$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft File: 3b24522b-8239-4bb9-9845-1e01e28aa452.mft (raw, json) Hash identifier: QBM+W63qUU7YlmjLDvJvSc3Di0KS4qqFO8Ak7rhv48A= Subject key identifier: BA:6E:5D:A8:96:61:60:7A:0F:76:B9:73:07:03:7C:22:EE:95:D1:B3 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584A7402CEE55C7F7B5F6DB121C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft Manifest number: 010D0C9F43285846097092BB96E608752D6F7052 Signing time: Tue 08 Jul 2025 19:00:08 +0000 Manifest this update: Tue 08 Jul 2025 19:00:08 +0000 Manifest next update: Thu 10 Jul 2025 19:00:00 +0000 Files and hashes: 1: 3b24522b-8239-4bb9-9845-1e01e28aa452.crl (hash: spcM6pt/mBi+HfuFxcJ7Z1r9VRhD2Lff8GcSV/HJN6k=) 2: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (hash: 7Otrf4iJPtHS9Z7MhOsyPQt4OgO++1EmgYizAM66IwM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:02:ce:e5:5c:7f:7b:5f:6d:b1:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Jul 8 19:00:08 2025 GMT Not After : Jul 10 19:00:00 2025 GMT Subject: CN=d422a367-8ba1-4cf8-a5ac-ada456025f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:19:f8:78:8f:00:e8:1f:79:a7:15:c6:1e: 58:7e:c5:e6:b7:df:98:52:c5:d7:a2:f7:34:3a:46: 7b:fb:c9:30:cc:b6:38:7c:f4:40:75:16:b8:fd:c4: 8e:1a:c7:8f:ee:b3:f9:37:85:8e:ae:b2:2d:84:09: 3f:53:78:01:0e:ec:61:a1:e2:58:b4:20:b1:60:a1: 56:6b:5a:b9:7e:29:cf:fe:37:6b:b5:b2:00:e8:dd: 71:8b:fd:0a:95:8a:4b:bd:6d:e5:70:19:51:2d:3c: b4:94:c3:ee:f4:07:63:05:4e:30:36:2f:02:9c:70: 03:30:4a:89:53:69:d4:ed:83:60:bf:b0:3f:6b:87: 81:f1:b8:25:41:aa:ef:dc:46:a8:48:a4:d9:58:38: 05:23:76:2f:40:49:e8:b3:f3:20:3b:8c:6c:56:4c: 3c:54:dc:43:51:61:86:c9:0b:54:a4:c1:8b:5f:79: c3:73:a1:79:0f:a9:a0:5c:89:43:8b:2b:2b:11:ce: 43:8e:85:55:38:5c:06:37:73:eb:2b:e3:6e:6f:3b: a1:6c:1c:34:c9:eb:33:bb:cd:1c:20:f0:e3:4f:82: a1:55:fd:15:3e:ee:a3:80:13:44:0f:69:f8:e0:5d: e3:bd:18:62:92:0c:d0:56:1f:d7:0d:8c:c3:2b:d4: f5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6E:5D:A8:96:61:60:7A:0F:76:B9:73:07:03:7C:22:EE:95:D1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fe:bb:15:91:29:e5:57:ab:4c:39:f4:04:2b:f6:db:4b:e9: 26:ab:bb:21:42:e2:80:14:6f:b7:84:62:72:e3:6c:1e:e1:ab: a2:92:87:ef:e0:05:bc:e1:9a:70:34:29:a0:b3:52:3f:b2:11: 8a:2f:30:a1:38:cf:3f:ba:b6:ac:20:d3:a8:ab:14:ab:59:d9: 8e:49:9f:da:a1:7b:e2:0c:05:34:a7:1d:14:a9:5c:aa:29:61: 44:70:ce:9e:6e:d9:7a:96:72:b4:ff:6e:6d:47:35:9b:a0:2f: 29:4d:a7:16:d3:61:ac:5b:1d:2b:e2:74:cc:50:82:90:3b:4e: 05:af:16:5b:59:c2:e3:86:09:d9:70:6f:d2:37:37:6c:49:0c: b5:6a:02:03:74:0b:dc:d1:ad:44:d6:7d:a8:5c:1e:fd:78:e1: 55:f7:70:72:1d:88:e3:4c:20:30:60:61:89:66:17:6c:22:7d: 2c:b9:c0:94:ce:14:e0:49:f7:cc:27:0b:a3:fc:56:3d:c4:85: 94:62:8c:f0:4c:3f:fe:eb:8d:c5:34:59:c0:a3:d1:72:19:1d: 3d:72:c0:af:0a:04:c8:82:21:3b:fe:53:5f:7b:b2:8d:07:2f: 56:5b:e5:44:0e:3b:a7:fe:a0:5d:30:45:63:a6:21:b5:9e:37: eb:ad:0f:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0As7lXH97X22xIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MDcwODE5MDAwOFoXDTI1MDcxMDE5MDAwMFowLzEtMCsGA1UEAxMk ZDQyMmEzNjctOGJhMS00Y2Y4LWE1YWMtYWRhNDU2MDI1ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk0Z+HiPAOgfeacVxh5YfsXmt9+YUsXXovc0 OkZ7+8kwzLY4fPRAdRa4/cSOGseP7rP5N4WOrrIthAk/U3gBDuxhoeJYtCCxYKFW a1q5finP/jdrtbIA6N1xi/0KlYpLvW3lcBlRLTy0lMPu9AdjBU4wNi8CnHADMEqJ U2nU7YNgv7A/a4eB8bglQarv3EaoSKTZWDgFI3YvQEnos/MgO4xsVkw8VNxDUWGG yQtUpMGLX3nDc6F5D6mgXIlDiysrEc5DjoVVOFwGN3PrK+NubzuhbBw0yeszu80c IPDjT4KhVf0VPu6jgBNED2n44F3jvRhikgzQVh/XDYzDK9T19QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLpuXaiWYWB6D3a5cwcDfCLuldGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvM2IyNDUyMmItODIzOS00 YmI5LTk4NDUtMWUwMWUyOGFhNDUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH/rsVkSnlV6tMOfQEK/bb S+kmq7shQuKAFG+3hGJy42we4auikofv4AW84ZpwNCmgs1I/shGKLzChOM8/uras INOoqxSrWdmOSZ/aoXviDAU0px0UqVyqKWFEcM6ebtl6lnK0/25tRzWboC8pTacW 02GsWx0r4nTMUIKQO04FrxZbWcLjhgnZcG/SNzdsSQy1agIDdAvc0a1E1n2oXB79 eOFV93ByHYjjTCAwYGGJZhdsIn0sucCUzhTgSffMJwuj/FY9xIWUYozwTD/+643F NFnAo9FyGR09csCvCgTIgiE7/lNfe7KNBy9WW+VEDjun/qBdMEVjpiG1njfrrQ8G -----END CERTIFICATE-----Generated at Wed Jul 9 20:44:10 2025 by rpki-client