$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft File: 66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft (raw, json) Hash identifier: tmXR41vcwRRH7QVY98I4RwFJGI22AFt8TJriy1Ok7eE= Subject key identifier: 02:23:90:79:F6:DA:7C:1A:C6:0F:0A:73:AC:91:AB:54:0D:74:06:11 Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88 Certificate issuer: /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb Certificate serial: 010D0C9F4328584A363E603A9D79A6939FEFA140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft Manifest number: 010D0C9F432858409D9F31EF08D12E9CEF1A470B Signing time: Mon 16 Jun 2025 16:00:03 +0000 Manifest this update: Mon 16 Jun 2025 16:00:03 +0000 Manifest next update: Thu 19 Jun 2025 16:00:00 +0000 Files and hashes: 1: 2941f0b6-c6f5-39a0-b5a9-770ac31eb307.roa (hash: /jIe6NXoK98bkOPF/fTyCJADqIMJR6MPasKwpNArZkA=) 2: 66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl (hash: 5D8p5zVki0M/2Ym6xFDOlFuuY3Mp/3LJaoNA66yFQh8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3e:60:3a:9d:79:a6:93:9f:ef:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb Validity Not Before: Jun 16 16:00:03 2025 GMT Not After : Jun 19 16:00:00 2025 GMT Subject: CN=7de11e84-c072-4da9-bd4d-ce8d69fe8352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6d:26:cb:25:ce:95:71:c8:b1:d1:a7:32:fb: 72:ba:8d:fb:cf:f7:1f:98:68:bd:b8:98:73:9d:1c: ee:a9:d8:04:91:9c:2b:69:85:49:21:f2:55:9f:7e: b0:91:e2:ad:76:7a:70:6b:e0:01:8b:71:f2:4a:71: 2c:6a:0e:dc:60:5f:d7:49:e1:7d:16:48:88:30:63: 76:91:fd:55:3c:71:a1:8c:30:02:03:c8:36:b0:b2: 66:57:59:4d:a0:b7:9a:e9:a3:a1:be:06:65:22:13: fd:59:d0:7d:6f:83:6c:c0:f8:78:4f:ff:2d:5a:33: b9:ba:94:80:30:cd:b6:82:0b:88:c6:b3:05:a9:44: 78:0e:d1:4c:82:5a:bf:1f:1b:81:ce:01:fa:32:6f: f6:31:4a:e3:61:aa:5e:92:35:28:c5:27:e9:b8:c8: a3:69:bd:e9:df:e3:b1:b4:d6:86:af:99:47:8a:fb: 54:bd:3b:f7:23:8f:70:fc:58:c4:2f:b9:ee:38:ef: be:9d:a2:e5:67:61:80:6b:cb:9d:40:a8:31:de:4f: fa:51:97:9f:48:48:cb:3a:af:92:90:65:fa:bc:c7: a2:21:97:1e:6e:1a:f1:b5:8c:8e:cd:01:34:73:15: 58:b5:d7:2c:28:46:f7:32:22:95:6c:3d:8e:17:1b: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:90:79:F6:DA:7C:1A:C6:0F:0A:73:AC:91:AB:54:0D:74:06:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl X509v3 Authority Key Identifier: keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d8:f2:bc:6d:82:c9:2f:7b:12:a6:93:74:e3:7d:ea:d6:d2: 