$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft File: a854a4c3-e5e0-49a9-a110-947d91107e15.mft (raw, json) Hash identifier: O5iS0VnnJQrogO95VuAlDNCK6ET/qE8vQP6hCIQgkho= Subject key identifier: 6F:85:B7:69:CA:A7:06:97:52:EA:A5:D0:14:58:D3:5B:AB:DF:EA:1A Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 Certificate issuer: /CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Certificate serial: 010D0C9F4328584A743E61E29765727867551180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft Manifest number: 010D0C9F432858428F0B0519A5A2D5FB11136C05 Signing time: Tue 08 Jul 2025 21:00:08 +0000 Manifest this update: Tue 08 Jul 2025 21:00:08 +0000 Manifest next update: Fri 11 Jul 2025 21:00:00 +0000 Files and hashes: 1: 87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (hash: PngQTNzMgn81/yEn5hzsWthBw5AKQCCvl6GKHHmk16A=) 2: a854a4c3-e5e0-49a9-a110-947d91107e15.crl (hash: BMl4jsrhUOwfQeLu69zGmsHiQl6faCJNIt2eqCNJlgA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:3e:61:e2:97:65:72:78:67:55:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Validity Not Before: Jul 8 21:00:08 2025 GMT Not After : Jul 11 21:00:00 2025 GMT Subject: CN=29e3e24f-f873-4c1f-88f1-67f2ed059faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:c1:b3:c1:bd:6f:20:fc:87:5e:06:89:3f: 78:15:5a:7a:ab:84:d3:fb:70:61:b3:74:cf:f1:86: 7f:5f:ee:2e:36:f4:a5:43:58:29:ba:05:c9:95:10: 37:df:ae:52:f9:6a:6c:a5:ba:50:46:4c:57:a3:54: 4e:e6:42:4c:40:15:b1:80:e0:5f:c8:8c:ee:c0:51: b8:b1:de:d4:e7:4b:9b:a0:e0:d5:cc:06:d6:93:fa: 08:e5:3b:a4:aa:bd:18:25:43:73:e0:4d:74:1a:27: 6c:06:6c:33:a5:12:10:30:e5:a8:f1:30:af:e6:a3: 58:56:df:14:49:fb:8d:fa:b9:35:25:7c:4b:0b:de: c4:3c:40:fd:c4:c8:98:38:10:98:43:31:82:4d:f0: 6c:05:d4:48:30:8c:c2:2f:9c:39:2e:79:32:34:f1: 06:67:14:59:28:28:2b:3c:b5:35:b4:4c:ea:d8:df: 97:6f:4f:89:f0:f0:9e:f0:6b:d9:ed:2f:84:9c:1c: f7:a3:43:f8:64:6e:27:0e:09:70:9e:6b:b9:b8:24: fd:3e:75:ca:12:5a:d9:56:fe:54:21:b3:0b:63:e8: 19:c3:f9:99:7d:66:7b:09:5c:83:71:90:e3:27:0b: 81:42:9f:16:22:9e:af:f1:35:3e:2c:c0:91:82:96: 94:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:85:B7:69:CA:A7:06:97:52:EA:A5:D0:14:58:D3:5B:AB:DF:EA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl X509v3 Authority Key Identifier: keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ed:d7:ed:6e:50:cf:ab:79:e2:2d:bc:f5:15:56:a4:3b:3c: b1:e9:ad:9f:03:2e:5b:2d:f4:de:a9:ba:fb:e5:c8:e7:b6:de: 