$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft File: 35a0be33-3824-4039-8e56-d16e5d2199a8.mft (raw, json) Hash identifier: Accu56DfAhL/Q+GlrlHj343M8yuZD8Du/B1ijH8I+MM= Subject key identifier: 73:93:E8:81:3D:B6:FC:B3:F8:1D:87:63:94:88:52:F8:29:D2:E6:A0 Authority key identifier: 0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB Certificate issuer: /CN=35a0be33-3824-4039-8e56-d16e5d2199a8 Certificate serial: 010D0C9F43285849CFA5C807FF36981C05BF1280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft Manifest number: 010D0C9F432858482A265F98548A94BE503CD497 Signing time: Sat 10 May 2025 22:00:08 +0000 Manifest this update: Sat 10 May 2025 22:00:08 +0000 Manifest next update: Mon 12 May 2025 22:00:00 +0000 Files and hashes: 1: 35a0be33-3824-4039-8e56-d16e5d2199a8.crl (hash: ndCTfyNymz6nH2NVOBjfRrRfftOyS1KSb7Q7kZPCFng=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:a5:c8:07:ff:36:98:1c:05:bf:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a0be33-3824-4039-8e56-d16e5d2199a8 Validity Not Before: May 10 22:00:08 2025 GMT Not After : May 12 22:00:00 2025 GMT Subject: CN=73937c64-29ef-4925-9f87-d61b651ec4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4f:31:69:83:19:f7:6c:d7:be:ec:74:2a:4c: 09:3b:42:a1:de:4e:86:33:6a:6c:30:69:80:b2:74: 81:3c:c7:c9:06:f8:38:70:4a:e8:d9:be:1b:0b:3c: d3:a4:bd:62:63:ee:40:4d:a5:13:12:c4:23:16:ac: 40:54:81:61:66:a5:f3:46:7d:4d:9e:a4:5c:7b:45: ab:85:01:92:a7:0b:e6:48:3e:a0:e6:bf:c4:bc:54: 86:fc:e1:cb:06:ee:62:74:2d:69:8e:d4:ef:04:f9: 20:89:bc:5b:02:f9:b2:48:e4:ef:3b:cf:65:66:06: 9b:5d:ee:7c:dd:0f:f9:f8:de:38:cb:d1:88:55:84: 18:ab:97:32:46:2c:d6:59:90:ab:6f:89:02:68:bf: b4:b4:1d:44:62:43:4c:a9:7a:c1:20:25:78:ad:0c: a5:f5:ed:21:54:01:a3:8d:b6:4f:b6:ee:15:a4:bc: 0d:b5:2c:2f:fc:b3:49:e5:20:40:11:b0:06:1e:4f: 92:12:d0:b6:80:50:01:2a:74:63:8f:69:54:79:04: 47:8a:c7:3a:c0:c3:ef:70:0b:f7:93:62:0e:26:f7: de:89:bc:fe:63:d1:2b:a8:f5:23:5e:c3:0d:2d:2f: 2f:11:20:e6:3f:42:6b:63:20:d2:7f:cf:aa:09:4b: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:93:E8:81:3D:B6:FC:B3:F8:1D:87:63:94:88:52:F8:29:D2:E6:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8/35a0be33-3824-4039-8e56-d16e5d2199a8.crl X509v3 Authority Key Identifier: keyid:0C:D7:4F:0C:81:20:9B:1F:AF:02:E4:77:64:F3:77:C0:50:0F:2A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35a0be33-3824-4039-8e56-d16e5d2199a8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:25:63:c6:73:d3:ac:b6:6a:b0:5c:e8:80:c3:27:dd:1b:7d: 