$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft File: 42e7c483-059a-47b9-840d-d56605959cf4.mft (raw, json) Hash identifier: /jvodX8Hu2qS8ZYwua9Xwg/x5WbQ/wAIuCQ7JKjmPiA= Subject key identifier: 70:0E:DF:96:35:EB:E4:42:EF:E5:39:89:36:59:47:5B:CE:05:44:44 Authority key identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 Certificate issuer: /CN=42e7c483-059a-47b9-840d-d56605959cf4 Certificate serial: 010D0C9F4328584AC1B6D18F205C11AAAB860A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft Manifest number: 010D0C9F43285840FC51DF680002DF05F234E597 Signing time: Tue 05 Aug 2025 15:00:03 +0000 Manifest this update: Tue 05 Aug 2025 15:00:03 +0000 Manifest next update: Fri 08 Aug 2025 15:00:00 +0000 Files and hashes: 1: 42e7c483-059a-47b9-840d-d56605959cf4.crl (hash: nJmUO36LLbqCxMJg0KadWnY20L2nX9it4tdWile0Xko=) 2: 60316776-c861-3030-bcc5-5a653fcff1b8.roa (hash: ygB0+nE9ZW+m6alA0ayP77rvi8d3e1PqBRT9Gf/N08Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:b6:d1:8f:20:5c:11:aa:ab:86:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7c483-059a-47b9-840d-d56605959cf4 Validity Not Before: Aug 5 15:00:03 2025 GMT Not After : Aug 8 15:00:00 2025 GMT Subject: CN=512ab3aa-6838-45c1-b589-218f2e74581f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:ec:85:ad:ef:f3:40:07:5b:4f:86:50:2b: 52:40:a4:39:0b:b3:8e:32:f8:d6:79:09:74:3c:0f: d5:e7:86:81:3d:5a:d9:70:c8:43:0e:3a:dd:56:c9: 6e:9d:7a:92:54:76:5a:48:68:fc:14:ef:2f:fc:ae: 7b:87:77:d3:23:ed:ba:17:6d:03:3c:56:6e:fa:5e: 49:55:50:83:2c:7a:9d:fa:33:6c:c5:92:15:ad:f8: f7:e8:69:89:dc:72:03:6a:75:17:50:d3:f6:f0:19: 32:95:a4:a5:6f:36:6a:b0:ec:30:7d:ad:78:c3:d9: de:9e:4a:cc:cc:00:fc:4a:e3:7f:6f:08:b1:c0:51: 21:e0:39:c3:2e:6b:e1:2f:84:05:0c:d3:e6:e2:d0: 73:f4:a7:a6:55:01:0c:fa:73:ae:97:7e:af:74:18: 4d:c8:69:f4:ed:d4:23:72:51:91:a9:09:1b:17:a3: 3c:9d:4d:0a:ba:f4:5a:64:8c:9a:1c:4c:97:f6:2e: 76:84:5b:fb:58:03:41:2f:79:4e:0c:ff:ad:96:ce: 98:9d:73:16:ff:b5:a2:d9:a2:d8:ec:af:51:82:6b: 1b:ec:e9:d8:a3:07:46:53:d0:6d:da:17:bb:b1:a8: c9:29:c3:28:16:26:9b:52:d7:63:81:5d:01:e7:d2: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0E:DF:96:35:EB:E4:42:EF:E5:39:89:36:59:47:5B:CE:05:44:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.crl X509v3 Authority Key Identifier: keyid:92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b6:22:7d:36:36:e9:b8:9b:ba:83:30:21:77:05:96:5e:fe: 