$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft File: 72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft (raw, json) Hash identifier: aGOZZsGGInU+/XD69WcxngrMm0XIwgnwW4vTGW7ZfHU= Subject key identifier: 58:0B:BA:3E:11:4B:29:C0:BC:F5:A8:B6:D3:2A:74:88:61:D5:D6:52 Authority key identifier: 24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4 Certificate issuer: /CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea Certificate serial: 010D0C9F43285849C6CEA0809096189710416B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft Manifest number: 010D0C9F43285847F1DB8F44F9E8EC5CBB79D1EC Signing time: Wed 07 May 2025 18:00:07 +0000 Manifest this update: Wed 07 May 2025 18:00:07 +0000 Manifest next update: Sat 10 May 2025 18:00:00 +0000 Files and hashes: 1: 72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl (hash: e09Rfk07MEUoxtGnInRAmL87LTufhnRF7z2kZ++T/z4=) 2: f70b4207-9d81-343c-8366-de84e2638a1c.roa (hash: q9/O3Pr40mb5wX7EyXzJr3w9GgpIdk97HhALuZhzJ3Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:ce:a0:80:90:96:18:97:10:41:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea Validity Not Before: May 7 18:00:07 2025 GMT Not After : May 10 18:00:00 2025 GMT Subject: CN=139d4228-1a0e-4f2d-a427-be4fb500d583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:39:fd:12:a8:e5:2e:cd:c7:7d:29:8b:14: d6:2f:6a:19:90:cc:92:73:82:a9:51:92:95:b2:f7: df:a4:fd:34:5c:47:e5:8c:e5:08:36:33:aa:ce:4c: 25:03:63:8e:93:68:0e:f1:3f:08:ed:8d:76:d9:3c: 19:b7:cd:83:41:60:c6:7d:33:f1:eb:cc:0e:84:00: bc:d6:6d:91:49:07:ee:92:c8:66:94:ba:6b:44:71: 5d:ae:42:22:dc:d5:dd:b6:b4:48:53:bd:cc:c4:94: 7e:59:8b:98:67:4f:81:92:de:49:78:12:40:ea:01: 23:2d:eb:7b:d9:5e:8a:24:83:cd:d2:1e:29:9a:fa: fa:22:c8:17:f0:1e:af:05:64:25:6f:93:37:a9:4a: 73:11:3a:da:98:6c:b3:b1:15:e0:10:b1:f5:15:bd: 7f:cb:d8:27:c0:49:31:26:f5:88:6b:dc:b2:a5:d1: 62:e9:09:5d:49:36:20:47:11:3b:93:c8:bf:84:96: f0:09:0e:d3:a0:76:ad:31:f8:7b:b3:f0:aa:7c:0d: 86:04:58:68:e5:d3:f5:d7:c0:c1:86:93:ba:60:ad: a4:db:6a:be:9d:50:74:82:ed:6a:69:8c:fe:68:78: d4:cb:68:35:e4:2c:d8:ff:7a:56:84:f2:c4:2b:9f: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:BA:3E:11:4B:29:C0:BC:F5:A8:B6:D3:2A:74:88:61:D5:D6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl X509v3 Authority Key Identifier: keyid:24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:53:01:de:7d:4e:a6:0e:f0:5f:70:43:92:74:81:f9:97:51: f7:1a:d3:61:d9:da:bf:82:f3:38:a2:f7:cc:46:85:ab:2c:25: b6:cf:d0:c1:ee:ab:eb:32:81:be:4d:4f:19:89:db:d6:36:97: 41:7a:4e:71:54:90:d7:78:7d:64:c7:f6:13:5e:5a:8b:f4:fb: 38:ef:bf:c8:ee:8b:29:b7:2d:8b:c4:5b:10:4a:ad:e9:8b:dd: 3d:a7:bd:cd:8e:68:61:bc:22:b2:0c:fd:6c:0c:7e:89:ed:c9: bd:4d:07:e3:b3:79:1b:df:23:b4:3a:2d:9d:5c:68:10:21:53: fe:e5:b6:2f:72:1a:98:66:af:b6:36:7c:0e:69:9b:d3:53:e5: d5:13:37:d1:86:72:f6:e1:51:1f:a2:e7:61:32:72:e3:c6:fe: 6f:c9:14:75:cd:c0:73:81:97:2d:6f:b6:05:b5:98:51:65:c3: 64:06:d2:fd:72:d3:ab:81:e3:73:59:cb:8f:80:23:c7:35:3d: e7:db:35:0a:4b:f0:10:fa:e9:bd:ce:d9:6d:13:3b:29:bf:f1: d1:91:69:5a:ab:75:7a:cf:aa:c9:70:23:b7:3c:77:cc:f8:ba: 8a:80:02:bc:f5:d5:a5:ce:99:dc:97:98:83:20:f0:80:a5:c7: 04:b6:fd:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnGzqCAkJYYlxBBa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJkNDkwZjAtNDRhMC00MGUzLWFmYzItZDlmNDM1MzRk N2VhMB4XDTI1MDUwNzE4MDAwN1oXDTI1MDUxMDE4MDAwMFowLzEtMCsGA1UEAxMk MTM5ZDQyMjgtMWEwZS00ZjJkLWE0MjctYmU0ZmI1MDBkNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI05/RKo5S7Nx30pixTWL2oZkMySc4KpUZKV svffpP00XEfljOUINjOqzkwlA2OOk2gO8T8I7Y122TwZt82DQWDGfTPx68wOhAC8 1m2RSQfukshmlLprRHFdrkIi3NXdtrRIU73MxJR+WYuYZ0+Bkt5JeBJA6gEjLet7 2V6KJIPN0h4pmvr6IsgX8B6vBWQlb5M3qUpzETramGyzsRXgELH1Fb1/y9gnwEkx JvWIa9yypdFi6QldSTYgRxE7k8i/hJbwCQ7ToHatMfh7s/CqfA2GBFho5dP118DB hpO6YK2k22q+nVB0gu1qaYz+aHjUy2g15CzY/3pWhPLEK5+ArwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFgLuj4RSynAvPWottMqdIhh1dZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MmQ0 OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0MzUzNGQ3ZWEvNzJkNDkwZjAtNDRhMC00 MGUzLWFmYzItZDlmNDM1MzRkN2VhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzJkNDkwZjAtNDRhMC00MGUzLWFm YzItZDlmNDM1MzRkN2VhLzcyZDQ5MGYwLTQ0YTAtNDBlMy1hZmMyLWQ5ZjQzNTM0 ZDdlYS5jcmwwHwYDVR0jBBgwFoAUJOyHuwXBemBfJgqst6u43JKJUaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MmQ0OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0 MzUzNGQ3ZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKUwHefU6mDvBfcEOSdIH5 l1H3GtNh2dq/gvM4ovfMRoWrLCW2z9DB7qvrMoG+TU8ZidvWNpdBek5xVJDXeH1k x/YTXlqL9Ps477/I7ospty2LxFsQSq3pi909p73NjmhhvCKyDP1sDH6J7cm9TQfj s3kb3yO0Oi2dXGgQIVP+5bYvchqYZq+2NnwOaZvTU+XVEzfRhnL24VEfoudhMnLj xv5vyRR1zcBzgZctb7YFtZhRZcNkBtL9ctOrgeNzWcuPgCPHNT3n2zUKS/AQ+um9 ztltEzspv/HRkWlaq3V6z6rJcCO3PHfM+LqKgAK89dWlzpncl5iDIPCApccEtv1T -----END CERTIFICATE-----Generated at Thu May 8 19:20:46 2025 by rpki-client