$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft File: 8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft (raw, json) Hash identifier: 6+AK4GyFwwVofwXgJwZ0LDSsTPmZeUXCd7x4hNSv35U= Subject key identifier: E2:D8:D5:58:0D:7F:6D:68:BE:97:7F:72:EC:DF:BA:88:11:BF:6E:C7 Authority key identifier: 09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C Certificate issuer: /CN=8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1 Certificate serial: 010D0C9F43285849D18233650878AC879A0EDD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft Manifest number: 010D0C9F4328584073A856E92CDFAF5F2DDFB15A Signing time: Sun 11 May 2025 14:00:03 +0000 Manifest this update: Sun 11 May 2025 14:00:03 +0000 Manifest next update: Wed 14 May 2025 14:00:00 +0000 Files and hashes: 1: 8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.crl (hash: jGRimpqfQ2P6itbU7UuuqcvqdVKQtuocsr+50U9vueI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:82:33:65:08:78:ac:87:9a:0e:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1 Validity Not Before: May 11 14:00:03 2025 GMT Not After : May 14 14:00:00 2025 GMT Subject: CN=d4093627-1dac-44e8-8acf-62f00834e6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fc:cc:a6:c4:ac:ac:77:12:f1:b9:5f:11:d3: 0a:6f:d0:0d:59:48:2e:c6:1d:5e:fd:9f:d5:9a:24: 44:d5:de:85:95:15:77:cf:48:9f:b6:e0:19:9a:ac: 3d:2a:70:79:27:0a:a8:9e:c5:10:d0:6d:ce:57:84: d7:3d:e1:a7:8b:e9:cd:56:fa:f7:9a:29:77:84:37: 2a:74:40:f8:81:10:b4:79:08:47:e4:a9:3d:78:89: 8a:c6:7d:df:39:80:b9:f4:f5:9f:df:da:18:17:bf: 28:18:10:8b:d3:8f:22:da:c8:43:91:e6:cf:0e:b2: 12:fb:05:d4:b2:5f:f2:23:3c:90:98:e7:98:f6:58: be:bc:42:18:76:e9:3a:46:8a:35:c9:5c:5c:42:f4: 5b:5c:bc:7b:5c:56:02:71:14:b2:f8:65:4b:ad:c1: 66:7f:8b:a9:9e:95:5f:92:91:c6:08:d9:de:10:78: b2:67:63:df:78:2a:07:da:4e:6d:b8:69:42:d0:27: 47:ab:20:d3:37:35:69:ad:ab:f4:8f:39:45:de:3a: c4:d9:54:d2:91:d7:4d:ea:d0:40:31:85:ac:2b:68: c5:40:90:c1:08:a1:45:aa:77:91:4a:3c:b0:7a:a3: cf:ab:f6:05:9b:d9:56:32:5d:cd:d8:af:e7:04:8f: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D8:D5:58:0D:7F:6D:68:BE:97:7F:72:EC:DF:BA:88:11:BF:6E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.crl X509v3 Authority Key Identifier: keyid:09:9F:D9:1E:F3:20:0D:AB:E7:49:DF:FE:56:9F:3B:09:81:5D:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8b3728c7-6efd-4d24-b0a9-dc29ce6ee8d1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:89:d6:07:af:dc:61:20:da:38:c3:0a:c2:b4:2a:74:77:c5: