$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft File: 68b39235-773a-4108-9528-465304a966b3.mft (raw, json) Hash identifier: +AMM495YT2Ud/d+IlLHJlEqwjBgLlADZ8FS/ZvjR8vw= Subject key identifier: 9E:7D:23:2E:68:8D:B8:FD:2F:B5:47:AC:9A:DC:02:E2:CA:5C:2B:99 Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3 Certificate serial: 010D0C9F43285849D4C401F721BBB271207D0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft Manifest number: 010D0C9F43285840CA72D656213292B3B8FE2BDD Signing time: Mon 12 May 2025 18:00:03 +0000 Manifest this update: Mon 12 May 2025 18:00:03 +0000 Manifest next update: Wed 14 May 2025 18:00:00 +0000 Files and hashes: 1: 68b39235-773a-4108-9528-465304a966b3.crl (hash: duQ0hl/QKJ/7jIfBAyhqCayA5ukzr9Iq6SH4+3yys6w=) 2: 7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa (hash: ZWuaSU1ACLZFou13P8FWCISy5jS2Np7HIpyisaLA4Ww=) 3: c062b811-5af4-3d93-883f-cd801dbdc422.roa (hash: QlVl0kCMJeig5Fdax19tLNC+phhT9HYvh5N0raYZeD4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:c4:01:f7:21:bb:b2:71:20:7d:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b39235-773a-4108-9528-465304a966b3 Validity Not Before: May 12 18:00:03 2025 GMT Not After : May 14 18:00:00 2025 GMT Subject: CN=b47b07af-c6f3-4ea2-81d8-814208f06a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:aa:3a:24:f0:76:5f:18:b5:96:5b:71:d2:de: 1c:67:0c:9e:f1:8c:e1:01:62:1b:db:80:74:d7:a3: 69:b5:68:7a:e5:d0:56:60:ed:06:38:4a:c6:8a:e1: e1:56:91:f0:ec:75:83:86:37:12:72:0e:0e:2d:39: 5b:8a:38:85:79:05:6f:27:24:d4:24:06:dc:e8:87: f2:d1:d9:80:dc:59:6d:ec:66:be:47:1f:e5:e0:b0: 27:d8:9b:00:1a:93:8b:d9:8c:76:ff:5a:e7:64:67: 88:f4:7a:01:cf:d7:d7:26:ea:9f:62:f9:40:b5:41: 74:19:1d:75:69:8c:27:a8:cb:13:f5:fc:5d:33:2e: d8:cf:5e:45:b0:86:f2:64:c3:03:8e:00:45:68:84: 41:12:fa:8b:60:5b:86:cf:26:74:38:25:2b:cb:b1: 64:52:da:98:31:9c:45:fb:69:7a:d9:59:9f:74:66: ed:83:a2:b2:88:57:a6:a4:19:d0:17:b3:53:ab:f8: af:f5:10:0b:7f:d6:64:41:b5:e5:59:63:72:97:00: 2e:b8:61:bb:84:8e:e5:39:7b:51:3e:97:3b:5e:92: d2:6f:a1:98:a1:f0:23:75:67:60:aa:6e:de:c4:1d: 92:60:1f:14:b7:4c:91:b2:43:a1:34:a1:13:c7:e9: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7D:23:2E:68:8D:B8:FD:2F:B5:47:AC:9A:DC:02:E2:CA:5C:2B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl X509v3 Authority Key Identifier: keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:05:e8:19:ea:a2:02:4e:81:b0:c6:af:73:cc:9e:0c:28:9d: