$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft File: 4a74ffe6-3c09-4633-b8de-781dfa287da6.mft (raw, json) Hash identifier: cc4BhOMWSPLf+rV/QZfJ8lZ6es0EKSCwPbFRErIp+p8= Subject key identifier: C2:C6:77:CF:21:67:B8:07:16:A7:FD:0A:92:DD:08:14:99:4E:A1:DF Authority key identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30 Certificate issuer: /CN=4a74ffe6-3c09-4633-b8de-781dfa287da6 Certificate serial: 010D0C9F43285849CF10DA482FCF6CF0E3F1EF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft Manifest number: 010D0C9F4328584073A81E250FFBA1F6E976D63D Signing time: Sat 10 May 2025 17:00:03 +0000 Manifest this update: Sat 10 May 2025 17:00:03 +0000 Manifest next update: Tue 13 May 2025 17:00:00 +0000 Files and hashes: 1: 4a74ffe6-3c09-4633-b8de-781dfa287da6.crl (hash: bLQNc+qNXnJXfcCpNYTYAiFs/0CZvMOgQtMoLpNxHjM=) 2: 6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa (hash: 9F7ZLFOGQ3oiBnbgYjFpOOfBycLRvN80yyvxJP5D22E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:10:da:48:2f:cf:6c:f0:e3:f1:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a74ffe6-3c09-4633-b8de-781dfa287da6 Validity Not Before: May 10 17:00:03 2025 GMT Not After : May 13 17:00:00 2025 GMT Subject: CN=0dd3fd9c-8a1e-4a3f-8fb8-c510635b41fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:4d:bb:9a:b5:d3:5c:58:55:df:be:8b:b8: 80:c8:3b:c7:d6:1f:a0:c8:c2:b0:4c:bb:22:ea:04: 9f:82:73:a1:12:38:4e:9d:e8:11:17:2d:24:04:e8: 00:dd:c2:98:f4:d0:2c:1a:82:98:14:a6:66:6b:13: fd:31:30:23:1d:f7:51:a0:58:8c:aa:81:5f:3e:da: f7:0d:a7:34:58:03:8f:8f:63:0d:be:c7:c8:1d:80: 22:32:f7:2f:a2:13:9e:3e:6e:20:f9:e5:14:79:a6: f3:e1:20:2f:60:d8:d4:4d:f5:e8:3b:8c:6f:f3:80: 74:9b:ec:34:e7:a1:67:fc:54:4e:6a:42:f7:78:2c: 71:bf:c6:a4:ba:13:c6:f9:66:08:73:61:ee:56:e0: c8:fb:02:09:e7:8f:8f:dd:4d:88:14:e8:6a:09:e8: 55:6c:25:e2:52:7a:cf:63:4b:d4:51:8d:0b:ff:66: 78:c2:0d:43:4a:a6:6b:eb:5a:ec:aa:51:0e:bb:0d: 49:71:1c:9e:68:c6:67:b9:42:a5:10:25:05:cc:04: 2e:e6:24:fc:a6:b3:07:48:de:ea:89:25:1d:8b:8f: 7f:7b:a9:75:84:d9:6e:ed:24:ea:d2:27:97:cf:db: cc:3b:60:7b:e4:c7:6d:11:40:66:fb:d0:b7:24:32: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:77:CF:21:67:B8:07:16:A7:FD:0A:92:DD:08:14:99:4E:A1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.crl X509v3 Authority Key Identifier: keyid:C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:75:ed:da:27:a2:09:e9:33:bd:4a:9d:fe:13:2d:36:e2:22: 