$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: THtNOFl7qN6gwSNO14nJcUEluOwA+f8kB5Ya/5+iqtg= Subject key identifier: D1:A7:15:09:9C:35:67:54:EC:EA:B7:45:7D:2B:39:41:5A:2C:4F:55 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584A37682AD54AF322C16FECDF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A3337931 Signing time: Tue 17 Jun 2025 02:00:03 +0000 Manifest this update: Tue 17 Jun 2025 02:00:03 +0000 Manifest next update: Thu 19 Jun 2025 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: nhCNjjPtJBJ9JUgDUTT+5zsysvYqFwZ8nl9n+7BKrn0=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: oMNuP0rftL/ojrk4mESxOeSy+t+ZIxOsRxu4TDXDcHg=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: 4kUfyf4A5a3wu67jSABLAaGAPi5vVHTNrA7/FSEC7MU=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: zH8Y2dlKwI2zqyJ6ptAkj4mOsSb+9UemPIr8gw0QyLQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:68:2a:d5:4a:f3:22:c1:6f:ec:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Jun 17 02:00:03 2025 GMT Not After : Jun 19 02:00:00 2025 GMT Subject: CN=3b6c9aee-fd62-4fa6-a7a9-d3584897e778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ef:82:af:ea:a7:c8:7c:18:14:1e:c3:bf:90: c6:cf:b6:67:7f:d6:0f:03:f2:f2:07:ec:44:39:4d: 0c:05:4c:f8:8a:09:b3:e3:90:ee:3b:15:14:fc:35: 2b:be:26:ab:8a:8b:be:d5:b9:03:9b:44:78:fc:9f: b6:2e:a7:6d:5f:ce:e0:7d:cb:ba:0c:0d:78:22:dd: fd:56:a8:1a:9a:10:12:db:0d:e6:ef:b7:7f:a6:cc: 62:c6:58:4c:61:27:01:d1:41:64:ef:47:4e:7a:28: aa:6e:38:e7:4e:b2:8a:6d:08:67:1d:c6:2c:48:34: 0b:f7:8d:dc:07:00:28:49:6d:67:72:00:52:43:05: de:f7:3e:12:39:55:4c:36:cb:11:7a:85:1a:48:c1: e0:5b:de:ac:8c:07:af:09:8a:16:45:2e:a3:17:3b: a1:a1:22:91:d9:91:b5:24:dc:4d:0a:4b:da:71:ac: 92:cb:46:c8:7c:af:dd:8a:16:1a:a4:ab:10:9c:e0: cc:68:2c:d6:0d:10:0c:97:cc:75:32:19:62:7a:5e: 9d:dc:6d:9d:2b:a3:b1:f4:e3:ec:e3:59:64:d6:42: a4:21:6d:39:70:d3:c2:47:e0:43:4b:98:f5:b6:db: d3:63:0c:c4:88:e3:2b:70:c2:a2:c2:66:cf:cf:10: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A7:15:09:9C:35:67:54:EC:EA:B7:45:7D:2B:39:41:5A:2C:4F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c1:0d:ef:f4:ce:9b:ea:b3:d7:5e:85:fd:02:a9:8b:3f:7b: c3:56:dc:1a:10:0c:11:36:49:2c:d9:91:c1:62:35:23:65:42: 3c:0e:8c:a5:1d:43:a4:da:56:01:da:6a:f5:09:d1:bc:7a:32: 66:d8:9b:81:c9:29:0d:f5:f7:6a:95:2b:ce:fe:33:26:1a:9e: aa:ed:27:07:37:de:37:70:77:39:a7:a3:3f:df:f3:b6:95:ed: 91:b2:6f:92:ed:04:45:b7:d6:7c:b6:67:d6:6d:08:4a:80:4a: 7b:aa:90:d9:26:e7:32:ea:2b:37:5c:7f:a0:a1:2a:54:ac:ae: 35:b8:2d:42:65:52:3b:7c:82:44:f1:99:59:ee:3d:d4:d4:0f: 12:2d:8c:fa:a4:bf:ac:41:4f:4b:57:34:80:ed:b2:b5:65:7e: b9:69:89:ac:99:f5:40:e3:ae:ba:b8:10:a0:2e:83:8b:4c:68: d1:a8:cd:f6:f0:1f:b6:4d:64:47:4d:fc:c1:c2:19:15:b2:ca: d5:5f:c0:be:f9:e9:ae:e3:31:f0:47:00:4a:e9:51:7a:0b:76: 53:75:1f:b2:9e:55:09:16:d0:2c:df:53:1b:17:2c:f0:cd:40: 79:0c:32:1e:14:ed:85:88:49:36:2b:4d:70:28:3f:92:fc:dd: a1:5b:15:94 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo3aCrVSvMiwW/s3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDYxNzAyMDAwM1oXDTI1MDYxOTAyMDAwMFowLzEtMCsGA1UEAxMk M2I2YzlhZWUtZmQ2Mi00ZmE2LWE3YTktZDM1ODQ4OTdlNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy++Cr+qnyHwYFB7Dv5DGz7Znf9YPA/LyB+xE OU0MBUz4igmz45DuOxUU/DUrviariou+1bkDm0R4/J+2LqdtX87gfcu6DA14It39 VqgamhAS2w3m77d/psxixlhMYScB0UFk70dOeiiqbjjnTrKKbQhnHcYsSDQL943c BwAoSW1ncgBSQwXe9z4SOVVMNssReoUaSMHgW96sjAevCYoWRS6jFzuhoSKR2ZG1 JNxNCkvacaySy0bIfK/dihYapKsQnODMaCzWDRAMl8x1Mhliel6d3G2dK6Ox9OPs 41lk1kKkIW05cNPCR+BDS5j1ttvTYwzEiOMrcMKiwmbPzxBAwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNGnFQmcNWdU7Oq3RX0rOUFaLE9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbwQ3v9M6b6rPXXoX9AqmL P3vDVtwaEAwRNkks2ZHBYjUjZUI8DoylHUOk2lYB2mr1CdG8ejJm2JuBySkN9fdq lSvO/jMmGp6q7ScHN943cHc5p6M/3/O2le2Rsm+S7QRFt9Z8tmfWbQhKgEp7qpDZ Jucy6is3XH+goSpUrK41uC1CZVI7fIJE8ZlZ7j3U1A8SLYz6pL+sQU9LVzSA7bK1 ZX65aYmsmfVA4666uBCgLoOLTGjRqM328B+2TWRHTfzBwhkVssrVX8C++emu4zHw RwBK6VF6C3ZTdR+ynlUJFtAs31MbFyzwzUB5DDIeFO2FiEk2K01wKD+S/N2hWxWU -----END CERTIFICATE-----Generated at Tue Jun 17 16:22:10 2025 by rpki-client