$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft File: 83978879-0e89-498f-901b-884a1988c27f.mft (raw, json) Hash identifier: yYynXsGzXcARD37jplGgJGIA2tjTWRhD1oh31zt22n8= Subject key identifier: CA:D7:37:F6:EA:10:13:DC:B8:68:53:51:63:54:F4:FB:05:2D:30:1A Authority key identifier: F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 Certificate issuer: /CN=83978879-0e89-498f-901b-884a1988c27f Certificate serial: 010D0C9F43285849CE22AA5CB4DA7704D308D260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft Manifest number: 010D0C9F4328584073A849BF7E14973E0ED887EF Signing time: Sat 10 May 2025 09:00:07 +0000 Manifest this update: Sat 10 May 2025 09:00:07 +0000 Manifest next update: Mon 12 May 2025 09:00:00 +0000 Files and hashes: 1: 83978879-0e89-498f-901b-884a1988c27f.crl (hash: Ff1NlAThEZsnMOSCdkDwxeLSQN8DI9N6OgEhM0xJ99Q=) 2: a76e2a99-afef-387e-82e9-daf0c2b55c50.roa (hash: CpS9SVv2eLOL6x7tENFd3phckzqSf46ldcHjhq+9Yts=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:22:aa:5c:b4:da:77:04:d3:08:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83978879-0e89-498f-901b-884a1988c27f Validity Not Before: May 10 09:00:07 2025 GMT Not After : May 12 09:00:00 2025 GMT Subject: CN=177f2d81-728c-4de2-832c-2b75f32e5d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cb:49:09:79:bf:e7:ae:6a:7c:0b:93:d3:fa: b9:33:06:8b:7a:e1:e2:63:3f:50:46:67:52:2b:9e: 18:5f:33:65:79:a3:84:0b:6f:3b:e0:b1:b8:9d:df: 23:17:03:8e:17:1c:f3:f8:01:ce:c4:bd:f9:bc:80: 45:a9:ae:f9:bc:73:d5:9d:44:05:d3:13:ba:49:5f: 78:e0:55:4c:e4:05:77:c0:89:68:22:ea:bf:d0:0a: 57:5a:ee:e4:c6:0c:a7:69:de:d9:f9:1a:86:d1:cd: 7b:4b:47:8e:7f:2e:b7:65:29:85:3f:e2:5c:c3:56: e6:b5:7d:72:30:0e:a0:16:eb:07:47:87:46:cb:0c: 99:37:fc:21:93:89:d4:0b:1c:7c:fc:67:c7:d5:11: 71:ff:cf:b3:ff:c6:37:4f:5c:3c:79:ef:1b:46:69: 35:4e:b2:bf:04:87:45:4c:1e:5a:51:59:51:e6:23: 01:d1:3d:eb:98:87:47:5f:4d:30:5a:a3:f6:ac:71: 94:ed:fe:b7:3c:67:46:49:57:de:e2:96:bf:ce:11: c3:ad:ff:d6:16:45:7d:7b:53:e8:24:43:16:c5:d7: 23:2d:68:73:15:b2:75:36:71:d0:58:c5:99:d2:ad: 0f:f1:ef:e8:1e:fa:a4:ac:8e:86:92:a8:f0:cd:55: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D7:37:F6:EA:10:13:DC:B8:68:53:51:63:54:F4:FB:05:2D:30:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f/83978879-0e89-498f-901b-884a1988c27f.crl X509v3 Authority Key Identifier: keyid:F2:13:49:BC:1E:A5:6F:94:E9:9E:63:33:CC:53:1C:C5:F7:00:B9:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/83978879-0e89-498f-901b-884a1988c27f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ff:5f:97:be:00:1c:f4:9d:aa:c5:01:57:06:85:08:71:e7: 