d6:26:b3:51:21:90:4c:0a:f9:90:c0:42:c9:f9:cf:c5:6b:99: 18:f1:8a:4b:53:c7:40:a9:cb:0c:c9:09:4f:86:e3:80:1b:1d: 8e:66:77:f1:2b:d9:30:96:65:7a:7a:67:16:72:af:56:8b:1f: d6:f0:a1:c9:86:90:c6:c0:be:42:c2:d6:27:d8:81:37:f3:a5: 8f:9f:14:5a:4d:8b:fe:6f:01:f4:2f:f8:07:7d:55:2e:bc:eb: d0:f0:be:47:f1:12:d8:a7:ce:f6:65:ad:d9:e6:18:cb:a6:5c: a4:58:e7:fa:d9:86:e8:38:a1:33:2e:c2:1c:5f:c7:17:f3:e6: cc:f2:40:84:5b:66:cb:e2:b6:e9:29:ae:76:f2:c5:48:b0:13: e3:54:53:55:45:24:b9:45:ee:a3:38:b4:20:3f:8e:b9:08:23: 67:6f:9e:4e:1e:69:78:c2:04:18:64:dd:0a:03:3b:d7:8f:2b: ce:af:41:bf:13:f1:fc:aa:73:0a:b2:3b:e5:cd:04:c7:60:fa: 53:cf:3d:11:4c:56:9a:4c:09:5a:ce:fd:20:11:a0:4a:a6:00: bc:55:89:15:46:85:7a:f7:20:06:f6:0d:f9:60:23:db:62:72: e0:ab:97:2f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRgjNlCHish5oO3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzNzI4YzctNmVmZC00ZDI0LWIwYTktZGMyOWNlNmVl OGQxMB4XDTI1MDUxMTE0MDAwM1oXDTI1MDUxNDE0MDAwMFowLzEtMCsGA1UEAxMk ZDQwOTM2MjctMWRhYy00NGU4LThhY2YtNjJmMDA4MzRlNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPzMpsSsrHcS8blfEdMKb9ANWUguxh1e/Z/V miRE1d6FlRV3z0iftuAZmqw9KnB5JwqonsUQ0G3OV4TXPeGni+nNVvr3mil3hDcq dED4gRC0eQhH5Kk9eImKxn3fOYC59PWf39oYF78oGBCL048i2shDkebPDrIS+wXU sl/yIzyQmOeY9li+vEIYduk6Roo1yVxcQvRbXLx7XFYCcRSy+GVLrcFmf4upnpVf kpHGCNneEHiyZ2PfeCoH2k5tuGlC0CdHqyDTNzVprav0jzlF3jrE2VTSkddN6tBA MYWsK2jFQJDBCKFFqneRSjyweqPPq/YFm9lWMl3N2K/nBI9+nwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOLY1VgNf21ovpd/cuzfuogRv27HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YjM3 MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5Y2U2ZWU4ZDEvOGIzNzI4YzctNmVmZC00 ZDI0LWIwYTktZGMyOWNlNmVlOGQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGIzNzI4YzctNmVmZC00ZDI0LWIw YTktZGMyOWNlNmVlOGQxLzhiMzcyOGM3LTZlZmQtNGQyNC1iMGE5LWRjMjljZTZl ZThkMS5jcmwwHwYDVR0jBBgwFoAUCZ/ZHvMgDavnSd/+Vp87CYFd2AwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YjM3MjhjNy02ZWZkLTRkMjQtYjBhOS1kYzI5 Y2U2ZWU4ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSidYHr9xhINo4wwrCtCp0 d8XWJrNRIZBMCvmQwELJ+c/Fa5kY8YpLU8dAqcsMyQlPhuOAGx2OZnfxK9kwlmV6 emcWcq9Wix/W8KHJhpDGwL5CwtYn2IE386WPnxRaTYv+bwH0L/gHfVUuvOvQ8L5H 8RLYp872Za3Z5hjLplykWOf62YboOKEzLsIcX8cX8+bM8kCEW2bL4rbpKa528sVI sBPjVFNVRSS5Re6jOLQgP465CCNnb55OHml4wgQYZN0KAzvXjyvOr0G/E/H8qnMK sjvlzQTHYPpTzz0RTFaaTAlazv0gEaBKpgC8VYkVRoV69yAG9g35YCPbYnLgq5cv -----END CERTIFICATE-----Generated at Sun May 11 23:28:51 2025 by rpki-client