$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: ZDwUCQ8mj4D2k/SjhcM4pGnVXqPxg+Jbi6GQS/u9yEA= Subject key identifier: 66:D9:85:F9:EA:54:D9:66:17:D3:B2:CD:88:DF:82:49:A5:68:6C:D8 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F43285849D1F95A173F58C2949C964620 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB31841DA Signing time: Sun 11 May 2025 18:00:07 +0000 Manifest this update: Sun 11 May 2025 18:00:07 +0000 Manifest next update: Wed 14 May 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: LlhyXjcidYfLShG7ac96KIrctnrdbTR0sVFlZMCOZQE=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: oLgKcFC3CucUxORDITRfGqivuYeGIysLoBcpLAgUgkk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:f9:5a:17:3f:58:c2:94:9c:96:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: May 11 18:00:07 2025 GMT Not After : May 14 18:00:00 2025 GMT Subject: CN=7375974a-b485-4e05-b46c-1a5afb45c7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:dc:a8:c4:4d:13:8c:5e:09:ec:03:ca:01: d7:51:70:1c:79:91:7e:24:0e:b4:2b:bc:2f:3a:5d: dc:2b:08:12:8c:12:03:b0:a3:ec:43:72:b3:2a:7c: f7:95:32:9f:45:fa:dd:45:c5:bf:33:24:88:6c:be: ab:9c:5e:f7:0f:ff:da:2a:ad:cc:b7:8f:44:ac:82: 3e:77:15:06:dd:4a:cc:f1:e2:d7:f5:7a:a5:0c:9c: 38:ff:21:ec:30:68:cd:6d:fb:c1:a9:e1:e8:63:a0: df:c3:60:2b:07:c1:eb:1e:d6:ca:e8:06:86:99:59: 94:2c:77:dc:d8:c0:79:bb:40:81:9a:8d:00:c3:a4: a9:69:7d:df:11:0e:7d:cc:39:03:81:83:a9:40:ed: 3d:7f:d9:c8:a6:31:59:1f:96:93:30:2e:4b:1d:2d: 65:55:de:2e:15:c2:57:09:68:78:2a:05:cf:61:25: 62:21:7f:9e:bd:f9:0e:41:98:c3:cf:1d:cd:ce:37: 84:71:1d:ae:af:62:4c:19:88:4e:c5:96:c7:21:0f: 18:84:23:5d:66:6e:ee:1c:1d:d1:16:65:47:32:21: 33:f6:77:47:cd:03:2f:8c:db:1d:00:3a:ab:ea:e9: 61:70:b1:2a:98:fa:8c:7e:1a:56:23:b5:a5:cc:c1: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D9:85:F9:EA:54:D9:66:17:D3:B2:CD:88:DF:82:49:A5:68:6C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:06:b2:a4:43:e0:5e:8c:64:3e:a4:aa:d9:0a:89:31:87:56: cd:20:53:39:19:cb:3c:85:c4:f4:83:69:a5:1c:9b:fc:2c:c9: e0:9f:8a:33:e2:2a:e6:05:57:8b:32:84:ab:b0:08:75:28:53: 5c:0c:60:69:3a:a3:84:18:cc:3e:4f:76:2d:ca:a2:70:9d:21: 93:fc:54:09:d9:50:33:71:14:7c:c3:67:ba:9d:6c:47:77:0a: fd:dc:75:8b:29:eb:ba:14:55:9c:69:25:68:49:08:ea:51:5f: fe:66:6b:ea:48:42:ef:78:e9:c1:f0:95:a0:7f:c7:b4:e6:2e: 66:55:83:e9:55:55:4a:ec:22:e5:cd:48:23:92:0a:37:80:03: 5a:b5:05:e5:7e:45:1a:12:2d:1c:35:87:4a:96:9a:03:ca:87: d5:b2:0c:a3:30:23:32:3a:12:00:8d:9d:24:07:4e:f0:a2:53: e8:50:ca:1e:69:d0:ae:6d:86:d6:b1:ba:6e:e7:6d:09:a2:db: 23:03:bb:a4:49:a6:b7:10:0c:1a:d1:6f:3c:6e:d7:e0:1c:75: e7:39:0f:03:74:58:bf:f6:b2:fa:e7:3c:f8:3a:92:ec:d0:c0: 17:b4:f8:0e:49:87:cc:67:04:f7:cc:fe:82:16:6e:ea:aa:5e: 3c:53:da:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnR+VoXP1jClJyWRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MDUxMTE4MDAwN1oXDTI1MDUxNDE4MDAwMFowLzEtMCsGA1UEAxMk NzM3NTk3NGEtYjQ4NS00ZTA1LWI0NmMtMWE1YWZiNDVjN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVLcqMRNE4xeCewDygHXUXAceZF+JA60K7wv Ol3cKwgSjBIDsKPsQ3KzKnz3lTKfRfrdRcW/MySIbL6rnF73D//aKq3Mt49ErII+ dxUG3UrM8eLX9XqlDJw4/yHsMGjNbfvBqeHoY6Dfw2ArB8HrHtbK6AaGmVmULHfc 2MB5u0CBmo0Aw6SpaX3fEQ59zDkDgYOpQO09f9nIpjFZH5aTMC5LHS1lVd4uFcJX CWh4KgXPYSViIX+evfkOQZjDzx3NzjeEcR2ur2JMGYhOxZbHIQ8YhCNdZm7uHB3R FmVHMiEz9ndHzQMvjNsdADqr6ulhcLEqmPqMfhpWI7WlzMFt7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGbZhfnqVNlmF9OyzYjfgkmlaGzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRBrKkQ+BejGQ+pKrZCokx h1bNIFM5Gcs8hcT0g2mlHJv8LMngn4oz4irmBVeLMoSrsAh1KFNcDGBpOqOEGMw+ T3YtyqJwnSGT/FQJ2VAzcRR8w2e6nWxHdwr93HWLKeu6FFWcaSVoSQjqUV/+Zmvq SELveOnB8JWgf8e05i5mVYPpVVVK7CLlzUgjkgo3gANatQXlfkUaEi0cNYdKlpoD yofVsgyjMCMyOhIAjZ0kB07wolPoUMoeadCubYbWsbpu520JotsjA7ukSaa3EAwa 0W88btfgHHXnOQ8DdFi/9rL65zz4OpLs0MAXtPgOSYfMZwT3zP6CFm7qql48U9oR -----END CERTIFICATE-----Generated at Sun May 11 21:59:47 2025 by rpki-client