$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft File: 25422be5-720b-40bc-8a4d-02579ec1bead.mft (raw, json) Hash identifier: sN0oUZD9r+6e+cBLmxl04n+7pURo4Vmt/C7nGNSkeKQ= Subject key identifier: DE:34:47:A4:82:37:30:C3:C3:A2:34:CB:FF:27:DA:08:18:C4:E1:12 Authority key identifier: CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A Certificate issuer: /CN=25422be5-720b-40bc-8a4d-02579ec1bead Certificate serial: 010D0C9F4328584A6218DF6100AB36A444F470C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft Manifest number: 010D0C9F4328584073A84B9C832FD0665142AA03 Signing time: Wed 02 Jul 2025 09:00:03 +0000 Manifest this update: Wed 02 Jul 2025 09:00:03 +0000 Manifest next update: Sat 05 Jul 2025 09:00:00 +0000 Files and hashes: 1: 25422be5-720b-40bc-8a4d-02579ec1bead.crl (hash: T/uV1M6ZswDb8VDq9iMHJxm8kOqTSvbxiE0w+A4myYE=) 2: 8a5c0e90-ec6b-3ac8-85d7-908f880e7035.roa (hash: BYh8e1DvJIZm+gMQf1eqHSVSCMWsb6dwZH+sDp9WoTU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:18:df:61:00:ab:36:a4:44:f4:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25422be5-720b-40bc-8a4d-02579ec1bead Validity Not Before: Jul 2 09:00:03 2025 GMT Not After : Jul 5 09:00:00 2025 GMT Subject: CN=53c14d4e-ff5f-4142-bd4c-79848d8de525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:08:25:70:7c:51:f0:2b:7c:e1:9c:9d:ee: 4b:de:01:f7:73:03:6a:64:97:28:c6:28:5f:bc:1f: ac:d2:1c:61:1b:87:e1:7c:e2:e7:43:92:f7:cb:d9: 9e:ee:d8:66:40:71:60:56:5f:30:6a:1a:0a:bd:67: 50:da:21:13:8d:c7:5c:e0:2c:78:6b:05:91:0f:3b: 18:d3:10:ec:92:16:44:e3:1a:2c:4c:3c:c3:27:3e: fb:07:19:aa:17:d1:1e:94:10:23:d3:c1:0d:1a:f4: 87:40:c4:e0:07:bf:69:f4:90:20:8a:52:e7:3c:69: fd:67:b0:89:ca:f6:0b:3a:75:79:c8:16:e0:83:6b: 18:78:28:75:8f:48:72:14:78:c6:f6:8f:49:96:7f: 18:73:41:96:fa:23:c0:b2:a6:87:98:7a:d6:6f:a1: 02:43:37:37:98:2b:97:94:99:24:b9:12:4b:df:89: d5:a5:0b:7b:ca:b8:b0:ba:d4:42:20:17:dd:4e:8e: 73:c9:e5:31:5a:d7:4e:fb:4a:dc:2e:f2:d9:4a:01: f0:f7:a9:30:db:a8:1a:18:86:f4:ba:7b:01:b5:e2: 4d:e2:a4:5a:8b:29:27:c1:65:04:a8:d9:33:b0:de: 75:fb:77:18:97:03:15:9c:ce:a5:d8:9a:e6:fc:ca: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:34:47:A4:82:37:30:C3:C3:A2:34:CB:FF:27:DA:08:18:C4:E1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead/25422be5-720b-40bc-8a4d-02579ec1bead.crl X509v3 Authority Key Identifier: keyid:CE:D2:97:2D:47:2B:D4:F9:C0:90:20:70:DB:AC:BA:3B:D5:62:63:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/25422be5-720b-40bc-8a4d-02579ec1bead.