$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft File: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft (raw, json) Hash identifier: 9KLatSwPFcg+WtxQIL80E7V4m1jm70Gv/YSP8KdUX4I= Subject key identifier: 8D:CD:7E:89:ED:1D:60:E5:35:9C:52:8D:34:94:FE:5C:F1:45:3F:5F Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F43285849BC1AF2E7ABC69619CBA42900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft Manifest number: 010D0C9F4328584073A82B47310678490807D9E8 Signing time: Sat 03 May 2025 22:00:03 +0000 Manifest this update: Sat 03 May 2025 22:00:03 +0000 Manifest next update: Mon 05 May 2025 22:00:00 +0000 Files and hashes: 1: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl (hash: 616cGeqdXnpHfTf7TSlOL4I6r7f6XDNyNRGwl78Eyt4=) 2: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (hash: GnRzmzzqQGQjED5lAGDoDTCfFuJGl8wZ8o6f58ixgRk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:1a:f2:e7:ab:c6:96:19:cb:a4:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: May 3 22:00:03 2025 GMT Not After : May 5 22:00:00 2025 GMT Subject: CN=97b6f07f-a727-4de7-9d20-f7cfe2b3beda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:cc:50:88:c2:01:c7:15:a9:42:6e:60:ab: 0b:74:7d:64:da:22:2c:f8:b4:97:47:33:b8:71:51: 98:f9:6e:1d:31:7b:0e:5c:71:8c:05:85:10:10:d9: 75:ca:21:2f:90:75:d8:b0:cd:c3:e6:7c:03:ed:06: cc:38:2a:f9:85:e7:64:f4:ac:52:a4:8b:0a:f5:c8: ae:83:1d:52:38:7e:67:4a:4f:ab:15:8c:43:3c:ca: b6:47:f3:e8:8b:80:47:0d:a2:3f:dd:63:ff:f0:53: 2a:1b:9a:76:6b:17:37:03:7f:ba:cd:d8:3f:f3:38: 28:1c:ff:d1:2a:c3:87:0a:cf:23:a6:b7:08:06:06: 17:7d:7d:8b:61:dc:46:fd:ae:2a:ba:64:9d:5a:c6: e5:20:dc:03:8d:75:96:ca:10:3d:a7:b0:3c:ba:61: d9:cc:fa:c7:d4:b5:c4:67:f6:3c:8d:65:59:6e:a4: 81:17:73:2a:b2:9f:77:44:03:8d:a8:d2:a6:68:9a: 24:47:6e:99:cf:a6:6d:0e:20:cd:20:ea:15:c6:9e: 76:67:28:79:9a:90:ac:37:6c:b8:d4:f4:9b:9d:0f: 50:ae:45:00:42:7c:8e:7e:17:92:e6:12:44:dc:1c: 4a:e9:19:7f:c5:e0:aa:05:e2:0e:5d:43:e7:c3:86: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:7E:89:ED:1D:60:E5:35:9C:52:8D:34:94:FE:5C:F1:45:3F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7f:d8:6a:17:7e:c2:7c:37:2a:a6:71:e7:7f:fd:97:3a:17: d0:33:23:7b:12:4e:45:61:cc:08:e5:10:3a:0e:2e:d4:49:37: 04:6b:df:4b:48:03:ff:b1:b4:d9:4b:5c:45:3e:28:b6:b5:22: 1d:6f:ad:16:f1:9e:b4:3a:73:73:40:7c:50:f3:8f:e6:d7:74: 9e:de:11:6d:5e:ac:87:c7:82:2d:84:f7:2c:c5:c3:72:b9:fc: cd:7c:5a:cc:29:2f:d5:cb:57:79:4f:8f:61:6d:64:72:20:fe: 2a:52:5d:e7:62:2c:4f:bf:7b:46:44:dd:c0:bf:92:75:67:f2: 99:ce:46:b8:eb:97:57:07:3b:7d:6f:e5:ae:27:e3:d1:1b:ad: 9f:1d:11:f2:72:03:94:9f:53:86:63:c3:d5:a8:14:a8:18:d1: d6:55:b4:a5:f9:1b:fe:11:84:ab:5e:65:64:c4:2d:a9:ee:30: 9d:86:33:1b:5b:e7:1e:af:8b:27:2c:59:48:8c:7a:61:17:bb: 8c:ec:2b:25:83:a2:97:36:e7:f8:9d:55:b6:79:70:03:e9:5b: c0:c8:c2:e0:9f:e6:cc:9a:74:f4:38:18:91:6f:00:5e:a7:db: a9:d2:a2:b4:ff:08:94:d0:a0:3e:22:3c:28:ee:0f:a9:a3:13: 64:e4:9a:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm8GvLnq8aWGcukKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI1MDUwMzIyMDAwM1oXDTI1MDUwNTIyMDAwMFowLzEtMCsGA1UEAxMk OTdiNmYwN2YtYTcyNy00ZGU3LTlkMjAtZjdjZmUyYjNiZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcDMUIjCAccVqUJuYKsLdH1k2iIs+LSXRzO4 cVGY+W4dMXsOXHGMBYUQENl1yiEvkHXYsM3D5nwD7QbMOCr5hedk9KxSpIsK9ciu gx1SOH5nSk+rFYxDPMq2R/Poi4BHDaI/3WP/8FMqG5p2axc3A3+6zdg/8zgoHP/R KsOHCs8jprcIBgYXfX2LYdxG/a4qumSdWsblINwDjXWWyhA9p7A8umHZzPrH1LXE Z/Y8jWVZbqSBF3Mqsp93RAONqNKmaJokR26Zz6ZtDiDNIOoVxp52Zyh5mpCsN2y4 1PSbnQ9QrkUAQnyOfheS5hJE3BxK6Rl/xeCqBeIOXUPnw4Z7qwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI3NfontHWDlNZxSjTSU/lzxRT9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvM2ExMWE4NWYtOGYzNy00 YjU0LThmYTItZDZiYzA5NjczNzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLf9hqF37CfDcqpnHnf/2X OhfQMyN7Ek5FYcwI5RA6Di7USTcEa99LSAP/sbTZS1xFPii2tSIdb60W8Z60OnNz QHxQ84/m13Se3hFtXqyHx4IthPcsxcNyufzNfFrMKS/Vy1d5T49hbWRyIP4qUl3n YixPv3tGRN3Av5J1Z/KZzka465dXBzt9b+WuJ+PRG62fHRHycgOUn1OGY8PVqBSo GNHWVbSl+Rv+EYSrXmVkxC2p7jCdhjMbW+cer4snLFlIjHphF7uM7Cslg6KXNuf4 nVW2eXAD6VvAyMLgn+bMmnT0OBiRbwBep9up0qK0/wiU0KA+Ijwo7g+poxNk5JrG -----END CERTIFICATE-----Generated at Sun May 4 23:00:18 2025 by rpki-client