$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft File: 3a86f711-5e97-4a68-9b21-940a312b854a.mft (raw, json) Hash identifier: c0jL3ExKTwT6Bn5ieHW/cS4xpUKs894TfPk1ocmop3o= Subject key identifier: 11:E2:F6:D7:5F:AA:09:16:15:1D:E0:82:72:FE:E9:51:56:5B:BC:28 Authority key identifier: D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 Certificate issuer: /CN=3a86f711-5e97-4a68-9b21-940a312b854a Certificate serial: 010D0C9F4328584A3B5CADFC59CDC399CA87E680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft Manifest number: 010D0C9F4328584988B6CEF62A3C901C9E4B5FEA Signing time: Wed 18 Jun 2025 12:00:07 +0000 Manifest this update: Wed 18 Jun 2025 12:00:07 +0000 Manifest next update: Sat 21 Jun 2025 12:00:00 +0000 Files and hashes: 1: 341487ac-a3e5-383d-bb5e-c10826c39192.roa (hash: HnHuSukrJeUg0RxaKhsKvUcH0awxWXLzfnu/EJ5QZnY=) 2: 3a86f711-5e97-4a68-9b21-940a312b854a.crl (hash: zHlaxkbHZZLPmHHgBvXM1w9y/8dWFisVWnc6Y26HwIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:5c:ad:fc:59:cd:c3:99:ca:87:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a86f711-5e97-4a68-9b21-940a312b854a Validity Not Before: Jun 18 12:00:07 2025 GMT Not After : Jun 21 12:00:00 2025 GMT Subject: CN=5b8cb232-6539-4256-96dd-948d09e8c744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:4c:74:7c:5d:b0:8e:b9:15:b9:78:c6:8c: 4d:ce:37:bd:58:9e:06:cf:d9:5c:e7:12:0b:cd:f9: db:f3:3e:55:09:39:7f:89:62:ef:be:55:8f:90:f4: 91:52:2b:08:d6:b5:61:33:cb:11:5d:4d:ca:dc:50: ea:ef:12:be:12:f3:a2:58:fc:42:91:25:84:2a:01: b7:b9:03:5e:11:c5:1f:51:0a:65:fb:22:fd:a7:c7: d8:8d:70:24:52:73:f9:00:16:d7:05:a2:e0:17:f2: 9c:be:d1:47:e3:b6:a2:ca:61:bf:15:8a:3b:68:5b: 2b:53:58:3e:e8:cd:e4:f8:6a:9c:d4:ed:7f:cf:5b: 71:bb:7a:69:74:3a:dc:74:83:ea:89:b0:de:16:ef: b5:e4:ee:c5:4c:22:42:d4:c1:97:75:cf:34:0f:61: c0:07:63:bb:1e:63:e7:eb:4a:3b:f8:f7:0c:60:8b: 06:da:e5:b2:a4:1f:13:e4:bd:ce:b1:19:02:c5:d0: 23:3e:97:f6:f7:7c:cb:b6:cf:d8:00:1b:1a:db:e0: f0:02:87:f2:c6:01:d5:8e:4b:1e:32:c2:1d:84:49: 07:2f:7d:1b:02:7c:0e:70:a3:eb:48:64:c2:55:29: a2:40:65:9e:0e:54:d4:9d:a9:f0:aa:57:d9:da:f8: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:F6:D7:5F:AA:09:16:15:1D:E0:82:72:FE:E9:51:56:5B:BC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a/3a86f711-5e97-4a68-9b21-940a312b854a.crl X509v3 Authority Key Identifier: keyid:D3:F6:F7:C7:D5:CB:2F:40:EA:DE:48:27:9A:35:C5:AA:11:11:F8:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3a86f711-5e97-4a68-9b21-940a312b854a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bb:00:7e:a3:8f:aa:d5:92:36:e9:35:19:1d:13:2f:91:c7: 