2c:c3:95:12:d5:74:d7:6e:8d:72:aa:62:e9:70:54:5d:71:1c: ee:b5:05:0e:7b:88:c2:48:bd:a3:a6:04:0f:0e:d4:7e:20:ab: 3f:2f:be:2c:c6:e5:4f:5e:a0:b9:08:92:f9:52:e8:f5:c8:e2: d9:29:49:4a:9b:41:41:08:36:ca:39:1c:e4:47:6c:3b:c4:84: 58:df:2a:40:ca:3d:d2:01:1c:b4:c6:c6:1f:e0:c5:86:29:81: 4f:20:60:57:bc:0a:4a:9e:72:25:80:5a:cb:76:15:2e:05:02: 39:f9:35:ea:45:c1:29:60:7d:68:9e:49:5e:25:3f:79:8d:00: 28:eb:ff:dc:92:f4:78:ae:a4:89:a0:dd:31:c3:65:5c:e3:37: 0d:c9:66:d3:4e:c9:ba:68:40:0e:74:02:5f:6b:c1:9b:0c:0b: ff:da:25:5a:97:2d:e9:4c:8c:a1:e8:19:11:47:67:f8:b0:62: 2b:3a:3a:4d:0a:96:ca:71:dc:c8:82:fa:c2:23:fe:64:ca:26: 81:5c:98:be:03:f8:71:1d:de:c9:a6:21:c6:1b:c9:af:25:a5: 18:9d:27:7d:f7:0f:a1:da:8a:bb:41:16:f2:bc:0c:b5:5f:a8: 07:f3:5d:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWErBttGPIFwRqquGCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlN2M0ODMtMDU5YS00N2I5LTg0MGQtZDU2NjA1OTU5 Y2Y0MB4XDTI1MDgwNTE1MDAwM1oXDTI1MDgwODE1MDAwMFowLzEtMCsGA1UEAxMk NTEyYWIzYWEtNjgzOC00NWMxLWI1ODktMjE4ZjJlNzQ1ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEzsha3v80AHW0+GUCtSQKQ5C7OOMvjWeQl0 PA/V54aBPVrZcMhDDjrdVslunXqSVHZaSGj8FO8v/K57h3fTI+26F20DPFZu+l5J VVCDLHqd+jNsxZIVrfj36GmJ3HIDanUXUNP28BkylaSlbzZqsOwwfa14w9nenkrM zAD8SuN/bwixwFEh4DnDLmvhL4QFDNPm4tBz9KemVQEM+nOul36vdBhNyGn07dQj clGRqQkbF6M8nU0KuvRaZIyaHEyX9i52hFv7WANBL3lODP+tls6YnXMW/7Wi2aLY 7K9Rgmsb7OnYowdGU9Bt2he7sajJKcMoFiabUtdjgV0B59KjowIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHAO35Y16+RC7+U5iTZZR1vOBUREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MmU3 YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5NTljZjQvNDJlN2M0ODMtMDU5YS00 N2I5LTg0MGQtZDU2NjA1OTU5Y2Y0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDJlN2M0ODMtMDU5YS00N2I5LTg0 MGQtZDU2NjA1OTU5Y2Y0LzQyZTdjNDgzLTA1OWEtNDdiOS04NDBkLWQ1NjYwNTk1 OWNmNC5jcmwwHwYDVR0jBBgwFoAUknU12uq3SBOXqdIgnuvfEt7NyZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2 MDU5NTljZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFtiJ9NjbpuJu6gzAhdwWW Xv4sw5US1XTXbo1yqmLpcFRdcRzutQUOe4jCSL2jpgQPDtR+IKs/L74sxuVPXqC5 CJL5Uuj1yOLZKUlKm0FBCDbKORzkR2w7xIRY3ypAyj3SARy0xsYf4MWGKYFPIGBX vApKnnIlgFrLdhUuBQI5+TXqRcEpYH1onkleJT95jQAo6//ckvR4rqSJoN0xw2Vc 4zcNyWbTTsm6aEAOdAJfa8GbDAv/2iValy3pTIyh6BkRR2f4sGIrOjpNCpbKcdzI gvrCI/5kyiaBXJi+A/hxHd7JpiHGG8mvJaUYnSd99w+h2oq7QRbyvAy1X6gH811F -----END CERTIFICATE-----Generated at Wed Aug 6 11:00:58 2025 by rpki-client