$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft File: a58da523-4991-493a-95ce-ff1c2b97244a.mft (raw, json) Hash identifier: r5ywjlGef0bPQL01U0KZOA6wLXmHIxfpEFc5WhtbRvM= Subject key identifier: 27:EC:07:FD:4F:CF:62:FA:09:A4:11:AD:EB:24:52:6F:13:A3:F8:34 Authority key identifier: 70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A Certificate issuer: /CN=a58da523-4991-493a-95ce-ff1c2b97244a Certificate serial: 010D0C9F4328584A4098B660CDCE62E342F074C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft Manifest number: 010D0C9F432858499BF921459E6C07D47C6BD1FF Signing time: Fri 20 Jun 2025 09:00:08 +0000 Manifest this update: Fri 20 Jun 2025 09:00:08 +0000 Manifest next update: Sun 22 Jun 2025 09:00:00 +0000 Files and hashes: 1: 94b63554-10f5-3368-a9cc-4d31e3421b4f.roa (hash: bFXFJaCDJZDDdY2BpV9ALfGpwf8pRyv5OTFmu77oZy0=) 2: a58da523-4991-493a-95ce-ff1c2b97244a.crl (hash: o+0dCLJcnYdMMgBihCTRFN9G8GBSM8mh5X2RSQijtZE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:98:b6:60:cd:ce:62:e3:42:f0:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58da523-4991-493a-95ce-ff1c2b97244a Validity Not Before: Jun 20 09:00:08 2025 GMT Not After : Jun 22 09:00:00 2025 GMT Subject: CN=0f2c208d-fc85-4ee2-bc81-2a9aabca7460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:5d:8f:9f:e5:e8:55:95:11:4a:0d:0a:cc: ef:e2:9d:92:2c:d1:d7:b8:f3:7a:4a:48:18:61:98: bf:d0:ed:09:79:be:28:a1:e1:79:1d:ec:00:ac:46: dc:23:ea:1f:f4:49:a6:f4:f3:48:07:43:0b:e6:6d: 0b:f0:25:2c:b8:9b:f5:05:30:fd:c7:c0:42:81:f8: e2:84:29:48:ac:8b:19:1e:1d:59:18:32:99:27:4c: 0b:2f:00:5c:42:94:0a:c5:92:3a:65:a6:89:88:9f: fc:9e:28:5c:6d:fb:67:69:f9:85:36:ea:f0:f7:6b: 6f:f0:17:d5:ac:c9:08:64:10:2a:bc:2a:78:29:2b: 92:fe:5d:4e:3d:7a:7a:86:17:7e:07:2f:f8:37:21: c7:73:61:4c:a7:31:20:c2:37:cc:b0:e2:84:fb:8d: d6:7c:77:12:1e:68:27:74:12:0a:a7:6b:42:64:6c: 88:ed:f2:17:fe:d8:7b:b4:d6:e1:9a:a6:98:67:81: 14:d2:8d:16:5a:4a:b8:f0:3a:22:38:38:e5:da:e5: ff:79:50:b2:94:c9:5c:a8:7f:bf:8a:f4:ac:dd:2a: 21:10:19:e9:3d:bf:c2:89:bb:cf:d8:25:2c:eb:f0: f0:f9:bc:72:71:14:58:72:25:54:42:d1:52:91:c4: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:07:FD:4F:CF:62:FA:09:A4:11:AD:EB:24:52:6F:13:A3:F8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a/a58da523-4991-493a-95ce-ff1c2b97244a.crl X509v3 Authority Key Identifier: keyid:70:CC:62:B2:53:11:5C:EA:17:63:4C:D6:47:E7:40:5B:F3:5C:02:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a58da523-4991-493a-95ce-ff1c2b97244a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9b:76:ef:22:4e:ac:20:b1:21:90:25:8a:67:c9:47:fe:d8: 