$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e/5caf609d-b811-49cd-afe5-d57a49e3cc3e.mft File: 5caf609d-b811-49cd-afe5-d57a49e3cc3e.mft (raw, json) Hash identifier: gfsoqUtX4AaX6AxqhNlEfxm4YtwfD2jPlo7Koky9Y9c= Subject key identifier: 3A:0A:A4:D0:41:E2:71:27:0C:2D:E4:49:14:5B:6C:92:B3:1F:49:DF Authority key identifier: 7B:3E:5A:26:AB:EA:1A:6A:EB:2B:68:8C:2E:19:EB:C8:C2:B8:92:4D Certificate issuer: /CN=5caf609d-b811-49cd-afe5-d57a49e3cc3e Certificate serial: 010D0C9F43285849BE8C589214CAC602EB1FC740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e/5caf609d-b811-49cd-afe5-d57a49e3cc3e.mft Manifest number: 010D0C9F43285846069BF58154AF7E4E569706D5 Signing time: Sun 04 May 2025 19:00:07 +0000 Manifest this update: Sun 04 May 2025 19:00:07 +0000 Manifest next update: Tue 06 May 2025 19:00:00 +0000 Files and hashes: 1: 5caf609d-b811-49cd-afe5-d57a49e3cc3e.crl (hash: G46QgrXgrGL3YfxGURA4TrgovOI/VtJiG4BFLyCxJ8o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e/5caf609d-b811-49cd-afe5-d57a49e3cc3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e/5caf609d-b811-49cd-afe5-d57a49e3cc3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:be:8c:58:92:14:ca:c6:02:eb:1f:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5caf609d-b811-49cd-afe5-d57a49e3cc3e Validity Not Before: May 4 19:00:07 2025 GMT Not After : May 6 19:00:00 2025 GMT Subject: CN=04a72611-31f7-48a9-b6c8-f37236b83e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c8:57:42:73:4e:dc:21:4f:fa:13:41:ca:f5: f9:93:74:a2:b8:ac:63:b5:7b:47:e9:ce:5f:eb:a5: 05:c6:51:d2:13:73:2c:1a:26:0d:1f:3d:53:7f:8a: 77:d3:71:5e:24:c5:8a:05:0c:bd:8c:7b:d3:03:d8: 3d:81:ce:e6:7f:d8:3e:60:db:22:7f:a1:ed:7e:b8: 5c:66:54:08:5f:99:72:12:26:e2:76:3a:52:cc:42: 52:dd:a2:75:b4:f1:88:62:96:6c:db:7e:aa:9d:0b: 39:4d:d2:f8:9c:b2:7c:02:1a:b8:43:f3:6e:21:09: 60:38:99:83:b5:a3:13:0a:12:a6:d6:5d:ed:dc:02: e3:d7:0c:1b:b5:a7:2a:00:74:5d:9a:92:36:8b:7b: a6:a6:53:fd:a3:c4:b9:d5:27:e8:e7:5c:7a:a3:ce: 0e:ee:22:52:44:1b:b5:0f:5a:cd:d9:75:10:d1:de: 53:60:c0:7e:7b:45:4e:67:d4:48:c2:51:f1:97:9d: c3:b0:f8:e3:56:20:e5:06:e5:74:32:02:35:a9:58: 1d:34:3a:5a:6e:66:49:95:0a:b5:da:5f:16:5d:7d: 4a:9b:39:32:5b:42:1a:fd:50:1f:2f:f3:2e:d5:3d: eb:da:43:87:07:7f:be:3c:ff:ca:a3:2c:d5:c7:08: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0A:A4:D0:41:E2:71:27:0C:2D:E4:49:14:5B:6C:92:B3:1F:49:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e/5caf609d-b811-49cd-afe5-d57a49e3cc3e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e/5caf609d-b811-49cd-afe5-d57a49e3cc3e.crl X509v3 Authority Key Identifier: