW6nKvex9b7Nv/oQ0QM0=) 3: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (hash: z8zw779UTzu6WdziNyKA+kJ4yq7erFKE/BUdEt1l/Ps=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:09:09:b4:59:78:ff:e7:5c:8d:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Jul 9 21:00:08 2025 GMT Not After : Jul 12 21:00:00 2025 GMT Subject: CN=f1fd9f70-a93d-43c4-94c0-5f5209b2446e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:0f:30:ba:25:5f:3a:6a:69:f1:4d:82:a1: d8:5d:1e:03:07:cd:65:dc:e8:21:88:7b:d3:67:89: e3:40:c9:0f:4b:a9:86:01:c2:02:a9:a3:ff:c4:e5: a6:93:36:5c:e8:dc:d0:d2:da:e8:2c:84:16:d4:5d: 67:e0:a9:45:2b:cc:ce:c2:51:af:2c:7c:b8:d3:8c: a2:b3:0b:09:95:6a:43:02:bd:63:6b:8e:68:c7:ad: 1a:85:d2:33:7f:86:7c:57:83:03:c7:79:d3:b0:e9: 9c:17:01:90:ad:ec:91:13:ac:5e:52:91:1e:1f:50: ab:92:b2:75:92:c1:e6:d7:33:71:5c:77:98:00:73: c2:54:58:4e:98:e4:e8:bf:65:2b:ac:5a:38:7e:49: b9:88:0a:fa:70:b6:38:e8:a0:4c:ca:05:72:e8:96: ac:55:40:05:5e:78:1b:30:a3:96:df:52:79:f8:74: 70:a1:1a:b9:be:8d:3a:73:cf:fa:c0:98:13:a3:5b: 63:fc:0e:94:93:ca:40:ab:28:cb:b1:34:9e:7e:bd: 9c:f7:5b:a9:74:8d:bf:f6:6e:3a:f1:31:4d:40:91: a7:17:bf:71:97:6e:04:4e:75:bf:4c:52:5b:3e:2d: 35:08:92:fc:24:91:ab:4d:9d:76:38:94:50:66:2f: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:E4:2D:F1:8C:00:EE:40:AE:22:D6:A3:9C:66:17:F8:2E:C0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:2a:d0:fe:de:63:97:c8:ca:3a:56:2a:f3:9a:b0:e0:9f:52: 4f:91:e7:7a:01:6e:82:00:b6:82:b0:cb:b8:5d:27:43:7b:11: e8:40:74:26:a8:2f:cb:85:0f:aa:39:96:96:d1:87:d0:b5:95: f6:8f:2b:1d:0a:af:99:a0:b6:05:a2:a7:4c:2e:3e:9a:8b:a7: 7a:1c:cb:43:23:b3:3b:77:ce:28:67:31:e3:a5:9a:36:d1:a0: 74:06:3b:4a:fe:8f:6b:e5:de:28:0d:83:d9:d4:35:3e:9a:95: 60:e5:9b:50:7d:70:58:d3:56:06:1c:c7:63:ee:42:db:9b:f8: 7d:5d:f2:e4:e0:18:45:6e:27:66:cd:fc:2d:2c:45:92:9c:54: 9c:ce:35:6d:d4:b6:f6:b6:3e:c9:d0:d7:f8:40:1b:01:12:af: 1e:28:9d:1b:66:49:6b:b7:91:2f:87:cd:d7:5f:77:c6:70:e0: e5:5c:ed:c9:f2:25:b3:2c:b0:d3:60:a3:81:92:44:a3:c7:1e: 34:9a:43:ff:b2:b5:1b:b3:1b:4e:3e:57:0e:cb:7d:12:d3:1e: e9:d1:56:15:48:b8:50:aa:41:ca:69:4d:40:f9:77:68:23:b7: 99:2b:ef:70:96:a1:69:a4:9c:84:75:04:22:8c:55:7e:1d:fb: 0d:a4:99:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp3CQm0WXj/51yN0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MDcwOTIxMDAwOFoXDTI1MDcxMjIxMDAwMFowLzEtMCsGA1UEAxMk ZjFmZDlmNzAtYTkzZC00M2M0LTk0YzAtNWY1MjA5YjI0NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruYPMLolXzpqafFNgqHYXR4DB81l3OghiHvT Z4njQMkPS6mGAcICqaP/xOWmkzZc6NzQ0troLIQW1F1n4KlFK8zOwlGvLHy404yi swsJlWpDAr1ja45ox60ahdIzf4Z8V4MDx3nTsOmcFwGQreyRE6xeUpEeH1CrkrJ1 ksHm1zNxXHeYAHPCVFhOmOTov2UrrFo4fkm5iAr6cLY46KBMygVy6JasVUAFXngb MKOW31J5+HRwoRq5vo06c8/6wJgTo1tj/A6Uk8pAqyjLsTSefr2c91updI2/9m46 8TFNQJGnF79xl24ETnW/TFJbPi01CJL8JJGrTZ12OJRQZi8pywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLji5C3xjADuQK4i1qOcZhf4LsCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvYzg1ZjNiMmMtYzM5MS00 OWUzLWEzYTUtZWE0MzAyMzVjYzZiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgKtD+3mOXyMo6VirzmrDg n1JPked6AW6CALaCsMu4XSdDexHoQHQmqC/LhQ+qOZaW0YfQtZX2jysdCq+ZoLYF oqdMLj6ai6d6HMtDI7M7d84oZzHjpZo20aB0BjtK/o9r5d4oDYPZ1DU+mpVg5ZtQ fXBY01YGHMdj7kLbm/h9XfLk4BhFbidmzfwtLEWSnFSczjVt1Lb2tj7J0Nf4QBsB Eq8eKJ0bZklrt5Evh83XX3fGcODlXO3J8iWzLLDTYKOBkkSjxx40mkP/srUbsxtO PlcOy30S0x7p0VYVSLhQqkHKaU1A+XdoI7eZK+9wlqFppJyEdQQijFV+HfsNpJmB -----END CERTIFICATE-----Generated at Thu Jul 10 11:18:02 2025 by rpki-client