$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft File: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft (raw, json) Hash identifier: Paa8ekmr74Z3Vgsi/GFekU6vHVHDyuww515VqbMjWzA= Subject key identifier: 41:60:6C:C5:95:CE:3F:E4:93:DE:D0:21:44:E7:67:1D:82:CE:A3:7C Authority key identifier: 45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 Certificate issuer: /CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Certificate serial: 010D0C9F43285849D1FA58A7617FC2DA260E23A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft Manifest number: 010D0C9F432858494ED016D77EA200A665D4BBF0 Signing time: Sun 11 May 2025 18:02:07 +0000 Manifest this update: Sun 11 May 2025 18:02:07 +0000 Manifest next update: Tue 13 May 2025 18:00:00 +0000 Files and hashes: 1: 4775f2f1-0661-3006-a1eb-a486c369f840.roa (hash: 5FkYg2PwyNWr1vKLLddKrz1O/FTQ8xoyGPf86rZMz2g=) 2: 704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl (hash: FheFcPUtHZrncFuOQFIDneIeoj14V8On5m3SJOAujzU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:fa:58:a7:61:7f:c2:da:26:0e:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704595c3-6d92-4fc1-b7a8-d8e81a04aa7a Validity Not Before: May 11 18:02:07 2025 GMT Not After : May 13 18:00:00 2025 GMT Subject: CN=cb64c2d2-9bfe-4131-a7ea-e138d331497e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:b0:e2:2a:ae:fc:05:7a:82:2a:64:99:7f: 60:b7:4d:8f:c4:c2:40:e5:4d:9b:73:97:9a:93:5a: 68:48:c0:fc:cb:e1:b4:7a:a9:45:5e:21:ba:c6:4c: 21:06:3a:14:70:38:a3:2f:f4:db:5d:fc:7e:61:e5: 9a:c3:70:59:37:97:dc:ff:71:3f:11:7c:8f:61:70: 8e:30:ef:cc:0d:90:12:a0:1a:8b:0f:63:a4:45:9d: 82:c7:50:92:fd:16:59:f9:28:ca:9b:55:a2:d7:3a: 46:0d:8e:17:78:a2:57:20:6e:08:ad:d5:53:2b:af: 36:f7:84:3e:10:eb:e6:5f:4a:72:03:c7:cf:29:32: f3:a7:6d:36:28:44:f3:2e:60:49:28:d0:1b:db:8a: 66:82:12:7f:98:e9:2f:1b:ee:2d:2e:41:6c:69:cf: 38:92:1d:d4:6c:5e:e8:6b:a6:34:fc:d4:02:db:fd: 58:db:2e:8f:4e:da:ea:4e:b9:11:df:5c:db:4f:bc: 13:0e:98:31:b8:37:30:78:2b:39:c7:a7:5a:13:b5: 2e:23:8e:81:09:58:56:aa:57:10:6f:5c:32:de:47: bc:ba:71:05:18:56:cd:7d:b1:80:dc:ef:62:8e:63: 89:f9:64:53:09:70:0d:95:1f:b2:4d:e3:ed:3d:dc: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:6C:C5:95:CE:3F:E4:93:DE:D0:21:44:E7:67:1D:82:CE:A3:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.crl X509v3 Authority Key Identifier: keyid:45:56:08:A9:4F:3E:2E:30:2D:6A:A5:5C:A2:E8:E5:50:FD:5B:04:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/704595c3-6d92-4fc1-b7a8-d8e81a04aa7a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:81:56:0b:84:9c:6c:7c:88:e7:70:e7:fb:9d:aa:a4:12:5e: 