$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft File: a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft (raw, json) Hash identifier: 8bnEUoEMACzfFclPNZuXnDXVEdgKkUnBY6+tEvdW5ro= Subject key identifier: 20:E2:4F:73:AC:D6:D8:3D:B5:24:89:EE:4A:6D:B8:21:C6:E5:B3:12 Authority key identifier: 41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 Certificate issuer: /CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6 Certificate serial: 010D0C9F43285849C9B70B8206E44EAB93FCE840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft Manifest number: 010D0C9F432858435D6518EACBD4AEE1645ED88D Signing time: Thu 08 May 2025 19:00:03 +0000 Manifest this update: Thu 08 May 2025 19:00:03 +0000 Manifest next update: Sat 10 May 2025 19:00:00 +0000 Files and hashes: 1: a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.crl (hash: 9loO6nhGvV0Ph4rubeVxlM52SNXj3VC7298h3mxijTs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:b7:0b:82:06:e4:4e:ab:93:fc:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6 Validity Not Before: May 8 19:00:03 2025 GMT Not After : May 10 19:00:00 2025 GMT Subject: CN=cc1d5e52-d8de-48f3-aa9c-37769e10a001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:37:6d:48:82:0f:eb:8a:11:60:d4:84:1b:f1: 6c:5e:3c:3a:a7:ea:2f:8d:89:5b:a5:80:2d:b6:8a: 20:c1:d9:00:3c:b6:de:bd:ab:22:28:81:03:0e:38: 71:f2:2f:ce:7a:3c:bb:df:d4:e5:63:ee:22:97:98: a8:10:df:3e:a1:7b:69:c6:63:25:13:b6:a8:c5:22: e4:a4:b0:13:7a:0d:1b:15:d8:be:97:81:64:4f:f4: a2:9b:ae:ea:51:2d:23:34:80:93:4b:fa:b6:0e:07: e4:c1:a2:b6:19:d9:69:f3:26:ec:c6:4a:d6:46:6e: 0b:a5:fb:54:93:f0:68:86:be:dd:13:0a:36:57:6d: d4:9d:98:6f:65:0a:fd:05:68:1c:1a:04:65:dd:2c: 69:20:88:43:c8:63:c9:18:02:75:85:ec:37:cc:62: 4a:0d:b3:0e:1e:81:08:8a:a6:1d:47:67:6f:7c:7f: 55:90:f3:c8:d2:ee:f3:19:b5:86:28:71:b8:2f:e3: 69:62:11:e9:23:3e:55:38:b9:d3:93:48:4e:0a:60: 57:b4:eb:99:83:e2:84:49:89:cc:97:d4:1e:d8:4c: 4b:da:13:dd:5c:7c:01:2e:4a:85:00:4b:1b:98:e1: a2:8d:0c:b5:a5:72:f2:60:68:bd:72:12:26:41:64: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:4F:73:AC:D6:D8:3D:B5:24:89:EE:4A:6D:B8:21:C6:E5:B3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.crl X509v3 Authority Key Identifier: keyid:41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0e:3a:6e:98:e0:11:2b:5a:22:14:31:97:aa:bd:fe:0a:46: 48:8c:c5:ba:c9:5a:e3:82:e1:a0:d6:20:6c:a4:4a:97:ab:44: d4:da:b9:2c:87:03:ab:29:c1:da:38:6b:ad:5e:02:3b:31:a0: 61:94:0e:d0:b6:18:1d:42:98:95:4b:82:96:04:95:1a:4e:2e: 90:e5:cd:6e:a7:e9:79:42:f6:57:ef:a1:2b:9f:b4:12:f2:50: 71:04:c3:68:ea:04:a9:a3:6e:e9:f8:c5:47:1a:c9:db:5e:cb: 71:0a:96:0a:f1:eb:94:59:b0:26:f8:21:48:25:bc:50:bf:76: 4d:bd:13:59:6b:7c:1c:aa:2d:43:72:cb:99:8d:a2:d1:dc:18: bd:cb:d5:ff:f5:70:96:b0:7b:a8:24:72:b9:58:27:1f:0a:57: c9:1b:ed:1b:a3:8e:0e:9d:93:01:99:26:06:9a:0d:e2:37:26: c6:05:5d:1b:88:a1:38:a5:2e:d1:59:9d:44:13:53:3b:bd:c7: 71:1e:d6:09:1d:87:33:3f:1f:53:43:94:80:5c:ae:5f:7d:5a: 05:24:9c:33:01:be:95:27:a8:3f:b8:15:23:49:c7:a7:c6:ce: ef:d7:5d:42:0a:a4:c6:9e:30:3b:ed:6b:41:67:7e:23:47:73: 6c:9f:f3:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnJtwuCBuROq5P86EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0M2E3ZjctNGFhMC00Yzg0LThhNTktMDA0YzI2YjBl NWI2MB4XDTI1MDUwODE5MDAwM1oXDTI1MDUxMDE5MDAwMFowLzEtMCsGA1UEAxMk Y2MxZDVlNTItZDhkZS00OGYzLWFhOWMtMzc3NjllMTBhMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjdtSIIP64oRYNSEG/FsXjw6p+ovjYlbpYAt toogwdkAPLbevasiKIEDDjhx8i/Oejy739TlY+4il5ioEN8+oXtpxmMlE7aoxSLk pLATeg0bFdi+l4FkT/Sim67qUS0jNICTS/q2DgfkwaK2Gdlp8ybsxkrWRm4LpftU k/Bohr7dEwo2V23UnZhvZQr9BWgcGgRl3SxpIIhDyGPJGAJ1hew3zGJKDbMOHoEI iqYdR2dvfH9VkPPI0u7zGbWGKHG4L+NpYhHpIz5VOLnTk0hOCmBXtOuZg+KESYnM l9Qe2ExL2hPdXHwBLkqFAEsbmOGijQy1pXLyYGi9chImQWS2zQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCDiT3Os1tg9tSSJ7kptuCHG5bMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTQz YTdmNy00YWEwLTRjODQtOGE1OS0wMDRjMjZiMGU1YjYvYTU0M2E3ZjctNGFhMC00 Yzg0LThhNTktMDA0YzI2YjBlNWI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTU0M2E3ZjctNGFhMC00Yzg0LThh NTktMDA0YzI2YjBlNWI2L2E1NDNhN2Y3LTRhYTAtNGM4NC04YTU5LTAwNGMyNmIw ZTViNi5jcmwwHwYDVR0jBBgwFoAUQSBIbUBLu//WY+IkmihzsMUAW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTQzYTdmNy00YWEwLTRjODQtOGE1OS0wMDRj MjZiMGU1YjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgDjpumOARK1oiFDGXqr3+ CkZIjMW6yVrjguGg1iBspEqXq0TU2rkshwOrKcHaOGutXgI7MaBhlA7QthgdQpiV S4KWBJUaTi6Q5c1up+l5QvZX76Ern7QS8lBxBMNo6gSpo27p+MVHGsnbXstxCpYK 8euUWbAm+CFIJbxQv3ZNvRNZa3wcqi1DcsuZjaLR3Bi9y9X/9XCWsHuoJHK5WCcf ClfJG+0bo44OnZMBmSYGmg3iNybGBV0biKE4pS7RWZ1EE1M7vcdxHtYJHYczPx9T Q5SAXK5ffVoFJJwzAb6VJ6g/uBUjScenxs7v111CCqTGnjA77WtBZ34jR3Nsn/Na -----END CERTIFICATE-----Generated at Fri May 9 08:23:16 2025 by rpki-client