$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft File: 7d31536a-f667-4473-abbf-040b249fa39f.mft (raw, json) Hash identifier: XNhjgpbKM2ZAe2zkEPfS9VkQ7mBOmFy4ZUPDomaLAmk= Subject key identifier: FA:45:76:3B:7A:7F:0E:4B:E7:D7:96:83:43:A0:6D:31:59:77:46:54 Authority key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Certificate issuer: /CN=7d31536a-f667-4473-abbf-040b249fa39f Certificate serial: 010D0C9F43285849D3231958D7B54B7E2B164E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft Manifest number: 010D0C9F4328584073A83D7D40856469CE560937 Signing time: Mon 12 May 2025 04:00:03 +0000 Manifest this update: Mon 12 May 2025 04:00:03 +0000 Manifest next update: Wed 14 May 2025 04:00:00 +0000 Files and hashes: 1: 7d31536a-f667-4473-abbf-040b249fa39f.crl (hash: /FDJX9WJms6wklTJsaui2Kx3D5l3KacI6uniPiH9CZE=) 2: dd353f43-84b3-38d4-9bb0-3c74c9e62184.roa (hash: 5+23d1rxa7Bx5hyeBF0Cq6bbVksrb+1Ghud8/hWqOLM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:23:19:58:d7:b5:4b:7e:2b:16:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d31536a-f667-4473-abbf-040b249fa39f Validity Not Before: May 12 04:00:03 2025 GMT Not After : May 14 04:00:00 2025 GMT Subject: CN=aee03269-1b34-439f-a99d-6763d04a21c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:f3:c7:bf:ae:af:61:25:c9:17:d2:d5:0a: d4:13:95:57:d2:16:19:48:22:b9:16:82:dd:3a:93: d7:c2:bd:b2:e0:d6:6b:25:e8:a8:35:d1:be:f2:40: c7:4d:3a:e6:ff:f8:15:38:0b:18:c7:e7:5c:e4:0c: 17:80:21:3b:63:c3:7a:d7:38:e5:05:f1:8f:9d:15: 57:66:9b:8f:56:8a:91:f6:33:e7:da:c3:7c:e7:53: f1:4b:55:e3:f4:40:31:51:0f:e2:a9:b5:7f:33:5e: c4:14:fe:14:c8:b2:62:d8:91:56:67:07:8d:e1:39: e5:8c:a0:7c:da:eb:bc:95:04:50:5e:cd:3b:1b:98: bb:a1:0d:b0:11:ac:9f:b7:c0:4b:0c:96:c5:a3:34: 77:8a:ab:b3:80:d0:58:d9:eb:95:88:f3:c5:d6:d8: 3f:0b:d0:8e:2f:89:6b:2d:d0:9f:55:c7:80:46:4f: dc:b4:94:6c:3c:2d:a0:7e:4f:f2:ec:76:5f:d0:cb: 28:ed:df:8c:f7:a8:c3:81:63:1a:0a:c9:17:73:37: 51:ce:ea:85:cc:d9:e1:28:3f:a6:d9:d3:3e:0e:ec: 51:c9:64:12:80:e8:02:b8:18:a7:dd:ca:9d:f3:91: 3a:60:ae:c0:34:76:75:4b:62:49:f4:81:94:e4:40: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:76:3B:7A:7F:0E:4B:E7:D7:96:83:43:A0:6D:31:59:77:46:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl X509v3 Authority Key Identifier: keyid:D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9a:a4:e5:b0:07:7e:8d:af:ae:0e:dd:13:4c:29:90:ee:81: ad:c1:cc:fa:31:f0:b7:40:82:82:30:3c:3e:9d:db:d0:ec:4f: 92:28:71:55:6d:04:30:75:00:22:84:39:19:4f:5c:aa:3c:9c: bf:96:02:bb:75:59:3b:85:a7:f0:09:56:94:ba:af:55:9f:70: be:5b:2a:06:6f:a5:08:26:84:1c:bb:7b:13:f6:e2:32:db:f1: 2a:e9:38:c8:3f:11:08:2f:98:dc:8b:8f:28:1d:ca:03:2e:3d: 5e:f2:95:c9:6d:d5:95:77:2a:61:a1:ef:12:c4:eb:ad:68:52: 68:95:d5:c4:be:81:0f:b9:cb:2f:fc:7a:57:47:23:10:de:bc: 0d:37:ff:ff:2a:4f:50:f4:63:e8:28:86:af:92:87:12:b8:89: 27:9c:23:9e:82:fb:47:92:4f:c3:a6:84:4f:d5:00:97:26:43: d8:88:9a:6e:14:8f:e7:ac:0c:07:98:3b:58:ee:c0:75:d3:e1: 1a:71:19:e0:9a:5a:da:f4:aa:c6:43:f5:12:2d:72:30:d0:e8: 2e:30:37:80:eb:eb:7f:72:1d:fc:35:51:dc:3e:39:70:03:28: 27:27:3f:f3:29:39:85:e4:47:12:0f:b1:f5:5a:a2:85:c3:36: da:48:c9:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnTIxlY17VLfisWToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2QzMTUzNmEtZjY2Ny00NDczLWFiYmYtMDQwYjI0OWZh MzlmMB4XDTI1MDUxMjA0MDAwM1oXDTI1MDUxNDA0MDAwMFowLzEtMCsGA1UEAxMk YWVlMDMyNjktMWIzNC00MzlmLWE5OWQtNjc2M2QwNGEyMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqLzx7+ur2ElyRfS1QrUE5VX0hYZSCK5FoLd OpPXwr2y4NZrJeioNdG+8kDHTTrm//gVOAsYx+dc5AwXgCE7Y8N61zjlBfGPnRVX ZpuPVoqR9jPn2sN851PxS1Xj9EAxUQ/iqbV/M17EFP4UyLJi2JFWZweN4TnljKB8 2uu8lQRQXs07G5i7oQ2wEayft8BLDJbFozR3iquzgNBY2euViPPF1tg/C9COL4lr LdCfVceARk/ctJRsPC2gfk/y7HZf0Mso7d+M96jDgWMaCskXczdRzuqFzNnhKD+m 2dM+DuxRyWQSgOgCuBin3cqd85E6YK7ANHZ1S2JJ9IGU5ECQDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPpFdjt6fw5L59eWg0OgbTFZd0ZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZDMx NTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5ZmEzOWYvN2QzMTUzNmEtZjY2Ny00 NDczLWFiYmYtMDQwYjI0OWZhMzlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2QzMTUzNmEtZjY2Ny00NDczLWFi YmYtMDQwYjI0OWZhMzlmLzdkMzE1MzZhLWY2NjctNDQ3My1hYmJmLTA0MGIyNDlm YTM5Zi5jcmwwHwYDVR0jBBgwFoAU0tIApymGnDfXKvUTWR9UiOfoZbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBi MjQ5ZmEzOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtmqTlsAd+ja+uDt0TTCmQ 7oGtwcz6MfC3QIKCMDw+ndvQ7E+SKHFVbQQwdQAihDkZT1yqPJy/lgK7dVk7hafw CVaUuq9Vn3C+WyoGb6UIJoQcu3sT9uIy2/Eq6TjIPxEIL5jci48oHcoDLj1e8pXJ bdWVdyphoe8SxOutaFJoldXEvoEPucsv/HpXRyMQ3rwNN///Kk9Q9GPoKIavkocS uIknnCOegvtHkk/DpoRP1QCXJkPYiJpuFI/nrAwHmDtY7sB10+EacRngmlra9KrG Q/USLXIw0OguMDeA6+t/ch38NVHcPjlwAygnJz/zKTmF5EcSD7H1WqKFwzbaSMng -----END CERTIFICATE-----Generated at Mon May 12 09:01:15 2025 by rpki-client