$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft File: 1ff04835-864a-40da-a12f-dcad0faabb8c.mft (raw, json) Hash identifier: DU39U1FUh8pzRqJJPtpdaxxz6BC7HdZbWYSnJeEpd7U= Subject key identifier: 8A:95:E0:09:69:E4:D7:A5:B7:90:56:B8:7A:17:C1:FD:48:60:D4:8D Authority key identifier: 73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 Certificate issuer: /CN=1ff04835-864a-40da-a12f-dcad0faabb8c Certificate serial: 010D0C9F43285849CBB145F92E520D3AB4ED75C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft Manifest number: 010D0C9F432858499C42A1E525F529435CBAF212 Signing time: Fri 09 May 2025 12:00:03 +0000 Manifest this update: Fri 09 May 2025 12:00:03 +0000 Manifest next update: Sun 11 May 2025 12:00:00 +0000 Files and hashes: 1: 1ff04835-864a-40da-a12f-dcad0faabb8c.crl (hash: gxolhhw9Ev+9O1C1YwRfrrcGkmM1hTgdhsQXlqGCodE=) 2: c778b757-0391-3c4a-869f-5f03f34425a6.roa (hash: q0ApjzK1tRq+UzuJZJjbG1dMl6oX1tnGYgnD7u/HgGo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:b1:45:f9:2e:52:0d:3a:b4:ed:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff04835-864a-40da-a12f-dcad0faabb8c Validity Not Before: May 9 12:00:03 2025 GMT Not After : May 11 12:00:00 2025 GMT Subject: CN=0a2f7dea-08cc-41d9-be24-12cd7b891bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:66:b2:e2:5d:c6:66:77:1b:72:2b:44:ef: 2d:a7:b5:74:b3:0f:56:ee:ff:be:f6:39:33:38:37: 38:08:38:70:41:8f:42:56:c5:be:9f:e6:b3:2e:c5: 7e:76:88:75:d4:9e:dd:42:94:4b:49:ec:5a:d4:5e: a9:05:0a:a7:10:ea:59:81:af:ad:f0:b7:9a:40:40: ac:2e:7e:a0:7e:14:86:56:cd:ae:cd:96:91:5a:b0: 09:ba:0a:1d:87:67:34:03:d7:59:8c:25:e8:24:4a: 1d:3b:a8:26:fb:e9:0b:fa:0b:a8:93:a0:61:c2:3d: d7:a7:45:f5:56:9d:d8:41:2c:c7:b4:4e:de:34:ef: dc:dc:01:81:56:54:c3:21:a6:d5:54:fc:49:6c:36: 49:34:40:81:c4:a5:cd:8c:36:cf:5c:af:99:60:1d: b1:69:c3:8d:0b:4d:7a:78:e4:8e:40:ad:e2:19:72: 7a:42:1e:03:60:97:95:84:59:77:6b:cb:41:bd:85: 57:38:9e:44:57:be:1c:96:1d:b4:0f:a9:c9:a6:65: f4:46:cb:9c:1f:65:15:48:04:86:f1:08:d1:c1:a5: 84:c0:32:e1:fc:25:00:08:3e:24:74:ca:d5:de:c1: b3:02:64:e1:89:61:c1:ca:86:81:c5:cb:70:7b:b9: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:95:E0:09:69:E4:D7:A5:B7:90:56:B8:7A:17:C1:FD:48:60:D4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c/1ff04835-864a-40da-a12f-dcad0faabb8c.crl X509v3 Authority Key Identifier: keyid:73:0F:EE:54:BC:72:D1:CE:2A:9C:34:7D:C7:BF:20:56:F4:F2:9B:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff04835-864a-40da-a12f-dcad0faabb8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7c:3d:5d:31:a5:01:1a:0a:40:45:b3:a6:23:f5:16:55:5d: c2:16:35:8b:32:b2:e3:0c:e9:75:fa:af:b0:b1:50:8a:94:04: 28:c4:e4:a5:9c:89:8f:76:db:2b:2d:91:09:77:bb:27:bd:15: f2:1e:d8:86:7d:06:6a:1f:af:55:ef:87:54:77:47:64:86:22: 16:28:bb:aa:72:13:ed:58:fb:3f:6b:1f:4b:f3:01:14:ce:54: 9f:99:2c:96:4c:63:f6:53:25:e3:e7:2f:4e:50:f0:ac:7e:19: d7:6e:8c:e8:cf:00:8f:3d:0d:24:f9:6c:9a:45:8b:d8:6a:63: c7:92:66:ce:f3:14:39:ce:6a:5b:8a:a5:2e:6d:2c:16:26:f9: 99:b3:20:60:3d:3a:51:8c:38:5f:13:c9:92:bb:ef:e3:2e:2a: f3:82:69:14:31:0f:ea:02:97:e0:80:ad:77:6d:6d:29:66:d9: 3d:b8:8d:e0:b4:f7:49:41:7b:68:35:a9:33:87:c7:d4:99:13: d6:ae:48:b5:84:b9:20:7c:68:70:21:4e:85:93:0d:29:5f:00: bb:44:10:76:a4:ad:3b:7d:31:46:75:c4:e7:82:5b:e7:a7:6a: 00:3b:fd:e7:65:8f:87:5e:70:2a:f4:5e:a5:fe:38:36:c0:6a: dc:4b:7b:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnLsUX5LlINOrTtdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmMDQ4MzUtODY0YS00MGRhLWExMmYtZGNhZDBmYWFi YjhjMB4XDTI1MDUwOTEyMDAwM1oXDTI1MDUxMTEyMDAwMFowLzEtMCsGA1UEAxMk MGEyZjdkZWEtMDhjYy00MWQ5LWJlMjQtMTJjZDdiODkxYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolJmsuJdxmZ3G3IrRO8tp7V0sw9W7v++9jkz ODc4CDhwQY9CVsW+n+azLsV+doh11J7dQpRLSexa1F6pBQqnEOpZga+t8LeaQECs Ln6gfhSGVs2uzZaRWrAJugodh2c0A9dZjCXoJEodO6gm++kL+guok6Bhwj3Xp0X1 Vp3YQSzHtE7eNO/c3AGBVlTDIabVVPxJbDZJNECBxKXNjDbPXK+ZYB2xacONC016 eOSOQK3iGXJ6Qh4DYJeVhFl3a8tBvYVXOJ5EV74clh20D6nJpmX0RsucH2UVSASG 8QjRwaWEwDLh/CUACD4kdMrV3sGzAmThiWHByoaBxctwe7nH5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIqV4Alp5Nelt5BWuHoXwf1IYNSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYw NDgzNS04NjRhLTQwZGEtYTEyZi1kY2FkMGZhYWJiOGMvMWZmMDQ4MzUtODY0YS00 MGRhLWExMmYtZGNhZDBmYWFiYjhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZmMDQ4MzUtODY0YS00MGRhLWEx MmYtZGNhZDBmYWFiYjhjLzFmZjA0ODM1LTg2NGEtNDBkYS1hMTJmLWRjYWQwZmFh YmI4Yy5jcmwwHwYDVR0jBBgwFoAUcw/uVLxy0c4qnDR9x78gVvTym4QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmYwNDgzNS04NjRhLTQwZGEtYTEyZi1kY2Fk MGZhYWJiOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMfD1dMaUBGgpARbOmI/UW VV3CFjWLMrLjDOl1+q+wsVCKlAQoxOSlnImPdtsrLZEJd7snvRXyHtiGfQZqH69V 74dUd0dkhiIWKLuqchPtWPs/ax9L8wEUzlSfmSyWTGP2UyXj5y9OUPCsfhnXbozo zwCPPQ0k+WyaRYvYamPHkmbO8xQ5zmpbiqUubSwWJvmZsyBgPTpRjDhfE8mSu+/j LirzgmkUMQ/qApfggK13bW0pZtk9uI3gtPdJQXtoNakzh8fUmRPWrki1hLkgfGhw IU6Fkw0pXwC7RBB2pK07fTFGdcTnglvnp2oAO/3nZY+HXnAq9F6l/jg2wGrcS3vK -----END CERTIFICATE-----Generated at Fri May 9 19:19:48 2025 by rpki-client