$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft File: a8355b3e-327c-45f5-af94-a965911c3103.mft (raw, json) Hash identifier: fEbMut4dbF21AGC0vOndq6SF+s76fwKxTeZLYELDWWE= Subject key identifier: 00:1F:B6:8C:33:CA:71:B8:0B:B9:93:04:4F:1B:CD:61:5E:54:21:3E Authority key identifier: DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55 Certificate issuer: /CN=a8355b3e-327c-45f5-af94-a965911c3103 Certificate serial: 010D0C9F43285849D8F40577D6672B5CB7E10280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft Manifest number: 010D0C9F4328584073A841A78E8E122CA4627211 Signing time: Wed 14 May 2025 06:00:03 +0000 Manifest this update: Wed 14 May 2025 06:00:03 +0000 Manifest next update: Fri 16 May 2025 06:00:00 +0000 Files and hashes: 1: a81bd514-e259-39d2-b605-b62b11e5b68d.roa (hash: Jydo7A69qVvrC8+uNgQbRN0hjR+p545HKRlx1ygQ0I8=) 2: a8355b3e-327c-45f5-af94-a965911c3103.crl (hash: 5KTnYtFtnKdYJ59sytarkJaLEF8Y7OOr1y0fIBB36rY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:f4:05:77:d6:67:2b:5c:b7:e1:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8355b3e-327c-45f5-af94-a965911c3103 Validity Not Before: May 14 06:00:03 2025 GMT Not After : May 16 06:00:00 2025 GMT Subject: CN=24dc92da-f6ed-44c5-b183-c4d63a9664b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:36:3a:2b:80:a3:74:21:44:fb:b7:0e:88: a0:13:82:5b:df:d3:bb:47:22:4d:cf:f9:b4:ef:06: b1:a9:4b:78:b3:1c:15:94:5c:5b:a4:de:fd:0b:d7: a1:51:ba:92:57:68:23:cc:68:24:32:49:db:b5:38: 3d:67:6e:f0:b0:9d:49:39:c1:82:bf:30:8d:9f:4e: 0c:c0:95:4e:d8:84:38:3f:46:5f:de:d5:52:6a:ec: f6:82:75:da:3e:b8:93:0a:32:98:50:29:a9:7a:b5: f4:1d:0c:fa:f4:87:33:65:3a:63:3d:a0:cc:7b:53: 64:56:5a:58:45:69:26:a7:0e:f7:ea:97:df:5e:2e: 2f:61:ce:b4:4f:99:7e:b6:bf:11:b3:95:37:9c:72: 05:bf:1c:2b:fa:93:dd:f5:a7:78:26:0d:18:7a:ec: 3a:a4:7f:a2:8f:f0:65:4c:8a:59:bf:2f:0f:aa:62: b6:c8:e6:52:0b:e4:d9:f7:22:e2:0b:09:0f:21:78: 38:13:53:f9:a3:d5:cf:8b:81:ec:e4:7d:07:a1:f5: bb:bb:95:56:78:fd:19:0a:47:8f:d2:b6:07:92:ff: 7d:d6:4e:cd:a1:d8:8c:22:9a:ba:94:45:02:bb:55: be:b5:c5:7d:63:5a:68:49:87:c0:8f:ed:f0:aa:3b: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1F:B6:8C:33:CA:71:B8:0B:B9:93:04:4F:1B:CD:61:5E:54:21:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.crl X509v3 Authority Key Identifier: keyid:DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a0:44:b0:ca:04:e5:01:27:fe:84:fc:09:28:d2:a7:10:b2: dc:0e:32:c4:2b:de:d9:c1:a1:50:37:39:17:3b:b6:19:9b:de: 