$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft File: 0c9b7b78-0431-4030-be95-6889ed40d6e6.mft (raw, json) Hash identifier: Ays5m8W01/modaqV2J7NdU0oGVaAPgNX3wo/o4qDqLQ= Subject key identifier: 07:BC:4C:18:33:06:F0:79:EC:39:74:E4:AE:7B:B0:B4:91:03:4B:DC Authority key identifier: DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 Certificate issuer: /CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Certificate serial: 010D0C9F43285849D182307FFCAB515D3CD5AEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft Manifest number: 010D0C9F432858498BBD0C5EE0E54B27F31C4A5A Signing time: Sun 11 May 2025 14:00:03 +0000 Manifest this update: Sun 11 May 2025 14:00:03 +0000 Manifest next update: Tue 13 May 2025 14:00:00 +0000 Files and hashes: 1: 0c9b7b78-0431-4030-be95-6889ed40d6e6.crl (hash: BBJ6Kj0qVeFmpZQruIAooApopfo0zohHnZW9l0/+4jM=) 2: d492e89a-8f64-3ae7-a353-597164e47b19.roa (hash: mSbseto3o2Bp1RvT8BbN/bZc5OuzDIbXN2gUzHAojWA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:82:30:7f:fc:ab:51:5d:3c:d5:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9b7b78-0431-4030-be95-6889ed40d6e6 Validity Not Before: May 11 14:00:03 2025 GMT Not After : May 13 14:00:00 2025 GMT Subject: CN=d459a063-6c24-4fa8-a987-83cb6fbc5afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:dd:03:11:08:5a:23:c2:bc:c5:1b:da:28: 24:95:2e:3b:4a:e0:0c:30:97:2e:b8:a1:16:92:dd: 63:12:ad:42:8c:dc:34:f6:4b:14:e6:76:82:38:09: 16:c0:3f:42:b9:5f:96:77:f8:fa:e7:fe:38:47:31: 1c:c5:a2:68:af:ad:01:1e:6f:33:7d:ad:d6:8f:17: d5:b4:9d:db:8f:d3:d5:bf:c3:6e:e8:95:e1:00:7f: 04:a6:93:93:ec:03:84:94:f8:79:5b:d8:43:7b:cb: 19:37:3b:9c:dc:04:7d:0b:e2:28:e5:8f:2b:3a:da: 0b:4c:b2:cd:64:1c:cb:3e:07:ef:a9:cd:59:db:71: 3b:e7:32:04:09:b5:d1:06:7a:ba:71:41:d2:d7:99: 69:3f:6d:69:cb:72:51:c3:14:d4:68:44:5e:34:b3: c0:ea:b5:b3:f1:13:f8:41:4a:45:14:c4:f2:7a:70: 10:33:ae:f0:83:f5:d8:70:1e:5e:6f:d2:7c:b1:17: e8:da:11:0c:f5:a3:a9:ba:7f:76:01:79:4c:0f:39: f9:2f:90:98:ec:c0:1b:2a:07:16:64:7a:0d:b3:a0: cf:b9:f6:a7:ad:d8:ce:df:45:53:96:22:63:4e:47: 3c:1b:71:47:41:6c:70:9f:ed:d7:a9:b6:96:f8:66: 8d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:4C:18:33:06:F0:79:EC:39:74:E4:AE:7B:B0:B4:91:03:4B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6/0c9b7b78-0431-4030-be95-6889ed40d6e6.crl X509v3 Authority Key Identifier: keyid:DB:7D:A8:C5:30:7B:F2:56:BF:54:06:90:C5:B1:F4:84:6A:41:78:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c9b7b78-0431-4030-be95-6889ed40d6e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2e:21:ce:d5:a7:ce:bf:4f:3f:70:15:4d:45:f2:68:24:d1: a9:8d:4e:35:99:c3:c8:ad:04:36:95:28:cd:c1:82:e4:82:2c: 3c:b3:2b:bc:cb:71:3c:32:fd:07:77:8a:2e:09:6e:c6:25:65: 2f:86:3c:44:e1:75:3d:59:47:67:bf:ae:ef:dc:0c:4c:35:7f: 02:66:28:e9:02:e0:2c:35:5c:a6:55:b3:94:34:b7:75:75:52: 42:10:e4:79:fb:04:28:ba:23:84:dd:03:1e:3e:bb:56:60:33: f0:1a:ef:49:87:dd:39:63:d4:e0:5e:19:09:16:03:5c:b1:75: 1e:78:aa:5e:e6:e0:ac:b9:c3:31:ff:8e:31:76:ab:4c:41:5d: d7:4d:8b:8e:d6:92:c6:50:27:2e:8c:8c:55:62:07:fb:ed:0e: 3c:87:a7:01:e4:a9:d7:6e:98:16:e7:b3:bb:90:54:16:f6:f8: c4:61:df:7e:eb:c9:c1:cd:ea:53:de:59:c5:92:78:ad:b0:f6: 1a:70:45:cd:1a:54:16:f7:dd:58:86:26:2c:de:74:ac:ba:10: 31:c6:2d:df:36:dd:60:36:91:4d:30:47:db:1b:9e:2c:5e:b3: b6:3f:7c:af:2c:72:c4:f1:c0:e2:8e:1b:65:eb:db:7b:5f:bc: 1f:f8:13:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnRgjB//KtRXTzVrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5YjdiNzgtMDQzMS00MDMwLWJlOTUtNjg4OWVkNDBk NmU2MB4XDTI1MDUxMTE0MDAwM1oXDTI1MDUxMzE0MDAwMFowLzEtMCsGA1UEAxMk ZDQ1OWEwNjMtNmMyNC00ZmE4LWE5ODctODNjYjZmYmM1YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOLdAxEIWiPCvMUb2igklS47SuAMMJcuuKEW kt1jEq1CjNw09ksU5naCOAkWwD9CuV+Wd/j65/44RzEcxaJor60BHm8zfa3WjxfV tJ3bj9PVv8Nu6JXhAH8EppOT7AOElPh5W9hDe8sZNzuc3AR9C+Io5Y8rOtoLTLLN ZBzLPgfvqc1Z23E75zIECbXRBnq6cUHS15lpP21py3JRwxTUaEReNLPA6rWz8RP4 QUpFFMTyenAQM67wg/XYcB5eb9J8sRfo2hEM9aOpun92AXlMDzn5L5CY7MAbKgcW ZHoNs6DPufanrdjO30VTliJjTkc8G3FHQWxwn+3XqbaW+GaNeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAe8TBgzBvB57Dl05K57sLSRA0vcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzli N2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5ZWQ0MGQ2ZTYvMGM5YjdiNzgtMDQzMS00 MDMwLWJlOTUtNjg4OWVkNDBkNmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGM5YjdiNzgtMDQzMS00MDMwLWJl OTUtNjg4OWVkNDBkNmU2LzBjOWI3Yjc4LTA0MzEtNDAzMC1iZTk1LTY4ODllZDQw ZDZlNi5jcmwwHwYDVR0jBBgwFoAU232oxTB78la/VAaQxbH0hGpBeEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzliN2I3OC0wNDMxLTQwMzAtYmU5NS02ODg5 ZWQ0MGQ2ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpLiHO1afOv08/cBVNRfJo JNGpjU41mcPIrQQ2lSjNwYLkgiw8syu8y3E8Mv0Hd4ouCW7GJWUvhjxE4XU9WUdn v67v3AxMNX8CZijpAuAsNVymVbOUNLd1dVJCEOR5+wQouiOE3QMePrtWYDPwGu9J h905Y9TgXhkJFgNcsXUeeKpe5uCsucMx/44xdqtMQV3XTYuO1pLGUCcujIxVYgf7 7Q48h6cB5KnXbpgW57O7kFQW9vjEYd9+68nBzepT3lnFknitsPYacEXNGlQW991Y hiYs3nSsuhAxxi3fNt1gNpFNMEfbG54sXrO2P3yvLHLE8cDijhtl69t7X7wf+BMz -----END CERTIFICATE-----Generated at Sun May 11 23:02:31 2025 by rpki-client