8f:16:86:80:47:79:22:01:58:ad:78:2c:d3:19:83:da:e2:83: 5e:81:11:48:5c:93:19:b0:b4:78:ff:ed:92:45:11:7a:9a:05: 0d:e6:31:eb:64:c9:08:f1:f1:22:e9:ec:ce:b1:08:9a:60:a8: 52:db:7f:fa:02:1f:44:0a:32:68:24:27:99:8f:13:2d:c5:aa: c8:e9:b3:4f:67:86:38:d7:3f:0c:ab:c3:3d:61:82:71:39:20: 55:d9:09:90:ea:8d:8e:98:36:86:71:1e:4b:d6:ae:3c:6e:c9: d5:2c:da:cf:b1:38:8f:2b:38:ae:d4:7c:aa:49:62:7e:27:b4: 16:2a:8f:77:50:64:cf:5a:b8:b3:50:08:07:7d:66:00:bc:54: 39:81:86:18:e8:4c:76:6d:59:0d:ce:17:84:ff:95:70:db:28: 7a:a0:b4:7f:7c:03:a6:4c:f5:a8:da:0e:af:08:ba:2a:fd:46: 43:41:bb:1e:6a:16:36:1c:e0:0b:05:70:e5:34:de:56:0a:7f: 2a:88:e9:87:f6:03:4e:96:68:74:8b:1b:07:fa:28:a5:8c:64: f0:0b:2d:09:99:b7:f1:1c:2c:45:79:61:bb:70:65:53:54:91: e7:26:9c:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnR+linYX/C2iYOI6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3YTgtZDhlODFhMDRh YTdhMB4XDTI1MDUxMTE4MDIwN1oXDTI1MDUxMzE4MDAwMFowLzEtMCsGA1UEAxMk Y2I2NGMyZDItOWJmZS00MTMxLWE3ZWEtZTEzOGQzMzE0OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u6w4iqu/AV6gipkmX9gt02PxMJA5U2bc5ea k1poSMD8y+G0eqlFXiG6xkwhBjoUcDijL/TbXfx+YeWaw3BZN5fc/3E/EXyPYXCO MO/MDZASoBqLD2OkRZ2Cx1CS/RZZ+SjKm1Wi1zpGDY4XeKJXIG4IrdVTK68294Q+ EOvmX0pyA8fPKTLzp202KETzLmBJKNAb24pmghJ/mOkvG+4tLkFsac84kh3UbF7o a6Y0/NQC2/1Y2y6PTtrqTrkR31zbT7wTDpgxuDcweCs5x6daE7UuI46BCVhWqlcQ b1wy3ke8unEFGFbNfbGA3O9ijmOJ+WRTCXANlR+yTePtPdzTOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEFgbMWVzj/kk97QIUTnZx2CzqN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1 OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4MWEwNGFhN2EvNzA0NTk1YzMtNmQ5Mi00 ZmMxLWI3YTgtZDhlODFhMDRhYTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzA0NTk1YzMtNmQ5Mi00ZmMxLWI3 YTgtZDhlODFhMDRhYTdhLzcwNDU5NWMzLTZkOTItNGZjMS1iN2E4LWQ4ZTgxYTA0 YWE3YS5jcmwwHwYDVR0jBBgwFoAURVYIqU8+LjAtaqVcoujlUP1bBBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDQ1OTVjMy02ZDkyLTRmYzEtYjdhOC1kOGU4 MWEwNGFhN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBygVYLhJxsfIjncOf7naqk El6PFoaAR3kiAViteCzTGYPa4oNegRFIXJMZsLR4/+2SRRF6mgUN5jHrZMkI8fEi 6ezOsQiaYKhS23/6Ah9ECjJoJCeZjxMtxarI6bNPZ4Y41z8Mq8M9YYJxOSBV2QmQ 6o2OmDaGcR5L1q48bsnVLNrPsTiPKziu1HyqSWJ+J7QWKo93UGTPWrizUAgHfWYA vFQ5gYYY6Ex2bVkNzheE/5Vw2yh6oLR/fAOmTPWo2g6vCLoq/UZDQbseahY2HOAL BXDlNN5WCn8qiOmH9gNOlmh0ixsH+iiljGTwCy0JmbfxHCxFeWG7cGVTVJHnJpz7 -----END CERTIFICATE-----Generated at Mon May 12 05:16:14 2025 by rpki-client