$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft File: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft (raw, json) Hash identifier: 2wNfOi+I2EzX8EX0QUm+bgn+tjHniA5Lm30/vpljDSw= Subject key identifier: 65:53:66:2D:22:35:87:37:7C:76:27:DC:C0:66:CE:91:3D:76:EE:F4 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F43285849CED54C58F7F520EA6B2F7A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft Manifest number: 010D0C9F4328584073A85A0DA80DD3D1C162DB6E Signing time: Sat 10 May 2025 15:00:03 +0000 Manifest this update: Sat 10 May 2025 15:00:03 +0000 Manifest next update: Mon 12 May 2025 15:00:00 +0000 Files and hashes: 1: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl (hash: BtI7ry6XNKHU0uqKCe35MinBy6MCzRM/ZdJdOA/f6Dk=) 2: 78358e57-94d9-3749-be72-74f054906580.roa (hash: I4W5U527sfRng5wiy3JLRYBtmcrG/T3mcQY8so/NVA0=) 3: eb3c909c-c830-354b-aa36-f3f5b62b50ef.roa (hash: f2nzpWcEPc5v8hKcMWF10UyQzuKUer8JElznb2kfHT0=) 4: feab4e24-c427-3262-ae07-c36619833029.roa (hash: J9FW3KlNe+nraj2Te7faZ0zLPkzjm5G7w//x1Gi5Vdc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:d5:4c:58:f7:f5:20:ea:6b:2f:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: May 10 15:00:03 2025 GMT Not After : May 12 15:00:00 2025 GMT Subject: CN=e750862d-f53a-4ff0-8a09-f07d0ab25eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:21:da:aa:37:87:7b:09:d1:be:d1:c8:7a: ad:b2:54:58:78:e2:c9:43:47:67:b4:13:ab:d7:ee: 02:92:f0:44:37:21:ff:a1:b2:17:26:d3:bb:d0:73: fb:a8:7e:5d:9b:3c:91:da:02:a8:ac:89:6b:28:de: e0:be:32:66:de:9f:cd:43:74:a2:fb:42:a0:f7:b5: 57:3a:eb:d9:d7:da:ff:7f:c9:93:63:53:69:ab:1b: 02:2c:69:1a:c9:71:d1:50:29:10:39:d6:16:1d:3c: e8:1c:ca:9c:6c:9a:96:1c:a6:36:06:fd:33:2c:db: d5:a9:00:4b:dc:98:0d:3b:09:7f:f9:ae:7e:bd:30: 0f:8e:81:49:d1:f3:c2:bc:b2:c6:77:39:92:e3:09: b1:e1:9f:26:63:99:c1:64:c7:63:09:bf:92:65:f6: f8:98:6c:ad:61:76:1a:cf:d9:99:a0:6b:3e:41:33: 83:e6:d3:af:5f:cf:ab:d8:12:9f:49:b2:24:75:3c: 07:85:3b:2f:dd:61:ee:83:be:69:d9:32:e8:7a:db: a3:5e:76:57:19:7e:c6:53:58:fa:e8:e9:b9:1d:44: e3:7a:04:cf:b4:98:fa:86:97:b6:81:4e:80:90:23: 34:7b:c9:ad:47:a8:70:66:b7:f6:7d:8b:b7:57:15: a9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:66:2D:22:35:87:37:7C:76:27:DC:C0:66:CE:91:3D:76:EE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:db:96:dd:aa:b9:bd:a2:6e:6e:02:57:a9:cf:92:48:7d:3d: fb:4d:06:3f:91:73:58:17:60:f4:ab:13:db:ea:a6:70:6e:b7: a3:fe:56:62:d9:a1:fc:ca:09:12:22:16:5a:21:24:e5:a9:a3: 1d:82:34:00:85:c9:2f:cc:12:49:95:a8:6d:6c:e2:e1:e0:df: 5e:76:58:15:bd:40:34:13:bf:1d:e0:6f:b3:77:2c:a4:68:d7: 2b:01:63:e8:87:d7:c5:36:66:9f:e4:f9:44:3e:0b:54:87:c8: 5a:36:87:71:71:94:35:e2:98:b8:f5:2c:be:90:58:62:12:ae: db:84:1e:36:34:9a:9f:08:54:be:27:62:da:be:d3:6d:28:2b: 35:d0:7d:c5:12:13:af:00:15:89:c5:38:fa:a3:87:1d:27:14: 69:0d:32:03:57:52:ad:b1:40:7f:60:da:32:1a:a1:0f:20:21: 84:85:eb:e3:42:54:67:4f:4f:b1:fd:4e:29:15:d1:7f:9d:01: e5:27:5d:46:70:a8:33:ab:22:03:9f:cd:7e:42:4a:0a:d4:4a: a1:9d:aa:2a:6a:c0:60:e8:02:1d:da:57:bd:00:ba:10:0c:0b: 2c:ed:cc:44:c6:77:09:cb:1f:12:89:de:fa:90:a7:81:5a:78: 23:b9:85:0c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnO1UxY9/Ug6msvekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MDUxMDE1MDAwM1oXDTI1MDUxMjE1MDAwMFowLzEtMCsGA1UEAxMk ZTc1MDg2MmQtZjUzYS00ZmYwLThhMDktZjA3ZDBhYjI1ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr4h2qo3h3sJ0b7RyHqtslRYeOLJQ0dntBOr 1+4CkvBENyH/obIXJtO70HP7qH5dmzyR2gKorIlrKN7gvjJm3p/NQ3Si+0Kg97VX OuvZ19r/f8mTY1NpqxsCLGkayXHRUCkQOdYWHTzoHMqcbJqWHKY2Bv0zLNvVqQBL 3JgNOwl/+a5+vTAPjoFJ0fPCvLLGdzmS4wmx4Z8mY5nBZMdjCb+SZfb4mGytYXYa z9mZoGs+QTOD5tOvX8+r2BKfSbIkdTwHhTsv3WHug75p2TLoetujXnZXGX7GU1j6 6Om5HUTjegTPtJj6hpe2gU6AkCM0e8mtR6hwZrf2fYu3VxWprQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGVTZi0iNYc3fHYn3MBmzpE9du70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvMmQxNDA3ZjktMzI4ZC00 YzQ0LWFiYzktMTFlNmQxOGU4YTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZ25bdqrm9om5uAlepz5JI fT37TQY/kXNYF2D0qxPb6qZwbrej/lZi2aH8ygkSIhZaISTlqaMdgjQAhckvzBJJ lahtbOLh4N9edlgVvUA0E78d4G+zdyykaNcrAWPoh9fFNmaf5PlEPgtUh8haNodx cZQ14pi49Sy+kFhiEq7bhB42NJqfCFS+J2LavtNtKCs10H3FEhOvABWJxTj6o4cd JxRpDTIDV1KtsUB/YNoyGqEPICGEhevjQlRnT0+x/U4pFdF/nQHlJ11GcKgzqyID n81+QkoK1EqhnaoqasBg6AId2le9ALoQDAss7cxExncJyx8Sid76kKeBWngjuYUM -----END CERTIFICATE-----Generated at Sat May 10 21:18:26 2025 by rpki-client