$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft File: a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft (raw, json) Hash identifier: kBKG7W2gdRPHg2nMjjJYAjGiCtv8vyPYO5Ofsfqv0WI= Subject key identifier: 4C:B5:C6:4A:8F:6D:6F:05:75:76:7E:37:EA:A9:E3:91:CD:49:70:8B Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 Certificate issuer: /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Certificate serial: 010D0C9F4328584A74B57237AC38949292FF2480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft Manifest number: 010D0C9F4328584073A8340FD2B65F21CD12F42D Signing time: Wed 09 Jul 2025 01:00:03 +0000 Manifest this update: Wed 09 Jul 2025 01:00:03 +0000 Manifest next update: Fri 11 Jul 2025 01:00:00 +0000 Files and hashes: 1: a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl (hash: 2bjBfFz1aNkzsTOdf+cqtYqo6SOT18uQ2Hzv5KMSDFE=) 2: fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (hash: /mSAvK9R+LAaecVg5O8G7Ndfe2Czd/9rt8Ap52E7uTE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:b5:72:37:ac:38:94:92:92:ff:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e Validity Not Before: Jul 9 01:00:03 2025 GMT Not After : Jul 11 01:00:00 2025 GMT Subject: CN=b34cd9a5-9e84-4e29-9884-63338a7dec5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ff:8a:63:e7:95:db:23:fd:ca:80:95:de:56: 18:d8:0e:e8:20:b6:3a:95:c5:6a:c8:30:48:88:e8: c2:af:50:88:78:11:d6:90:65:c8:68:58:6a:2a:d5: b4:68:b9:a4:16:ad:5f:7e:af:4b:43:32:6f:c0:e3: 71:02:cb:c4:29:ba:86:b6:c7:e4:c6:1f:0b:d7:e8: 79:0c:d9:1e:92:bb:2a:50:42:24:51:a7:11:a6:19: c6:a3:70:a2:fd:73:8c:a6:c6:52:0f:19:9a:ef:69: 05:a6:ef:21:9f:38:78:76:d1:05:da:f3:62:08:48: ad:12:00:f7:85:1f:26:75:dd:09:ac:0a:b6:19:15: 06:59:a8:d2:ad:f1:6d:0b:fe:10:38:3a:3b:2d:ac: 78:bb:66:1b:75:33:6c:c9:89:49:5f:a5:61:24:5d: 20:d4:ec:8f:a0:ca:1c:3c:19:2d:5a:0d:cd:41:d8: d6:07:39:56:da:d7:d3:6e:8d:a9:cd:ac:85:0f:ee: 0a:16:a8:27:87:35:5e:e9:78:f3:6a:82:11:c4:25: 20:a5:50:3e:66:72:5f:7b:8f:22:d7:fc:de:a8:a9: 78:ad:62:7a:03:6e:77:15:72:50:f7:da:8b:0e:f6: 4a:30:c0:d9:12:77:42:19:62:c2:45:2e:2c:71:51: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B5:C6:4A:8F:6D:6F:05:75:76:7E:37:EA:A9:E3:91:CD:49:70:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl X509v3 Authority Key Identifier: keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:97:77:0e:09:13:b1:f9:04:59:74:ad:cb:b3:17:33:c3:16: e9:c1:e8:e0:34:52:e3:39:5e:a3:74:cd:ec:ff:64:f6:6e:08: 51:8f:0e:93:f1:9a:88:b1:f7:95:cb:f3:a4:08:7e:b3:22:67: 08:75:59:67:44:df:8d:ae:3f:3a:d5:fb:84:52:0c:cc:3a:f6: b1:c0:63:41:d8:3c:9d:73:4c:78:ab:1d:41:b0:a6:dc:ee:76: 80:ea:1d:cd:e5:2f:c1:2d:13:07:ae:c3:ba:60:42:15:2b:bc: 2c:e9:4d:37:69:cc:68:8e:50:69:f2:da:3d:8d:7d:8d:ce:8b: 0d:0f:e9:9a:8c:6d:5e:5a:67:dd:cc:3e:1b:b4:d0:1f:e6:33: b1:1f:1b:f9:17:89:a2:36:77:ad:36:05:0e:41:ba:50:1d:e9: d8:3f:c0:57:e0:aa:7c:86:c5:90:2c:a3:42:53:fc:d0:4f:58: bc:f0:fd:4d:26:72:98:72:9a:98:1c:67:b9:12:56:ad:78:a3: c6:67:65:07:fb:50:83:00:b9:36:b2:77:59:d4:1c:7a:aa:9c: c1:cb:f4:de:2c:1f:51:18:77:01:82:03:0e:27:98:8e:63:3b: c3:a8:57:79:7d:de:c3:89:53:a4:15:5f:b5:c8:e3:51:90:1d: cb:4d:f1:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0tXI3rDiUkpL/JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjMzNjMDgtYjI3YS00MTIwLTlhZjAtZTJjM2VlZjI3 MTNlMB4XDTI1MDcwOTAxMDAwM1oXDTI1MDcxMTAxMDAwMFowLzEtMCsGA1UEAxMk YjM0Y2Q5YTUtOWU4NC00ZTI5LTk4ODQtNjMzMzhhN2RlYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/+KY+eV2yP9yoCV3lYY2A7oILY6lcVqyDBI iOjCr1CIeBHWkGXIaFhqKtW0aLmkFq1ffq9LQzJvwONxAsvEKbqGtsfkxh8L1+h5 DNkekrsqUEIkUacRphnGo3Ci/XOMpsZSDxma72kFpu8hnzh4dtEF2vNiCEitEgD3 hR8mdd0JrAq2GRUGWajSrfFtC/4QODo7Lax4u2YbdTNsyYlJX6VhJF0g1OyPoMoc PBktWg3NQdjWBzlW2tfTbo2pzayFD+4KFqgnhzVe6XjzaoIRxCUgpVA+ZnJfe48i 1/zeqKl4rWJ6A253FXJQ99qLDvZKMMDZEndCGWLCRS4scVEm9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEy1xkqPbW8FdXZ+N+qp45HNSXCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMz M2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMzZWVmMjcxM2UvYTFjMzNjMDgtYjI3YS00 MTIwLTlhZjAtZTJjM2VlZjI3MTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFjMzNjMDgtYjI3YS00MTIwLTlh ZjAtZTJjM2VlZjI3MTNlL2ExYzMzYzA4LWIyN2EtNDEyMC05YWYwLWUyYzNlZWYy NzEzZS5jcmwwHwYDVR0jBBgwFoAUI9SA/n2IIi/i7W/sxh+R853mAvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWMzM2MwOC1iMjdhLTQxMjAtOWFmMC1lMmMz ZWVmMjcxM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsl3cOCROx+QRZdK3Lsxcz wxbpwejgNFLjOV6jdM3s/2T2bghRjw6T8ZqIsfeVy/OkCH6zImcIdVlnRN+Nrj86 1fuEUgzMOvaxwGNB2Dydc0x4qx1BsKbc7naA6h3N5S/BLRMHrsO6YEIVK7ws6U03 acxojlBp8to9jX2NzosND+majG1eWmfdzD4btNAf5jOxHxv5F4miNnetNgUOQbpQ HenYP8BX4Kp8hsWQLKNCU/zQT1i88P1NJnKYcpqYHGe5ElateKPGZ2UH+1CDALk2 sndZ1Bx6qpzBy/TeLB9RGHcBggMOJ5iOYzvDqFd5fd7DiVOkFV+1yONRkB3LTfGB -----END CERTIFICATE-----Generated at Wed Jul 9 11:33:06 2025 by rpki-client