$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft File: 3789343d-8560-48b0-9530-d2a1129fefe7.mft (raw, json) Hash identifier: f9vy4MXMmEX1qMeuvyQx1s0w1A6mlLwo3/XmL0fu07M= Subject key identifier: DB:F9:6E:C6:AF:55:D4:10:73:8D:5A:07:90:3D:1E:C1:08:C3:91:E4 Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F4328584A745C29E1F0EBF38B561C9040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft Manifest number: 010D0C9F4328584676A999D1ED37E0ACB5EFAE75 Signing time: Tue 08 Jul 2025 22:00:09 +0000 Manifest this update: Tue 08 Jul 2025 22:00:09 +0000 Manifest next update: Fri 11 Jul 2025 22:00:00 +0000 Files and hashes: 1: 3789343d-8560-48b0-9530-d2a1129fefe7.crl (hash: nJu0xoZjJgvrCcELTDKuMHE8mM6a5IEOe1HZRFQIfZY=) 2: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (hash: pzYVWfXFRw+f5aS5DUdHaPysYiMsKpvjQTR1VivITnA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:5c:29:e1:f0:eb:f3:8b:56:1c:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: Jul 8 22:00:09 2025 GMT Not After : Jul 11 22:00:00 2025 GMT Subject: CN=ad102793-74c7-4194-be0a-f7a18cb44328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:94:62:84:50:58:7a:53:55:b4:a9:af:b9:ed: 31:f2:b4:6a:c7:31:6a:bb:b4:95:d2:f4:b1:2d:64: 60:f8:bb:d6:b1:79:53:6a:6b:8c:51:97:4c:95:29: 3e:1c:df:5a:f4:12:a8:33:01:c9:70:f4:31:d3:d7: b4:b6:0c:ea:14:a3:4d:0a:54:de:30:d1:b9:60:d3: ed:73:92:f0:66:f9:83:9f:72:d6:82:39:62:c1:4b: 5e:8a:11:13:29:7a:5b:b7:c3:a4:bc:2d:f9:9b:58: 1d:f8:db:ea:41:f9:65:81:7d:c3:3e:50:c0:61:d6: 3f:c1:84:73:5a:60:66:f5:db:50:9a:49:44:fc:dc: ca:6e:72:91:18:c5:f8:2f:3d:14:3b:ea:1d:0d:b1: 55:14:67:fe:d8:60:ad:6a:19:e7:4a:95:25:cb:c3: f2:13:9a:e9:25:07:61:0a:75:63:2e:0e:b5:53:4c: bb:05:c3:a7:6f:39:9e:1e:59:35:2a:f9:35:e2:30: 11:59:74:94:07:bf:05:8c:4e:d4:c5:37:b1:e9:b9: 5a:f0:18:d3:3c:80:c8:3a:91:87:5d:57:e3:4a:23: 2b:82:d4:83:7b:3a:bd:63:aa:c6:fd:14:b0:b0:e6: 18:fa:12:d2:30:95:54:2f:94:04:22:ae:ff:01:43: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F9:6E:C6:AF:55:D4:10:73:8D:5A:07:90:3D:1E:C1:08:C3:91:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:65:dc:b7:47:92:27:27:ea:f8:e4:fb:4a:10:d9:be:c5:2d: 18:79:0a:9f:a0:fb:c9:04:0e:c1:89:07:3f:99:48:d7:5d:7a: cd:84:d3:52:f2:b4:e9:fa:43:85:84:14:d9:b8:29:b5:40:21: f2:8f:81:94:6a:fd:27:65:c2:9b:06:c4:cb:bf:d7:2f:2e:fb: a1:19:64:03:2f:5b:40:5f:a1:ff:b8:b0:d0:1b:9d:c5:f7:dc: 59:56:94:64:69:30:6e:f6:87:a9:a5:20:8e:62:3a:a9:34:a4: 23:ba:73:64:f3:b2:46:f8:08:3e:e9:ae:6b:f5:7d:0d:10:bf: 03:10:59:65:0a:41:b3:c0:07:0f:6d:40:9f:1d:22:fe:9d:3a: 4e:f2:89:a8:27:1a:51:54:10:c8:be:c9:df:19:8e:d9:7e:c0: 26:1d:03:39:62:dd:04:ba:57:6a:56:e6:00:26:c5:2d:1d:28: 84:fe:9d:83:2d:b9:47:fa:64:67:99:82:47:2b:bf:e1:60:0c: 0c:67:a0:3f:96:19:b9:30:c8:d7:c0:60:5e:ce:47:3e:80:66: 65:80:b7:bc:50:a9:c3:ee:01:a6:24:19:d6:2e:e0:22:3c:58: 46:4a:fe:e1:57:47:ff:f9:33:d3:c5:2e:c9:db:15:ab:d2:56: be:df:dd:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0XCnh8Ovzi1YckEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI1MDcwODIyMDAwOVoXDTI1MDcxMTIyMDAwMFowLzEtMCsGA1UEAxMk YWQxMDI3OTMtNzRjNy00MTk0LWJlMGEtZjdhMThjYjQ0MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJRihFBYelNVtKmvue0x8rRqxzFqu7SV0vSx LWRg+LvWsXlTamuMUZdMlSk+HN9a9BKoMwHJcPQx09e0tgzqFKNNClTeMNG5YNPt c5LwZvmDn3LWgjliwUteihETKXpbt8OkvC35m1gd+NvqQfllgX3DPlDAYdY/wYRz WmBm9dtQmklE/NzKbnKRGMX4Lz0UO+odDbFVFGf+2GCtahnnSpUly8PyE5rpJQdh CnVjLg61U0y7BcOnbzmeHlk1Kvk14jARWXSUB78FjE7UxTex6bla8BjTPIDIOpGH XVfjSiMrgtSDezq9Y6rG/RSwsOYY+hLSMJVUL5QEIq7/AUNYAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNv5bsavVdQQc41aB5A9HsEIw5HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvMzc4OTM0M2QtODU2MC00 OGIwLTk1MzAtZDJhMTEyOWZlZmU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaZdy3R5InJ+r45PtKENm+ xS0YeQqfoPvJBA7BiQc/mUjXXXrNhNNS8rTp+kOFhBTZuCm1QCHyj4GUav0nZcKb BsTLv9cvLvuhGWQDL1tAX6H/uLDQG53F99xZVpRkaTBu9oeppSCOYjqpNKQjunNk 87JG+Ag+6a5r9X0NEL8DEFllCkGzwAcPbUCfHSL+nTpO8omoJxpRVBDIvsnfGY7Z fsAmHQM5Yt0EuldqVuYAJsUtHSiE/p2DLblH+mRnmYJHK7/hYAwMZ6A/lhm5MMjX wGBezkc+gGZlgLe8UKnD7gGmJBnWLuAiPFhGSv7hV0f/+TPTxS7J2xWr0la+3909 -----END CERTIFICATE-----Generated at Wed Jul 9 22:14:01 2025 by rpki-client