$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft File: 221e0287-8ab4-430b-9f09-0c45fa8d7713.mft (raw, json) Hash identifier: IM2r7gHlCu1UqpWBeJnDE5Od0oBKWnkTJdWGIX4XF40= Subject key identifier: 3F:76:03:69:E9:A1:EF:1C:20:E3:8D:2C:13:2C:E7:B3:D2:BB:E7:5D Authority key identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B Certificate issuer: /CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Certificate serial: 010D0C9F4328584A71AF3D509CCAF6C8D4542A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft Manifest number: 010D0C9F43285849AE4F42DD1A1C57A2A68AC8E7 Signing time: Mon 07 Jul 2025 23:00:08 +0000 Manifest this update: Mon 07 Jul 2025 23:00:08 +0000 Manifest next update: Thu 10 Jul 2025 23:00:00 +0000 Files and hashes: 1: 07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa (hash: t8AU3gRGs/aac3uGKvofjXhCE/50dv0YLqquHye+k6g=) 2: 221e0287-8ab4-430b-9f09-0c45fa8d7713.crl (hash: fsQkFi6zl2CzZxrrGMUKxS3eSRPFADEOfvb+8Y30llI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:af:3d:50:9c:ca:f6:c8:d4:54:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Validity Not Before: Jul 7 23:00:08 2025 GMT Not After : Jul 10 23:00:00 2025 GMT Subject: CN=038af544-bb5c-4703-b1b2-ad4ce671240b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:09:9d:7e:da:cd:d2:3e:97:7e:f2:e9:ed:a3: ee:d7:e7:e4:d0:2f:98:ed:9c:17:d1:1b:4a:2b:90: d7:cd:91:02:ae:18:ab:3c:70:fd:a5:30:f5:9e:9b: 32:2d:04:fa:1c:9b:0a:4a:0a:09:df:de:bb:ac:87: 0b:f6:f3:6c:37:b1:25:3f:a0:19:0b:c3:70:34:b9: c5:96:f4:2a:d5:53:f1:d0:66:b9:fe:c8:01:49:fd: b9:2b:8f:38:e1:38:7d:5a:d6:80:be:1f:73:81:61: 28:77:aa:ec:ca:a9:a7:a8:0d:d4:06:57:72:3f:12: 10:a4:5b:70:57:0c:cb:c9:90:01:07:54:96:77:6b: 34:30:ae:bf:be:32:f4:0b:ae:63:be:7b:37:5b:54: 48:13:1b:63:9e:e7:0f:26:49:22:93:42:e9:59:fa: 9d:96:72:04:9b:99:08:d9:3b:df:bd:85:98:c6:ae: 34:cb:05:e6:54:9a:56:1d:84:f6:5c:35:3e:e2:e4: 73:84:8d:37:cd:d6:db:19:79:4d:8d:27:d9:67:3f: 2d:9b:4a:75:95:13:a3:2a:e4:e3:34:d8:8e:84:99: 3e:b9:53:d2:f1:2d:0f:cb:4f:a1:e3:48:f2:6d:04: 65:3e:ec:7f:80:55:f9:8a:c9:d6:61:a4:2a:90:4a: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:03:69:E9:A1:EF:1C:20:E3:8D:2C:13:2C:E7:B3:D2:BB:E7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl X509v3 Authority Key Identifier: keyid:1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a4:cc:2a:32:cc:32:fb:6a:5f:b4:2f:da:10:96:b7:0a:c0: 0e:bd:d8:6c:a7:85:23:a8:c0:36:1c:92:10:de:3f:f1:ba:32: 