$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft File: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft (raw, json) Hash identifier: HDDa1DuXF6CzWjigJlmwkVqik3FuQQPkOHP1moG1GIE= Subject key identifier: AA:BE:69:22:B9:8F:C4:7C:35:3F:01:D4:49:37:AB:2A:9B:11:13:57 Authority key identifier: 4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 Certificate issuer: /CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Certificate serial: 010D0C9F4328584A5E5FF79F4F7FF13B9D80D140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft Manifest number: 010D0C9F4328584073A8344B79DA88D5249B5D0D Signing time: Tue 01 Jul 2025 01:00:03 +0000 Manifest this update: Tue 01 Jul 2025 01:00:03 +0000 Manifest next update: Thu 03 Jul 2025 01:00:00 +0000 Files and hashes: 1: b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl (hash: Nzh3pYN2JnRW/0gqfgX7Ljns2DNTmwp4ow38Hsa+uiA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:5f:f7:9f:4f:7f:f1:3b:9d:80:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98c0149-e3cd-44a4-bb8a-5e41d4823c0d Validity Not Before: Jul 1 01:00:03 2025 GMT Not After : Jul 3 01:00:00 2025 GMT Subject: CN=2e8f334a-1af5-4606-b17b-95b81b30b84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e4:e3:3d:b8:9d:4a:1a:37:12:5f:cd:9d:68: aa:3e:80:8c:94:ba:b4:a0:69:57:22:e9:34:e0:87: 25:64:aa:17:cc:b9:ff:ce:a4:82:be:e9:4a:21:85: bf:2e:53:b5:cd:ad:d3:73:71:e9:82:81:bd:5c:d6: f4:3b:74:f8:04:d4:c9:41:95:be:37:0b:81:21:3e: b3:56:f5:98:c5:b9:0f:8d:44:92:cc:87:f8:11:c1: a1:7a:55:ab:a9:6a:14:a0:d6:bb:e2:ad:2c:32:60: ec:a3:7f:81:69:5e:7e:3e:cc:48:85:bb:44:f1:69: f8:bf:79:b0:07:53:8c:1b:c4:36:18:2b:c9:94:9a: a9:6d:46:7a:98:2c:dd:39:8b:94:cc:01:5b:2a:a6: 9f:a1:73:52:06:20:4a:3a:ba:65:03:4e:cc:fa:6d: 3b:c1:cf:cd:d3:7d:0c:83:9d:77:ed:c0:94:19:e7: 30:1a:ab:2e:69:24:97:ba:90:3d:3d:84:d1:6b:7d: 58:70:11:0b:a2:ea:5f:c2:2a:94:f8:46:9d:8a:ab: 24:24:b9:e7:44:c8:78:18:b0:9e:25:a4:d6:3c:3e: 5a:0e:dc:b1:cd:4e:6d:2f:5b:11:b8:ba:bd:73:c1: 02:56:85:fd:64:4f:37:c1:28:a6:be:7c:ac:ad:75: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BE:69:22:B9:8F:C4:7C:35:3F:01:D4:49:37:AB:2A:9B:11:13:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.crl X509v3 Authority Key Identifier: keyid:4E:9F:56:1F:F4:8D:A5:0C:9E:85:9D:4C:8C:1C:45:9B:2A:87:74:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b98c0149-e3cd-44a4-bb8a-5e41d4823c0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ed:cd:4a:69:03:72:9e:44:7f:18:39:24:5f:c0:78:a4:69: 