$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft File: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft (raw, json) Hash identifier: iOq7pZ2LLwUBW5qj7UNDj9GYZt5kR4TnAmyPSLAUNOY= Subject key identifier: DB:12:8C:9C:3D:26:90:79:53:0C:90:DC:9F:11:0B:C5:95:6F:FA:EF Authority key identifier: D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1 Certificate issuer: /CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3 Certificate serial: 010D0C9F43285849D488712732707EB414264880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft Manifest number: 010D0C9F43285849490D0FADC3DA076F134F5072 Signing time: Mon 12 May 2025 16:00:03 +0000 Manifest this update: Mon 12 May 2025 16:00:03 +0000 Manifest next update: Thu 15 May 2025 16:00:00 +0000 Files and hashes: 1: 3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl (hash: u1k44sHdJWII2gASpM4oA03cj0SmQ/1+moUZzDp77SA=) 2: dc9bc937-e8ce-3bad-acc7-766bfc1c52ea.roa (hash: CxeXzwD5jO3FjDuZyiduUcm5cvbI0rrSryTfo3xnd98=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:88:71:27:32:70:7e:b4:14:26:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ad98-0e5e-485d-bd5d-5c620932b6c3 Validity Not Before: May 12 16:00:03 2025 GMT Not After : May 15 16:00:00 2025 GMT Subject: CN=4a561e97-e3cb-46af-9a08-bcd85bd69397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d8:34:98:80:45:50:f5:d0:04:35:f7:8a:b8: 3a:62:29:0d:29:64:e5:18:b8:7c:e5:cc:f2:d6:99: ff:6b:2b:f6:83:c6:1e:94:2d:ae:b6:7d:fd:c6:65: b4:b4:d1:9b:da:9d:ec:ed:ad:19:d6:b0:c2:51:56: af:6f:ae:f0:15:f8:4d:95:e3:a8:f1:d0:6e:f5:55: 71:54:c0:8b:92:9e:7f:19:e5:b4:e1:c7:9f:f7:62: 3c:93:c3:d8:1b:23:ad:ce:97:30:62:76:f2:8b:1f: e0:78:22:73:50:0f:f2:3f:33:a3:9d:97:9a:bd:01: b1:2b:ff:b4:47:c8:de:1a:0a:2d:f2:71:c8:0a:f3: 3c:3d:b9:25:17:91:78:55:74:05:1a:9f:89:0e:7e: 2f:32:52:7e:d3:69:c0:6f:42:87:1e:75:06:53:1f: 34:9f:93:25:ed:94:5b:d5:35:79:ed:1f:b9:db:09: c2:7a:6b:5f:ac:e3:ce:92:a9:65:c5:26:b3:6e:a2: 5f:5f:ad:b2:af:31:41:31:2c:8e:10:86:05:03:64: e9:5a:e4:7f:03:e6:99:a3:55:28:85:15:50:ae:b3: ec:31:30:66:b0:0d:c3:a7:47:15:58:b9:7e:a9:1c: e1:7d:78:a2:f9:e9:f8:a2:dc:3e:d9:d0:db:5e:4f: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:8C:9C:3D:26:90:79:53:0C:90:DC:9F:11:0B:C5:95:6F:FA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.crl X509v3 Authority Key Identifier: keyid:D3:CB:84:8B:12:B1:7C:62:9C:0C:E4:54:D3:2F:0D:0B:F0:E8:47:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f58ad98-0e5e-485d-bd5d-5c620932b6c3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:65:76:e8:b0:a7:72:93:d4:27:2a:a8:1a:1f:f5:42:bc:84: 