$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft File: 99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft (raw, json) Hash identifier: vVQCaGKMNk/g4nbVdx/oKekNPyiWENHtU36oKL5cUQA= Subject key identifier: 43:FA:1B:CE:76:37:D1:DE:25:D3:61:1C:BA:97:06:E5:9B:2D:60:30 Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF Certificate issuer: /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Certificate serial: 010D0C9F4328584ABD86CFBF91EB89FE302F6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft Manifest number: 010D0C9F43285845256AC2B6C96EB8E1D8D7559E Signing time: Mon 04 Aug 2025 03:00:08 +0000 Manifest this update: Mon 04 Aug 2025 03:00:08 +0000 Manifest next update: Wed 06 Aug 2025 03:00:00 +0000 Files and hashes: 1: 73d252ea-14b2-39d0-bf0f-0733665369b3.roa (hash: ey7K4xTGGO6EUK8vFbvM1NIrzavsI0AiYJoIhIvn/x8=) 2: 99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl (hash: Auob19n4ZVNvfHbodTgtgNDW+QH5/yzxixEmB+m2m1I=) 3: ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa (hash: wRZ4fqIvy/YuDArQ3BvS+jbUDT1532wlHV9vAWIhB7c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:86:cf:bf:91:eb:89:fe:30:2f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012 Validity Not Before: Aug 4 03:00:08 2025 GMT Not After : Aug 6 03:00:00 2025 GMT Subject: CN=6571c41b-f771-4d0e-9466-f395765ac441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:fa:6e:d8:53:41:52:f2:ae:9c:94:ce:5d: 27:9a:e0:f0:4d:d3:8d:65:2d:f3:99:41:0a:8a:bd: e0:e1:27:9c:b5:8d:32:b1:bf:e7:b0:4e:98:5d:42: fd:3a:37:84:b1:07:13:a0:4f:97:0c:64:4a:64:22: b8:e7:b2:8f:49:7d:db:80:f8:c8:04:a0:e0:48:c0: 46:91:5d:fc:05:46:9e:a7:51:e5:e0:53:cb:5d:38: f4:d2:bc:a9:a6:53:d0:3d:52:e9:33:5d:d6:f1:94: 37:9e:18:41:a3:16:21:2f:ec:32:e6:87:cb:4d:b4: 11:7d:31:ee:b2:1e:a9:32:9e:49:03:87:9d:ea:49: 35:08:ee:3f:ac:64:9a:a8:87:4b:39:17:c9:52:ed: be:01:6c:ad:f6:42:ba:d2:54:78:58:d1:1e:c6:c9: d1:02:8c:3e:6f:70:3d:80:f4:90:6a:4c:25:44:21: 31:8e:68:34:c5:17:17:48:c2:fc:d9:5c:43:18:9c: a5:0b:9f:ec:ac:9b:02:60:81:47:34:1b:da:60:31: a1:2f:61:25:bb:58:27:32:b9:fe:7c:85:fc:c9:c5: 02:ba:4a:fb:dd:9a:e3:24:05:10:f4:f8:28:b0:8d: 5a:44:75:38:5b:11:0e:79:58:25:19:c2:cd:39:6a: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:1B:CE:76:37:D1:DE:25:D3:61:1C:BA:97:06:E5:9B:2D:60:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl X509v3 Authority Key Identifier: keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1e:08:e4:20:1b:68:23:1f:ea:b0:5c:1c:75:a6:f8:f5:e0: