$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: vsu/3UfD3oFNhXUqZS+v3D/pjZIL0HX6qhwpHcfHItQ= Subject key identifier: 49:3B:86:EE:10:A0:19:1D:5C:5B:50:67:55:77:8C:70:54:E0:1A:71 Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584B16A11DBCDF2816A9532E4480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684C0F Signing time: Fri 05 Sep 2025 01:00:03 +0000 Manifest this update: Fri 05 Sep 2025 01:00:03 +0000 Manifest next update: Mon 08 Sep 2025 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: REVeQotpfr12QeJ7MlvD1dB1ztnb7KzB4iIDMutrY3Q=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: OmALsDTOS1DyEiLgTZtUTv1UDN2f3Fs+j6cw9IIvSRE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:1d:bc:df:28:16:a9:53:2e:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: Sep 5 01:00:03 2025 GMT Not After : Sep 8 01:00:00 2025 GMT Subject: CN=a55cae71-843c-46e8-b4af-4a86a3423527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:41:9f:60:8e:1d:7f:35:d6:53:7c:22:73: c7:a3:81:26:ea:71:90:21:7f:cb:88:d4:2e:ae:21: 60:92:b6:66:67:31:4b:37:cc:5c:4a:72:46:61:30: 55:b4:d0:81:78:a8:32:f8:7a:82:24:ba:0c:03:1c: 09:49:2f:b8:3f:bd:1d:75:f1:fd:d8:71:bb:08:a0: 50:1d:fd:50:9f:99:ae:38:8b:8b:e4:a4:b2:a3:46: 18:94:57:07:a6:04:2a:83:41:e8:f6:0f:23:bb:1a: 89:61:0e:31:b8:22:aa:92:bf:bf:4c:71:70:cf:56: 4e:bf:1d:43:53:26:b0:6f:74:90:3e:bc:9c:7b:47: bc:69:cd:28:05:b4:cb:4e:33:ba:94:77:e5:e7:c7: 4d:81:6b:01:0d:0b:2a:68:93:22:1b:bb:45:0b:00: 7a:18:c0:28:77:f7:c3:8b:86:05:8f:d1:c9:ce:9f: a6:30:a3:83:00:74:5f:ed:6c:e4:67:d1:37:4f:06: 23:a2:57:84:b3:68:26:6a:74:43:b7:23:89:4d:c2: 6b:e8:93:5a:99:83:5c:b7:20:49:34:28:1d:df:bf: 7a:85:01:d2:21:eb:77:97:51:8c:7d:bd:6f:17:c1: 6e:2f:1f:e8:cc:83:30:59:de:95:7b:3b:90:94:cc: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:86:EE:10:A0:19:1D:5C:5B:50:67:55:77:8C:70:54:E0:1A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d2:ee:a4:83:30:58:62:8c:fc:2b:02:7a:2a:31:ef:35:af: 07:58:36:d3:11:6c:02:9c:0e:71:1c:f9:d8:a2:68:86:1a:96: 1b:4b:cf:9c:09:09:b2:7e:ac:fd:0a:e9:44:67:c2:64:c1:64: 0c:c0:34:d3:82:29:a6:40:73:83:85:01:07:61:7a:5f:11:f5: 68:22:7e:3a:a8:53:bb:dc:b8:0a:02:a0:c4:53:cd:31:e4:3c: a8:20:70:81:f4:f6:de:cd:85:87:d4:47:a1:5c:d5:31:7e:1a: 2e:e1:0c:f9:b3:c9:bb:14:c5:c8:4f:80:52:18:57:2b:f6:5a: 68:1c:12:04:55:a1:8b:6d:3a:35:46:77:f7:20:87:10:cd:b1: 23:5c:6f:92:ed:f0:a0:8b:e7:0b:51:b7:19:fd:73:f2:4a:57: 55:bb:ff:8d:b1:d4:60:db:77:c6:dd:7c:64:bc:52:56:75:97: de:f8:7c:39:50:1d:44:21:31:26:11:3e:ab:ed:aa:b8:6f:23: eb:e5:6f:ae:80:a5:b4:0b:c0:eb:b3:88:bc:32:a8:ca:43:1b: e4:c0:66:83:24:44:e7:3e:39:f8:a6:e7:ec:65:60:dc:52:f0: d0:fe:48:1a:8f:ba:e3:70:4a:ac:8b:6b:de:38:46:c3:3a:15: bb:63:13:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsWoR283ygWqVMuRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MDkwNTAxMDAwM1oXDTI1MDkwODAxMDAwMFowLzEtMCsGA1UEAxMk YTU1Y2FlNzEtODQzYy00NmU4LWI0YWYtNGE4NmEzNDIzNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSxBn2COHX811lN8InPHo4Em6nGQIX/LiNQu riFgkrZmZzFLN8xcSnJGYTBVtNCBeKgy+HqCJLoMAxwJSS+4P70ddfH92HG7CKBQ Hf1Qn5muOIuL5KSyo0YYlFcHpgQqg0Ho9g8juxqJYQ4xuCKqkr+/THFwz1ZOvx1D Uyawb3SQPryce0e8ac0oBbTLTjO6lHfl58dNgWsBDQsqaJMiG7tFCwB6GMAod/fD i4YFj9HJzp+mMKODAHRf7WzkZ9E3TwYjoleEs2gmanRDtyOJTcJr6JNamYNctyBJ NCgd3796hQHSIet3l1GMfb1vF8FuLx/ozIMwWd6VezuQlMx6/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEk7hu4QoBkdXFtQZ1V3jHBU4BpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU0u6kgzBYYoz8KwJ6KjHv Na8HWDbTEWwCnA5xHPnYomiGGpYbS8+cCQmyfqz9CulEZ8JkwWQMwDTTgimmQHOD hQEHYXpfEfVoIn46qFO73LgKAqDEU80x5DyoIHCB9PbezYWH1EehXNUxfhou4Qz5 s8m7FMXIT4BSGFcr9lpoHBIEVaGLbTo1Rnf3IIcQzbEjXG+S7fCgi+cLUbcZ/XPy SldVu/+NsdRg23fG3XxkvFJWdZfe+Hw5UB1EITEmET6r7aq4byPr5W+ugKW0C8Dr s4i8MqjKQxvkwGaDJETnPjn4pufsZWDcUvDQ/kgaj7rjcEqsi2veOEbDOhW7YxMF -----END CERTIFICATE-----Generated at Fri Sep 5 11:30:20 2025 by rpki-client