7f:e9:d3:49:98:8f:c9:0c:ca:dc:da:4d:83:07:f0:2d:2c:57: 17:08:5d:aa:86:23:23:dc:a9:f0:70:54:fc:91:1d:3c:b0:d5: d5:47:d3:dd:d4:12:a3:bb:c8:b0:fd:3e:7e:89:01:b4:2b:30: 80:72:fb:ac:eb:ed:79:bf:56:40:8e:05:a9:70:9b:88:64:8b: e3:d7:b4:c2:4f:ba:e4:d9:01:f7:b2:95:1e:9d:0a:66:89:2a: 47:c3:d9:16:80:68:bd:46:d6:f9:ac:26:2a:da:9e:f0:55:db: 98:33:87:86:f0:76:7c:59:6c:cd:df:d6:1a:c2:fc:43:57:ee: a9:84:8c:ee:e3:1f:aa:0f:ef:27:e3:9b:04:4f:af:91:1f:31: b5:d4:d9:5e:e7:a4:a5:35:68:32:8f:43:4d:68:47:46:93:c8: f3:2d:9b:63:06:9a:77:40:c5:64:93:f6:a6:13:1f:2c:de:43: b5:58:09:e8:c6:5a:52:ac:c5:54:a4:c1:d7:b5:d8:39:c3:91: fd:c5:88:c7:fb:f8:93:0b:8a:28:c7:dc:2d:5d:e6:fd:32:a6: 78:8c:f2:42:bb:bb:6b:04:09:2f:2b:3a:86:a4:4a:77:14:83: b9:85:0f:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnUiHEnMnB+tBQmSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y1OGFkOTgtMGU1ZS00ODVkLWJkNWQtNWM2MjA5MzJi NmMzMB4XDTI1MDUxMjE2MDAwM1oXDTI1MDUxNTE2MDAwMFowLzEtMCsGA1UEAxMk NGE1NjFlOTctZTNjYi00NmFmLTlhMDgtYmNkODViZDY5Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdg0mIBFUPXQBDX3irg6YikNKWTlGLh85czy 1pn/ayv2g8YelC2utn39xmW0tNGb2p3s7a0Z1rDCUVavb67wFfhNleOo8dBu9VVx VMCLkp5/GeW04cef92I8k8PYGyOtzpcwYnbyix/geCJzUA/yPzOjnZeavQGxK/+0 R8jeGgot8nHICvM8PbklF5F4VXQFGp+JDn4vMlJ+02nAb0KHHnUGUx80n5Ml7ZRb 1TV57R+52wnCemtfrOPOkqllxSazbqJfX62yrzFBMSyOEIYFA2TpWuR/A+aZo1Uo hRVQrrPsMTBmsA3Dp0cVWLl+qRzhfXii+en4otw+2dDbXk8pvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNsSjJw9JpB5UwyQ3J8RC8WVb/rvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjU4 YWQ5OC0wZTVlLTQ4NWQtYmQ1ZC01YzYyMDkzMmI2YzMvM2Y1OGFkOTgtMGU1ZS00 ODVkLWJkNWQtNWM2MjA5MzJiNmMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y1OGFkOTgtMGU1ZS00ODVkLWJk NWQtNWM2MjA5MzJiNmMzLzNmNThhZDk4LTBlNWUtNDg1ZC1iZDVkLTVjNjIwOTMy YjZjMy5jcmwwHwYDVR0jBBgwFoAU08uEixKxfGKcDORU0y8NC/DoR7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjU4YWQ5OC0wZTVlLTQ4NWQtYmQ1ZC01YzYy MDkzMmI2YzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaZXbosKdyk9QnKqgaH/VC vIR/6dNJmI/JDMrc2k2DB/AtLFcXCF2qhiMj3KnwcFT8kR08sNXVR9Pd1BKju8iw /T5+iQG0KzCAcvus6+15v1ZAjgWpcJuIZIvj17TCT7rk2QH3spUenQpmiSpHw9kW gGi9Rtb5rCYq2p7wVduYM4eG8HZ8WWzN39YawvxDV+6phIzu4x+qD+8n45sET6+R HzG11Nle56SlNWgyj0NNaEdGk8jzLZtjBpp3QMVkk/amEx8s3kO1WAnoxlpSrMVU pMHXtdg5w5H9xYjH+/iTC4oox9wtXeb9MqZ4jPJCu7trBAkvKzqGpEp3FIO5hQ9b -----END CERTIFICATE-----Generated at Mon May 12 23:53:50 2025 by rpki-client