78:95:3c:65:c6:c4:62:6e:a5:9c:56:28:64:1d:dc:9b:bd:66: 40:dd:7c:da:4d:86:12:30:54:9d:74:6c:0f:91:da:88:6e:0b: dc:25:a5:9d:e3:1b:e5:67:95:81:07:9d:b2:66:31:01:66:35: cc:98:58:7d:60:8b:fd:03:1b:d1:6b:49:5f:e5:ac:73:29:14: e1:79:fc:cd:0f:24:c2:8f:91:8a:79:a0:05:99:e5:b6:c9:f0: a2:56:71:e7:95:fe:9b:c7:45:38:26:94:68:00:b9:f3:13:5c: 56:de:c8:df:fb:6d:91:ee:a0:07:fe:c3:eb:89:89:fb:a3:45: d4:28:41:97:37:e0:6b:82:01:a5:bb:2e:8b:5e:6c:21:56:c8: fb:94:d6:2e:39:ff:95:34:10:11:95:49:97:9f:5c:83:82:24: 52:3e:1f:fe:06:a5:59:60:99:90:70:e4:71:46:95:93:5a:b6: 4b:dd:9b:e5:3f:7c:ca:03:9d:5b:7e:26:ad:e5:38:fd:e7:57: c7:58:ca:5b:f5:03:cf:f6:68:9c:6c:d6:b0:9e:a9:75:7e:55: 96:76:5e:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpxrz1QnMr2yNRUKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxZTAyODctOGFiNC00MzBiLTlmMDktMGM0NWZhOGQ3 NzEzMB4XDTI1MDcwNzIzMDAwOFoXDTI1MDcxMDIzMDAwMFowLzEtMCsGA1UEAxMk MDM4YWY1NDQtYmI1Yy00NzAzLWIxYjItYWQ0Y2U2NzEyNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQmdftrN0j6XfvLp7aPu1+fk0C+Y7ZwX0RtK K5DXzZECrhirPHD9pTD1npsyLQT6HJsKSgoJ3967rIcL9vNsN7ElP6AZC8NwNLnF lvQq1VPx0Ga5/sgBSf25K4844Th9WtaAvh9zgWEod6rsyqmnqA3UBldyPxIQpFtw VwzLyZABB1SWd2s0MK6/vjL0C65jvns3W1RIExtjnucPJkkik0LpWfqdlnIEm5kI 2TvfvYWYxq40ywXmVJpWHYT2XDU+4uRzhI03zdbbGXlNjSfZZz8tm0p1lROjKuTj NNiOhJk+uVPS8S0Py0+h40jybQRlPux/gFX5isnWYaQqkEoW4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD92A2npoe8cIOONLBMs57PSu+ddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFl MDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1ZmE4ZDc3MTMvMjIxZTAyODctOGFiNC00 MzBiLTlmMDktMGM0NWZhOGQ3NzEzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjIxZTAyODctOGFiNC00MzBiLTlm MDktMGM0NWZhOGQ3NzEzLzIyMWUwMjg3LThhYjQtNDMwYi05ZjA5LTBjNDVmYThk NzcxMy5jcmwwHwYDVR0jBBgwFoAUHEGrBWrRcQ68xXL9zqGB367fp3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFlMDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1 ZmE4ZDc3MTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJpMwqMswy+2pftC/aEJa3 CsAOvdhsp4UjqMA2HJIQ3j/xujJ4lTxlxsRibqWcVihkHdybvWZA3XzaTYYSMFSd dGwPkdqIbgvcJaWd4xvlZ5WBB52yZjEBZjXMmFh9YIv9AxvRa0lf5axzKRThefzN DyTCj5GKeaAFmeW2yfCiVnHnlf6bx0U4JpRoALnzE1xW3sjf+22R7qAH/sPriYn7 o0XUKEGXN+BrggGluy6LXmwhVsj7lNYuOf+VNBARlUmXn1yDgiRSPh/+BqVZYJmQ cORxRpWTWrZL3ZvlP3zKA51bfiat5Tj951fHWMpb9QPP9micbNawnql1flWWdl63 -----END CERTIFICATE-----Generated at Tue Jul 8 21:40:05 2025 by rpki-client