keyid:7B:3E:5A:26:AB:EA:1A:6A:EB:2B:68:8C:2E:19:EB:C8:C2:B8:92:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5caf609d-b811-49cd-afe5-d57a49e3cc3e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:65:46:fa:4f:99:d2:c3:80:a0:28:2c:c2:60:67:4c:03:8e: e0:67:0d:ee:4a:1a:07:a2:22:58:de:fb:c0:5a:c8:dc:89:ee: 1c:14:35:51:87:47:61:ba:6f:7b:80:dc:b9:07:d3:37:ce:0d: 48:01:c5:52:82:de:d7:83:22:75:e8:3c:d6:77:fc:9e:3f:dd: 93:06:d9:84:99:ba:d3:ae:a4:c7:4a:7a:39:a8:5d:c3:b5:5c: f1:d3:a0:25:76:80:2f:c6:5b:f3:b0:8e:15:a0:13:b5:99:b5: db:2b:69:12:c9:20:e2:7f:1d:14:7e:dd:6b:12:90:5e:66:a7: 9e:ff:7f:d4:b9:61:d3:5c:2f:b7:29:8a:77:71:69:2b:f1:fd: be:a4:e8:ac:2b:73:d3:3b:7d:09:0a:d1:37:50:f2:71:be:96: a1:8f:c4:74:f9:c3:3a:41:16:86:f2:2a:c8:03:8e:ad:de:4e: 06:b6:be:c1:c3:6f:2e:2c:4f:f2:9a:60:22:88:4a:6c:7e:5d: 59:2e:fe:2c:26:67:f0:d4:44:2f:4e:4b:aa:c5:36:83:3c:2f: 95:ff:ff:e4:67:99:04:18:ac:3a:04:6f:53:06:ec:d0:3a:d1: b7:d2:32:b6:f8:8e:e5:15:ca:27:53:41:c1:1f:d5:e8:4e:2e: e5:84:bb:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm+jFiSFMrGAusfx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZjYwOWQtYjgxMS00OWNkLWFmZTUtZDU3YTQ5ZTNj YzNlMB4XDTI1MDUwNDE5MDAwN1oXDTI1MDUwNjE5MDAwMFowLzEtMCsGA1UEAxMk MDRhNzI2MTEtMzFmNy00OGE5LWI2YzgtZjM3MjM2YjgzZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwchXQnNO3CFP+hNByvX5k3SiuKxjtXtH6c5f 66UFxlHSE3MsGiYNHz1Tf4p303FeJMWKBQy9jHvTA9g9gc7mf9g+YNsif6Htfrhc ZlQIX5lyEibidjpSzEJS3aJ1tPGIYpZs236qnQs5TdL4nLJ8Ahq4Q/NuIQlgOJmD taMTChKm1l3t3ALj1wwbtacqAHRdmpI2i3umplP9o8S51Sfo51x6o84O7iJSRBu1 D1rN2XUQ0d5TYMB+e0VOZ9RIwlHxl53DsPjjViDlBuV0MgI1qVgdNDpabmZJlQq1 2l8WXX1KmzkyW0Ia/VAfL/Mu1T3r2kOHB3++PP/KoyzVxwiF8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDoKpNBB4nEnDC3kSRRbbJKzH0nfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Y2Fm NjA5ZC1iODExLTQ5Y2QtYWZlNS1kNTdhNDllM2NjM2UvNWNhZjYwOWQtYjgxMS00 OWNkLWFmZTUtZDU3YTQ5ZTNjYzNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWNhZjYwOWQtYjgxMS00OWNkLWFm ZTUtZDU3YTQ5ZTNjYzNlLzVjYWY2MDlkLWI4MTEtNDljZC1hZmU1LWQ1N2E0OWUz Y2MzZS5jcmwwHwYDVR0jBBgwFoAUez5aJqvqGmrrK2iMLhnryMK4kk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81Y2FmNjA5ZC1iODExLTQ5Y2QtYWZlNS1kNTdh NDllM2NjM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6ZUb6T5nSw4CgKCzCYGdM A47gZw3uShoHoiJY3vvAWsjcie4cFDVRh0dhum97gNy5B9M3zg1IAcVSgt7XgyJ1 6DzWd/yeP92TBtmEmbrTrqTHSno5qF3DtVzx06AldoAvxlvzsI4VoBO1mbXbK2kS ySDifx0Uft1rEpBeZqee/3/UuWHTXC+3KYp3cWkr8f2+pOisK3PTO30JCtE3UPJx vpahj8R0+cM6QRaG8irIA46t3k4Gtr7Bw28uLE/ymmAiiEpsfl1ZLv4sJmfw1EQv TkuqxTaDPC+V///kZ5kEGKw6BG9TBuzQOtG30jK2+I7lFconU0HBH9XoTi7lhLuZ -----END CERTIFICATE-----Generated at Mon May 5 17:06:57 2025 by rpki-client