71:fa:72:74:0a:30:20:f0:c4:e4:33:b0:6e:4a:14:ba:b9:ee: 9a:21:0e:e9:e3:51:a4:78:ad:2a:90:48:ba:5e:24:96:93:3b: c0:45:07:4c:d3:e5:b5:02:ac:40:43:ca:d3:c1:ab:cb:32:a2: 90:1c:e0:c1:4d:87:9c:4a:2b:0c:af:bf:90:d5:da:4f:f9:8c: 80:d4:1a:91:95:14:a7:22:70:49:d5:9b:6f:69:d6:f8:06:35: d0:57:96:16:81:1e:0d:5e:9a:ed:b0:ae:a0:93:d5:cf:11:60: 54:32:09:56:f7:ea:4f:c8:73:f0:81:9e:45:71:0b:34:b3:00: c5:95:e3:85:49:fd:bf:9b:04:65:d0:1b:64:e0:fa:3e:af:6c: 40:8b:70:fe:d2:9b:79:d1:d9:e6:78:8c:49:ed:b6:04:9d:56: 9d:30:97:96:ea:0f:47:f0:8d:01:ee:b4:23:57:80:26:e9:66: 99:ed:41:dd:8a:2e:0e:d9:89:b7:fe:89:4d:62:13:a3:29:37: 4e:8f:da:7a:7e:e9:bd:08:36:e3:94:cd:2e:a7:6c:3e:6d:7e: 16:19:3b:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0PmHil2VyeGdVEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NGE0YzMtZTVlMC00OWE5LWExMTAtOTQ3ZDkxMTA3 ZTE1MB4XDTI1MDcwODIxMDAwOFoXDTI1MDcxMTIxMDAwMFowLzEtMCsGA1UEAxMk MjllM2UyNGYtZjg3My00YzFmLTg4ZjEtNjdmMmVkMDU5ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZvBs8G9byD8h14GiT94FVp6q4TT+3Bhs3TP 8YZ/X+4uNvSlQ1gpugXJlRA3365S+WpspbpQRkxXo1RO5kJMQBWxgOBfyIzuwFG4 sd7U50uboODVzAbWk/oI5Tukqr0YJUNz4E10GidsBmwzpRIQMOWo8TCv5qNYVt8U SfuN+rk1JXxLC97EPED9xMiYOBCYQzGCTfBsBdRIMIzCL5w5LnkyNPEGZxRZKCgr PLU1tEzq2N+Xb0+J8PCe8GvZ7S+EnBz3o0P4ZG4nDglwnmu5uCT9PnXKElrZVv5U IbMLY+gZw/mZfWZ7CVyDcZDjJwuBQp8WIp6v8TU+LMCRgpaUNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG+Ft2nKpwaXUuql0BRY01ur3+oaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0 YTRjMy1lNWUwLTQ5YTktYTExMC05NDdkOTExMDdlMTUvYTg1NGE0YzMtZTVlMC00 OWE5LWExMTAtOTQ3ZDkxMTA3ZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTg1NGE0YzMtZTVlMC00OWE5LWEx MTAtOTQ3ZDkxMTA3ZTE1L2E4NTRhNGMzLWU1ZTAtNDlhOS1hMTEwLTk0N2Q5MTEw N2UxNS5jcmwwHwYDVR0jBBgwFoAUcan10a1vSExftH0+L57JtwDdpxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0YTRjMy1lNWUwLTQ5YTktYTExMC05NDdk OTExMDdlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCm7dftblDPq3niLbz1FVak Ozyx6a2fAy5bLfTeqbr75cjntt5x+nJ0CjAg8MTkM7BuShS6ue6aIQ7p41GkeK0q kEi6XiSWkzvARQdM0+W1AqxAQ8rTwavLMqKQHODBTYecSisMr7+Q1dpP+YyA1BqR lRSnInBJ1Ztvadb4BjXQV5YWgR4NXprtsK6gk9XPEWBUMglW9+pPyHPwgZ5FcQs0 swDFleOFSf2/mwRl0Btk4Po+r2xAi3D+0pt50dnmeIxJ7bYEnVadMJeW6g9H8I0B 7rQjV4Am6WaZ7UHdii4O2Ym3/olNYhOjKTdOj9p6fum9CDbjlM0up2w+bX4WGTtG -----END CERTIFICATE-----Generated at Wed Jul 9 14:28:37 2025 by rpki-client