22:0d:10:8c:81:7a:f3:57:fc:21:8b:b8:cc:9a:46:4f:f1:ce: 69:de:17:56:58:bb:c6:03:00:86:29:e8:9e:d0:a3:28:8e:d2: a2:8d:98:fd:72:17:5b:6d:23:55:05:35:c3:96:7c:5a:77:5e: ec:1f:a6:9a:02:9f:49:a5:c5:1c:a7:a6:a3:1c:0a:6b:89:84: 41:15:5c:15:52:b9:0f:59:cc:25:63:e5:09:d7:08:7f:ec:44: af:d9:7c:a3:1d:0d:9e:16:33:0a:e4:2b:0d:fb:2c:44:57:14: 2d:3e:9b:8f:88:ba:d8:66:12:45:f8:e4:5b:84:0c:80:16:d2: 3c:ba:5e:bb:38:25:a3:a9:ec:bb:15:f9:5f:cf:16:06:bc:fb: 30:44:a6:45:c0:d9:54:7b:62:81:6a:75:53:3c:d3:c0:8b:38: 9a:5c:cc:02:ec:7b:a9:86:11:10:de:84:26:ed:b6:71:20:8c: d9:3a:35:15:f6:f8:23:f2:a5:1b:44:ff:1c:44:cf:6e:b2:8f: b1:fb:cc:1d:8f:ca:9b:65:51:9e:4b:63:d8:38:61:5d:5a:d9: 2e:0a:63:3c:75:b7:39:5f:f6:4e:a6:e0:e4:41:fb:d5:12:84: 14:95:35:d9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpAmLZgzc5i40LwdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4ZGE1MjMtNDk5MS00OTNhLTk1Y2UtZmYxYzJiOTcy NDRhMB4XDTI1MDYyMDA5MDAwOFoXDTI1MDYyMjA5MDAwMFowLzEtMCsGA1UEAxMk MGYyYzIwOGQtZmM4NS00ZWUyLWJjODEtMmE5YWFiY2E3NDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidtdj5/l6FWVEUoNCszv4p2SLNHXuPN6SkgY YZi/0O0Jeb4ooeF5HewArEbcI+of9Emm9PNIB0ML5m0L8CUsuJv1BTD9x8BCgfji hClIrIsZHh1ZGDKZJ0wLLwBcQpQKxZI6ZaaJiJ/8nihcbftnafmFNurw92tv8BfV rMkIZBAqvCp4KSuS/l1OPXp6hhd+By/4NyHHc2FMpzEgwjfMsOKE+43WfHcSHmgn dBIKp2tCZGyI7fIX/th7tNbhmqaYZ4EU0o0WWkq48DoiODjl2uX/eVCylMlcqH+/ ivSs3SohEBnpPb/CibvP2CUs6/Dw+bxycRRYciVUQtFSkcS9zwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCfsB/1Pz2L6CaQRreskUm8To/g0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNThk YTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFjMmI5NzI0NGEvYTU4ZGE1MjMtNDk5MS00 OTNhLTk1Y2UtZmYxYzJiOTcyNDRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU4ZGE1MjMtNDk5MS00OTNhLTk1 Y2UtZmYxYzJiOTcyNDRhL2E1OGRhNTIzLTQ5OTEtNDkzYS05NWNlLWZmMWMyYjk3 MjQ0YS5jcmwwHwYDVR0jBBgwFoAUcMxislMRXOoXY0zWR+dAW/NcAgowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNThkYTUyMy00OTkxLTQ5M2EtOTVjZS1mZjFj MmI5NzI0NGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0m3bvIk6sILEhkCWKZ8lH /tgiDRCMgXrzV/whi7jMmkZP8c5p3hdWWLvGAwCGKeie0KMojtKijZj9chdbbSNV BTXDlnxad17sH6aaAp9JpcUcp6ajHApriYRBFVwVUrkPWcwlY+UJ1wh/7ESv2Xyj HQ2eFjMK5CsN+yxEVxQtPpuPiLrYZhJF+ORbhAyAFtI8ul67OCWjqey7FflfzxYG vPswRKZFwNlUe2KBanVTPNPAiziaXMwC7HuphhEQ3oQm7bZxIIzZOjUV9vgj8qUb RP8cRM9uso+x+8wdj8qbZVGeS2PYOGFdWtkuCmM8dbc5X/ZOpuDkQfvVEoQUlTXZ -----END CERTIFICATE-----Generated at Fri Jun 20 15:29:46 2025 by rpki-client