$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft File: 576c64a5-3cd2-44d5-80c3-626ccc84e087.mft (raw, json) Hash identifier: iXhK1ztwwz/u2m5EnQay0IhHchz6SzyLDol26YxygNU= Subject key identifier: C8:41:42:AF:D1:56:53:89:8E:E0:91:D9:C0:DA:6C:98:E9:99:9F:73 Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 Certificate issuer: /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Certificate serial: 010D0C9F43285849D128DDC6B937EC8C4F60C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft Manifest number: 010D0C9F4328584073A85142D98E51DBFB16A3DE Signing time: Sun 11 May 2025 11:00:03 +0000 Manifest this update: Sun 11 May 2025 11:00:03 +0000 Manifest next update: Wed 14 May 2025 11:00:00 +0000 Files and hashes: 1: 576c64a5-3cd2-44d5-80c3-626ccc84e087.crl (hash: b28c51lLjVM3x9dcYGEPoKQWD2RvF0erS6CbF0Ktbjs=) 2: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (hash: Znm4DmcLDjUvbS8q2vpQ0t9GI7WS9LbEDqlf3w+6ZUc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:28:dd:c6:b9:37:ec:8c:4f:60:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087 Validity Not Before: May 11 11:00:03 2025 GMT Not After : May 14 11:00:00 2025 GMT Subject: CN=5c9f2590-9154-4c28-8d28-39a359e2279a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:a5:8c:04:2c:c6:b9:02:c0:6d:d8:95:78: 85:1f:48:4a:06:c8:f0:be:dd:9a:7d:45:eb:7d:bd: 32:a5:1d:fa:dc:78:94:fa:b9:ed:10:8b:d8:8d:f5: 2b:d1:b1:27:b0:49:5b:91:e4:3c:f4:81:e5:e8:9f: 08:a2:a0:dd:31:04:57:1c:c9:34:df:ad:72:df:4f: a7:ec:99:5a:b7:2a:27:12:73:20:b2:78:dd:e4:ae: 67:e1:8d:e7:a8:c5:e4:3e:fc:64:88:2b:55:0a:0f: 40:49:38:0e:d2:42:1b:1d:7b:dd:ca:02:99:fa:66: 74:ca:50:34:5e:6d:67:12:20:5d:ab:75:61:38:1c: 52:2d:81:cb:56:2b:4f:8e:ba:6b:36:f0:61:74:ba: d7:c4:fa:c4:58:54:27:c5:30:2d:fd:62:3f:5c:06: 1d:f6:a5:7c:5a:6e:d6:53:b6:31:fb:f6:ad:9f:3f: ee:d5:de:77:41:ec:ab:76:d2:81:5d:17:e9:f2:db: a7:96:a5:37:03:e7:49:f2:ba:d0:a7:6c:d7:40:e4: ca:7f:f4:c5:43:aa:ce:f3:6c:bf:d0:66:b4:f1:fc: 22:80:0f:0c:c5:32:f7:a6:ac:86:52:b8:50:6a:13: e2:06:be:2d:04:50:9e:cc:69:90:d3:88:bb:c0:01: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:41:42:AF:D1:56:53:89:8E:E0:91:D9:C0:DA:6C:98:E9:99:9F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl X509v3 Authority Key Identifier: keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9b:9e:a4:5a:d2:57:89:2f:34:02:de:d0:bb:23:1d:ed:98: fa:ef:f7:0f:5a:f9:f1:4f:54:d6:8e:b5:88:df:2d:93:99:9b: a6:4c:61:ec:a9:2b:bd:04:26:34:d1:de:35:6a:62:b1:b5:ed: bb:a5:bb:23:c5:68:44:b4:c9:95:93:2d:c3:60:73:81:4e:8f: 53:28:83:b5:fe:2b:60:ef:72:20:42:6e:ed:61:d9:0e:d7:57: 19:25:14:1a:8d:35:ee:1f:59:57:2c:54:ec:7a:d2:50:63:b7: 6f:7d:ba:38:38:97:33:4a:70:59:78:6a:78:39:0a:a5:a1:90: cd:d3:a0:5a:10:a8:e9:51:1a:96:9c:e5:b0:a8:0d:7e:c4:81: 0f:2f:bc:3f:aa:da:79:8b:1f:70:64:d8:c1:4b:90:aa:06:ee: 32:96:ff:e9:d8:58:3e:f9:2b:4a:41:11:d2:6d:e2:7f:ea:25: ed:1d:84:7c:27:70:8f:f2:2b:2f:61:87:9b:38:31:e5:41:86: b0:02:b0:ea:a1:f7:28:81:28:de:34:f0:ae:93:3f:bd:25:75: ee:64:15:ad:5e:86:ff:9f:69:cc:3d:e1:ab:e7:6f:67:7e:47: 5c:7f:e5:3a:b3:2f:8d:08:23:65:a9:2e:22:2a:64:cf:a0:40: 43:dc:31:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRKN3GuTfsjE9gyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc2YzY0YTUtM2NkMi00NGQ1LTgwYzMtNjI2Y2NjODRl MDg3MB4XDTI1MDUxMTExMDAwM1oXDTI1MDUxNDExMDAwMFowLzEtMCsGA1UEAxMk NWM5ZjI1OTAtOTE1NC00YzI4LThkMjgtMzlhMzU5ZTIyNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMeljAQsxrkCwG3YlXiFH0hKBsjwvt2afUXr fb0ypR363HiU+rntEIvYjfUr0bEnsElbkeQ89IHl6J8IoqDdMQRXHMk0361y30+n 7JlatyonEnMgsnjd5K5n4Y3nqMXkPvxkiCtVCg9ASTgO0kIbHXvdygKZ+mZ0ylA0 Xm1nEiBdq3VhOBxSLYHLVitPjrprNvBhdLrXxPrEWFQnxTAt/WI/XAYd9qV8Wm7W U7Yx+/atnz/u1d53QeyrdtKBXRfp8tunlqU3A+dJ8rrQp2zXQOTKf/TFQ6rO82y/ 0Ga08fwigA8MxTL3pqyGUrhQahPiBr4tBFCezGmQ04i7wAE47QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMhBQq/RVlOJjuCR2cDabJjpmZ9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NzZj NjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZjY2M4NGUwODcvNTc2YzY0YTUtM2NkMi00 NGQ1LTgwYzMtNjI2Y2NjODRlMDg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTc2YzY0YTUtM2NkMi00NGQ1LTgw YzMtNjI2Y2NjODRlMDg3LzU3NmM2NGE1LTNjZDItNDRkNS04MGMzLTYyNmNjYzg0 ZTA4Ny5jcmwwHwYDVR0jBBgwFoAUk0DOtnGW2j79FgyHIy7gqDvHHIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NzZjNjRhNS0zY2QyLTQ0ZDUtODBjMy02MjZj Y2M4NGUwODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtm56kWtJXiS80At7QuyMd 7Zj67/cPWvnxT1TWjrWI3y2TmZumTGHsqSu9BCY00d41amKxte27pbsjxWhEtMmV ky3DYHOBTo9TKIO1/itg73IgQm7tYdkO11cZJRQajTXuH1lXLFTsetJQY7dvfbo4 OJczSnBZeGp4OQqloZDN06BaEKjpURqWnOWwqA1+xIEPL7w/qtp5ix9wZNjBS5Cq Bu4ylv/p2Fg++StKQRHSbeJ/6iXtHYR8J3CP8isvYYebODHlQYawArDqofcogSje NPCukz+9JXXuZBWtXob/n2nMPeGr529nfkdcf+U6sy+NCCNlqS4iKmTPoEBD3DEg -----END CERTIFICATE-----Generated at Sun May 11 21:08:01 2025 by rpki-client