4a:53:ea:b6:78:66:db:54:95:72:63:82:5f:b6:71:da:f7:b7: 85:9e:f9:4f:56:34:36:5a:da:6e:80:64:c4:10:15:c7:c0:61: bf:86:d5:85:b3:9b:99:48:17:0a:27:9f:bc:24:ff:6a:b8:c1: 43:d8:84:36:91:94:ae:b7:20:24:ea:2f:e5:43:17:2c:48:b9: b0:4c:3b:8a:66:19:22:48:50:d8:10:06:7b:cf:46:8f:47:bf: 4c:9b:52:09:d8:d5:e7:03:f0:c0:7a:46:0b:cc:d2:e4:e0:59: 28:8a:99:8d:81:5a:fd:85:36:b5:85:9a:67:47:75:d4:48:64: 5e:b7:f7:e4:c6:7b:8c:dd:52:85:0b:97:38:23:20:59:53:37: a6:3c:58:9e:c5:c6:5e:be:e6:9d:54:10:ad:59:c8:b4:9e:bc: 02:e6:98:ba:bf:9a:73:ae:40:5d:01:b8:98:b9:b3:4a:87:ad: 11:bd:94:d0:70:18:d3:9b:53:cc:02:60:42:9d:9a:d9:09:87: 3b:2e:25:d2:d4:88:27:ae:2d:ad:05:05:9e:55:2a:d2:1e:c6: f0:58:7c:1e:e5:2f:80:5b:d2:16:3d:8a:71:ec:41:f3:68:ae: 09:23:65:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPpcgH/zaYHAW/EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhMGJlMzMtMzgyNC00MDM5LThlNTYtZDE2ZTVkMjE5 OWE4MB4XDTI1MDUxMDIyMDAwOFoXDTI1MDUxMjIyMDAwMFowLzEtMCsGA1UEAxMk NzM5MzdjNjQtMjllZi00OTI1LTlmODctZDYxYjY1MWVjNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk8xaYMZ92zXvux0KkwJO0Kh3k6GM2psMGmA snSBPMfJBvg4cEro2b4bCzzTpL1iY+5ATaUTEsQjFqxAVIFhZqXzRn1NnqRce0Wr hQGSpwvmSD6g5r/EvFSG/OHLBu5idC1pjtTvBPkgibxbAvmySOTvO89lZgabXe58 3Q/5+N44y9GIVYQYq5cyRizWWZCrb4kCaL+0tB1EYkNMqXrBICV4rQyl9e0hVAGj jbZPtu4VpLwNtSwv/LNJ5SBAEbAGHk+SEtC2gFABKnRjj2lUeQRHisc6wMPvcAv3 k2IOJvfeibz+Y9ErqPUjXsMNLS8vESDmP0JrYyDSf8+qCUujgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHOT6IE9tvyz+B2HY5SIUvgp0uagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWEw YmUzMy0zODI0LTQwMzktOGU1Ni1kMTZlNWQyMTk5YTgvMzVhMGJlMzMtMzgyNC00 MDM5LThlNTYtZDE2ZTVkMjE5OWE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVhMGJlMzMtMzgyNC00MDM5LThl NTYtZDE2ZTVkMjE5OWE4LzM1YTBiZTMzLTM4MjQtNDAzOS04ZTU2LWQxNmU1ZDIx OTlhOC5jcmwwHwYDVR0jBBgwFoAUDNdPDIEgmx+vAuR3ZPN3wFAPKtswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWEwYmUzMy0zODI0LTQwMzktOGU1Ni1kMTZl NWQyMTk5YTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOJWPGc9OstmqwXOiAwyfd G31KU+q2eGbbVJVyY4JftnHa97eFnvlPVjQ2WtpugGTEEBXHwGG/htWFs5uZSBcK J5+8JP9quMFD2IQ2kZSutyAk6i/lQxcsSLmwTDuKZhkiSFDYEAZ7z0aPR79Mm1IJ 2NXnA/DAekYLzNLk4FkoipmNgVr9hTa1hZpnR3XUSGRet/fkxnuM3VKFC5c4IyBZ UzemPFiexcZevuadVBCtWci0nrwC5pi6v5pzrkBdAbiYubNKh60RvZTQcBjTm1PM AmBCnZrZCYc7LiXS1Ignri2tBQWeVSrSHsbwWHwe5S+AW9IWPYpx7EHzaK4JI2XQ -----END CERTIFICATE-----Generated at Sun May 11 03:13:27 2025 by rpki-client