$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft File: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft (raw, json) Hash identifier: 8txUKjAFArVJmYvFdAssRZtTR7yYLhLNF01gwszQ9Mo= Subject key identifier: 21:7A:76:FB:35:30:4E:5C:71:FE:02:3C:5D:9B:13:F4:96:2B:59:EC Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F43285849D03AA9FA17375E74E33D19C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft Manifest number: 010D0C9F4328584073A83A5B787AC8596C7E2556 Signing time: Sun 11 May 2025 03:00:07 +0000 Manifest this update: Sun 11 May 2025 03:00:07 +0000 Manifest next update: Wed 14 May 2025 03:00:00 +0000 Files and hashes: 1: 5a6c99b5-0f9c-330e-91eb-b2bddf673fa3.roa (hash: Di1O+4ZieWkuvHNlyfagocGlZ/VZK4GZNW4Zn6NOfSg=) 2: c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl (hash: P4oKH6CwtRMSbR+dY++1/02xc8ec0NwypAo78ZUWS2U=) 3: d83b099f-7012-3a33-a612-37aa394fe4f5.roa (hash: 39hG7+ww8fhzIiTPubnoNeR4u20g6RVcieuHfRbCi5I=) 4: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (hash: vi33QNflCWvfQVrtntwV1qzv0H05e4cZNtpAt6pLGyo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d0:3a:a9:fa:17:37:5e:74:e3:3d:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: May 11 03:00:07 2025 GMT Not After : May 14 03:00:00 2025 GMT Subject: CN=8bbfbb5a-3599-47c0-9be4-fbea15e947cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6c:18:53:3c:83:db:0c:ee:01:cb:fd:56:4c: 93:6d:71:f3:64:f0:0f:31:1a:35:e6:15:a0:43:ea: f0:3c:12:bc:a5:d0:bf:65:a7:7d:17:b8:32:f6:2b: 3a:da:80:d9:98:76:9e:62:00:c9:e5:b1:46:a1:a4: 80:e1:27:2f:a4:94:99:2a:78:d6:5b:18:1b:81:70: 5e:2d:5b:ed:98:2c:3f:34:4c:81:02:be:76:59:ea: 62:d2:1e:00:73:9e:26:83:07:13:ba:65:bf:b5:c7: 26:31:41:85:70:e4:51:ce:03:64:40:26:f4:57:29: a2:17:7a:7a:a0:e3:36:ce:b4:d1:5e:6a:2f:82:e9: f6:f1:64:46:1d:3c:86:c0:69:54:56:ec:6f:26:ff: e6:ed:1d:97:fa:ab:a8:50:46:7a:04:98:f3:b3:08: 2b:cc:c5:b9:b6:31:5a:97:95:84:c5:35:30:d6:16: 6f:c7:11:05:73:6f:77:5c:af:b0:a0:ac:97:9b:09: 7d:64:e4:fc:d5:6b:b8:82:da:1c:d2:57:ba:35:2b: f0:3e:28:a1:4a:1b:60:69:b1:50:3b:4b:e0:72:87: 78:7a:40:e5:c8:cf:57:44:8a:3d:65:e2:cd:41:c4: 70:68:61:3c:89:02:3b:06:f4:d4:75:2c:13:21:c8: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:76:FB:35:30:4E:5C:71:FE:02:3C:5D:9B:13:F4:96:2B:59:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e1:95:fd:d3:7e:dd:d4:e3:0c:79:e5:19:3c:51:fb:ec:a3: d8:0d:0c:d9:4d:e3:66:84:b1:e4:61:bb:ea:c3:78:17:e8:20: 9d:34:5e:1c:8e:5f:c3:af:ec:84:88:47:28:4b:e5:dd:bb:d8: 73:e4:c7:8b:bf:1e:2e:3a:77:b2:5b:78:e8:ab:03:81:de:24: 17:03:35:1f:35:7f:d1:cc:65:98:41:a1:1e:44:1a:3f:68:22: 0e:02:4b:68:32:6a:37:df:c6:8c:b5:43:41:fa:56:67:45:7c: 5c:4f:cd:12:fc:f7:d5:63:59:3d:a3:4f:4b:d2:f7:78:ca:54: 6e:4c:5e:8f:3a:c8:1a:33:65:dc:34:44:ea:1e:5e:d3:92:16: 10:9e:53:5a:1f:e7:0c:13:c2:58:6a:3b:b3:72:78:d4:39:f9: 13:73:5c:9b:49:cf:2c:d3:b6:5b:97:e7:4c:5c:0b:88:d8:d2: cf:43:95:7b:cf:42:b2:a0:47:20:b5:b5:71:4b:e2:4e:57:54: 7f:bd:05:10:75:b6:f1:3c:73:3e:3f:f3:6a:1d:99:cc:ee:74: bb:94:11:26:42:84:34:d7:cd:3f:3b:d3:f1:86:e1:e6:7d:20: e4:56:11:6f:ad:e7:d3:e5:cb:c3:71:59:5d:68:7e:bc:cb:e5: e1:75:8a:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnQOqn6FzdedOM9GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MDUxMTAzMDAwN1oXDTI1MDUxNDAzMDAwMFowLzEtMCsGA1UEAxMk OGJiZmJiNWEtMzU5OS00N2MwLTliZTQtZmJlYTE1ZTk0N2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2wYUzyD2wzuAcv9VkyTbXHzZPAPMRo15hWg Q+rwPBK8pdC/Zad9F7gy9is62oDZmHaeYgDJ5bFGoaSA4ScvpJSZKnjWWxgbgXBe LVvtmCw/NEyBAr52Wepi0h4Ac54mgwcTumW/tccmMUGFcORRzgNkQCb0VymiF3p6 oOM2zrTRXmovgun28WRGHTyGwGlUVuxvJv/m7R2X+quoUEZ6BJjzswgrzMW5tjFa l5WExTUw1hZvxxEFc293XK+woKyXmwl9ZOT81Wu4gtoc0le6NSvwPiihShtgabFQ O0vgcod4ekDlyM9XRIo9ZeLNQcRwaGE8iQI7BvTUdSwTIcjVqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCF6dvs1ME5ccf4CPF2bE/SWK1nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvYzA1N2Q5YTctOGYzZi00 Yzk3LTk1MDMtZTJhOTM2YzI3YzdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj4ZX9037d1OMMeeUZPFH7 7KPYDQzZTeNmhLHkYbvqw3gX6CCdNF4cjl/Dr+yEiEcoS+Xdu9hz5MeLvx4uOney W3joqwOB3iQXAzUfNX/RzGWYQaEeRBo/aCIOAktoMmo338aMtUNB+lZnRXxcT80S /PfVY1k9o09L0vd4ylRuTF6POsgaM2XcNETqHl7TkhYQnlNaH+cME8JYajuzcnjU OfkTc1ybSc8s07Zbl+dMXAuI2NLPQ5V7z0KyoEcgtbVxS+JOV1R/vQUQdbbxPHM+ P/NqHZnM7nS7lBEmQoQ0180/O9PxhuHmfSDkVhFvrefT5cvDcVldaH68y+XhdYoH -----END CERTIFICATE-----Generated at Sun May 11 23:28:31 2025 by rpki-client