$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: iC1vPWJE4+3GCFRHi+IvqlriDgw8rIN4uFZvscXzId0= Subject key identifier: 19:8C:C8:BD:93:AB:B8:49:1B:5D:5F:7F:1D:2D:AF:FB:63:4A:89:68 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F43285849C8E6A0BA9982F632F71C8E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1A45 Signing time: Thu 08 May 2025 12:00:07 +0000 Manifest this update: Thu 08 May 2025 12:00:07 +0000 Manifest next update: Sun 11 May 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: zxV7bAraSgWz5qvWis3IR6EnIqQ4zI7dHdEGhRBIMOA=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: ebsSJrQN7FS2AR3+KISUKC6CSks1d+XyxWcd49ySThE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:e6:a0:ba:99:82:f6:32:f7:1c:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: May 8 12:00:07 2025 GMT Not After : May 11 12:00:00 2025 GMT Subject: CN=5af4cf11-f0a2-42e0-bfd9-0d3d8e323217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b1:e0:66:b3:24:ce:3f:98:60:e3:82:c2:8d: c3:80:60:d9:e4:99:25:01:eb:7e:b9:c2:df:46:ca: c6:23:74:f8:5d:41:c2:bb:ed:16:c8:36:9e:41:48: b3:b0:ab:32:fc:7d:5f:86:91:cb:2c:95:e7:50:02: 32:c0:6e:9a:14:d9:f9:60:b8:0a:23:46:b2:70:4f: 8d:fa:5d:37:65:14:3a:a9:40:f0:63:20:e7:36:56: e6:e2:44:74:92:07:6e:a6:ed:fd:fc:1c:0f:d5:58: c0:80:46:29:1d:a9:40:e0:dd:ae:f6:0c:02:06:50: f1:3d:58:e3:39:25:35:8a:c4:54:4e:7f:60:04:88: 7a:96:cd:3d:29:9a:17:fd:52:63:9d:1b:58:e2:12: 6c:85:a3:74:7c:1c:2f:00:9c:86:6e:e0:0c:e2:51: 2b:3e:37:d3:ec:d0:14:c1:f5:5c:04:18:40:e5:c4: 05:1d:a0:f6:9b:d6:c1:bc:12:3e:62:da:90:40:60: 8d:07:2a:72:8f:af:35:3d:c5:c2:27:1f:5e:18:62: fb:a7:3d:b7:f4:8c:52:60:d8:f0:ae:9c:72:13:a7: 23:f9:80:35:e4:a4:84:a7:15:d5:96:0a:e8:33:28: fe:d8:f0:e9:12:32:c2:69:8b:87:89:25:1b:06:41: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8C:C8:BD:93:AB:B8:49:1B:5D:5F:7F:1D:2D:AF:FB:63:4A:89:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2b:3d:3a:65:59:6d:b1:ad:d2:4a:9c:07:bb:73:28:77:13: ff:f3:61:34:87:ad:f9:97:12:c2:7d:bc:69:f9:0c:77:05:de: 20:2e:4c:70:46:fa:96:38:b3:64:dc:81:58:2f:68:00:35:d5: c9:5d:4a:06:90:26:bd:21:a0:de:74:7a:0d:1e:6b:97:7f:97: 0a:50:b3:49:c9:ec:51:c9:52:9b:ba:ca:57:c3:6d:f8:25:ba: 49:2f:be:82:96:e6:51:87:fd:96:bc:ad:41:de:89:2b:be:db: 13:1f:42:c6:d7:7b:e1:33:2b:4d:f6:79:26:54:35:06:60:55: 21:be:9d:f6:ed:12:a1:29:3c:29:eb:19:d1:67:44:b3:35:4d: b9:25:ff:f1:ba:ba:bb:1b:f7:de:65:eb:f4:c5:db:41:6b:19: 36:4a:1e:0a:31:52:75:4c:43:ac:57:1a:93:42:00:51:9e:e3: af:56:64:e3:f4:bf:c8:88:ff:8b:49:d9:20:45:f2:88:5e:8d: a2:fd:87:26:5f:eb:e4:4e:db:fe:c5:c1:2d:24:03:f7:02:aa: ce:ed:6d:80:08:a8:08:26:88:c9:78:5d:01:c8:73:cb:1d:ab: a9:30:75:b4:d0:02:be:5a:e2:14:24:80:f8:58:db:d4:81:23: 5f:3d:ea:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnI5qC6mYL2MvccjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MDUwODEyMDAwN1oXDTI1MDUxMTEyMDAwMFowLzEtMCsGA1UEAxMk NWFmNGNmMTEtZjBhMi00MmUwLWJmZDktMGQzZDhlMzIzMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7HgZrMkzj+YYOOCwo3DgGDZ5JklAet+ucLf RsrGI3T4XUHCu+0WyDaeQUizsKsy/H1fhpHLLJXnUAIywG6aFNn5YLgKI0aycE+N +l03ZRQ6qUDwYyDnNlbm4kR0kgdupu39/BwP1VjAgEYpHalA4N2u9gwCBlDxPVjj OSU1isRUTn9gBIh6ls09KZoX/VJjnRtY4hJshaN0fBwvAJyGbuAM4lErPjfT7NAU wfVcBBhA5cQFHaD2m9bBvBI+YtqQQGCNBypyj681PcXCJx9eGGL7pz239IxSYNjw rpxyE6cj+YA15KSEpxXVlgroMyj+2PDpEjLCaYuHiSUbBkH+/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBmMyL2Tq7hJG11ffx0tr/tjSoloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCrKz06ZVltsa3SSpwHu3Mo dxP/82E0h635lxLCfbxp+Qx3Bd4gLkxwRvqWOLNk3IFYL2gANdXJXUoGkCa9IaDe dHoNHmuXf5cKULNJyexRyVKbuspXw234JbpJL76CluZRh/2WvK1B3okrvtsTH0LG 13vhMytN9nkmVDUGYFUhvp327RKhKTwp6xnRZ0SzNU25Jf/xurq7G/feZev0xdtB axk2Sh4KMVJ1TEOsVxqTQgBRnuOvVmTj9L/IiP+LSdkgRfKIXo2i/YcmX+vkTtv+ xcEtJAP3AqrO7W2ACKgIJojJeF0ByHPLHaupMHW00AK+WuIUJID4WNvUgSNfPeow -----END CERTIFICATE-----Generated at Fri May 9 11:32:43 2025 by rpki-client