$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft File: 7afbb48a-7a41-422c-a27b-4b92e0907153.mft (raw, json) Hash identifier: nuhY6HVmxvzTS0aEZpZFBmxkw5Ky296e+3EMomwXylQ= Subject key identifier: 33:F5:08:90:EA:56:6D:45:11:AD:E5:AF:FC:C7:C8:3A:5F:BC:B8:39 Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E Certificate issuer: /CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Certificate serial: 010D0C9F4328584AB80F32CC38966F003F9E7400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft Manifest number: 010D0C9F432858496EA47549D85836F893509638 Signing time: Sat 02 Aug 2025 04:00:03 +0000 Manifest this update: Sat 02 Aug 2025 04:00:03 +0000 Manifest next update: Tue 05 Aug 2025 04:00:00 +0000 Files and hashes: 1: 309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (hash: HoI4BW/NOUIamMfUQaLDHO2wZJdiHne9v7FZQxNhcis=) 2: 7afbb48a-7a41-422c-a27b-4b92e0907153.crl (hash: 2ZNYHoQ8CB0lNA/5EuI5I5HWoMN8wMK62xhaND42ue4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b8:0f:32:cc:38:96:6f:00:3f:9e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153 Validity Not Before: Aug 2 04:00:03 2025 GMT Not After : Aug 5 04:00:00 2025 GMT Subject: CN=791aa541-3bae-4f7b-bace-6c0b7b882d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:3f:ea:13:4a:6a:8b:83:1a:85:e9:06:4a: 67:90:98:cf:2f:27:c1:9d:5e:18:00:dd:e2:d0:1b: db:05:8a:e2:96:8c:c0:ee:37:b1:94:f3:23:42:70: 3d:f8:ee:0f:17:61:29:ca:f2:0a:0f:1e:9d:39:bb: f5:52:d1:0f:cd:34:52:3b:85:d3:60:5c:a7:4c:b9: 43:c8:d7:ad:f7:e4:a4:f5:41:96:29:8b:90:a9:5a: c3:9b:99:d6:d9:0c:eb:7a:dc:02:99:bc:23:f1:3d: 56:86:64:ab:d3:82:5c:44:7f:11:b6:c4:74:0b:eb: f7:76:41:c8:3b:15:7a:32:2e:e7:63:16:4f:aa:b7: 48:12:d8:e6:28:b8:38:4e:32:5a:af:ed:a8:ec:bd: 31:29:e9:d7:84:be:94:af:43:bf:58:fd:4c:ab:ac: c6:87:20:bb:95:3b:27:86:dd:56:33:08:57:cb:33: 41:ac:de:42:b1:ea:5e:83:44:ad:53:6b:ec:fe:af: 69:fe:bc:20:7e:85:b0:31:64:f3:9f:b2:f7:bb:e4: e6:9d:a1:93:43:34:63:56:96:d5:b5:45:97:bf:2b: c3:10:7a:a2:53:c0:a3:1d:6c:df:37:54:90:e8:d3: 0f:7d:1f:32:0a:bc:8d:78:9c:6a:2c:35:4a:1f:c6: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F5:08:90:EA:56:6D:45:11:AD:E5:AF:FC:C7:C8:3A:5F:BC:B8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl X509v3 Authority Key Identifier: keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5b:aa:5a:93:7a:1c:67:a4:d1:82:2a:ef:0a:2f:f7:0b:98: a4:ad:f2:81:d9:6e:a4:7d:c6:4f:fd:71:10:e3:10:b0:f9:30: 