$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft File: 443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft (raw, json) Hash identifier: coMGc+o1Tg3330S01oaNKMHicfwj+mVLcylQwdeDcSE= Subject key identifier: B3:12:D2:9D:10:B1:88:3E:F9:3A:06:7B:59:84:A5:48:AC:2A:D3:EA Authority key identifier: 16:91:90:8A:7C:C6:2B:D2:E6:59:62:0F:CD:64:2A:90:A7:21:90:9C Certificate issuer: /CN=443c13af-c88b-4f08-a006-7d4f68f4fbaf Certificate serial: 010D0C9F4328584A74209476673E786C171FCC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft Manifest number: 010D0C9F432858419EDC5D68ED5877D47D9DAF7E Signing time: Tue 08 Jul 2025 20:00:08 +0000 Manifest this update: Tue 08 Jul 2025 20:00:08 +0000 Manifest next update: Fri 11 Jul 2025 20:00:00 +0000 Files and hashes: 1: 443c13af-c88b-4f08-a006-7d4f68f4fbaf.crl (hash: 6qd0Sk/pB0dHNz3/q8AL7jjN75j9Kjti/j8I1tJE7m0=) 2: d5314af6-ab6b-35fd-b0ba-8be46e805dd3.roa (hash: PKQiFkALtG3+18AoPRS9wTV/zKRvnX9RydMjtCnvPxk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:20:94:76:67:3e:78:6c:17:1f:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443c13af-c88b-4f08-a006-7d4f68f4fbaf Validity Not Before: Jul 8 20:00:08 2025 GMT Not After : Jul 11 20:00:00 2025 GMT Subject: CN=0875e4b1-656a-4e37-8475-0192199fa8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:7d:db:3a:0a:1a:eb:55:c2:44:33:27:8a: 3c:28:1d:97:78:6c:e0:27:73:f5:94:21:cf:19:0b: b2:83:4a:f3:66:42:b4:83:da:6b:8a:f0:42:64:c3: 5d:a8:42:ef:86:0a:12:93:86:b0:8d:c8:0b:39:94: 85:8a:da:30:5b:be:b4:ee:60:d7:d1:dc:c1:bc:45: a6:47:b0:17:47:90:6b:66:ed:e7:6e:a7:cc:40:8b: 27:05:de:f7:e0:1d:13:d4:11:5f:c9:9d:f9:6b:e8: a2:4d:f8:41:29:3e:c8:01:fe:be:e5:c5:bb:56:09: 52:8c:84:13:64:72:0a:a4:9d:71:65:f7:97:54:1d: d3:a9:b9:d8:91:ce:ba:34:ae:35:77:bf:06:9f:96: 74:8f:b7:4c:3d:5a:19:b8:a8:5b:59:f3:27:b2:5d: a8:e4:69:85:f4:57:de:82:c8:b5:70:31:f5:75:72: 34:80:24:e7:29:86:b5:7d:7c:07:76:38:02:af:ae: f6:db:d8:41:54:0a:49:11:8c:e0:e6:10:0b:9c:eb: 35:7d:96:be:9c:19:0a:2e:49:c1:18:04:75:62:87: 83:5d:34:aa:06:a6:da:f1:de:01:6f:f1:49:85:8b: a9:34:13:1f:68:a3:ae:cc:40:b1:9d:9b:24:30:08: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:D2:9D:10:B1:88:3E:F9:3A:06:7B:59:84:A5:48:AC:2A:D3:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf/443c13af-c88b-4f08-a006-7d4f68f4fbaf.crl X509v3 Authority Key Identifier: keyid:16:91:90:8A:7C:C6:2B:D2:E6:59:62:0F:CD:64:2A:90:A7:21:90:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/443c13af-c88b-4f08-a006-7d4f68f4fbaf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:37:1a:d5:f3:5c:83:b7:fb:01:01:e9:ab:8e:d1:9e:1c:79: 