72:29:d2:95:e6:e1:ca:34:76:be:72:e7:5a:00:e8:4f:26:6e: 55:77:99:82:1a:3c:1b:c8:3a:4f:9a:e6:88:57:08:f5:85:7b: a9:62:c6:a5:77:3f:7e:ef:a7:ef:8c:ab:45:21:02:ee:47:70: 0c:dd:de:9c:0d:4c:ad:0c:3f:cc:b9:9f:5b:1e:29:14:61:f5: 6b:0b:7f:08:e4:ce:e9:e2:47:61:09:3e:f1:ba:98:52:62:cc: a5:a6:f2:88:4e:14:02:22:6d:a4:fc:ab:26:a8:bb:37:e5:7b: 92:17:2c:bd:97:ff:a0:a1:2a:1c:76:ba:85:13:2f:54:fc:46: cb:87:51:fc:f6:23:5e:e6:80:2f:de:85:e0:00:a1:e7:e8:b9: 9c:5c:e4:b0:2d:19:04:b6:56:4e:5a:6a:f5:07:fe:04:e7:40: 48:f8:06:d2:10:88:8e:99:88:1e:93:0f:04:9e:96:b2:e9:46: 2a:39:f9:a3:13:c3:53:fc:f3:a6:29:e3:09:9d:83:9b:92:51: 3f:59:ec:76:d7:72:20:24:ae:a7:8e:c9:0d:42:fd:24:a7:bf: 51:a7:7c:e9:0c:0a:fc:e2:36:e3:b4:28:09:01:3d:1c:c5:94: dd:f9:85:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo2PmA6nXmmk5/voUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjOTkzYmQtMDk5Ny00M2E5LWE1ODQtOWJmZTkzZTVi M2NiMB4XDTI1MDYxNjE2MDAwM1oXDTI1MDYxOTE2MDAwMFowLzEtMCsGA1UEAxMk N2RlMTFlODQtYzA3Mi00ZGE5LWJkNGQtY2U4ZDY5ZmU4MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm0myyXOlXHIsdGnMvtyuo37z/cfmGi9uJhz nRzuqdgEkZwraYVJIfJVn36wkeKtdnpwa+ABi3HySnEsag7cYF/XSeF9FkiIMGN2 kf1VPHGhjDACA8g2sLJmV1lNoLea6aOhvgZlIhP9WdB9b4NswPh4T/8tWjO5upSA MM22gguIxrMFqUR4DtFMglq/HxuBzgH6Mm/2MUrjYapekjUoxSfpuMijab3p3+Ox tNaGr5lHivtUvTv3I49w/FjEL7nuOO++naLlZ2GAa8udQKgx3k/6UZefSEjLOq+S kGX6vMeiIZcebhrxtYyOzQE0cxVYtdcsKEb3MiKVbD2OFxv6VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAIjkHn22nwaxg8Kc6yRq1QNdAYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NmM5 OTNiZC0wOTk3LTQzYTktYTU4NC05YmZlOTNlNWIzY2IvNjZjOTkzYmQtMDk5Ny00 M2E5LWE1ODQtOWJmZTkzZTViM2NiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjZjOTkzYmQtMDk5Ny00M2E5LWE1 ODQtOWJmZTkzZTViM2NiLzY2Yzk5M2JkLTA5OTctNDNhOS1hNTg0LTliZmU5M2U1 YjNjYi5jcmwwHwYDVR0jBBgwFoAUrjDj0bUDG5tpQrlroRDHrAeaC4gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NmM5OTNiZC0wOTk3LTQzYTktYTU4NC05YmZl OTNlNWIzY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH2PK8bYLJL3sSppN0433q 1tJyKdKV5uHKNHa+cudaAOhPJm5Vd5mCGjwbyDpPmuaIVwj1hXupYsaldz9+76fv jKtFIQLuR3AM3d6cDUytDD/MuZ9bHikUYfVrC38I5M7p4kdhCT7xuphSYsylpvKI ThQCIm2k/KsmqLs35XuSFyy9l/+goSocdrqFEy9U/EbLh1H89iNe5oAv3oXgAKHn 6LmcXOSwLRkEtlZOWmr1B/4E50BI+AbSEIiOmYgekw8Enpay6UYqOfmjE8NT/POm KeMJnYObklE/Wex213IgJK6njskNQv0kp79Rp3zpDAr84jbjtCgJAT0cxZTd+YWA -----END CERTIFICATE-----Generated at Tue Jun 17 16:19:51 2025 by rpki-client