$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft File: 1889ddcb-202e-4e86-8fb3-63c498cba935.mft (raw, json) Hash identifier: 8HZnY0hHI5Iqx15JKRzjKM6ZrkzGR+CyAaL9hcIIj2g= Subject key identifier: 5F:45:7C:29:68:B8:51:F7:9B:74:CF:78:4F:4A:F4:68:69:0C:9F:82 Authority key identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 Certificate issuer: /CN=1889ddcb-202e-4e86-8fb3-63c498cba935 Certificate serial: 010D0C9F43285849D7AC7EED959297CA3849CF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft Manifest number: 010D0C9F43285849653E5A088F3C5F0346BF89EA Signing time: Tue 13 May 2025 19:00:07 +0000 Manifest this update: Tue 13 May 2025 19:00:07 +0000 Manifest next update: Thu 15 May 2025 19:00:00 +0000 Files and hashes: 1: 1889ddcb-202e-4e86-8fb3-63c498cba935.crl (hash: tq1jWhzGdUIksLDIuQM8CtTAZhUD4ItFKl0FcYB5aDQ=) 2: a2c3132b-e476-3eef-9ccd-b420407c2963.roa (hash: For+tIVNB8lCiUSmTjvkG8WCwQVJkBBQjD0OXIFWutU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:ac:7e:ed:95:92:97:ca:38:49:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1889ddcb-202e-4e86-8fb3-63c498cba935 Validity Not Before: May 13 19:00:07 2025 GMT Not After : May 15 19:00:00 2025 GMT Subject: CN=2a1baa7d-d8d2-4104-b702-6f9f7c890569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:60:fb:0f:fc:b0:83:a3:07:bc:7d:30:98: 94:10:be:f8:c9:19:06:9f:03:4f:11:cf:ca:a6:45: 2f:0c:3e:b0:96:83:35:ad:6c:86:59:6b:0c:51:fa: 8d:51:80:4b:3c:a0:d9:36:a2:09:e2:f5:b7:49:a3: 1e:1c:aa:9c:3a:3c:5c:b9:67:81:2e:7f:3a:62:52: 16:a5:21:29:8a:d4:f1:3a:80:df:a3:68:07:44:4a: e7:09:d4:19:3c:59:92:08:54:68:87:fa:56:46:36: 8b:55:47:1b:9c:9f:35:de:e0:cf:a6:9b:96:5f:c6: c9:4f:3c:18:a8:5a:fc:7b:3e:7a:cc:85:68:50:0d: 94:38:da:2f:6a:8b:0b:33:f8:58:33:c1:5b:39:52: 78:b5:81:a5:4d:14:85:de:1c:13:12:b2:f5:87:7d: 87:48:e5:c5:d2:55:c8:1d:4d:ff:5d:40:d7:e4:b8: 87:5b:8c:15:07:47:3a:32:5e:e6:ed:23:b9:4f:64: 59:a5:23:a2:c8:c1:7d:31:35:fe:2f:32:d5:b6:83: 28:6a:4e:c6:08:f9:97:6e:b2:d6:e3:6a:31:0c:af: 59:5a:03:ae:1a:ce:42:47:4c:ad:4b:43:03:66:d1: fe:80:e8:a5:ba:76:33:09:8c:99:5b:da:12:24:aa: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:45:7C:29:68:B8:51:F7:9B:74:CF:78:4F:4A:F4:68:69:0C:9F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl X509v3 Authority Key Identifier: keyid:7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c3:25:fc:cc:1f:e0:a0:26:09:0c:fe:9e:bd:18:0c:62:3e: 7c:e5:76:4b:8f:70:e4:b6:2e:94:0b:b7:76:82:25:cc:13:e4: 