52:08:f6:02:f6:9c:51:a6:5a:be:a1:89:50:57:1e:60:75:69: 76:32:b5:5c:63:93:d8:62:0a:71:56:c3:fb:b1:55:5e:b7:0a: 1c:b1:52:8b:e4:1b:4c:43:9c:5f:ad:f4:56:16:d6:4c:92:88: d3:dc:2e:3e:26:d7:e0:89:05:d4:71:84:6d:93:1c:7b:f2:a7: 36:92:22:08:c3:d4:65:06:7b:52:fb:06:0c:f2:56:48:8d:7e: bf:b1:38:69:4d:06:67:e0:ec:a9:4f:54:6f:cf:c8:50:6c:35: bf:05:0c:5b:da:6f:5b:c7:63:63:96:9c:08:20:e0:24:5b:b0: e5:2d:2f:6a:11:5a:16:2e:30:62:84:b8:70:ae:b1:87:e6:c4: 22:e8:cd:65:bc:d6:f8:e7:d5:35:e0:20:bb:10:f0:73:24:13: 06:f1:45:c3:2f:8d:c6:d2:4d:64:b8:91:29:83:c9:3f:98:a0: f7:c6:e1:38:2a:d5:b6:48:61:a8:54:3e:19:44:6a:a7:53:0b: b7:90:59:d4:40:3d:d5:4e:87:ea:74:b5:1f:6c:ba:24:c3:fb: be:5a:27:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq4DzLMOJZvAD+edAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYmI0OGEtN2E0MS00MjJjLWEyN2ItNGI5MmUwOTA3 MTUzMB4XDTI1MDgwMjA0MDAwM1oXDTI1MDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk NzkxYWE1NDEtM2JhZS00ZjdiLWJhY2UtNmMwYjdiODgyZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DM/6hNKaouDGoXpBkpnkJjPLyfBnV4YAN3i 0BvbBYrilozA7jexlPMjQnA9+O4PF2EpyvIKDx6dObv1UtEPzTRSO4XTYFynTLlD yNet9+Sk9UGWKYuQqVrDm5nW2QzretwCmbwj8T1WhmSr04JcRH8RtsR0C+v3dkHI OxV6Mi7nYxZPqrdIEtjmKLg4TjJar+2o7L0xKenXhL6Ur0O/WP1Mq6zGhyC7lTsn ht1WMwhXyzNBrN5Csepeg0StU2vs/q9p/rwgfoWwMWTzn7L3u+TmnaGTQzRjVpbV tUWXvyvDEHqiU8CjHWzfN1SQ6NMPfR8yCryNeJxqLDVKH8a09wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDP1CJDqVm1FEa3lr/zHyDpfvLg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83YWZi YjQ4YS03YTQxLTQyMmMtYTI3Yi00YjkyZTA5MDcxNTMvN2FmYmI0OGEtN2E0MS00 MjJjLWEyN2ItNGI5MmUwOTA3MTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2FmYmI0OGEtN2E0MS00MjJjLWEy N2ItNGI5MmUwOTA3MTUzLzdhZmJiNDhhLTdhNDEtNDIyYy1hMjdiLTRiOTJlMDkw NzE1My5jcmwwHwYDVR0jBBgwFoAUIzJ1MrQ9OnACvnyh5vqZeNyLeY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83YWZiYjQ4YS03YTQxLTQyMmMtYTI3Yi00Yjky ZTA5MDcxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHW6pak3ocZ6TRgirvCi/3 C5ikrfKB2W6kfcZP/XEQ4xCw+TBSCPYC9pxRplq+oYlQVx5gdWl2MrVcY5PYYgpx VsP7sVVetwocsVKL5BtMQ5xfrfRWFtZMkojT3C4+JtfgiQXUcYRtkxx78qc2kiII w9RlBntS+wYM8lZIjX6/sThpTQZn4OypT1Rvz8hQbDW/BQxb2m9bx2NjlpwIIOAk W7DlLS9qEVoWLjBihLhwrrGH5sQi6M1lvNb459U14CC7EPBzJBMG8UXDL43G0k1k uJEpg8k/mKD3xuE4KtW2SGGoVD4ZRGqnUwu3kFnUQD3VTofqdLUfbLokw/u+WicZ -----END CERTIFICATE-----Generated at Sat Aug 2 05:53:37 2025 by rpki-client