$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: EzaFqH6j3H43clQGO69jUp9hI2d86FWan+C072ilxKM= Subject key identifier: 9F:3D:94:82:2A:5A:57:13:17:A9:16:C3:44:1E:D8:0C:57:7D:9C:AF Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F43285849CFC390E9655A3EEF3118E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CA03 Signing time: Sat 10 May 2025 23:00:07 +0000 Manifest this update: Sat 10 May 2025 23:00:07 +0000 Manifest next update: Tue 13 May 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: UoVNnfhbJA6FxlQK0/QwNEF2v1s7eJu51Kr0yk88JTI=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: lbP0BbqswA+dMxlaBhoSqEwf8kOrsfj0EfuV3AooxSo=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: NZ1r+NKzbs+XSrOX6DKDFsvnmcb/qANT7qGK60nxUcg=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: BMWvpJL97gzIBeft9pejjY6q0UDKsWrGvVjA0epj1Do=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:c3:90:e9:65:5a:3e:ef:31:18:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: May 10 23:00:07 2025 GMT Not After : May 13 23:00:00 2025 GMT Subject: CN=8c20ffdf-c272-40e8-973b-0166b265b0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:65:dc:bf:4c:9a:43:c4:29:8b:e4:c8:fc: f1:64:50:21:ad:a6:f7:55:53:8d:70:d9:d9:d8:d2: 8b:a1:0e:79:20:f6:b5:d2:42:5c:da:ea:cf:28:d9: 0c:55:6f:32:60:e0:b7:f3:e3:6c:96:bb:94:cd:34: 99:ee:49:9b:55:59:f4:0f:19:13:3f:7d:aa:62:ca: cb:f2:1e:50:3a:39:74:76:9c:d2:fb:32:43:ac:f1: 43:7a:ff:91:8c:59:81:cc:c2:a8:58:be:3a:b1:97: 1e:22:b1:00:de:e8:c4:1a:5c:60:6d:15:88:14:d4: c1:a9:36:d7:2e:7b:2a:14:80:15:b0:a2:e6:4b:94: fa:2d:1c:7e:67:67:e5:d1:89:01:a7:8d:46:42:c9: 84:62:b8:58:a6:df:4f:ca:d1:ca:87:a4:80:59:88: d8:1e:a1:7e:2e:ff:e0:3b:7b:9b:8b:0a:8d:c8:89: 63:6e:4d:89:33:fe:e8:c0:eb:53:4d:e7:3f:f7:77: 30:86:cf:a5:89:00:36:56:34:73:ce:d6:e2:aa:32: 79:6d:04:de:d1:9c:85:f5:14:3b:b5:86:f8:83:d2: e4:32:eb:d6:4e:4d:9e:af:6d:83:3a:39:6f:de:7b: d0:dd:bc:ee:36:1f:98:f4:f9:37:88:25:80:d9:b0: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:94:82:2A:5A:57:13:17:A9:16:C3:44:1E:D8:0C:57:7D:9C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:53:59:95:55:4e:1f:57:43:17:a1:98:7d:90:bd:cc:a3:55: 42:c2:1b:c3:0a:53:17:9b:69:aa:05:12:92:b4:86:7b:06:0b: 97:77:40:7b:2f:08:ce:b6:3b:39:32:49:b6:e6:f2:c0:d9:72: b9:4e:67:e6:ef:a2:55:24:7b:1c:3e:fb:0b:a7:88:b6:67:5e: e1:08:27:8a:0f:c7:50:e2:b5:ce:bb:c9:11:c2:f7:db:5b:5d: 6a:36:1b:3a:2b:a3:8b:f2:d6:c4:4b:58:17:29:22:73:e2:6d: f1:49:f4:aa:94:83:81:29:94:dc:00:fd:78:0f:df:80:58:6b: e8:65:af:62:2f:3b:26:32:13:4f:47:6e:5a:67:b1:b7:b0:c3: cd:73:bf:51:55:b0:1e:d3:ce:0e:0c:14:44:f0:44:51:2a:ad: 25:20:fa:bc:5f:c1:1e:b8:08:55:5b:7d:d0:3b:ef:e4:c9:e4: 85:46:0e:42:d6:47:99:71:3d:50:71:f0:a1:cd:c6:2e:6b:12: 4f:0e:48:3e:f0:1b:78:d2:ae:1e:c3:53:81:f0:34:90:4a:39: 96:aa:60:91:b1:07:c4:1b:33:5b:75:8e:46:e1:4f:4d:f1:13: bc:f0:2a:5e:7d:4f:57:ef:f4:2e:67:28:28:58:d0:d5:22:76: aa:49:9a:9f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPw5DpZVo+7zEY4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDUxMDIzMDAwN1oXDTI1MDUxMzIzMDAwMFowLzEtMCsGA1UEAxMk OGMyMGZmZGYtYzI3Mi00MGU4LTk3M2ItMDE2NmIyNjViMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphZl3L9MmkPEKYvkyPzxZFAhrab3VVONcNnZ 2NKLoQ55IPa10kJc2urPKNkMVW8yYOC38+NslruUzTSZ7kmbVVn0DxkTP32qYsrL 8h5QOjl0dpzS+zJDrPFDev+RjFmBzMKoWL46sZceIrEA3ujEGlxgbRWIFNTBqTbX LnsqFIAVsKLmS5T6LRx+Z2fl0YkBp41GQsmEYrhYpt9PytHKh6SAWYjYHqF+Lv/g O3ubiwqNyIljbk2JM/7owOtTTec/93cwhs+liQA2VjRzztbiqjJ5bQTe0ZyF9RQ7 tYb4g9LkMuvWTk2er22DOjlv3nvQ3bzuNh+Y9Pk3iCWA2bA3iQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ89lIIqWlcTF6kWw0Qe2AxXfZyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqU1mVVU4fV0MXoZh9kL3M o1VCwhvDClMXm2mqBRKStIZ7BguXd0B7LwjOtjs5Mkm25vLA2XK5Tmfm76JVJHsc PvsLp4i2Z17hCCeKD8dQ4rXOu8kRwvfbW11qNhs6K6OL8tbES1gXKSJz4m3xSfSq lIOBKZTcAP14D9+AWGvoZa9iLzsmMhNPR25aZ7G3sMPNc79RVbAe084ODBRE8ERR Kq0lIPq8X8EeuAhVW33QO+/kyeSFRg5C1keZcT1QcfChzcYuaxJPDkg+8Bt40q4e w1OB8DSQSjmWqmCRsQfEGzNbdY5G4U9N8RO88CpefU9X7/QuZygoWNDVInaqSZqf -----END CERTIFICATE-----Generated at Sun May 11 05:25:51 2025 by rpki-client