38:60:ee:9d:c2:41:7d:4e:70:51:61:4c:f7:b1:71:ec:76:41: d5:e3:37:f7:db:88:82:0d:55:99:59:0c:4c:e8:e0:f8:48:8c: e1:ba:c6:61:e3:5a:3c:ed:cf:cf:76:e6:ea:82:28:9b:91:14: e2:5f:88:64:dd:7a:cc:f7:a6:20:b4:06:89:e5:88:9e:15:1c: ce:92:df:33:53:74:10:95:12:4a:80:a9:dd:b8:ce:de:7f:5b: 82:92:74:7d:88:c3:bb:af:df:fd:03:43:a1:47:9d:92:c6:69: 6c:df:27:94:f9:24:4b:8d:b1:ef:b4:86:d3:f2:4a:b2:12:cf: 97:d7:ae:41:08:dd:58:3a:14:3c:46:2e:0c:dc:5a:63:0f:c7: 03:94:da:aa:81:95:1f:62:22:ba:95:17:4b:50:d6:cd:bd:0e: 7b:9f:2c:27:0c:c5:c1:65:b3:c9:c5:b4:b1:eb:cf:ed:76:92: a8:08:09:30:3f:91:a3:ac:f7:ac:5e:a1:8a:44:2f:f1:b8:0d: b9:3f:51:04:ba:ab:d8:3c:88:69:06:ae:12:b1:78:d1:8a:3f: 94:22:f7:dc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnY9AV31mcrXLfhAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTgzNTViM2UtMzI3Yy00NWY1LWFmOTQtYTk2NTkxMWMz MTAzMB4XDTI1MDUxNDA2MDAwM1oXDTI1MDUxNjA2MDAwMFowLzEtMCsGA1UEAxMk MjRkYzkyZGEtZjZlZC00NGM1LWIxODMtYzRkNjNhOTY2NGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTw2OiuAo3QhRPu3DoigE4Jb39O7RyJNz/m0 7waxqUt4sxwVlFxbpN79C9ehUbqSV2gjzGgkMknbtTg9Z27wsJ1JOcGCvzCNn04M wJVO2IQ4P0Zf3tVSauz2gnXaPriTCjKYUCmperX0HQz69IczZTpjPaDMe1NkVlpY RWkmpw736pffXi4vYc60T5l+tr8Rs5U3nHIFvxwr+pPd9ad4Jg0Yeuw6pH+ij/Bl TIpZvy8PqmK2yOZSC+TZ9yLiCwkPIXg4E1P5o9XPi4Hs5H0HofW7u5VWeP0ZCkeP 0rYHkv991k7NodiMIpq6lEUCu1W+tcV9Y1poSYfAj+3wqjv7TQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAAftowzynG4C7mTBE8bzWFeVCE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hODM1 NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1OTExYzMxMDMvYTgzNTViM2UtMzI3Yy00 NWY1LWFmOTQtYTk2NTkxMWMzMTAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTgzNTViM2UtMzI3Yy00NWY1LWFm OTQtYTk2NTkxMWMzMTAzL2E4MzU1YjNlLTMyN2MtNDVmNS1hZjk0LWE5NjU5MTFj MzEwMy5jcmwwHwYDVR0jBBgwFoAU2+mUNGobUY4ZA775rvdJV62Cj1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hODM1NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1 OTExYzMxMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4oESwygTlASf+hPwJKNKn ELLcDjLEK97ZwaFQNzkXO7YZm944YO6dwkF9TnBRYUz3sXHsdkHV4zf324iCDVWZ WQxM6OD4SIzhusZh41o87c/PdubqgiibkRTiX4hk3XrM96YgtAaJ5YieFRzOkt8z U3QQlRJKgKnduM7ef1uCknR9iMO7r9/9A0OhR52Sxmls3yeU+SRLjbHvtIbT8kqy Es+X165BCN1YOhQ8Ri4M3FpjD8cDlNqqgZUfYiK6lRdLUNbNvQ57nywnDMXBZbPJ xbSx68/tdpKoCAkwP5GjrPesXqGKRC/xuA25P1EEuqvYPIhpBq4SsXjRij+UIvfc -----END CERTIFICATE-----Generated at Wed May 14 18:50:12 2025 by rpki-client