$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft File: de111c10-2de5-41fa-a9e4-1e49a0479199.mft (raw, json) Hash identifier: VWKtpV7SsbI2mQUfvS2vEvkLIdngz83rkhY2+q2Oxu4= Subject key identifier: 1E:8D:33:C6:5B:6D:11:F1:A8:7E:E6:F7:AA:4C:34:C5:08:33:3D:67 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584ABC988D21E50BE47C67B80200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft Manifest number: 010D0C9F43285840C7A133CC5EFAFBE0119B7668 Signing time: Sun 03 Aug 2025 19:00:03 +0000 Manifest this update: Sun 03 Aug 2025 19:00:03 +0000 Manifest next update: Tue 05 Aug 2025 19:00:00 +0000 Files and hashes: 1: de111c10-2de5-41fa-a9e4-1e49a0479199.crl (hash: 7b93z4zQJqu70gMyzUm7GNy3A4oWqQ4XKdcNJZLDWpM=) 2: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (hash: aTIcESR1nXAtgPL3y5laoEzXRkiG8gsByFhmRBc7ZVQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bc:98:8d:21:e5:0b:e4:7c:67:b8:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Aug 3 19:00:03 2025 GMT Not After : Aug 5 19:00:00 2025 GMT Subject: CN=1e5a897a-8606-4792-b999-09b84e5fab69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:e7:4e:68:32:eb:d1:10:5a:c7:5a:1b:5d:fa: b6:35:63:ba:43:8e:31:af:4a:86:7e:92:e0:d5:1e: 68:cf:2b:33:60:e0:7e:54:96:5e:a6:c2:d4:00:c2: d3:80:a3:b9:fe:64:51:b2:78:93:19:70:6d:88:fe: 90:31:5b:0d:a2:cf:6a:44:d1:86:49:7c:d3:1c:bf: 27:82:eb:9e:5b:b5:c7:6f:bc:79:23:92:54:cd:2a: 55:37:63:fa:da:6f:7e:93:05:b9:11:c3:dc:32:e7: b9:fa:e1:a1:2f:8b:c2:0a:c1:2c:54:24:28:47:e7: ed:11:6b:5c:68:af:01:8c:49:70:12:4b:2f:2a:66: 21:c2:84:12:37:ea:38:d6:92:23:ea:3b:38:fc:21: 74:7b:95:f2:34:40:bf:fc:63:08:37:b8:de:80:00: e0:c2:32:7b:3b:f3:4e:c3:e0:2f:37:e6:39:73:4f: d3:da:94:55:09:a6:63:6a:ca:bc:e2:93:98:9c:0e: 02:97:7a:90:af:e8:38:d7:2d:f7:53:59:39:21:d8: b6:5d:66:39:14:98:f6:4c:c9:b5:10:88:cb:02:db: 9d:87:37:b0:19:6b:11:f9:de:16:a2:98:f2:11:d0: c4:ba:b2:f7:34:ea:74:20:51:8d:86:c2:e1:84:f0: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8D:33:C6:5B:6D:11:F1:A8:7E:E6:F7:AA:4C:34:C5:08:33:3D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9b:80:f2:88:be:86:b4:13:33:8d:99:5e:0d:6a:2d:bf:7e: 52:b7:aa:d6:bf:c1:c1:e0:24:e8:ab:13:c0:6c:e4:73:0f:88: 8c:1c:09:5a:ba:6d:e8:d5:8d:4d:34:a0:76:c6:14:88:85:88: 85:95:17:5d:fc:fe:0a:ce:0e:10:d7:e9:41:53:7b:d0:b3:fc: d0:32:a4:c1:7c:2e:a6:3a:3e:7f:76:09:32:30:bc:c1:81:6e: 88:dc:2d:5e:c7:45:5a:88:c1:6b:7a:bb:47:e2:e8:61:ee:eb: 7e:da:cb:9b:e2:4a:ae:88:34:f0:b0:3d:10:33:bb:cf:30:64: d4:04:7d:af:7b:6f:e2:06:1e:15:21:db:78:13:3c:5c:69:02: cd:d5:81:c6:c3:7b:6a:75:12:dc:92:63:b0:b8:ba:78:f8:59: d3:25:08:17:ca:29:b0:0a:53:85:a7:ae:18:48:42:ac:60:3b: aa:09:23:e5:25:4e:a5:63:93:88:34:c7:46:38:76:74:c0:0f: c3:85:b3:aa:7c:fa:33:79:29:20:2f:a6:c3:51:a5:e0:ae:4d: 5d:9a:f3:ad:82:10:09:e9:5b:5d:53:e4:bf:1a:bf:05:8d:70: a4:df:28:1c:f5:9c:56:7b:bc:34:f8:35:dc:76:43:62:da:9f: e7:4f:0b:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEq8mI0h5QvkfGe4AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI1MDgwMzE5MDAwM1oXDTI1MDgwNTE5MDAwMFowLzEtMCsGA1UEAxMk MWU1YTg5N2EtODYwNi00NzkyLWI5OTktMDliODRlNWZhYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/edOaDLr0RBax1obXfq2NWO6Q44xr0qGfpLg 1R5ozyszYOB+VJZepsLUAMLTgKO5/mRRsniTGXBtiP6QMVsNos9qRNGGSXzTHL8n guueW7XHb7x5I5JUzSpVN2P62m9+kwW5EcPcMue5+uGhL4vCCsEsVCQoR+ftEWtc aK8BjElwEksvKmYhwoQSN+o41pIj6js4/CF0e5XyNEC//GMIN7jegADgwjJ7O/NO w+AvN+Y5c0/T2pRVCaZjasq84pOYnA4Cl3qQr+g41y33U1k5Idi2XWY5FJj2TMm1 EIjLAtudhzewGWsR+d4WopjyEdDEurL3NOp0IFGNhsLhhPBy+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB6NM8ZbbRHxqH7m96pMNMUIMz1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZGUxMTFjMTAtMmRlNS00 MWZhLWE5ZTQtMWU0OWEwNDc5MTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0m4DyiL6GtBMzjZleDWot v35St6rWv8HB4CToqxPAbORzD4iMHAlaum3o1Y1NNKB2xhSIhYiFlRdd/P4Kzg4Q 1+lBU3vQs/zQMqTBfC6mOj5/dgkyMLzBgW6I3C1ex0VaiMFrertH4uhh7ut+2sub 4kquiDTwsD0QM7vPMGTUBH2ve2/iBh4VIdt4EzxcaQLN1YHGw3tqdRLckmOwuLp4 +FnTJQgXyimwClOFp64YSEKsYDuqCSPlJU6lY5OINMdGOHZ0wA/DhbOqfPozeSkg L6bDUaXgrk1dmvOtghAJ6VtdU+S/Gr8FjXCk3ygc9ZxWe7w0+DXcdkNi2p/nTwvy -----END CERTIFICATE-----Generated at Mon Aug 4 19:06:04 2025 by rpki-client