71:2d:c5:41:82:ac:c2:c6:5f:5d:40:ae:d1:b2:fd:41:27:08: 94:60:d7:44:62:e3:f4:54:b2:1b:5a:5f:53:f6:c1:b2:d8:66: a1:22:a9:4d:f2:ec:2a:88:65:d7:12:ed:56:f6:30:d4:02:2e: 09:5f:e1:71:55:d1:f5:fe:00:8a:71:26:31:3f:60:eb:85:6e: 8f:9f:ad:c7:f9:6e:db:99:75:04:4a:6c:8a:82:a0:67:80:5f: e9:ed:90:a7:93:9b:7d:c5:ac:92:ae:99:99:0a:15:a0:3f:7b: 74:ad:72:7e:aa:83:0f:a4:32:ab:a7:c6:ae:53:22:ba:b8:8d: 51:89:c0:3c:75:df:6f:60:5f:a5:62:15:0c:a1:66:09:97:e2: f6:7b:51:94:c9:91:55:ce:40:3d:28:c1:b3:7d:45:cf:31:b1: 19:3e:65:bc:d3:43:ef:30:cf:a2:ae:b9:ec:56:75:24:d0:28: 26:c3:cc:b1:15:39:7d:e3:76:9e:72:93:44:bc:79:88:2e:16: 5d:45:ea:0a:9a:14:5c:85:24:fb:41:d6:1f:ef:88:fa:0c:aa: e2:35:57:4b:71:f0:37:a8:28:a7:92:3d:4f:7b:5d:46:cd:53: 89:13:fb:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPENpIL89s8OPx74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE3NGZmZTYtM2MwOS00NjMzLWI4ZGUtNzgxZGZhMjg3 ZGE2MB4XDTI1MDUxMDE3MDAwM1oXDTI1MDUxMzE3MDAwMFowLzEtMCsGA1UEAxMk MGRkM2ZkOWMtOGExZS00YTNmLThmYjgtYzUxMDYzNWI0MWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghhNu5q101xYVd++i7iAyDvH1h+gyMKwTLsi 6gSfgnOhEjhOnegRFy0kBOgA3cKY9NAsGoKYFKZmaxP9MTAjHfdRoFiMqoFfPtr3 Dac0WAOPj2MNvsfIHYAiMvcvohOePm4g+eUUeabz4SAvYNjUTfXoO4xv84B0m+w0 56Fn/FROakL3eCxxv8akuhPG+WYIc2HuVuDI+wIJ54+P3U2IFOhqCehVbCXiUnrP Y0vUUY0L/2Z4wg1DSqZr61rsqlEOuw1JcRyeaMZnuUKlECUFzAQu5iT8prMHSN7q iSUdi49/e6l1hNlu7STq0ieXz9vMO2B75MdtEUBm+9C3JDIKWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMLGd88hZ7gHFqf9CpLdCBSZTqHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YTc0 ZmZlNi0zYzA5LTQ2MzMtYjhkZS03ODFkZmEyODdkYTYvNGE3NGZmZTYtM2MwOS00 NjMzLWI4ZGUtNzgxZGZhMjg3ZGE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGE3NGZmZTYtM2MwOS00NjMzLWI4 ZGUtNzgxZGZhMjg3ZGE2LzRhNzRmZmU2LTNjMDktNDYzMy1iOGRlLTc4MWRmYTI4 N2RhNi5jcmwwHwYDVR0jBBgwFoAUyW/EETDo8oikiJHIA6Y36qIcpTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YTc0ZmZlNi0zYzA5LTQ2MzMtYjhkZS03ODFk ZmEyODdkYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKde3aJ6IJ6TO9Sp3+Ey02 4iJxLcVBgqzCxl9dQK7Rsv1BJwiUYNdEYuP0VLIbWl9T9sGy2GahIqlN8uwqiGXX Eu1W9jDUAi4JX+FxVdH1/gCKcSYxP2DrhW6Pn63H+W7bmXUESmyKgqBngF/p7ZCn k5t9xaySrpmZChWgP3t0rXJ+qoMPpDKrp8auUyK6uI1RicA8dd9vYF+lYhUMoWYJ l+L2e1GUyZFVzkA9KMGzfUXPMbEZPmW800PvMM+irrnsVnUk0Cgmw8yxFTl943ae cpNEvHmILhZdReoKmhRchST7QdYf74j6DKriNVdLcfA3qCinkj1Pe11GzVOJE/tL -----END CERTIFICATE-----Generated at Sun May 11 12:32:08 2025 by rpki-client