$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft File: c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft (raw, json) Hash identifier: IYVG233BwMYpA7P7iVPofCd7aPPhw5lgJuPuW6W53Iw= Subject key identifier: 5C:9C:E7:5E:DE:66:61:48:34:B0:07:1B:59:01:6F:B6:0E:85:05:CE Authority key identifier: 73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36 Certificate issuer: /CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65 Certificate serial: 010D0C9F43285849CF6A3B2855CF61E84F87E440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft Manifest number: 010D0C9F4328584073A8273CE42DF5D1D3EE42EE Signing time: Sat 10 May 2025 20:00:07 +0000 Manifest this update: Sat 10 May 2025 20:00:07 +0000 Manifest next update: Tue 13 May 2025 20:00:00 +0000 Files and hashes: 1: 2d50375f-8500-3214-a11f-bd594b4aa849.roa (hash: piAJ1I1ESw7BNoKMof+frBs1V2hud13k+KliSGAft0o=) 2: c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl (hash: W3pU9tsKC5xpts0D9FkxbKUC12WPDA6fOnNOGsvAAr8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:6a:3b:28:55:cf:61:e8:4f:87:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fdc9e3-c24c-4cff-a8cf-9f296df41e65 Validity Not Before: May 10 20:00:07 2025 GMT Not After : May 13 20:00:00 2025 GMT Subject: CN=e18a02a0-48bf-4eef-98e8-b682983414e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:01:9a:54:48:26:d8:f6:a7:45:04:3e:16: 78:f4:d7:ef:87:9f:21:7d:7f:a9:8f:b9:90:90:6b: ff:b3:c4:55:02:20:3f:d8:0b:6c:a5:f0:23:ad:86: e9:56:69:de:b6:c4:61:a5:10:38:18:ee:0b:62:7b: cb:d7:53:fc:d2:66:26:47:f0:6b:d6:23:47:50:7e: fe:f9:f7:32:aa:93:70:5f:7e:f7:d9:4a:eb:a6:1e: 54:24:b0:1d:6a:d6:f3:24:39:e1:17:8b:b2:1e:2b: 03:c5:b8:3a:81:82:7c:ae:0d:ef:83:f2:74:7c:1f: 8d:94:47:f3:a6:7e:2b:1d:fe:15:b7:0d:8b:22:21: 29:13:57:cf:1f:64:da:28:f7:63:c7:f0:cb:2f:dc: 87:15:c3:58:25:72:14:db:89:18:6a:83:9d:b5:67: 1a:0e:7b:0d:53:f5:1f:cd:93:0a:ea:51:fa:ae:4e: 8e:2c:6c:55:cc:3a:fa:34:29:18:e7:89:8f:49:92: 39:aa:60:ba:94:41:db:17:75:a1:16:42:1e:d9:aa: b2:bc:eb:b7:05:c9:2f:a2:99:85:7a:ac:7c:8a:1b: 15:89:60:6f:7d:50:f5:be:c0:68:81:34:20:4e:68: ec:ea:58:b6:eb:4c:fb:19:30:e9:dd:c0:5c:64:08: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9C:E7:5E:DE:66:61:48:34:B0:07:1B:59:01:6F:B6:0E:85:05:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.crl X509v3 Authority Key Identifier: keyid:73:9F:60:47:8C:11:0A:44:2A:F2:0F:5F:2B:C3:4C:28:54:F4:C5:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2fdc9e3-c24c-4cff-a8cf-9f296df41e65.