30:30:ef:c1:ea:a4:d8:a5:de:a5:6c:59:fe:92:ae:40:64:9c: c3:e5:70:9f:74:af:2b:0d:22:a8:4c:ac:5e:0c:a2:a7:b6:8d: 04:fc:7c:15:be:04:31:e8:5a:5e:23:66:ad:c0:97:4d:63:ff: fc:8a:12:62:39:fb:f1:60:73:b1:f7:62:64:ed:7b:9f:c7:c0: 02:ef:de:41:63:1b:18:ef:d3:5a:4b:19:dc:c9:dd:98:69:62: 1d:28:c2:40:e8:ed:cb:75:6a:98:4d:67:fe:25:29:52:0c:f2: da:af:e4:de:09:10:93:be:ec:57:75:2a:4e:01:e3:53:cd:1c: 6b:cf:13:01:01:88:e2:f2:a6:bb:5e:01:fb:4e:34:fc:56:3a: e0:29:66:b2:22:2f:cd:53:7c:f6:6e:96:7f:20:9b:e8:a1:4f: 42:51:29:7c:37:61:31:c2:48:ac:6b:26:67:bf:f2:69:b6:20: c5:26:b5:06:bc:fe:5e:05:5f:aa:d5:29:83:bc:7c:88:30:85: 43:69:f2:47:a2:49:c9:46:43:fa:6f:1c:b7:35:3b:37:51:d9: 49:46:2f:70:36:3b:67:82:38:dc:a1:cd:20:46:4c:5d:8a:c1: 51:35:df:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo7XK38Wc3DmcqH5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4NmY3MTEtNWU5Ny00YTY4LTliMjEtOTQwYTMxMmI4 NTRhMB4XDTI1MDYxODEyMDAwN1oXDTI1MDYyMTEyMDAwMFowLzEtMCsGA1UEAxMk NWI4Y2IyMzItNjUzOS00MjU2LTk2ZGQtOTQ4ZDA5ZThjNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRFMdHxdsI65Fbl4xoxNzje9WJ4Gz9lc5xIL zfnb8z5VCTl/iWLvvlWPkPSRUisI1rVhM8sRXU3K3FDq7xK+EvOiWPxCkSWEKgG3 uQNeEcUfUQpl+yL9p8fYjXAkUnP5ABbXBaLgF/KcvtFH47aiymG/FYo7aFsrU1g+ 6M3k+Gqc1O1/z1txu3ppdDrcdIPqibDeFu+15O7FTCJC1MGXdc80D2HAB2O7HmPn 60o7+PcMYIsG2uWypB8T5L3OsRkCxdAjPpf293zLts/YABsa2+DwAofyxgHVjkse MsIdhEkHL30bAnwOcKPrSGTCVSmiQGWeDlTUnanwqlfZ2vid/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBHi9tdfqgkWFR3ggnL+6VFWW7woMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2 ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBhMzEyYjg1NGEvM2E4NmY3MTEtNWU5Ny00 YTY4LTliMjEtOTQwYTMxMmI4NTRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2E4NmY3MTEtNWU5Ny00YTY4LTli MjEtOTQwYTMxMmI4NTRhLzNhODZmNzExLTVlOTctNGE2OC05YjIxLTk0MGEzMTJi ODU0YS5jcmwwHwYDVR0jBBgwFoAU0/b3x9XLL0Dq3kgnmjXFqhER+FUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYTg2ZjcxMS01ZTk3LTRhNjgtOWIyMS05NDBh MzEyYjg1NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLuwB+o4+q1ZI26TUZHRMv kccwMO/B6qTYpd6lbFn+kq5AZJzD5XCfdK8rDSKoTKxeDKKnto0E/HwVvgQx6Fpe I2atwJdNY//8ihJiOfvxYHOx92Jk7Xufx8AC795BYxsY79NaSxncyd2YaWIdKMJA 6O3LdWqYTWf+JSlSDPLar+TeCRCTvuxXdSpOAeNTzRxrzxMBAYji8qa7XgH7TjT8 VjrgKWayIi/NU3z2bpZ/IJvooU9CUSl8N2ExwkisayZnv/JptiDFJrUGvP5eBV+q 1SmDvHyIMIVDafJHoknJRkP6bxy3NTs3UdlJRi9wNjtngjjcoc0gRkxdisFRNd+v -----END CERTIFICATE-----Generated at Wed Jun 18 19:46:28 2025 by rpki-client