$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: lOWBGEG4MzSKZf3anRAj6Z7GKfStNioLyhJGuAp8ybs= Subject key identifier: E0:D7:89:4D:BC:45:2B:22:72:0B:B1:5A:CD:71:E3:A7:04:CA:FE:3D Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F4328584ACD3AE4888A4DF01D3F338D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DB00B Signing time: Sat 09 Aug 2025 18:00:03 +0000 Manifest this update: Sat 09 Aug 2025 18:00:03 +0000 Manifest next update: Mon 11 Aug 2025 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: 5AHVk5iSrBUWf8zPSVWbK1E3JthHbNRMwUB+VYOIGQA=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: WHdsSNcP3e9I8d3tnbdKjCD0Jsvup11KmWUL6L1qXnI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cd:3a:e4:88:8a:4d:f0:1d:3f:33:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Aug 9 18:00:03 2025 GMT Not After : Aug 11 18:00:00 2025 GMT Subject: CN=06d66b21-04a4-4bd4-a1c1-9c0d207b72ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:e5:e3:6f:c2:8c:0c:f9:7b:d0:ec:7d:2e: 53:33:d3:76:de:c5:b7:2b:e2:a7:88:37:34:cc:df: 91:ee:41:7d:7c:c7:56:69:85:03:2e:a3:5e:7e:9a: 82:d4:40:4e:c1:b5:19:0c:9e:0f:f9:e4:6b:84:07: 70:54:41:ed:b8:ef:c7:85:d7:32:01:fc:45:03:21: a4:09:3b:61:e6:e1:14:30:d6:f6:cc:9a:da:72:62: 40:96:5a:8e:9d:78:03:63:c2:27:42:60:6d:19:1f: 91:13:5d:40:c0:28:e6:25:7c:ed:3e:2d:00:2a:90: f8:e6:5b:44:41:53:db:4f:18:b5:cc:88:24:00:06: 18:18:dd:fc:9d:d0:cc:92:1a:bc:47:89:4f:03:dd: d9:1c:f4:98:94:cf:28:86:0b:64:fc:c4:ef:1c:50: 93:1e:ed:fc:97:65:2b:16:2d:b8:31:24:7a:57:8f: 0e:b2:d1:a4:d3:9d:39:75:d9:04:05:d0:b6:7d:c9: 0f:96:83:15:d5:b4:d4:1d:bc:03:c2:5c:74:1c:5c: 34:f9:5f:0d:27:a7:f3:d3:04:1c:d6:e4:6c:0d:9f: d2:ef:a0:f9:38:ae:10:59:54:d8:b0:aa:6b:5b:1f: 45:a9:94:6f:c9:f1:67:bf:f5:f9:59:20:63:70:a1: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D7:89:4D:BC:45:2B:22:72:0B:B1:5A:CD:71:E3:A7:04:CA:FE:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:69:88:6e:7e:44:57:64:38:4d:9a:8d:00:8a:52:6b:89:08: ab:24:17:9e:5f:61:05:1d:0d:4d:5c:0a:fa:a7:06:6c:54:53: 2f:a4:8d:9e:d4:ec:52:df:6c:b6:78:68:e9:cd:ef:94:36:7c: 9a:35:7b:66:72:86:91:98:77:92:db:52:38:53:35:03:c9:c8: 45:00:e9:f6:be:e8:0d:3e:fb:2c:5f:ce:7f:cc:8c:f1:ca:ac: 93:5f:72:10:0d:1f:bf:ce:aa:ad:4c:b4:77:18:99:c6:12:21: 77:2c:01:16:06:93:87:a1:15:b2:eb:34:70:38:f0:c2:cc:3f: 4e:50:02:fd:95:8a:ef:7f:d3:be:27:a0:fc:3b:6f:53:b1:76: d8:49:a0:c6:cf:5c:54:2b:21:83:24:f8:cf:16:99:5b:d1:58: 21:ed:d7:e3:ea:10:f6:7a:42:79:aa:c5:39:be:f4:bd:37:d6: 71:46:72:88:f9:d8:5d:30:99:51:0e:eb:f5:5c:40:82:63:38: 3e:6d:f5:5d:16:ab:8e:f4:3a:c3:47:c3:e1:11:90:f8:c9:ab: 48:a9:34:b6:69:6f:bb:6c:61:ad:e1:18:f2:43:e3:28:c0:fe: 17:46:ab:b9:8f:10:80:67:f6:0d:57:15:3a:2f:9e:60:14:3a: 27:9d:02:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErNOuSIik3wHT8zjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI1MDgwOTE4MDAwM1oXDTI1MDgxMTE4MDAwMFowLzEtMCsGA1UEAxMk MDZkNjZiMjEtMDRhNC00YmQ0LWExYzEtOWMwZDIwN2I3MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Dl42/CjAz5e9DsfS5TM9N23sW3K+KniDc0 zN+R7kF9fMdWaYUDLqNefpqC1EBOwbUZDJ4P+eRrhAdwVEHtuO/HhdcyAfxFAyGk CTth5uEUMNb2zJracmJAllqOnXgDY8InQmBtGR+RE11AwCjmJXztPi0AKpD45ltE QVPbTxi1zIgkAAYYGN38ndDMkhq8R4lPA93ZHPSYlM8ohgtk/MTvHFCTHu38l2Ur Fi24MSR6V48OstGk0505ddkEBdC2fckPloMV1bTUHbwDwlx0HFw0+V8NJ6fz0wQc 1uRsDZ/S76D5OK4QWVTYsKprWx9FqZRvyfFnv/X5WSBjcKGQXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFODXiU28RSsicguxWs1x46cEyv49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAaYhufkRXZDhNmo0AilJr iQirJBeeX2EFHQ1NXAr6pwZsVFMvpI2e1OxS32y2eGjpze+UNnyaNXtmcoaRmHeS 21I4UzUDychFAOn2vugNPvssX85/zIzxyqyTX3IQDR+/zqqtTLR3GJnGEiF3LAEW BpOHoRWy6zRwOPDCzD9OUAL9lYrvf9O+J6D8O29TsXbYSaDGz1xUKyGDJPjPFplb 0Vgh7dfj6hD2ekJ5qsU5vvS9N9ZxRnKI+dhdMJlRDuv1XECCYzg+bfVdFquO9DrD R8PhEZD4yatIqTS2aW+7bGGt4RjyQ+MowP4XRqu5jxCAZ/YNVxU6L55gFDonnQLs -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:01 2025 by rpki-client