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a5:c7:5b:a5:3f:9c:70:72:78:d6:61:3a:d4:95:4a:d0:df: 89:a8:14:66:d1:0a:c3:f0:ff:84:b9:8a:d9:3c:2e:22:c0:94: 55:05:a2:37:aa:4b:4c:d8:81:0b:b3:fe:2a:7e:b3:68:d6:5c: 32:1c:8a:c5:db:b0:57:33:06:7a:59:a0:07:89:96:6d:b1:d4: c0:32:99:b4:be:47:e7:6e:57:52:0c:24:72:3c:28:5f:9c:54: d4:96:80:97:53:d3:a1:cd:16:21:1c:97:b0:b8:70:c8:32:af: 76:9e:3e:e0:79:61:87:c4:3a:de:bf:41:c7:b2:22:73:45:be: 38:1d:30:7c:de:84:fa:c1:90:77:58:c2:b4:cc:2d:9b:d5:a3: 8e:aa:b3:36:73:ad:a8:39:a0:d2:ad:29:1d:c6:e0:80:27:ec: ce:8e:0e:88:7c:cc:8c:5d:5f:97:f7:5d:d9:b7:aa:12:4f:b8: 8c:35:1a:57:78:dc:f9:7f:83:ac:36:fa:fc:8d:c6:b2:63:4f: 9a:9f:2b:97:d6:b5:bf:42:f5:75:7c:97:d7:de:30:14:c3:16: 3a:25:74:11:7d:a6:74:9c:e7:d3:b8:b6:70:15:92:b1:4d:6d: 94:5b:ff:27:5e:83:b3:74:f5:fd:41:1f:7a:7b:03:d5:50:bb: 07:94:10:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpiGN9hAKs2pET0cMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU0MjJiZTUtNzIwYi00MGJjLThhNGQtMDI1NzllYzFi ZWFkMB4XDTI1MDcwMjA5MDAwM1oXDTI1MDcwNTA5MDAwMFowLzEtMCsGA1UEAxMk NTNjMTRkNGUtZmY1Zi00MTQyLWJkNGMtNzk4NDhkOGRlNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8EIJXB8UfArfOGcne5L3gH3cwNqZJcoxihf vB+s0hxhG4fhfOLnQ5L3y9me7thmQHFgVl8wahoKvWdQ2iETjcdc4Cx4awWRDzsY 0xDskhZE4xosTDzDJz77BxmqF9EelBAj08ENGvSHQMTgB79p9JAgilLnPGn9Z7CJ yvYLOnV5yBbgg2sYeCh1j0hyFHjG9o9Jln8Yc0GW+iPAsqaHmHrWb6ECQzc3mCuX lJkkuRJL34nVpQt7yriwutRCIBfdTo5zyeUxWtdO+0rcLvLZSgHw96kw26gaGIb0 unsBteJN4qRaiyknwWUEqNkzsN51+3cYlwMVnM6l2Jrm/MptjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN40R6SCNzDDw6I0y/8n2ggYxOESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQy MmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3OWVjMWJlYWQvMjU0MjJiZTUtNzIwYi00 MGJjLThhNGQtMDI1NzllYzFiZWFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjU0MjJiZTUtNzIwYi00MGJjLThh NGQtMDI1NzllYzFiZWFkLzI1NDIyYmU1LTcyMGItNDBiYy04YTRkLTAyNTc5ZWMx YmVhZC5jcmwwHwYDVR0jBBgwFoAUztKXLUcr1PnAkCBw26y6O9ViY2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yNTQyMmJlNS03MjBiLTQwYmMtOGE0ZC0wMjU3 OWVjMWJlYWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFpcdbpT+ccHJ41mE61JVK 0N+JqBRm0QrD8P+EuYrZPC4iwJRVBaI3qktM2IELs/4qfrNo1lwyHIrF27BXMwZ6 WaAHiZZtsdTAMpm0vkfnbldSDCRyPChfnFTUloCXU9OhzRYhHJewuHDIMq92nj7g eWGHxDrev0HHsiJzRb44HTB83oT6wZB3WMK0zC2b1aOOqrM2c62oOaDSrSkdxuCA J+zOjg6IfMyMXV+X913Zt6oST7iMNRpXeNz5f4OsNvr8jcayY0+anyuX1rW/QvV1 fJfX3jAUwxY6JXQRfaZ0nOfTuLZwFZKxTW2UW/8nXoOzdPX9QR96ewPVULsHlBD/ -----END CERTIFICATE-----Generated at Thu Jul 3 09:46:49 2025 by rpki-client