$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft File: de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft (raw, json) Hash identifier: X5k7x+bVBJrewkZdHh73qd74T1l64xivd7NF/vjl+B0= Subject key identifier: 87:EB:50:2A:E3:87:74:81:56:68:59:7F:CD:5D:6B:3E:F2:B4:AE:22 Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F43285849CF2EA230C0C9DADCAD032E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft Manifest number: 010D0C9F432858418B0E1501B4C6C9598914554A Signing time: Sat 10 May 2025 18:00:03 +0000 Manifest this update: Sat 10 May 2025 18:00:03 +0000 Manifest next update: Tue 13 May 2025 18:00:00 +0000 Files and hashes: 1: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (hash: McsaqheoGcxdJb4et6OacDbxy4e3+tsNv7GFHvO0UR4=) 2: de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl (hash: oTIjJoSxIasnJSVYgQDwKb3is0MBTeNvmb2zVeLz6oE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:2e:a2:30:c0:c9:da:dc:ad:03:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: May 10 18:00:03 2025 GMT Not After : May 13 18:00:00 2025 GMT Subject: CN=687a9ccc-3480-45f9-bf82-85cbfb70b921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:a0:c2:63:ca:81:fe:f5:f8:92:4e:c7:c1: 0e:a5:51:b9:8b:4c:c8:0c:09:e1:e8:7f:b4:1a:13: a5:e8:5e:0e:5f:f7:be:2f:90:ce:a3:b0:38:a1:0b: 27:b0:3b:3e:fd:a4:ad:92:2a:8d:f9:f0:28:86:71: 55:12:05:3a:9d:44:2a:db:d7:39:41:f0:bd:64:5e: 51:b1:79:46:22:18:c5:79:0b:e5:89:76:e5:b3:eb: 7f:6f:4d:7b:b3:88:14:bb:53:b0:56:27:d6:e8:2f: 69:39:c3:09:11:3f:67:59:36:dc:82:05:71:08:e3: 00:e8:79:0e:07:78:d6:0e:85:dc:50:6d:0e:6d:89: 06:da:a4:db:55:bc:0f:c4:46:6f:32:8e:d8:af:e8: 95:20:d8:2e:8c:f7:89:cc:3e:ae:97:d6:83:19:c8: 41:c9:99:48:a6:29:5a:82:d1:c1:f5:26:b4:be:35: 90:20:39:d7:b4:41:e2:1e:05:32:6c:e0:0b:99:ef: 9e:00:af:00:5f:fe:65:c7:87:c3:bb:5e:0b:07:a1: 21:16:4c:21:8b:0c:f4:e8:b3:01:8c:a0:1e:8c:06: 62:09:10:9c:0e:a6:f4:bc:e1:5e:ce:a6:96:8f:25: 12:e9:23:32:9c:78:18:26:30:77:bb:f0:89:bd:06: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EB:50:2A:E3:87:74:81:56:68:59:7F:CD:5D:6B:3E:F2:B4:AE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b1:e6:fc:23:2e:06:8c:70:ea:1f:9f:a3:b0:20:ae:6d:85: fc:ef:31:74:1e:14:f4:43:f7:9e:22:d0:f3:89:83:60:a1:0a: bc:c4:8c:a1:37:59:62:d5:35:09:7d:db:87:13:95:c4:6c:f4: d9:f3:50:27:8c:12:93:8c:ee:63:0e:64:8f:26:78:7f:3b:7e: 04:10:81:68:b5:8a:c0:3b:f1:a1:f8:d7:49:2f:a7:13:c8:13: 75:d9:2a:7f:78:e7:c3:b2:2f:b3:7b:8a:2f:66:a1:a5:26:85: 21:d5:71:93:a1:4c:a5:89:19:10:ce:3f:fd:ca:df:ae:06:af: 04:28:ec:6b:f0:b9:0e:3c:ef:cf:1b:4d:97:8e:a1:bf:b4:1e: a2:e4:37:b6:76:f5:12:cf:0f:04:dc:07:3c:de:03:e0:94:46: 14:95:3a:9e:aa:a4:40:24:56:de:47:6e:8a:43:53:12:53:8c: 8b:a2:13:3e:a9:d6:6e:09:bc:8f:6b:80:34:a4:f3:e2:fa:bf: 19:3b:2c:d7:93:f8:af:30:08:d5:09:3a:42:0a:2c:ca:a6:fb: 4a:5c:dd:0a:24:90:a8:32:52:16:0e:02:ce:41:00:9a:2e:2d: f2:f9:a6:9f:b2:37:ed:3e:e0:ec:c7:83:19:e5:7f:b8:e8:45: e3:fa:12:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnPLqIwwMna3K0DLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI1MDUxMDE4MDAwM1oXDTI1MDUxMzE4MDAwMFowLzEtMCsGA1UEAxMk Njg3YTljY2MtMzQ4MC00NWY5LWJmODItODVjYmZiNzBiOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwygwmPKgf71+JJOx8EOpVG5i0zIDAnh6H+0 GhOl6F4OX/e+L5DOo7A4oQsnsDs+/aStkiqN+fAohnFVEgU6nUQq29c5QfC9ZF5R sXlGIhjFeQvliXbls+t/b017s4gUu1OwVifW6C9pOcMJET9nWTbcggVxCOMA6HkO B3jWDoXcUG0ObYkG2qTbVbwPxEZvMo7Yr+iVINgujPeJzD6ul9aDGchByZlIpila gtHB9Sa0vjWQIDnXtEHiHgUybOALme+eAK8AX/5lx4fDu14LB6EhFkwhiwz06LMB jKAejAZiCRCcDqb0vOFezqaWjyUS6SMynHgYJjB3u/CJvQaIFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIfrUCrjh3SBVmhZf81daz7ytK4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvZGU4ZTYwYWYtODU3Ny00 YmI3LThlM2UtMjhlNGVjODhiNzI3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCseb8Iy4GjHDqH5+jsCCu bYX87zF0HhT0Q/eeItDziYNgoQq8xIyhN1li1TUJfduHE5XEbPTZ81AnjBKTjO5j DmSPJnh/O34EEIFotYrAO/Gh+NdJL6cTyBN12Sp/eOfDsi+ze4ovZqGlJoUh1XGT oUyliRkQzj/9yt+uBq8EKOxr8LkOPO/PG02XjqG/tB6i5De2dvUSzw8E3Ac83gPg lEYUlTqeqqRAJFbeR26KQ1MSU4yLohM+qdZuCbyPa4A0pPPi+r8ZOyzXk/ivMAjV CTpCCizKpvtKXN0KJJCoMlIWDgLOQQCaLi3y+aafsjftPuDsx4MZ5X+46EXj+hKc -----END CERTIFICATE-----Generated at Sun May 11 07:37:34 2025 by rpki-client