$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft File: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft (raw, json) Hash identifier: SdEHwtGOkvXQJpWGB2XBO3B4o7jIS8xO/8DGfEOdioU= Subject key identifier: F9:30:28:5C:A7:E4:0C:D6:32:59:18:3A:29:9C:F8:02:0F:36:1D:A5 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F43285849C1B05AFF603B97CD5539A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft Manifest number: 010D0C9F4328584426C89F1535D6ABD56DB6E97A Signing time: Mon 05 May 2025 22:00:07 +0000 Manifest this update: Mon 05 May 2025 22:00:07 +0000 Manifest next update: Thu 08 May 2025 22:00:00 +0000 Files and hashes: 1: 039bc77e-6087-3093-9191-6772277f3e24.roa (hash: QwzygNImU7vEodNXT7hiJpVZQNsUVasGWR4nQEhTYgo=) 2: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl (hash: sRylD9g4n33w2fWOLVCCSomViWF6XwDYaysbp5Ltui8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:b0:5a:ff:60:3b:97:cd:55:39:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: May 5 22:00:07 2025 GMT Not After : May 8 22:00:00 2025 GMT Subject: CN=4a8840a2-c0ed-4d69-b03a-368d6db8eee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b9:7b:3b:21:c2:1d:ce:d4:3e:c6:24:de:ea: 94:ac:94:83:e7:c6:21:1b:78:a2:5d:71:87:a4:b0: 44:6e:b8:2a:a2:cf:02:9c:04:02:16:01:2e:03:72: 9e:30:1e:eb:9d:ae:d4:bc:aa:85:72:fe:30:db:d6: 4b:03:d7:b7:97:1f:ab:cf:9e:40:94:ab:0e:97:b4: f9:e6:8a:80:f5:47:8e:52:20:12:8c:25:8a:8f:f9: 50:f3:ab:62:46:99:b5:f7:d7:33:e3:07:fe:eb:20: aa:24:15:ac:53:4c:b2:3b:69:f9:9b:c1:4e:56:dd: e0:be:a3:e3:e7:ff:bd:2a:e9:18:f1:68:4f:5e:50: 3a:8a:99:19:2c:af:88:cd:35:c4:14:05:f4:dd:27: 7a:08:7f:c4:4f:99:b6:02:1d:24:6b:55:f4:2c:db: 41:9f:b8:28:2a:79:55:c4:fb:58:3c:05:f1:6a:6b: 61:fc:36:5d:59:97:07:75:ad:95:43:e5:2c:b8:a6: 0d:a5:65:52:e9:6c:fd:58:ad:77:ce:09:c2:65:14: ca:2b:ad:9b:a3:65:e3:86:f0:c5:0d:6e:56:22:18: fd:f7:04:f5:55:17:6a:67:69:2e:10:56:49:0d:e7: 8d:14:db:76:b3:2e:f3:12:63:42:05:1e:68:b5:79: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:30:28:5C:A7:E4:0C:D6:32:59:18:3A:29:9C:F8:02:0F:36:1D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e8:86:86:7a:c7:1a:0f:37:a8:12:98:cb:e9:55:e8:c9:ae: 7f:e4:c4:39:e2:10:d3:d9:8f:7f:99:86:d7:4a:a6:67:72:d4: e6:74:2a:ad:30:3c:a6:11:18:fd:2c:91:74:d3:fc:21:92:dd: 73:20:75:d2:97:4a:a5:df:31:d7:59:d6:6a:a0:6a:f6:fa:67: 1e:71:32:5d:a0:8d:38:93:d6:5c:4f:c9:aa:09:26:c8:54:f4: 20:40:33:dd:fb:f7:c1:48:7e:1c:e5:d4:38:5f:47:41:71:6a: 7d:52:12:64:02:f5:69:fd:d3:22:79:5d:cd:92:50:4b:e2:2a: 02:c8:3b:c6:7a:42:51:7f:78:f7:15:47:da:b1:7e:e2:5b:5c: b8:e6:ed:2e:f7:15:c7:49:e9:34:20:c8:1a:02:17:07:74:be: 74:8c:b7:22:81:f0:3d:16:a2:9a:a9:88:55:33:ec:7e:28:15: c5:2a:a9:56:02:31:81:71:0d:1a:56:a9:5e:c9:9f:4e:af:86: a1:af:fb:0f:39:28:c9:89:28:1b:b2:6a:aa:6b:ca:ab:5f:40: 56:a8:dd:b2:0e:0f:fc:5f:3c:da:3c:dc:f1:d4:4b:2a:d2:36: ed:dd:8a:34:66:2b:9f:b4:c3:58:cc:69:36:e8:eb:93:03:6f: 1d:4b:c7:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBsFr/YDuXzVU5qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI1MDUwNTIyMDAwN1oXDTI1MDUwODIyMDAwMFowLzEtMCsGA1UEAxMk NGE4ODQwYTItYzBlZC00ZDY5LWIwM2EtMzY4ZDZkYjhlZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87l7OyHCHc7UPsYk3uqUrJSD58YhG3iiXXGH pLBEbrgqos8CnAQCFgEuA3KeMB7rna7UvKqFcv4w29ZLA9e3lx+rz55AlKsOl7T5 5oqA9UeOUiASjCWKj/lQ86tiRpm199cz4wf+6yCqJBWsU0yyO2n5m8FOVt3gvqPj 5/+9KukY8WhPXlA6ipkZLK+IzTXEFAX03Sd6CH/ET5m2Ah0ka1X0LNtBn7goKnlV xPtYPAXxamth/DZdWZcHda2VQ+UsuKYNpWVS6Wz9WK13zgnCZRTKK62bo2XjhvDF DW5WIhj99wT1VRdqZ2kuEFZJDeeNFNt2sy7zEmNCBR5otXkvLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPkwKFyn5AzWMlkYOimc+AIPNh2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMTA5YmU3M2ItZTU2OC00 NGI3LWJkNjMtZWJjNGU4ZmU2ZjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU6IaGescaDzeoEpjL6VXo ya5/5MQ54hDT2Y9/mYbXSqZnctTmdCqtMDymERj9LJF00/whkt1zIHXSl0ql3zHX WdZqoGr2+mcecTJdoI04k9ZcT8mqCSbIVPQgQDPd+/fBSH4c5dQ4X0dBcWp9UhJk AvVp/dMieV3NklBL4ioCyDvGekJRf3j3FUfasX7iW1y45u0u9xXHSek0IMgaAhcH dL50jLcigfA9FqKaqYhVM+x+KBXFKqlWAjGBcQ0aVqleyZ9Or4ahr/sPOSjJiSgb smqqa8qrX0BWqN2yDg/8XzzaPNzx1Esq0jbt3Yo0ZiuftMNYzGk26OuTA28dS8ec -----END CERTIFICATE-----Generated at Tue May 6 18:44:45 2025 by rpki-client