c7:f1:5c:c7:2b:bf:1b:3d:a9:eb:7b:ef:cb:26:c9:08:cc:ae: 59:cc:b3:2e:f7:ef:fa:23:5d:61:ec:fe:8b:21:7c:a7:8c:ec: 77:c9:ee:7e:4c:3c:ca:15:6d:28:a7:c7:c5:17:18:f2:68:7c: 5b:66:19:75:15:27:b5:ea:3b:da:13:26:20:89:54:f4:83:0a: f3:38:38:cb:15:1c:53:cf:a9:bb:b4:f8:49:ef:6e:31:95:46: 7a:1d:66:60:7e:01:f3:db:49:0a:22:57:fe:b7:84:68:a1:33: eb:35:2f:5d:24:20:4f:a9:62:3c:3d:e9:03:63:31:6a:92:ac: 0c:7e:30:46:92:8b:03:a4:8f:91:ac:fd:33:10:94:c1:e3:03: 66:20:23:ea:1c:ec:0e:74:01:28:9b:1e:ae:8f:a3:17:3c:29: bc:50:be:74:42:4a:42:60:90:9f:1e:ef:63:35:60:14:15:93: 1b:e2:d7:6e:52:81:d0:b7:1b:da:b6:ee:ae:fe:0b:35:49:c3: d1:ea:78:d8:6d:74:93:d2:7e:9f:4e:15:02:a2:cc:cc:54:97: fb:f2:10:88:63:9b:b7:f3:ea:62:2d:c5:f4:49:2e:66:81:3a: 9e:8a:d8:3c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUxAH3IbuycSB9B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMzkyMzUtNzczYS00MTA4LTk1MjgtNDY1MzA0YTk2 NmIzMB4XDTI1MDUxMjE4MDAwM1oXDTI1MDUxNDE4MDAwMFowLzEtMCsGA1UEAxMk YjQ3YjA3YWYtYzZmMy00ZWEyLTgxZDgtODE0MjA4ZjA2YTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlao6JPB2Xxi1lltx0t4cZwye8YzhAWIb24B0 16NptWh65dBWYO0GOErGiuHhVpHw7HWDhjcScg4OLTlbijiFeQVvJyTUJAbc6Ify 0dmA3Flt7Ga+Rx/l4LAn2JsAGpOL2Yx2/1rnZGeI9HoBz9fXJuqfYvlAtUF0GR11 aYwnqMsT9fxdMy7Yz15FsIbyZMMDjgBFaIRBEvqLYFuGzyZ0OCUry7FkUtqYMZxF +2l62VmfdGbtg6KyiFempBnQF7NTq/iv9RALf9ZkQbXlWWNylwAuuGG7hI7lOXtR Ppc7XpLSb6GYofAjdWdgqm7exB2SYB8Ut0yRskOhNKETx+nj4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ59Iy5ojbj9L7VHrJrcAuLKXCuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OGIz OTIzNS03NzNhLTQxMDgtOTUyOC00NjUzMDRhOTY2YjMvNjhiMzkyMzUtNzczYS00 MTA4LTk1MjgtNDY1MzA0YTk2NmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjhiMzkyMzUtNzczYS00MTA4LTk1 MjgtNDY1MzA0YTk2NmIzLzY4YjM5MjM1LTc3M2EtNDEwOC05NTI4LTQ2NTMwNGE5 NjZiMy5jcmwwHwYDVR0jBBgwFoAUvreOD+NlP1rJBXpiTNx7ca7+RQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OGIzOTIzNS03NzNhLTQxMDgtOTUyOC00NjUz MDRhOTY2YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzBegZ6qICToGwxq9zzJ4M KJ3H8VzHK78bPanre+/LJskIzK5ZzLMu9+/6I11h7P6LIXynjOx3ye5+TDzKFW0o p8fFFxjyaHxbZhl1FSe16jvaEyYgiVT0gwrzODjLFRxTz6m7tPhJ724xlUZ6HWZg fgHz20kKIlf+t4RooTPrNS9dJCBPqWI8PekDYzFqkqwMfjBGkosDpI+RrP0zEJTB 4wNmICPqHOwOdAEomx6uj6MXPCm8UL50QkpCYJCfHu9jNWAUFZMb4tduUoHQtxva tu6u/gs1ScPR6njYbXST0n6fThUCoszMVJf78hCIY5u38+piLcX0SS5mgTqeitg8 -----END CERTIFICATE-----Generated at Tue May 13 11:49:09 2025 by rpki-client