$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft File: f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft (raw, json) Hash identifier: 6Cgs9/vYRdehxbgWXIORsVQJdfs5yHhBULR+NaAZYRo= Subject key identifier: 6C:4A:02:3A:7F:DD:C6:B5:96:C3:A9:59:C6:FD:03:41:5C:1D:EF:02 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F43285849D35EB05DB1FCDC7568BDF080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft Manifest number: 010D0C9F43285849CB146E7AB4A800E43DFE4204 Signing time: Mon 12 May 2025 06:00:08 +0000 Manifest this update: Mon 12 May 2025 06:00:08 +0000 Manifest next update: Wed 14 May 2025 06:00:00 +0000 Files and hashes: 1: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (hash: myVURPqdt9lxfgyFdziSBNvx/+36i/+d7lNJeqAvTbY=) 2: f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl (hash: nlvsLL3yE+ScESvKN8N9EGwmlPwHKuRq+BqsUWqD/YA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:5e:b0:5d:b1:fc:dc:75:68:bd:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: May 12 06:00:08 2025 GMT Not After : May 14 06:00:00 2025 GMT Subject: CN=71b7c082-1952-42a4-b728-a3d88f4be09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:87:73:5e:00:0c:9a:c5:4b:d3:f1:26:be: 29:8d:5a:8d:7b:7c:c3:3c:95:1d:8e:77:79:16:fd: 0d:93:74:6e:56:76:fe:96:d1:c8:51:6c:95:45:32: a4:c6:7e:67:1c:ec:0f:a8:38:a0:77:4f:e0:0b:1c: 80:f2:38:86:5a:dd:03:9f:9d:fb:bf:15:4d:dc:32: 49:a4:02:7e:1c:1e:43:a9:0a:ee:5f:c8:f7:1c:21: c1:67:1b:6a:92:e5:46:04:e9:50:62:d5:6c:21:ed: b8:73:ea:70:80:92:ab:02:39:ae:4f:08:a6:e5:da: 86:e3:05:e2:f0:35:6a:92:1a:f7:be:9d:b5:b0:42: a4:7c:23:92:24:a8:0a:2e:90:f7:96:bc:d5:9c:c3: 2f:f6:dc:76:bd:65:1e:c7:d1:9d:0a:92:1f:ce:1a: f8:d0:3d:2c:4e:b8:13:73:ac:f8:b2:e0:0c:1b:bd: 0b:fc:bf:27:93:3d:6f:0b:3f:83:87:c9:e0:e9:38: 42:4c:5e:55:a5:bf:1c:ff:a4:df:71:1c:03:da:fa: 91:2a:07:4e:1f:36:ee:c4:6b:a6:3a:ad:9c:e0:73: f5:f6:9d:e6:2a:f8:59:dc:18:79:9f:25:db:54:52: 5f:29:e8:0b:4c:72:c9:c3:25:6e:da:ea:e0:bc:d0: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4A:02:3A:7F:DD:C6:B5:96:C3:A9:59:C6:FD:03:41:5C:1D:EF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b7:3e:33:1e:14:0c:a3:e3:e7:3d:3e:d7:79:c5:12:2f:18: ed:19:0b:38:89:37:b3:a5:89:84:61:76:0c:2d:32:d9:dd:35: 25:ef:f6:6a:a6:98:86:cb:3c:23:2e:14:7f:53:5c:2e:9f:29: b9:16:5b:8f:1b:4b:41:83:37:13:58:2c:51:ea:5e:17:5b:68: 8a:f6:49:94:93:14:70:72:fc:14:e3:af:ab:15:17:ee:f1:57: 1f:ed:0f:0c:02:8c:59:1c:29:95:4a:c2:d8:67:9f:02:97:18: fa:62:9a:05:6f:48:5c:9b:a2:30:02:be:8d:4c:4e:ed:78:13: 41:84:55:d2:b8:70:a3:60:64:54:ea:25:3a:d1:ca:8b:4e:e1: 9e:9e:30:22:44:09:55:17:cb:37:8a:45:98:73:8d:bc:b9:34: ce:d0:22:be:eb:46:a5:5d:b1:13:9c:9f:0d:21:3c:67:88:d2: 64:66:2b:7a:1c:58:52:1f:fd:1a:e0:bc:01:eb:85:64:a6:de: 69:e0:17:53:11:3f:39:14:a8:85:68:c2:a9:2b:e1:17:1b:26: c5:37:c0:97:a8:5c:77:4b:ab:24:17:08:f2:a8:4a:47:30:a0: ed:c3:61:1d:32:87:d6:f1:43:85:b8:4a:35:57:d2:01:ae:92: 91:c0:df:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnTXrBdsfzcdWi98IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI1MDUxMjA2MDAwOFoXDTI1MDUxNDA2MDAwMFowLzEtMCsGA1UEAxMk NzFiN2MwODItMTk1Mi00MmE0LWI3MjgtYTNkODhmNGJlMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif2Hc14ADJrFS9PxJr4pjVqNe3zDPJUdjnd5 Fv0Nk3RuVnb+ltHIUWyVRTKkxn5nHOwPqDigd0/gCxyA8jiGWt0Dn537vxVN3DJJ pAJ+HB5DqQruX8j3HCHBZxtqkuVGBOlQYtVsIe24c+pwgJKrAjmuTwim5dqG4wXi 8DVqkhr3vp21sEKkfCOSJKgKLpD3lrzVnMMv9tx2vWUex9GdCpIfzhr40D0sTrgT c6z4suAMG70L/L8nkz1vCz+Dh8ng6ThCTF5Vpb8c/6TfcRwD2vqRKgdOHzbuxGum Oq2c4HP19p3mKvhZ3Bh5nyXbVFJfKegLTHLJwyVu2urgvNA3OQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGxKAjp/3ca1lsOpWcb9A0FcHe8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvZjcxZDI1MmItOWEwZS00 NDkzLWJlOTMtZTZhOGUyZmZmZWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBctz4zHhQMo+PnPT7XecUS LxjtGQs4iTezpYmEYXYMLTLZ3TUl7/ZqppiGyzwjLhR/U1wunym5FluPG0tBgzcT WCxR6l4XW2iK9kmUkxRwcvwU46+rFRfu8Vcf7Q8MAoxZHCmVSsLYZ58Clxj6YpoF b0hcm6IwAr6NTE7teBNBhFXSuHCjYGRU6iU60cqLTuGenjAiRAlVF8s3ikWYc428 uTTO0CK+60alXbETnJ8NITxniNJkZit6HFhSH/0a4LwB64Vkpt5p4BdTET85FKiF aMKpK+EXGybFN8CXqFx3S6skFwjyqEpHMKDtw2EdMofW8UOFuEo1V9IBrpKRwN8F -----END CERTIFICATE-----Generated at Tue May 13 06:46:32 2025 by rpki-client