$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft File: deaf388e-6941-424e-9f96-abe06598e29c.mft (raw, json) Hash identifier: FfVKo1A2KzsJgTG+QN1iT3CYjB1rqESsBjSQEHO5fHE= Subject key identifier: E3:32:BD:CD:34:37:03:72:4A:08:C5:69:29:D9:20:7F:2B:8F:6D:CE Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 Certificate issuer: /CN=deaf388e-6941-424e-9f96-abe06598e29c Certificate serial: 010D0C9F43285849D8F40491FEFD0ADB3BDF9800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft Manifest number: 010D0C9F43285849D3619EF4A9C678720328A884 Signing time: Wed 14 May 2025 06:00:03 +0000 Manifest this update: Wed 14 May 2025 06:00:03 +0000 Manifest next update: Sat 17 May 2025 06:00:00 +0000 Files and hashes: 1: 8b0ed026-e0d3-3184-87c2-e9755bc80733.roa (hash: cVusFarJ5gJIUA+YzhmhAXfcf8HhwXHG7f+QPRZj0As=) 2: deaf388e-6941-424e-9f96-abe06598e29c.crl (hash: DY9r3AONcHynVDC1JA1zp4pZcWQDrDlTZKz69dlA89o=) 3: e497d3e9-a9d1-3199-96be-8395d6cc959b.roa (hash: Lnx3Fv+KAHkAwJGZwwwky18aW5unB82Rm7vkqaZcyaw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:f4:04:91:fe:fd:0a:db:3b:df:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c Validity Not Before: May 14 06:00:03 2025 GMT Not After : May 17 06:00:00 2025 GMT Subject: CN=4038cd9f-6090-4843-a836-a5c93761a815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:ea:5c:1f:0d:c3:ce:47:a2:e4:f9:ea:f9: 45:8f:06:d0:a9:9f:c1:7f:8d:0d:d2:27:1a:31:39: f6:6a:fa:c4:97:37:da:76:19:4c:f9:3f:71:da:09: 32:04:71:80:1c:d7:ea:15:d1:57:73:e5:ff:5e:1e: c7:67:78:e4:30:3d:48:6e:58:f2:5f:d2:66:bf:34: 62:79:f1:44:0e:f2:40:71:54:b3:17:fb:63:d5:ec: 9b:aa:95:06:21:54:04:5c:d4:09:99:c7:97:da:2c: 36:1b:47:56:80:2b:57:d1:87:e9:da:5f:1e:35:b3: 11:ff:8d:d8:62:9f:d2:86:2c:d6:5b:db:37:94:1b: a5:ec:1d:db:a4:4a:48:de:69:ee:1e:6a:44:0c:85: a9:9e:c1:6b:20:e6:50:18:5e:ea:4c:99:9b:19:96: 5d:01:68:7d:37:75:49:8b:32:60:c9:d3:ce:c9:56: 93:d9:cb:e5:0e:cc:2e:cd:f2:1d:63:ea:ca:9b:ca: 27:d8:63:90:a4:c1:c2:92:92:1a:dc:0a:42:d8:d7: 09:cf:17:a1:3f:13:5b:48:8b:24:1f:f0:ac:99:01: d1:3c:0f:17:fe:3f:fb:32:bc:0b:65:84:84:db:71: de:48:e0:b9:02:31:14:e7:71:b3:fa:21:18:ff:17: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:32:BD:CD:34:37:03:72:4A:08:C5:69:29:D9:20:7F:2B:8F:6D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl X509v3 Authority Key Identifier: keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:6b:f9:0a:5b:26:d6:26:8d:76:89:a5:45:89:49:d6:b2:12: 