$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft File: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft (raw, json) Hash identifier: d1psmeCpms7WvCOiuLMGMKWBEYThTdZsF8z5p11doxI= Subject key identifier: 7B:2F:CC:E9:59:D9:A4:4C:08:39:E7:5F:5D:A0:D8:4D:2A:21:61:AF Authority key identifier: 1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 Certificate issuer: /CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Certificate serial: 010D0C9F43285849D94D5A5BB7EAA353600EFC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft Manifest number: 010D0C9F4328584073A84A89B5229808470A3271 Signing time: Wed 14 May 2025 09:00:03 +0000 Manifest this update: Wed 14 May 2025 09:00:03 +0000 Manifest next update: Fri 16 May 2025 09:00:00 +0000 Files and hashes: 1: 8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl (hash: qQQpNUaEPiMb59eS+tP69HSg+Ap095j8GANKm/kukfk=) 2: bb32bb6b-e68d-3f07-abe8-33529005d4da.roa (hash: K/W82ACAAR1k3hnx1U7/eNlBPf1OuMh1TqX4WJc0WbM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:4d:5a:5b:b7:ea:a3:53:60:0e:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a9663d9-43e8-4ddb-be80-8316cf022a7a Validity Not Before: May 14 09:00:03 2025 GMT Not After : May 16 09:00:00 2025 GMT Subject: CN=d3a5e8b2-6af0-4e73-ac3a-b23722689033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:f9:11:03:bb:c1:53:9c:db:52:50:6f:6d: e5:99:a2:ca:bb:14:e8:39:94:2f:56:b1:38:ba:85: 50:29:80:4b:93:b4:99:14:4c:ee:5a:3e:8c:fc:8d: 65:e5:68:a5:33:19:a2:f1:8e:af:63:ba:e0:0c:9d: 93:ce:88:65:e2:6c:eb:70:18:83:c8:7e:69:04:32: 8e:30:10:1a:91:24:14:0a:36:60:c2:21:5a:6e:8b: 2c:3f:9f:f7:e9:f7:58:39:a6:4a:91:fc:eb:c3:a2: 7a:48:56:88:48:cb:2b:04:b6:b3:74:90:01:dc:99: af:a0:2f:89:3e:32:bb:fc:6a:67:96:5d:ab:94:6d: 56:2d:d2:26:00:6f:bc:ce:a3:fa:cc:01:a3:bd:37: 24:4b:5c:4d:71:24:21:eb:4c:c2:8b:77:8e:2f:af: 70:a4:ad:97:ff:9d:07:ca:25:76:11:85:e2:68:59: 2e:05:9f:a1:bc:98:e9:f9:1b:27:3e:1a:71:91:9d: 77:27:66:79:3f:26:c7:07:a0:25:65:f1:2a:38:00: b3:fe:6b:36:4c:b1:a8:b5:cc:d8:c6:00:c8:04:03: 12:74:ef:99:bc:fb:e8:40:1a:83:da:bb:75:cd:bb: bc:9e:ce:32:89:1f:b1:7c:4d:da:97:38:6c:84:ac: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2F:CC:E9:59:D9:A4:4C:08:39:E7:5F:5D:A0:D8:4D:2A:21:61:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a/8a9663d9-43e8-4ddb-be80-8316cf022a7a.crl X509v3 Authority Key Identifier: keyid:1E:DA:F3:05:FE:C0:E4:DB:96:3C:B8:01:F5:37:3A:C1:C5:3E:EE:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a9663d9-43e8-4ddb-be80-8316cf022a7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8c:db:f5:95:48:56:2d:ea:f0:f9:14:a2:fe:8c:4c:1a:ca: 