$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: a1Hi0H3AYuBt/xCSq6LYsLPPzQWedIrJQxbpCXHP9/Q= Subject key identifier: B9:51:C9:A0:68:BE:5E:3C:56:24:E7:FC:C9:9B:40:E5:72:33:94:84 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F43285849CD8DC4992E102A0124F45E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF56432C Signing time: Sat 10 May 2025 04:00:07 +0000 Manifest this update: Sat 10 May 2025 04:00:07 +0000 Manifest next update: Mon 12 May 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 3ks0MROC7gTrM3tEdwEYSUD2hgGJ8DiIOrRwCqkCX04=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: rB4bEFRZCkPcWZmV4fcZ18xs52NdkvP098tlHaL4oUk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:8d:c4:99:2e:10:2a:01:24:f4:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: May 10 04:00:07 2025 GMT Not After : May 12 04:00:00 2025 GMT Subject: CN=bcca9e06-270f-418a-be88-58da011326e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:9a:a0:a6:ef:21:3e:f5:84:26:db:88:9f: 7c:77:59:0b:f6:c4:4a:18:2e:49:2a:af:16:59:8e: f4:12:e1:1e:67:4e:79:8f:50:a2:6f:1f:69:54:01: f6:d2:6c:a4:62:24:ab:8a:fe:f4:03:7f:cd:7c:88: f5:3f:6c:00:d2:b6:30:23:64:c7:f7:12:09:e0:39: 01:9a:a5:52:03:bf:b9:56:4d:97:ce:02:95:79:51: 5d:03:99:4f:05:20:55:20:96:1a:43:3c:7f:b8:fe: 15:5e:7d:c5:84:8d:68:d5:d8:1b:72:e4:ad:56:35: 0e:26:d5:18:d7:b2:e3:b7:bb:c5:cc:17:17:85:4e: b1:5f:88:50:13:9b:f9:46:1a:fd:7a:f8:de:01:5f: a9:11:9e:34:67:8f:84:66:a0:00:4e:43:65:0c:b7: 5d:c1:d3:14:44:46:31:83:eb:91:d5:f6:84:e6:e5: b2:de:e8:23:3a:7a:40:58:50:19:20:3f:d5:4b:ac: fb:39:6b:0e:4c:f2:72:8f:bd:b9:75:a6:12:a2:aa: 19:93:a8:c7:8d:57:b5:e5:d3:07:91:6e:64:4c:a4: 52:a4:78:ad:a4:ac:c7:9b:3c:76:e2:b6:ce:8f:e2: 22:af:b4:81:44:0e:e0:f2:ac:6c:d2:0e:68:cf:5f: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:C9:A0:68:BE:5E:3C:56:24:E7:FC:C9:9B:40:E5:72:33:94:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0e:a7:85:28:62:29:ee:c1:54:11:a9:d0:7e:52:a5:b4:91: 07:25:5a:91:8b:49:1f:d9:e5:77:09:f1:16:a6:34:7a:2a:46: 2e:5e:69:7b:d8:a1:88:b2:c1:c9:32:42:af:5f:b9:8f:6a:f0: 2e:e3:51:5a:f7:53:65:da:f1:5a:c2:7c:56:13:e1:5b:bb:46: d3:99:ca:d4:64:09:03:32:e1:bf:ed:2b:9e:12:c1:83:8d:8d: fa:cc:4b:b4:b9:25:e3:22:20:5d:0c:28:3e:f2:f5:95:20:a2: 41:3e:a3:f4:b2:26:54:0d:f8:b5:22:89:13:94:17:35:81:35: 1c:12:65:13:84:21:37:96:5c:7d:a0:71:32:9b:13:36:ac:f8: 85:50:06:0a:90:08:ba:f4:3e:a2:1e:fa:70:e7:b5:c5:d0:86: 6f:88:cc:f0:9f:70:49:46:7f:bc:e2:41:5a:6e:c6:bf:d8:d8: 81:7b:2e:12:67:dc:27:9b:6c:ef:a5:bd:d6:c5:8a:57:28:68: e1:72:94:4f:52:b2:08:a5:c2:46:35:15:0b:be:10:6e:85:e1: 11:04:09:3d:6d:f3:31:c0:e7:0d:f1:3e:0d:cb:cb:d8:29:65: 2a:82:69:4a:ae:e0:30:62:6c:58:d7:ab:88:90:6f:3c:e0:b8: c3:79:8b:8d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnNjcSZLhAqAST0XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDUxMDA0MDAwN1oXDTI1MDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk YmNjYTllMDYtMjcwZi00MThhLWJlODgtNThkYTAxMTMyNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukaaoKbvIT71hCbbiJ98d1kL9sRKGC5JKq8W WY70EuEeZ055j1Cibx9pVAH20mykYiSriv70A3/NfIj1P2wA0rYwI2TH9xIJ4DkB mqVSA7+5Vk2XzgKVeVFdA5lPBSBVIJYaQzx/uP4VXn3FhI1o1dgbcuStVjUOJtUY 17Ljt7vFzBcXhU6xX4hQE5v5Rhr9evjeAV+pEZ40Z4+EZqAATkNlDLddwdMUREYx g+uR1faE5uWy3ugjOnpAWFAZID/VS6z7OWsOTPJyj725daYSoqoZk6jHjVe15dMH kW5kTKRSpHitpKzHmzx24rbOj+Iir7SBRA7g8qxs0g5oz1/J/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLlRyaBovl48ViTn/MmbQOVyM5SEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALDqeFKGIp7sFUEanQflKl tJEHJVqRi0kf2eV3CfEWpjR6KkYuXml72KGIssHJMkKvX7mPavAu41Fa91Nl2vFa wnxWE+Fbu0bTmcrUZAkDMuG/7SueEsGDjY36zEu0uSXjIiBdDCg+8vWVIKJBPqP0 siZUDfi1IokTlBc1gTUcEmUThCE3llx9oHEymxM2rPiFUAYKkAi69D6iHvpw57XF 0IZviMzwn3BJRn+84kFabsa/2NiBey4SZ9wnm2zvpb3WxYpXKGjhcpRPUrIIpcJG NRULvhBuheERBAk9bfMxwOcN8T4Ny8vYKWUqgmlKruAwYmxY16uIkG884LjDeYuN -----END CERTIFICATE-----Generated at Sun May 11 05:19:16 2025 by rpki-client