0d:6a:13:a9:a4:bd:78:2d:63:97:09:43:1b:19:5d:94:7e:ea: b3:41:e3:1d:c6:97:24:eb:f4:ca:e0:5d:5d:23:1d:18:66:1c: 5e:ff:8f:a6:c5:bf:6e:ac:f6:91:98:02:8f:b9:fb:f6:b6:6a: 09:eb:a5:24:08:2d:4c:d8:7d:41:a8:73:c7:41:ea:e7:8b:0c: b4:ad:cc:35:24:47:3d:cd:20:33:8a:7e:d7:83:68:9f:00:7b: 84:af:15:a2:7c:46:43:ba:2a:6e:9b:19:7c:dc:b6:1e:a4:56: 98:5f:65:b5:0b:67:9c:bd:49:6b:45:4b:2c:4f:49:05:bd:b6: 03:bb:03:c6:0f:2c:f8:30:71:dc:b5:89:a2:e9:22:56:bd:04: 66:93:f4:a3:bf:50:17:fa:80:6f:14:ba:41:2f:73:d4:07:d9: 12:08:95:04:b7:9b:ea:eb:7c:89:84:1d:23:03:80:f0:10:e9: c5:30:53:0d:59:2e:6d:7e:3e:c3:ea:10:4f:98:17:e6:10:ab: 73:48:6e:78:fc:0e:85:38:cc:f8:34:e9:04:62:23:e9:e5:c1: 3d:9d:ec:d5:01:75:0f:bd:d6:6a:b4:46:bd:e0:89:d0:4a:55: 44:f5:9b:68 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnY9ASR/v0K2zvfmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVhZjM4OGUtNjk0MS00MjRlLTlmOTYtYWJlMDY1OThl MjljMB4XDTI1MDUxNDA2MDAwM1oXDTI1MDUxNzA2MDAwMFowLzEtMCsGA1UEAxMk NDAzOGNkOWYtNjA5MC00ODQzLWE4MzYtYTVjOTM3NjFhODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq/qXB8Nw85HouT56vlFjwbQqZ/Bf40N0ica MTn2avrElzfadhlM+T9x2gkyBHGAHNfqFdFXc+X/Xh7HZ3jkMD1IbljyX9JmvzRi efFEDvJAcVSzF/tj1eybqpUGIVQEXNQJmceX2iw2G0dWgCtX0Yfp2l8eNbMR/43Y Yp/ShizWW9s3lBul7B3bpEpI3mnuHmpEDIWpnsFrIOZQGF7qTJmbGZZdAWh9N3VJ izJgydPOyVaT2cvlDswuzfIdY+rKm8on2GOQpMHCkpIa3ApC2NcJzxehPxNbSIsk H/CsmQHRPA8X/j/7MrwLZYSE23HeSOC5AjEU53Gz+iEY/xedQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOMyvc00NwNySgjFaSnZIH8rj23OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFm Mzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUwNjU5OGUyOWMvZGVhZjM4OGUtNjk0MS00 MjRlLTlmOTYtYWJlMDY1OThlMjljLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVhZjM4OGUtNjk0MS00MjRlLTlm OTYtYWJlMDY1OThlMjljL2RlYWYzODhlLTY5NDEtNDI0ZS05Zjk2LWFiZTA2NTk4 ZTI5Yy5jcmwwHwYDVR0jBBgwFoAU08yKMqfd0vAFIgVggYqZufYSxWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWFmMzg4ZS02OTQxLTQyNGUtOWY5Ni1hYmUw NjU5OGUyOWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAba/kKWybWJo12iaVFiUnW shINahOppL14LWOXCUMbGV2UfuqzQeMdxpck6/TK4F1dIx0YZhxe/4+mxb9urPaR mAKPufv2tmoJ66UkCC1M2H1BqHPHQerniwy0rcw1JEc9zSAzin7Xg2ifAHuErxWi fEZDuipumxl83LYepFaYX2W1C2ecvUlrRUssT0kFvbYDuwPGDyz4MHHctYmi6SJW vQRmk/Sjv1AX+oBvFLpBL3PUB9kSCJUEt5vq63yJhB0jA4DwEOnFMFMNWS5tfj7D 6hBPmBfmEKtzSG54/A6FOMz4NOkEYiPp5cE9nezVAXUPvdZqtEa94InQSlVE9Zto -----END CERTIFICATE-----Generated at Wed May 14 10:20:12 2025 by rpki-client