ca:cb:ab:4d:3a:90:b3:88:30:a3:26:4f:8a:eb:d9:1d:33:5d: cd:ae:cb:9b:c9:2b:f7:d8:e9:76:aa:25:e9:96:fe:9c:a4:0b: c1:0d:61:a6:41:32:da:9f:cc:9f:51:3c:fd:b0:ed:20:dd:f2: 03:8e:43:0d:d3:06:1b:23:9f:15:13:02:f3:c8:33:04:88:da: 72:51:ed:2e:00:69:60:e3:0d:6f:6b:68:0e:bc:b3:dd:43:cf: 5d:22:d1:42:64:0c:1f:d6:34:90:10:4d:35:40:17:46:cf:fe: fe:1f:77:2c:40:f1:bc:24:87:e0:58:84:b5:6d:89:54:09:c8: c9:31:04:58:fc:d9:6d:cd:00:0a:e8:a1:4b:2b:48:6e:79:31: a4:45:bb:9c:2e:39:0a:bc:e8:91:8b:96:5d:7e:41:e9:31:4c: c5:5d:b0:46:98:e9:cb:1b:50:e4:0a:46:2a:e3:20:86:41:e5: 5e:2a:04:8a:4a:26:d2:30:b6:f5:9a:f7:29:c5:fd:a4:b7:d1: 2d:f8:6f:fa:d3:05:6b:c4:e6:bc:46:cf:93:db:c5:d7:80:db: e5:e5:f2:7b:0c:8a:4d:0c:fd:fd:96:8f:2b:e2:68:45:c9:26: 27:da:d9:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq9hs+/keuJ/jAvZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk2NDJjZjUtODJmNy00YmUzLWE2OGUtMWQyOWM1YzJk MDEyMB4XDTI1MDgwNDAzMDAwOFoXDTI1MDgwNjAzMDAwMFowLzEtMCsGA1UEAxMk NjU3MWM0MWItZjc3MS00ZDBlLTk0NjYtZjM5NTc2NWFjNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4j6bthTQVLyrpyUzl0nmuDwTdONZS3zmUEK ir3g4SectY0ysb/nsE6YXUL9OjeEsQcToE+XDGRKZCK457KPSX3bgPjIBKDgSMBG kV38BUaep1Hl4FPLXTj00rypplPQPVLpM13W8ZQ3nhhBoxYhL+wy5ofLTbQRfTHu sh6pMp5JA4ed6kk1CO4/rGSaqIdLORfJUu2+AWyt9kK60lR4WNEexsnRAow+b3A9 gPSQakwlRCExjmg0xRcXSML82VxDGJylC5/srJsCYIFHNBvaYDGhL2Elu1gnMrn+ fIX8ycUCukr73ZrjJAUQ9PgosI1aRHU4WxEOeVglGcLNOWoZ/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEP6G852N9HeJdNhHLqXBuWbLWAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTY0 MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5YzVjMmQwMTIvOTk2NDJjZjUtODJmNy00 YmUzLWE2OGUtMWQyOWM1YzJkMDEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk2NDJjZjUtODJmNy00YmUzLWE2 OGUtMWQyOWM1YzJkMDEyLzk5NjQyY2Y1LTgyZjctNGJlMy1hNjhlLTFkMjljNWMy ZDAxMi5jcmwwHwYDVR0jBBgwFoAUBlckr8XLoVXY6ngUnCW6YVx8Xt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTY0MmNmNS04MmY3LTRiZTMtYTY4ZS0xZDI5 YzVjMmQwMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnHgjkIBtoIx/qsFwcdab4 9eDKy6tNOpCziDCjJk+K69kdM13NrsubySv32Ol2qiXplv6cpAvBDWGmQTLan8yf UTz9sO0g3fIDjkMN0wYbI58VEwLzyDMEiNpyUe0uAGlg4w1va2gOvLPdQ89dItFC ZAwf1jSQEE01QBdGz/7+H3csQPG8JIfgWIS1bYlUCcjJMQRY/NltzQAK6KFLK0hu eTGkRbucLjkKvOiRi5ZdfkHpMUzFXbBGmOnLG1DkCkYq4yCGQeVeKgSKSibSMLb1 mvcpxf2kt9Et+G/60wVrxOa8Rs+T28XXgNvl5fJ7DIpNDP39lo8r4mhFySYn2tmx -----END CERTIFICATE-----Generated at Mon Aug 4 11:27:02 2025 by rpki-client