$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft File: a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft (raw, json) Hash identifier: dNOaueL2ydeGBe89QO08xd2Li27iIjtEINENDjgouQE= Subject key identifier: B5:25:BC:0F:79:AF:1C:6D:05:1C:38:0D:E4:AD:9F:1A:E6:6E:22:3E Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B Certificate issuer: /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Certificate serial: 010D0C9F43285849CB9386D1A531C942F7461500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft Manifest number: 010D0C9F43285847A2E4EB6778299310D146144B Signing time: Fri 09 May 2025 11:00:07 +0000 Manifest this update: Fri 09 May 2025 11:00:07 +0000 Manifest next update: Mon 12 May 2025 11:00:00 +0000 Files and hashes: 1: 7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (hash: 9opfqvdb9RBmq8i48HEtXDgtvVGcKZiJCqrLsc4OqcA=) 2: a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl (hash: ko4V4D7QeVswVx4yx32q8Y40shGfmzYVJTk0jBTCCTs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:93:86:d1:a5:31:c9:42:f7:46:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Validity Not Before: May 9 11:00:07 2025 GMT Not After : May 12 11:00:00 2025 GMT Subject: CN=cc5ee63e-a0fe-4c82-8484-a8f45de3ca88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:f2:bc:58:e8:2d:fd:2d:3b:92:f8:2c:cf: 6e:a8:27:ed:92:2f:2b:0e:5b:45:65:58:69:78:97: b0:fd:25:01:3e:09:d7:eb:85:b7:9b:ef:9b:8f:11: 19:7a:99:9d:30:6c:b7:8e:ac:2b:6a:59:7f:af:56: 6a:44:20:fc:e7:7a:3b:7d:4f:55:61:bd:62:33:0a: 34:fa:e5:87:b0:6a:bd:cd:9c:2a:23:96:6f:51:07: 66:3a:6f:85:8d:cf:1f:18:3b:88:4d:58:5f:64:67: 50:57:f2:5f:e1:f9:2b:a5:2a:22:38:f4:67:15:69: f9:24:9c:c0:70:09:22:21:68:9d:67:ef:00:c9:6a: 22:f8:f2:a1:c2:f2:68:b6:ce:d2:5f:50:81:de:4a: aa:38:ea:98:19:ce:0d:6b:d5:b2:87:dc:5b:20:5c: 41:73:c0:69:a0:75:43:d6:b5:b5:c2:e0:e5:a5:e3: 88:4d:79:f2:56:3c:7e:25:9c:db:8a:68:ad:d2:c0: b2:6d:14:37:c1:6c:82:c6:a1:09:d2:3c:12:aa:a5: 81:a1:86:13:67:d8:d8:15:af:47:60:59:d4:4d:97: 3d:20:7e:e3:58:c3:fc:5e:dd:6a:90:33:7a:19:ab: 56:2f:0d:6e:5e:16:e5:83:df:1c:83:f8:9e:b2:bb: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:25:BC:0F:79:AF:1C:6D:05:1C:38:0D:E4:AD:9F:1A:E6:6E:22:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl X509v3 Authority Key Identifier: keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:60:aa:17:cd:06:c8:45:c6:34:2f:1a:18:ba:68:52:f5:71: 2f:23:98:7b:59:d5:f4:44:b9:e0:d4:ac:3c:c4:93:8f:da:5e: 8c:b4:d7:e7:29:7e:37:c7:67:55:ba:cc:29:6d:3c:f3:0d:54: b5:59:fc:a8:10:f8:ee:91:2b:bc:e1:0c:31:1d:05:21:17:e1: 21:bc:58:79:38:34:36:f9:72:6c:ba:59:c5:94:82:97:ae:1c: cc:ed:02:4d:7d:9e:4b:25:8b:7a:b3:df:06:c5:41:59:a1:ef: 91:8b:36:9f:6e:26:06:0b:79:a0:00:d1:b8:6a:1b:32:bc:ee: 89:92:0e:39:c6:28:f0:aa:2e:8a:db:2f:f1:e3:cb:5e:36:a6: 54:ee:56:72:13:d7:ac:d4:ac:64:c4:38:c2:fa:29:30:f9:9b: b3:c4:27:f3:66:50:2e:86:20:b0:7e:cc:29:09:65:62:86:f8: 7f:4b:be:8c:c3:92:a6:52:ec:57:f5:22:27:eb:bd:f0:17:fc: 64:07:a7:f3:3d:74:ac:5f:db:5b:6e:64:4b:a6:44:93:59:82: 0c:99:54:24:72:7b:90:42:31:ee:68:97:5a:a5:a9:df:54:b8: dc:c5:50:80:73:ee:6a:fd:b1:79:d2:56:70:ea:c7:0d:1f:dc: e8:8b:f7:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnLk4bRpTHJQvdGFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmNDdlM2UtMjU2MS00Yjc5LWIzMzItZWU4YTExZWEw NjE5MB4XDTI1MDUwOTExMDAwN1oXDTI1MDUxMjExMDAwMFowLzEtMCsGA1UEAxMk Y2M1ZWU2M2UtYTBmZS00YzgyLTg0ODQtYThmNDVkZTNjYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqznyvFjoLf0tO5L4LM9uqCftki8rDltFZVhp eJew/SUBPgnX64W3m++bjxEZepmdMGy3jqwrall/r1ZqRCD853o7fU9VYb1iMwo0 +uWHsGq9zZwqI5ZvUQdmOm+Fjc8fGDuITVhfZGdQV/Jf4fkrpSoiOPRnFWn5JJzA cAkiIWidZ+8AyWoi+PKhwvJots7SX1CB3kqqOOqYGc4Na9Wyh9xbIFxBc8BpoHVD 1rW1wuDlpeOITXnyVjx+JZzbimit0sCybRQ3wWyCxqEJ0jwSqqWBoYYTZ9jYFa9H YFnUTZc9IH7jWMP8Xt1qkDN6GatWLw1uXhblg98cg/iesrsZxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLUlvA95rxxtBRw4DeStnxrmbiI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0 N2UzZS0yNTYxLTRiNzktYjMzMi1lZThhMTFlYTA2MTkvYThmNDdlM2UtMjU2MS00 Yjc5LWIzMzItZWU4YTExZWEwNjE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYThmNDdlM2UtMjU2MS00Yjc5LWIz MzItZWU4YTExZWEwNjE5L2E4ZjQ3ZTNlLTI1NjEtNGI3OS1iMzMyLWVlOGExMWVh MDYxOS5jcmwwHwYDVR0jBBgwFoAUWxYEyUxTiq2t4dvVwLnJn3tsqzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0N2UzZS0yNTYxLTRiNzktYjMzMi1lZThh MTFlYTA2MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFYKoXzQbIRcY0LxoYumhS 9XEvI5h7WdX0RLng1Kw8xJOP2l6MtNfnKX43x2dVuswpbTzzDVS1WfyoEPjukSu8 4QwxHQUhF+EhvFh5ODQ2+XJsulnFlIKXrhzM7QJNfZ5LJYt6s98GxUFZoe+Rizaf biYGC3mgANG4ahsyvO6Jkg45xijwqi6K2y/x48teNqZU7lZyE9es1KxkxDjC+ikw +ZuzxCfzZlAuhiCwfswpCWVihvh/S76Mw5KmUuxX9SIn673wF/xkB6fzPXSsX9tb bmRLpkSTWYIMmVQkcnuQQjHuaJdapanfVLjcxVCAc+5q/bF50lZw6scNH9zoi/c1 -----END CERTIFICATE-----Generated at Sat May 10 11:47:47 2025 by rpki-client