22:aa:65:91:89:dd:23:aa:62:c7:54:42:dc:bb:51:58:ee:4a: b0:2a:ce:d6:83:83:cc:53:96:56:4f:58:37:44:a1:55:d8:d4: 6f:42:96:6c:8a:e8:e5:4a:12:c3:74:6a:4b:bf:34:d3:57:ab: f0:dd:48:8f:c6:b9:57:eb:54:8a:c7:59:ee:79:12:9e:13:cb: c9:91:7b:a2:83:3b:a8:3d:d9:ba:a5:77:4d:cb:df:a8:43:ac: 8d:be:31:1b:ed:11:f8:4e:72:15:98:88:e8:bc:b9:d4:23:13: f0:01:07:c9:89:c9:ec:dc:84:43:38:5c:7e:59:86:a9:4c:5d: d8:be:bf:c6:69:a1:a1:9c:b7:63:c8:da:2f:18:25:bc:01:ea: e1:c2:74:8e:71:7c:5a:33:a6:d8:9a:26:b8:66:fe:37:89:28: 9e:7b:8f:0e:9b:3a:44:1a:e2:26:74:97:02:d1:9f:e6:9e:a7: 8b:4f:3d:4e:bc:e6:e9:c7:d2:a4:a5:13:77:dd:ba:78:b7:02: 8a:9c:ad:32:c5:13:00:8d:d7:af:a8:cb:cb:bc:71:9c:ca:19: f0:2f:b8:de:79:17:67:d6:fd:03:a9:70:6f:07:f9:0b:8c:a0: be:19:bc:26 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0IJR2Zz54bBcfzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzYzEzYWYtYzg4Yi00ZjA4LWEwMDYtN2Q0ZjY4ZjRm YmFmMB4XDTI1MDcwODIwMDAwOFoXDTI1MDcxMTIwMDAwMFowLzEtMCsGA1UEAxMk MDg3NWU0YjEtNjU2YS00ZTM3LTg0NzUtMDE5MjE5OWZhOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybN92zoKGutVwkQzJ4o8KB2XeGzgJ3P1lCHP GQuyg0rzZkK0g9privBCZMNdqELvhgoSk4awjcgLOZSFitowW7607mDX0dzBvEWm R7AXR5BrZu3nbqfMQIsnBd734B0T1BFfyZ35a+iiTfhBKT7IAf6+5cW7VglSjIQT ZHIKpJ1xZfeXVB3TqbnYkc66NK41d78Gn5Z0j7dMPVoZuKhbWfMnsl2o5GmF9Ffe gsi1cDH1dXI0gCTnKYa1fXwHdjgCr67229hBVApJEYzg5hALnOs1fZa+nBkKLknB GAR1YoeDXTSqBqba8d4Bb/FJhYupNBMfaKOuzECxnZskMAjjDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMS0p0QsYg++ToGe1mEpUisKtPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NDNj MTNhZi1jODhiLTRmMDgtYTAwNi03ZDRmNjhmNGZiYWYvNDQzYzEzYWYtYzg4Yi00 ZjA4LWEwMDYtN2Q0ZjY4ZjRmYmFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDQzYzEzYWYtYzg4Yi00ZjA4LWEw MDYtN2Q0ZjY4ZjRmYmFmLzQ0M2MxM2FmLWM4OGItNGYwOC1hMDA2LTdkNGY2OGY0 ZmJhZi5jcmwwHwYDVR0jBBgwFoAUFpGQinzGK9LmWWIPzWQqkKchkJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NDNjMTNhZi1jODhiLTRmMDgtYTAwNi03ZDRm NjhmNGZiYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPNxrV81yDt/sBAemrjtGe HHkiqmWRid0jqmLHVELcu1FY7kqwKs7Wg4PMU5ZWT1g3RKFV2NRvQpZsiujlShLD dGpLvzTTV6vw3UiPxrlX61SKx1nueRKeE8vJkXuigzuoPdm6pXdNy9+oQ6yNvjEb 7RH4TnIVmIjovLnUIxPwAQfJicns3IRDOFx+WYapTF3Yvr/GaaGhnLdjyNovGCW8 AerhwnSOcXxaM6bYmia4Zv43iSiee48OmzpEGuImdJcC0Z/mnqeLTz1OvObpx9Kk pRN33bp4twKKnK0yxRMAjdevqMvLvHGcyhnwL7jeeRdn1v0DqXBvB/kLjKC+Gbwm -----END CERTIFICATE-----Generated at Wed Jul 9 10:19:53 2025 by rpki-client