$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft File: 643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json) Hash identifier: um/6t6i0dKwl+AmWO8MKdEk6IKG4mIUTy3InhAxASJo= Subject key identifier: 76:4B:D6:01:7A:4B:EB:09:81:BB:45:F4:6A:54:2D:FE:4B:61:5A:03 Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 Certificate issuer: /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Certificate serial: 010D0C9F4328584A39F749D9E2FE69C985ED5E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft Manifest number: 010D0C9F43285849CD228DC17836374947BED968 Signing time: Wed 18 Jun 2025 00:00:03 +0000 Manifest this update: Wed 18 Jun 2025 00:00:03 +0000 Manifest next update: Fri 20 Jun 2025 00:00:00 +0000 Files and hashes: 1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: HD38mmWxbxj3ZhtXqR99UIhCaIt2NzcA2gOYjM8V6aQ=) 2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: AMWm+0Zo9lhrdagblAxa2Q6mQdW5xEa+zITNyfWtA58=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:f7:49:d9:e2:fe:69:c9:85:ed:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0 Validity Not Before: Jun 18 00:00:03 2025 GMT Not After : Jun 20 00:00:00 2025 GMT Subject: CN=f49e6e03-753a-4070-bf7e-7e78b132c977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b3:c6:73:56:97:42:46:ba:b2:ba:5a:43:95: ef:98:eb:7c:05:8b:64:3f:a9:47:80:b0:a1:a4:13: 53:3d:88:7a:af:b0:03:bb:71:c5:6a:40:43:21:f6: 63:b7:a7:a8:9b:f8:5f:0e:08:3c:29:e8:b8:37:78: 32:3d:72:ed:ab:3f:d3:62:17:d3:3d:f2:ab:1b:e7: 2b:f6:23:32:89:b4:1b:81:97:84:b6:b9:f3:a1:8d: 3c:8f:a9:ca:3f:1d:7d:01:46:20:7b:6c:08:26:c6: 63:3f:17:b2:ba:87:28:39:2a:74:20:f5:5d:33:a7: 5f:9f:7e:88:80:46:bd:5d:36:24:ab:37:72:06:ca: 9c:b8:38:20:d1:c7:89:35:35:3e:49:a5:35:0e:4d: 33:16:60:5b:38:ab:5d:53:5e:70:61:bd:bf:56:65: 79:a5:fa:e1:84:48:a3:bc:9e:ec:b1:c2:e2:50:a0: 22:89:26:66:dc:78:85:cc:07:07:70:38:f7:f2:f3: 49:8b:8d:31:9e:69:16:00:1c:f4:03:01:94:91:0c: cd:8c:0e:9e:03:d3:6c:c3:90:c2:74:4b:68:e5:8d: 86:d4:62:cc:1e:05:b2:db:32:8d:23:08:32:c1:67: 68:ae:2d:58:4e:97:12:c7:30:34:c3:8f:57:d1:c4: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4B:D6:01:7A:4B:EB:09:81:BB:45:F4:6A:54:2D:FE:4B:61:5A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl X509v3 Authority Key Identifier: keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:da:e9:0b:22:2c:87:bf:f0:ae:4b:40:2f:38:94:b9:01:d2: c0:8b:be:90:3e:02:1c:c0:45:96:ca:71:03:87:4b:2d:cf:84: 79:fa:c2:d0:b7:4d:27:99:9c:8d:ae:39:bf:fb:3f:1b:fa:ce: 1f:48:9e:73:b8:46:b1:38:94:67:81:9e:53:4e:60:ec:94:a1: 34:05:47:4c:30:b3:07:49:b9:89:33:cb:67:fe:b0:be:4c:03: be:52:63:a0:b3:82:61:44:8b:14:1f:b5:5f:3b:e7:65:b6:6c: 17:f5:7b:58:9e:b8:35:8a:1a:f7:48:5e:c6:80:36:71:02:66: 84:00:59:4d:96:b4:88:0e:fd:c0:06:2b:e3:ef:03:93:03:36: 48:d0:62:0d:4b:53:7f:f5:1d:ba:9e:7b:46:36:c5:74:db:82: b8:6c:a4:f3:81:e4:5f:d1:1e:e0:28:c8:10:ba:c9:5c:9b:39: 9a:d8:23:9a:a5:df:39:95:5b:02:ed:a0:1b:1b:5c:dd:da:e4: 96:52:a9:54:4f:c1:41:39:c8:cb:1a:48:90:26:80:30:78:14: a4:0b:d7:d0:1c:c3:3b:0e:9b:28:77:5a:29:af:12:24:c0:1c: bc:00:20:48:f6:a9:64:ab:8f:4c:ef:bd:77:70:a2:94:97:76: 89:9c:28:7c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEo590nZ4v5pyYXtXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzYmMwZDgtNmMyNi00NDVhLTk5MmQtZjMxZTA5MzRi NWYwMB4XDTI1MDYxODAwMDAwM1oXDTI1MDYyMDAwMDAwMFowLzEtMCsGA1UEAxMk ZjQ5ZTZlMDMtNzUzYS00MDcwLWJmN2UtN2U3OGIxMzJjOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLPGc1aXQka6srpaQ5XvmOt8BYtkP6lHgLCh pBNTPYh6r7ADu3HFakBDIfZjt6eom/hfDgg8Kei4N3gyPXLtqz/TYhfTPfKrG+cr 9iMyibQbgZeEtrnzoY08j6nKPx19AUYge2wIJsZjPxeyuocoOSp0IPVdM6dfn36I gEa9XTYkqzdyBsqcuDgg0ceJNTU+SaU1Dk0zFmBbOKtdU15wYb2/VmV5pfrhhEij vJ7sscLiUKAiiSZm3HiFzAcHcDj38vNJi40xnmkWABz0AwGUkQzNjA6eA9Nsw5DC dEto5Y2G1GLMHgWy2zKNIwgywWdori1YTpcSxzA0w49X0cT5DQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHZL1gF6S+sJgbtF9GpULf5LYVoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NDNi YzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFlMDkzNGI1ZjAvNjQzYmMwZDgtNmMyNi00 NDVhLTk5MmQtZjMxZTA5MzRiNWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjQzYmMwZDgtNmMyNi00NDVhLTk5 MmQtZjMxZTA5MzRiNWYwLzY0M2JjMGQ4LTZjMjYtNDQ1YS05OTJkLWYzMWUwOTM0 YjVmMC5jcmwwHwYDVR0jBBgwFoAUWWMA3LDUuBKv4cAzHYEA7sI/UpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NDNiYzBkOC02YzI2LTQ0NWEtOTkyZC1mMzFl MDkzNGI1ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw2ukLIiyHv/CuS0AvOJS5 AdLAi76QPgIcwEWWynEDh0stz4R5+sLQt00nmZyNrjm/+z8b+s4fSJ5zuEaxOJRn gZ5TTmDslKE0BUdMMLMHSbmJM8tn/rC+TAO+UmOgs4JhRIsUH7VfO+dltmwX9XtY nrg1ihr3SF7GgDZxAmaEAFlNlrSIDv3ABivj7wOTAzZI0GINS1N/9R26nntGNsV0 24K4bKTzgeRf0R7gKMgQuslcmzma2COapd85lVsC7aAbG1zd2uSWUqlUT8FBOcjL GkiQJoAweBSkC9fQHMM7Dpsod1oprxIkwBy8ACBI9qlkq49M7713cKKUl3aJnCh8 -----END CERTIFICATE-----Generated at Wed Jun 18 15:44:31 2025 by rpki-client