86:e5:00:fb:0b:aa:ec:04:f4:3c:a9:54:ae:5d:4d:80:c8:b4: ec:fa:75:d2:b3:58:79:04:f9:8f:f1:26:2a:48:ee:f2:ae:64: 8d:a7:3c:5d:e6:53:eb:91:cb:9d:0d:5f:ba:77:a4:b0:12:4c: 95:7f:26:d5:28:fc:73:33:f4:6a:78:82:9f:da:74:16:2a:8f: 49:a7:35:48:05:4a:b3:83:71:18:5e:94:57:06:d5:34:5e:7f: d0:26:93:36:80:33:10:4e:dd:83:15:8e:3f:6d:5c:68:35:f4: 19:ba:e7:11:db:37:62:9a:9d:51:cb:ab:23:80:09:ef:15:83: 2f:ea:c0:b5:a7:62:88:6f:f1:07:7e:f4:b5:fc:ab:eb:50:bc: 98:fb:ad:d7:69:84:9f:68:4a:46:82:bf:4a:f6:49:c6:f2:84: 06:23:fc:ec:b0:07:48:2f:62:12:60:e6:d6:a5:35:3b:12:32: 10:01:db:1b:1a:25:24:75:97:2a:09:7e:37:1f:d2:71:9a:15: b1:dd:e5:da:99:a1:b4:eb:de:77:f2:a6:26:b6:06:74:77:67: 67:d3:c8:90:4a:50:4e:12:4e:4e:b9:13:19:61:21:88:12:0e: 8a:52:7a:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnZTVpbt+qjU2AO/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE5NjYzZDktNDNlOC00ZGRiLWJlODAtODMxNmNmMDIy YTdhMB4XDTI1MDUxNDA5MDAwM1oXDTI1MDUxNjA5MDAwMFowLzEtMCsGA1UEAxMk ZDNhNWU4YjItNmFmMC00ZTczLWFjM2EtYjIzNzIyNjg5MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIT5EQO7wVOc21JQb23lmaLKuxToOZQvVrE4 uoVQKYBLk7SZFEzuWj6M/I1l5WilMxmi8Y6vY7rgDJ2Tzohl4mzrcBiDyH5pBDKO MBAakSQUCjZgwiFabossP5/36fdYOaZKkfzrw6J6SFaISMsrBLazdJAB3JmvoC+J PjK7/Gpnll2rlG1WLdImAG+8zqP6zAGjvTckS1xNcSQh60zCi3eOL69wpK2X/50H yiV2EYXiaFkuBZ+hvJjp+RsnPhpxkZ13J2Z5PybHB6AlZfEqOACz/ms2TLGotczY xgDIBAMSdO+ZvPvoQBqD2rt1zbu8ns4yiR+xfE3alzhshKw9VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHsvzOlZ2aRMCDnnX12g2E0qIWGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2 NjNkOS00M2U4LTRkZGItYmU4MC04MzE2Y2YwMjJhN2EvOGE5NjYzZDktNDNlOC00 ZGRiLWJlODAtODMxNmNmMDIyYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGE5NjYzZDktNDNlOC00ZGRiLWJl ODAtODMxNmNmMDIyYTdhLzhhOTY2M2Q5LTQzZTgtNGRkYi1iZTgwLTgzMTZjZjAy MmE3YS5jcmwwHwYDVR0jBBgwFoAUHtrzBf7A5NuWPLgB9Tc6wcU+7oAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YTk2NjNkOS00M2U4LTRkZGItYmU4MC04MzE2 Y2YwMjJhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKjNv1lUhWLerw+RSi/oxM GsqG5QD7C6rsBPQ8qVSuXU2AyLTs+nXSs1h5BPmP8SYqSO7yrmSNpzxd5lPrkcud DV+6d6SwEkyVfybVKPxzM/RqeIKf2nQWKo9JpzVIBUqzg3EYXpRXBtU0Xn/QJpM2 gDMQTt2DFY4/bVxoNfQZuucR2zdimp1Ry6sjgAnvFYMv6sC1p2KIb/EHfvS1/Kvr ULyY+63XaYSfaEpGgr9K9knG8oQGI/zssAdIL2ISYObWpTU7EjIQAdsbGiUkdZcq CX43H9JxmhWx3eXamaG069538qYmtgZ0d2dn08iQSlBOEk5OuRMZYSGIEg6KUnrx -----END CERTIFICATE-----Generated at Thu May 15 08:07:32 2025 by rpki-client