$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft File: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft (raw, json) Hash identifier: 8KnwGJWQapDKH9+zK1lYtQwIdO0TfPsdRrY4I0z8uzs= Subject key identifier: FB:DF:D1:12:88:14:29:A2:65:B8:33:B2:74:8D:AF:5D:80:C3:0F:4F Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584A745C29DE1F39986C0F8A8780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft Manifest number: 010D0C9F43285848785A75BB852C81469E7152BB Signing time: Tue 08 Jul 2025 22:00:09 +0000 Manifest this update: Tue 08 Jul 2025 22:00:09 +0000 Manifest next update: Fri 11 Jul 2025 22:00:00 +0000 Files and hashes: 1: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (hash: 2epZBsVfaofYy3WYmTUTIS8w0gwkbAzaCRJvQxeErNE=) 2: d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl (hash: M3E7ifnqcshEjfYxArgl8qHXZtfIdRoFxiHx/ByMykM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:74:5c:29:de:1f:39:98:6c:0f:8a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: Jul 8 22:00:09 2025 GMT Not After : Jul 11 22:00:00 2025 GMT Subject: CN=4b14ecc2-8c48-45b5-b914-a30b6e789f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:7c:82:13:8f:a8:30:2e:c8:2e:52:ba:35: eb:04:3d:37:90:c8:b6:2c:5d:46:6f:80:5c:ad:9b: e2:93:f7:a5:83:ac:0b:1c:19:db:b6:f0:fd:e9:94: 26:9f:46:bd:96:9b:a5:6d:a9:2c:bf:d6:21:aa:4e: 51:b4:f0:10:f4:a6:d1:c2:44:e8:da:72:f7:34:e0: 61:05:69:67:ce:2a:14:bc:ed:12:41:f2:b8:05:9d: 27:5b:8e:63:ae:3b:30:49:19:23:af:eb:77:8b:a9: 2b:44:b6:e4:7f:27:65:94:37:6c:d3:df:65:55:e1: 56:d4:7e:c8:21:29:98:0f:83:70:18:b6:31:7e:c4: 6c:f4:24:cf:fb:4d:4f:11:ac:a5:cd:d5:b1:0c:56: 27:eb:fc:97:3c:ae:48:1e:98:fc:29:4d:7b:70:b1: f8:82:52:aa:68:4d:76:04:3a:cb:5d:31:5a:2c:c3: 13:24:65:15:96:31:af:09:1f:6e:0e:e0:58:2f:b2: a5:f0:a7:8d:00:60:09:64:00:ba:62:a9:f8:3e:e4: 28:f8:80:b4:bf:24:3f:a7:ea:04:58:c6:cd:48:0f: f4:ce:db:6e:a8:80:95:81:0d:2b:00:00:18:a8:56: 4e:26:fe:5c:b5:bd:c0:1d:f1:de:fe:91:22:80:59: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DF:D1:12:88:14:29:A2:65:B8:33:B2:74:8D:AF:5D:80:C3:0F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1e:22:63:73:01:dc:b0:8f:2b:a0:2a:b9:2f:a6:64:1d:95: 69:75:13:d0:5c:9b:b1:0d:a7:70:62:6c:da:14:5c:d3:ab:50: 86:91:95:de:69:93:65:d9:e7:e5:86:9a:e6:41:9d:c4:5a:8b: 94:40:75:c6:b0:a7:56:f7:9d:1b:e0:f5:f0:fa:f3:b8:99:54: 6f:26:24:d5:a5:ee:98:a4:45:f1:77:04:a5:c0:0c:b4:66:11: 4c:6b:77:95:bf:b8:c3:4d:92:0d:ed:33:e9:6e:8d:b3:f4:dd: 8a:4a:ee:49:40:05:9b:11:49:8e:2d:c9:34:16:1b:a4:2d:e1: 7a:b9:c0:31:b2:fd:e5:b8:d3:58:20:4f:95:82:9d:f9:24:ae: 2b:5f:2a:74:ad:ef:c0:9d:e8:61:f5:b7:25:6d:01:4d:4a:ae: ec:3c:0d:bb:ba:3f:1e:24:a1:08:94:a3:15:3f:60:c6:5f:8b: 54:f7:f5:90:3f:ab:c8:5f:2c:ba:0e:7c:83:a7:b4:17:65:02: 2c:46:62:1f:82:d6:93:4d:2f:4e:27:96:95:be:64:4d:0f:21: db:8e:d1:8e:43:64:0f:6e:b2:1b:e1:91:aa:31:7b:9f:d1:d8: 1a:2b:ec:ca:73:3e:35:e1:eb:ef:5a:c8:24:fe:4c:3d:1b:3c: 3a:2a:ee:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEp0XCneHzmYbA+Kh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI1MDcwODIyMDAwOVoXDTI1MDcxMTIyMDAwMFowLzEtMCsGA1UEAxMk NGIxNGVjYzItOGM0OC00NWI1LWI5MTQtYTMwYjZlNzg5ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgp8ghOPqDAuyC5SujXrBD03kMi2LF1Gb4Bc rZvik/elg6wLHBnbtvD96ZQmn0a9lpulbaksv9Yhqk5RtPAQ9KbRwkTo2nL3NOBh BWlnzioUvO0SQfK4BZ0nW45jrjswSRkjr+t3i6krRLbkfydllDds099lVeFW1H7I ISmYD4NwGLYxfsRs9CTP+01PEaylzdWxDFYn6/yXPK5IHpj8KU17cLH4glKqaE12 BDrLXTFaLMMTJGUVljGvCR9uDuBYL7Kl8KeNAGAJZAC6Yqn4PuQo+IC0vyQ/p+oE WMbNSA/0zttuqICVgQ0rAAAYqFZOJv5ctb3AHfHe/pEigFmqdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPvf0RKIFCmiZbgzsnSNr12Aww9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvZDY4YTJkMWQtMmMzNi00 YTFkLTg4YTctMGMzMGQyNTdmMzg2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzHiJjcwHcsI8roCq5L6Zk HZVpdRPQXJuxDadwYmzaFFzTq1CGkZXeaZNl2eflhprmQZ3EWouUQHXGsKdW950b 4PXw+vO4mVRvJiTVpe6YpEXxdwSlwAy0ZhFMa3eVv7jDTZIN7TPpbo2z9N2KSu5J QAWbEUmOLck0FhukLeF6ucAxsv3luNNYIE+Vgp35JK4rXyp0re/Anehh9bclbQFN Sq7sPA27uj8eJKEIlKMVP2DGX4tU9/WQP6vIXyy6DnyDp7QXZQIsRmIfgtaTTS9O J5aVvmRNDyHbjtGOQ2QPbrIb4ZGqMXuf0dgaK+zKcz414evvWsgk/kw9Gzw6Ku4N -----END CERTIFICATE-----Generated at Wed Jul 9 02:06:22 2025 by rpki-client