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:80:27:10:14:0c:43:32:60:fe:9a:c1:7b:65:31:9d:69:a2: 6a:5a:d1:9e:1c:89:df:0e:7d:41:9c:d8:ed:d9:1b:85:a3:c7: 6c:f3:01:95:f2:94:12:c0:c6:d0:95:11:7e:a1:0b:62:21:5b: 27:27:94:cb:57:be:b4:ae:2a:0d:0d:71:60:6c:f0:69:4c:55: 97:61:0b:f4:8c:c9:41:f3:8b:fa:1e:a0:84:ef:94:81:c4:e0: 96:86:b1:c6:d2:c7:7d:39:e6:6e:bf:4a:09:b7:17:3e:6e:0c: 6d:69:80:dc:76:57:cd:3d:90:08:d5:3d:7e:c3:e8:96:b8:0a: 9e:18:52:37:e7:52:ec:5b:30:58:d6:e7:a4:26:be:d4:5d:eb: eb:1a:5e:1a:68:a9:e0:82:22:60:26:f4:f5:76:57:6c:47:24: dd:0d:65:cf:44:0c:90:30:23:42:7e:ef:7e:4b:1d:ea:86:8f: 38:94:8b:b3:43:0a:92:08:9c:ff:ff:ec:68:b8:cc:82:a0:d6: b8:10:58:b8:f1:9d:68:04:0f:34:22:2f:4c:f9:0e:32:b5:22: 28:68:07:ca:2e:d8:b0:88:33:4d:59:38:bc:18:33:f2:67:ab: 36:10:eb:69:35:87:85:86:bf:9c:7b:4f:34:9e:50:df:c0:05: d3:56:0e:75 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPajsoVc9h6E+H5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJmZGM5ZTMtYzI0Yy00Y2ZmLWE4Y2YtOWYyOTZkZjQx ZTY1MB4XDTI1MDUxMDIwMDAwN1oXDTI1MDUxMzIwMDAwMFowLzEtMCsGA1UEAxMk ZTE4YTAyYTAtNDhiZi00ZWVmLTk4ZTgtYjY4Mjk4MzQxNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptIBmlRIJtj2p0UEPhZ49Nfvh58hfX+pj7mQ kGv/s8RVAiA/2AtspfAjrYbpVmnetsRhpRA4GO4LYnvL11P80mYmR/Br1iNHUH7+ +fcyqpNwX3732Urrph5UJLAdatbzJDnhF4uyHisDxbg6gYJ8rg3vg/J0fB+NlEfz pn4rHf4Vtw2LIiEpE1fPH2TaKPdjx/DLL9yHFcNYJXIU24kYaoOdtWcaDnsNU/Uf zZMK6lH6rk6OLGxVzDr6NCkY54mPSZI5qmC6lEHbF3WhFkIe2aqyvOu3BckvopmF eqx8ihsViWBvfVD1vsBogTQgTmjs6li260z7GTDp3cBcZAhK/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFyc517eZmFINLAHG1kBb7YOhQXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMmZk YzllMy1jMjRjLTRjZmYtYThjZi05ZjI5NmRmNDFlNjUvYzJmZGM5ZTMtYzI0Yy00 Y2ZmLWE4Y2YtOWYyOTZkZjQxZTY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzJmZGM5ZTMtYzI0Yy00Y2ZmLWE4 Y2YtOWYyOTZkZjQxZTY1L2MyZmRjOWUzLWMyNGMtNGNmZi1hOGNmLTlmMjk2ZGY0 MWU2NS5jcmwwHwYDVR0jBBgwFoAUc59gR4wRCkQq8g9fK8NMKFT0xTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMmZkYzllMy1jMjRjLTRjZmYtYThjZi05ZjI5 NmRmNDFlNjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAngCcQFAxDMmD+msF7ZTGd aaJqWtGeHInfDn1BnNjt2RuFo8ds8wGV8pQSwMbQlRF+oQtiIVsnJ5TLV760rioN DXFgbPBpTFWXYQv0jMlB84v6HqCE75SBxOCWhrHG0sd9OeZuv0oJtxc+bgxtaYDc dlfNPZAI1T1+w+iWuAqeGFI351LsWzBY1uekJr7UXevrGl4aaKnggiJgJvT1dlds RyTdDWXPRAyQMCNCfu9+Sx3qho84lIuzQwqSCJz//+xouMyCoNa4EFi48Z1oBA80 Ii9M+Q4ytSIoaAfKLtiwiDNNWTi8GDPyZ6s2EOtpNYeFhr+ce080nlDfwAXTVg51 -----END CERTIFICATE-----Generated at Sun May 11 05:17:20 2025 by rpki-client