18:d5:6e:95:3c:c8:97:e8:47:18:07:79:78:73:46:5e:89:80: 03:32:42:de:d3:c0:16:3f:9e:dc:3d:cb:20:9e:e8:fb:e0:09: 5a:0b:ec:1f:21:21:8e:dd:ec:e1:71:27:b2:69:10:40:0a:ad: 5c:e2:3c:03:cb:0c:64:1c:3f:24:90:e3:0c:8c:d9:2a:49:ca: 51:26:3c:eb:f5:c4:8b:85:d1:0c:7d:79:34:23:75:62:bd:09: f4:05:68:7f:53:38:ab:07:3d:97:3b:89:a8:f7:ba:0d:b8:43: 26:26:ac:f3:be:c9:0d:e7:c8:8e:40:c8:99:96:33:1a:bf:c4: 84:b1:22:45:df:25:94:09:7f:81:9e:59:d7:72:c6:2f:e6:b8: da:81:9d:13:60:fb:9d:41:63:c5:21:2c:c0:c2:fd:f4:cf:3f: e8:12:f9:a2:d2:51:08:3b:d2:5d:9d:47:38:88:cd:34:98:8a: 41:1e:4e:9c:a9:75:07:80:96:ca:bb:80:44:1d:35:e2:bd:50: 59:c7:ef:08:5d:8e:9b:84:40:c2:20:88:a2:32:28:a2:59:f0: 86:7d:b0:87:9b:91:62:d4:7c:7d:21:f7:a6:d5:1f:ac:88:f5: f4:d2:13:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEpeX/efT3/xO52A0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4YzAxNDktZTNjZC00NGE0LWJiOGEtNWU0MWQ0ODIz YzBkMB4XDTI1MDcwMTAxMDAwM1oXDTI1MDcwMzAxMDAwMFowLzEtMCsGA1UEAxMk MmU4ZjMzNGEtMWFmNS00NjA2LWIxN2ItOTViODFiMzBiODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuTjPbidSho3El/NnWiqPoCMlLq0oGlXIuk0 4IclZKoXzLn/zqSCvulKIYW/LlO1za3Tc3HpgoG9XNb0O3T4BNTJQZW+NwuBIT6z VvWYxbkPjUSSzIf4EcGhelWrqWoUoNa74q0sMmDso3+BaV5+PsxIhbtE8Wn4v3mw B1OMG8Q2GCvJlJqpbUZ6mCzdOYuUzAFbKqafoXNSBiBKOrplA07M+m07wc/N030M g5137cCUGecwGqsuaSSXupA9PYTRa31YcBELoupfwiqU+EadiqskJLnnRMh4GLCe JaTWPD5aDtyxzU5tL1sRuLq9c8ECVoX9ZE83wSimvnysrXVm9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKq+aSK5j8R8NT8B1Ek3qyqbERNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iOThj MDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQxZDQ4MjNjMGQvYjk4YzAxNDktZTNjZC00 NGE0LWJiOGEtNWU0MWQ0ODIzYzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjk4YzAxNDktZTNjZC00NGE0LWJi OGEtNWU0MWQ0ODIzYzBkL2I5OGMwMTQ5LWUzY2QtNDRhNC1iYjhhLTVlNDFkNDgy M2MwZC5jcmwwHwYDVR0jBBgwFoAUTp9WH/SNpQyehZ1MjBxFmyqHdCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iOThjMDE0OS1lM2NkLTQ0YTQtYmI4YS01ZTQx ZDQ4MjNjMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP7c1KaQNynkR/GDkkX8B4 pGkY1W6VPMiX6EcYB3l4c0ZeiYADMkLe08AWP57cPcsgnuj74AlaC+wfISGO3ezh cSeyaRBACq1c4jwDywxkHD8kkOMMjNkqScpRJjzr9cSLhdEMfXk0I3VivQn0BWh/ UzirBz2XO4mo97oNuEMmJqzzvskN58iOQMiZljMav8SEsSJF3yWUCX+BnlnXcsYv 5rjagZ0TYPudQWPFISzAwv30zz/oEvmi0lEIO9JdnUc4iM00mIpBHk6cqXUHgJbK u4BEHTXivVBZx+8IXY6bhEDCIIiiMiiiWfCGfbCHm5Fi1Hx9Ifem1R+siPX00hMV -----END CERTIFICATE-----Generated at Tue Jul 1 15:45:32 2025 by rpki-client