64:6a:54:2b:d8:5b:9a:77:61:39:10:29:c4:c5:1b:bb:76:90: 73:58:bf:2d:1e:7d:e0:a6:64:f8:b3:c8:5a:77:68:11:7b:a1: 47:cc:2b:a7:c6:84:28:37:6b:a6:3b:85:84:43:1d:35:4a:e8: 66:c2:d6:ac:8d:e5:2d:76:6e:e4:89:ad:a2:53:06:28:27:e7: 3d:e7:ab:dd:cf:65:a2:2e:e9:7c:fa:f5:e0:98:3a:98:db:c1: 18:01:ea:93:bd:eb:59:52:2d:0b:d7:18:49:13:8e:d9:cf:a5: 92:04:9e:44:38:72:3a:d5:3a:02:bd:93:04:4f:6d:da:db:4e: 04:fc:62:82:4f:07:eb:05:39:28:ed:1f:28:27:76:74:da:03: 4b:db:38:11:a7:1b:db:31:73:6d:7a:f5:e0:6a:f9:fe:e8:a4: c1:d6:47:d6:c1:31:0f:0a:71:fd:35:35:81:64:0f:4a:6f:dd: d2:2e:8e:3d:5d:c8:c8:a9:46:39:6a:a7:72:62:8c:db:b1:9e: 56:47:0f:2e:63:8f:ff:f7:e2:e3:b4:df:ff:5d:21:65:3c:56: f2:b8:2b:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnXrH7tlZKXyjhJz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4OWRkY2ItMjAyZS00ZTg2LThmYjMtNjNjNDk4Y2Jh OTM1MB4XDTI1MDUxMzE5MDAwN1oXDTI1MDUxNTE5MDAwMFowLzEtMCsGA1UEAxMk MmExYmFhN2QtZDhkMi00MTA0LWI3MDItNmY5ZjdjODkwNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqJg+w/8sIOjB7x9MJiUEL74yRkGnwNPEc/K pkUvDD6wloM1rWyGWWsMUfqNUYBLPKDZNqIJ4vW3SaMeHKqcOjxcuWeBLn86YlIW pSEpitTxOoDfo2gHRErnCdQZPFmSCFRoh/pWRjaLVUcbnJ813uDPppuWX8bJTzwY qFr8ez56zIVoUA2UONovaosLM/hYM8FbOVJ4tYGlTRSF3hwTErL1h32HSOXF0lXI HU3/XUDX5LiHW4wVB0c6Ml7m7SO5T2RZpSOiyMF9MTX+LzLVtoMoak7GCPmXbrLW 42oxDK9ZWgOuGs5CR0ytS0MDZtH+gOilunYzCYyZW9oSJKocwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF9FfClouFH3m3TPeE9K9GhpDJ+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xODg5 ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0OThjYmE5MzUvMTg4OWRkY2ItMjAyZS00 ZTg2LThmYjMtNjNjNDk4Y2JhOTM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTg4OWRkY2ItMjAyZS00ZTg2LThm YjMtNjNjNDk4Y2JhOTM1LzE4ODlkZGNiLTIwMmUtNGU4Ni04ZmIzLTYzYzQ5OGNi YTkzNS5jcmwwHwYDVR0jBBgwFoAUe7xubQNRZo+yZciVOWEgqH6i/uAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xODg5ZGRjYi0yMDJlLTRlODYtOGZiMy02M2M0 OThjYmE5MzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAwyX8zB/goCYJDP6evRgM Yj585XZLj3Dkti6UC7d2giXME+RkalQr2Fuad2E5ECnExRu7dpBzWL8tHn3gpmT4 s8had2gRe6FHzCunxoQoN2umO4WEQx01SuhmwtasjeUtdm7kia2iUwYoJ+c956vd z2WiLul8+vXgmDqY28EYAeqTvetZUi0L1xhJE47Zz6WSBJ5EOHI61ToCvZMET23a 204E/GKCTwfrBTko7R8oJ3Z02gNL2zgRpxvbMXNtevXgavn+6KTB1kfWwTEPCnH9 NTWBZA9Kb93SLo49XcjIqUY5aqdyYozbsZ5WRw8uY4//9+LjtN//XSFlPFbyuCt9 -----END CERTIFICATE-----Generated at Wed May 14 07:57:20 2025 by rpki-client