94:06:36:9d:97:43:c4:0b:3a:79:7d:d9:fa:22:8d:a0:aa:e9: 8c:4d:17:55:4d:b6:f7:b4:4a:f4:3c:27:0c:ca:b5:9f:94:a3: 4d:8e:65:45:f9:d7:7a:2f:0b:57:62:02:7b:9c:ac:cc:0c:58: 06:f0:0f:df:13:fb:fe:9e:97:54:3d:e7:c2:be:fd:cb:b2:89: 9d:e7:2c:06:40:b1:01:47:46:0d:93:f1:cb:98:eb:b2:e3:55: 69:e8:ac:1d:a0:85:cd:d7:bf:df:77:81:75:39:b2:fa:a9:35: e8:c5:76:de:43:01:db:77:7c:b0:d6:36:a6:32:be:b2:fa:b8: f3:ef:6e:69:0c:ca:da:5e:21:bb:b8:7e:08:a4:00:07:c7:0f: de:c4:48:d2:38:9a:1c:43:4c:30:59:8a:b2:5c:ae:e7:cc:64: 22:d9:90:af:34:35:2c:60:a2:51:a1:dd:9d:78:16:ec:3e:cf: 5e:5e:fd:b2:21:9a:fb:f6:b4:82:21:30:8c:1d:7f:2b:9b:ee: cf:be:2d:68:21:ab:d3:27:60:10:98:37:23:67:42:17:8d:48: 6c:bc:7e:1f:fb:15:76:e7:78:e2:78:b5:70:7a:a3:85:da:81: 0e:6f:48:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnOIqpctNp3BNMI0mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM5Nzg4NzktMGU4OS00OThmLTkwMWItODg0YTE5ODhj MjdmMB4XDTI1MDUxMDA5MDAwN1oXDTI1MDUxMjA5MDAwMFowLzEtMCsGA1UEAxMk MTc3ZjJkODEtNzI4Yy00ZGUyLTgzMmMtMmI3NWYzMmU1ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68tJCXm/565qfAuT0/q5MwaLeuHiYz9QRmdS K54YXzNleaOEC2874LG4nd8jFwOOFxzz+AHOxL35vIBFqa75vHPVnUQF0xO6SV94 4FVM5AV3wIloIuq/0ApXWu7kxgynad7Z+RqG0c17S0eOfy63ZSmFP+Jcw1bmtX1y MA6gFusHR4dGywyZN/whk4nUCxx8/GfH1RFx/8+z/8Y3T1w8ee8bRmk1TrK/BIdF TB5aUVlR5iMB0T3rmIdHX00wWqP2rHGU7f63PGdGSVfe4pa/zhHDrf/WFkV9e1Po JEMWxdcjLWhzFbJ1NnHQWMWZ0q0P8e/oHvqkrI6GkqjwzVV/HQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMrXN/bqEBPcuGhTUWNU9PsFLTAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3 ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRhMTk4OGMyN2YvODM5Nzg4NzktMGU4OS00 OThmLTkwMWItODg0YTE5ODhjMjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODM5Nzg4NzktMGU4OS00OThmLTkw MWItODg0YTE5ODhjMjdmLzgzOTc4ODc5LTBlODktNDk4Zi05MDFiLTg4NGExOTg4 YzI3Zi5jcmwwHwYDVR0jBBgwFoAU8hNJvB6lb5TpnmMzzFMcxfcAueIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Mzk3ODg3OS0wZTg5LTQ5OGYtOTAxYi04ODRh MTk4OGMyN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8/1+XvgAc9J2qxQFXBoUI ceeUBjadl0PECzp5fdn6Io2gqumMTRdVTbb3tEr0PCcMyrWflKNNjmVF+dd6LwtX YgJ7nKzMDFgG8A/fE/v+npdUPefCvv3Lsomd5ywGQLEBR0YNk/HLmOuy41Vp6Kwd oIXN17/fd4F1ObL6qTXoxXbeQwHbd3yw1jamMr6y+rjz725pDMraXiG7uH4IpAAH xw/exEjSOJocQ0wwWYqyXK7nzGQi2ZCvNDUsYKJRod2deBbsPs9eXv2yIZr79rSC ITCMHX8rm+7Pvi1oIavTJ2AQmDcjZ0IXjUhsvH4f+xV253jieLVweqOF2oEOb0jQ -----END CERTIFICATE-----Generated at Sun May 11 05:12:29 2025 by rpki-client