$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft File: 7e70a287-ad97-4c1e-9564-9ca069f57b17.mft (raw, json) Hash identifier: MWRlOHq1X2p1pI6QWOvG0ga/TrFBkSx5mQTmoBNKm58= Subject key identifier: 01:90:14:C8:10:75:E1:9F:9E:43:AF:CE:CC:20:E1:0F:5B:D3:AA:15 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F43285849D0ED564B3E6B1D682C4E4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft Manifest number: 010D0C9F4328584073A84A2792840918C6A14D6D Signing time: Sun 11 May 2025 09:00:07 +0000 Manifest this update: Sun 11 May 2025 09:00:07 +0000 Manifest next update: Wed 14 May 2025 09:00:00 +0000 Files and hashes: 1: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (hash: GQySP7mJ9WZeb+2a6UUNHhFEat4mJjl5KRninAnWQc0=) 2: 7e70a287-ad97-4c1e-9564-9ca069f57b17.crl (hash: IWr8bz3le5ex00kt7qcXPDBLUowum7QvhrjmxAzgJi4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:ed:56:4b:3e:6b:1d:68:2c:4e:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: May 11 09:00:07 2025 GMT Not After : May 14 09:00:00 2025 GMT Subject: CN=945dbf23-8d60-4ae6-968d-6b831700ba51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:46:9e:d5:c9:78:a0:f2:6f:74:00:7c:db: d4:81:13:88:b4:f8:59:5d:40:55:6e:82:ca:df:92: 56:ce:c8:d1:b9:0e:6a:97:ee:9c:2d:01:71:9a:0d: 0b:ff:17:bd:84:a4:f7:c7:36:a2:a4:4e:18:58:5f: 72:16:37:17:3c:79:ab:a2:63:7b:8a:38:e1:81:f6: df:80:df:d1:df:93:2d:01:79:fc:41:e5:66:30:cb: 50:33:f0:d4:99:75:21:62:17:83:61:b9:de:0d:0e: 1b:c1:84:4e:a3:37:11:b1:46:d8:72:0b:2f:97:5a: 22:48:80:dd:9a:1e:de:2a:bd:4d:d8:dc:89:5b:41: 30:9a:7f:69:fa:51:78:28:2b:60:26:f9:d6:c6:70: a2:9e:1e:4c:b9:06:f9:3f:7d:57:eb:3a:6a:84:9d: ce:aa:cf:54:ba:45:bd:44:53:e9:15:91:00:82:5d: eb:18:89:79:9f:1e:57:88:01:52:30:26:2e:bd:7a: f4:26:74:f7:f6:c4:ed:58:8b:0d:1f:02:1f:f5:ae: e2:48:fb:97:83:b4:d2:7c:7a:f5:de:92:af:83:55: e0:b7:78:3e:d2:6b:f5:6a:15:68:d4:67:d8:4e:91: 51:2d:71:af:91:cc:7d:30:eb:9c:5d:75:86:e2:37: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:90:14:C8:10:75:E1:9F:9E:43:AF:CE:CC:20:E1:0F:5B:D3:AA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:36:f4:a2:64:70:66:87:27:7c:2a:ac:f3:e7:10:cc:02:a1: 50:8a:18:b5:81:2d:e8:c4:55:fb:7e:c0:95:b9:1a:cb:8c:56: 0c:ef:5c:3d:c0:13:c7:ad:05:42:c6:00:3d:46:22:af:ed:a5: ae:de:36:4a:93:d6:73:d0:c8:89:07:da:40:a7:86:3d:c1:17: a6:40:e5:93:17:82:15:13:de:cc:6f:c8:dd:1f:29:d8:7a:3f: 2b:ca:e4:ab:ec:5a:b7:13:07:b1:82:04:c3:ca:42:be:c3:b3: 51:a5:79:f8:ca:b3:9f:fa:0e:1a:b3:24:3d:a4:cf:d8:86:c8: 2f:a8:bd:a0:17:f2:ba:1a:b7:bb:ac:b3:7e:0b:f1:5e:ac:2a: dc:d9:eb:e1:b5:e9:cc:ee:34:9e:34:9b:8a:e5:d4:98:77:ed: 47:5b:d4:68:63:b0:7b:3f:3c:a2:e9:8a:49:e4:31:b9:7d:e4: 3d:ad:87:1b:02:bd:41:71:8f:80:06:0b:6a:37:67:6c:95:ca: 04:94:27:94:4e:b2:66:08:c7:28:90:72:16:46:d2:94:10:11: 3d:c8:bc:71:e1:de:34:a2:e8:e5:89:e6:48:00:4a:43:b9:37: 2f:bd:ae:4d:7e:d9:0c:85:98:e6:d2:8e:40:14:af:62:d6:a6: 5d:6c:bd:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQ7VZLPmsdaCxOTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MDUxMTA5MDAwN1oXDTI1MDUxNDA5MDAwMFowLzEtMCsGA1UEAxMk OTQ1ZGJmMjMtOGQ2MC00YWU2LTk2OGQtNmI4MzE3MDBiYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn1GntXJeKDyb3QAfNvUgROItPhZXUBVboLK 35JWzsjRuQ5ql+6cLQFxmg0L/xe9hKT3xzaipE4YWF9yFjcXPHmromN7ijjhgfbf gN/R35MtAXn8QeVmMMtQM/DUmXUhYheDYbneDQ4bwYROozcRsUbYcgsvl1oiSIDd mh7eKr1N2NyJW0Ewmn9p+lF4KCtgJvnWxnCinh5MuQb5P31X6zpqhJ3Oqs9UukW9 RFPpFZEAgl3rGIl5nx5XiAFSMCYuvXr0JnT39sTtWIsNHwIf9a7iSPuXg7TSfHr1 3pKvg1Xgt3g+0mv1ahVo1GfYTpFRLXGvkcx9MOucXXWG4jcJzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAGQFMgQdeGfnkOvzswg4Q9b06oVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvN2U3MGEyODctYWQ5Ny00 YzFlLTk1NjQtOWNhMDY5ZjU3YjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbNvSiZHBmhyd8Kqzz5xDM AqFQihi1gS3oxFX7fsCVuRrLjFYM71w9wBPHrQVCxgA9RiKv7aWu3jZKk9Zz0MiJ B9pAp4Y9wRemQOWTF4IVE97Mb8jdHynYej8ryuSr7Fq3EwexggTDykK+w7NRpXn4 yrOf+g4asyQ9pM/YhsgvqL2gF/K6Gre7rLN+C/FerCrc2evhtenM7jSeNJuK5dSY d+1HW9RoY7B7Pzyi6YpJ5DG5feQ9rYcbAr1BcY+ABgtqN2dslcoElCeUTrJmCMco kHIWRtKUEBE9yLxx4d40oujlieZIAEpDuTcvva5NftkMhZjm0o5AFK9i1qZdbL1V -----END CERTIFICATE-----Generated at Sun May 11 21:00:21 2025 by rpki-client