$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft File: 590ea78c-91e2-45e2-b596-eeeedd529e3e.mft (raw, json) Hash identifier: Ns4p5c37knYz1eX1x52VV944vROzNNu459KgfP0uJsQ= Subject key identifier: D0:11:8E:A9:C6:DC:AA:FB:D2:10:DF:6B:0D:20:91:4C:19:4A:DB:5C Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F4328584A79034644343B080C69481F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft Manifest number: 010D0C9F4328584073A858FEA04ED8A25C53102D Signing time: Thu 10 Jul 2025 14:00:08 +0000 Manifest this update: Thu 10 Jul 2025 14:00:08 +0000 Manifest next update: Sun 13 Jul 2025 14:00:00 +0000 Files and hashes: 1: 590ea78c-91e2-45e2-b596-eeeedd529e3e.crl (hash: 3gs75SsD7L8gx5rrWzhR6Ax/cc1KaHtwqyhaGEliV6w=) 2: cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (hash: gV73COfOUcakW3HntDZvELLXpQN86b/uIg4pw10HD7M=) 3: d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa (hash: NKhjt3myQ5bmjYnPdNS71UaKpKkWIDIPcYUXrAZPNkk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:03:46:44:34:3b:08:0c:69:48:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Jul 10 14:00:08 2025 GMT Not After : Jul 13 14:00:00 2025 GMT Subject: CN=b3b5ed1d-cc57-4caf-abe5-2ed3d6e33b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:6a:ef:fa:ed:41:d1:47:a7:a2:f3:52:80: b0:65:60:21:7a:9e:ab:6a:78:1b:3e:3e:ea:3e:1f: bf:99:af:e1:e8:ec:2d:90:ca:7f:08:eb:58:53:89: 39:cb:59:0d:17:ed:50:9c:40:d8:a3:e5:b2:48:7c: 18:92:39:b3:1c:ac:33:65:0c:01:d5:c7:64:8e:0b: b7:a6:b3:e1:3a:95:53:40:38:a0:f7:64:71:f9:2e: ac:c4:af:44:11:38:6b:e4:bb:96:ba:cf:51:8b:e4: ed:74:ee:6e:a2:f3:55:30:8a:78:d9:8b:0d:de:72: 70:c8:ba:7f:64:87:7d:f2:ce:b9:b8:62:a3:fd:e3: 94:55:d3:ba:05:f0:4c:04:7b:cf:a8:16:9c:19:69: 38:f0:36:3c:6f:4d:ec:0f:06:fa:f7:5f:28:f7:8d: 19:8b:08:58:16:b9:db:05:79:02:eb:72:5b:91:8b: 4f:d5:07:08:c5:47:f7:2d:18:84:07:2f:8e:ad:fa: ca:72:76:27:46:d2:51:ee:c9:38:57:8c:9c:07:86: c2:ce:59:cb:62:e2:2c:bb:35:37:a2:72:04:ab:ad: 35:d5:bd:2c:d1:fc:d8:90:85:0f:a0:ba:91:c1:65: cd:73:52:80:5f:3e:9a:fe:48:23:c7:0d:1a:f1:43: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:11:8E:A9:C6:DC:AA:FB:D2:10:DF:6B:0D:20:91:4C:19:4A:DB:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:36:ac:5b:3c:a6:ec:5f:70:a9:28:a2:04:9b:a3:7b:99:19: f4:9e:f9:2e:9d:5d:40:18:89:a3:4d:d2:f5:1f:5c:1b:d0:0d: 4c:c3:c4:e3:97:f5:25:78:13:a8:31:11:b9:c1:65:29:df:85: 5b:30:da:18:ab:10:6d:de:42:af:c6:89:5d:1e:5d:5e:df:e6: ca:9f:7c:60:b7:6c:99:75:42:08:97:d0:08:24:2a:54:e3:e1: 24:39:a8:d3:74:68:8e:9d:f9:65:01:8d:a6:06:c5:6d:e2:aa: 18:96:0a:e8:1a:e6:e3:50:73:75:1a:b4:48:0b:6c:88:3c:48: aa:a7:a0:86:6b:14:01:34:3d:f7:63:82:d9:05:f5:94:c4:62: 98:d5:70:15:73:b4:c2:80:6f:e2:2f:fc:a6:ea:d5:58:27:e0: 66:64:c0:1a:d0:6e:95:8c:11:b4:fe:d4:e1:1d:8d:eb:60:3b: 6c:e7:59:b0:3e:7c:80:85:88:e0:7e:56:b9:7e:8c:f7:9b:e0: 9c:cb:84:99:2d:13:a5:65:38:d6:72:c3:34:c4:95:f6:85:aa: f0:b9:fd:9a:e6:d5:a1:90:54:b2:86:ef:6b:63:14:ca:a3:2e: 28:c1:07:bc:4b:59:cb:5b:cc:fd:88:e8:5e:dd:44:bd:2a:e5: 86:c7:b8:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp5A0ZENDsIDGlIH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI1MDcxMDE0MDAwOFoXDTI1MDcxMzE0MDAwMFowLzEtMCsGA1UEAxMk YjNiNWVkMWQtY2M1Ny00Y2FmLWFiZTUtMmVkM2Q2ZTMzYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupRq7/rtQdFHp6LzUoCwZWAhep6rangbPj7q Ph+/ma/h6OwtkMp/COtYU4k5y1kNF+1QnEDYo+WySHwYkjmzHKwzZQwB1cdkjgu3 prPhOpVTQDig92Rx+S6sxK9EEThr5LuWus9Ri+TtdO5uovNVMIp42YsN3nJwyLp/ ZId98s65uGKj/eOUVdO6BfBMBHvPqBacGWk48DY8b03sDwb6918o940ZiwhYFrnb BXkC63JbkYtP1QcIxUf3LRiEBy+OrfrKcnYnRtJR7sk4V4ycB4bCzlnLYuIsuzU3 onIEq6011b0s0fzYkIUPoLqRwWXNc1KAXz6a/kgjxw0a8UORRQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNARjqnG3Kr70hDfaw0gkUwZSttcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvNTkwZWE3OGMtOTFlMi00 NWUyLWI1OTYtZWVlZWRkNTI5ZTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzNqxbPKbsX3CpKKIEm6N7 mRn0nvkunV1AGImjTdL1H1wb0A1Mw8Tjl/UleBOoMRG5wWUp34VbMNoYqxBt3kKv xoldHl1e3+bKn3xgt2yZdUIIl9AIJCpU4+EkOajTdGiOnfllAY2mBsVt4qoYlgro GubjUHN1GrRIC2yIPEiqp6CGaxQBND33Y4LZBfWUxGKY1XAVc7TCgG/iL/ym6tVY J+BmZMAa0G6VjBG0/tThHY3rYDts51mwPnyAhYjgfla5foz3m+Ccy4SZLROlZTjW csM0xJX2harwuf2a5tWhkFSyhu9rYxTKoy4owQe8S1nLW8z9iOhe3US9KuWGx7jJ -----END CERTIFICATE-----Generated at Fri Jul 11 04:43:09 2025 by rpki-client