$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft File: 3e9fb25a-438f-4e1d-a136-5c878d065c24.mft (raw, json) Hash identifier: LT5R7NTM/3Y2aHI+NhyL263XIdmDchbMrSaNfQM3Fd8= Subject key identifier: 0F:4B:0A:3C:2E:78:BC:4A:68:FF:FC:43:2A:D2:79:DA:1C:CD:E8:88 Authority key identifier: D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 Certificate issuer: /CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Certificate serial: 010D0C9F43285849C421A9F5ED04FC260EBCB440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft Manifest number: 010D0C9F432858488B7B09E7C4EF76CBED14D1D3 Signing time: Tue 06 May 2025 19:00:03 +0000 Manifest this update: Tue 06 May 2025 19:00:03 +0000 Manifest next update: Fri 09 May 2025 19:00:00 +0000 Files and hashes: 1: 3e9fb25a-438f-4e1d-a136-5c878d065c24.crl (hash: +veMOrlkq+ByYUo5IaYLu7/gj+ZjJ7GLPYLTamHe67o=) 2: 58dadb05-4845-3a41-9b2f-663a09e0cfff.roa (hash: aUdcTLc/uiXlJhR7wBMLRjReTwoDOtMaJWj6k+hef+s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:21:a9:f5:ed:04:fc:26:0e:bc:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9fb25a-438f-4e1d-a136-5c878d065c24 Validity Not Before: May 6 19:00:03 2025 GMT Not After : May 9 19:00:00 2025 GMT Subject: CN=cd89c42f-23b6-41d8-890a-f1b884e4fc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:74:a1:13:63:80:df:b1:3c:b1:b2:d9:dd: 77:a5:6f:b8:61:08:a8:9a:2f:b8:8c:38:d8:22:82: 46:b9:6b:ec:cb:35:70:7c:1a:2e:68:8d:63:58:0a: e4:d0:ab:7c:4c:44:33:62:77:36:9b:f8:5f:fc:4e: eb:73:05:df:5b:d2:3e:ae:a8:24:23:33:e7:c6:b2: 0d:1c:4e:db:b4:8c:9b:e9:6d:92:1e:c1:f3:c5:ab: 58:83:93:2d:3c:07:91:01:2d:75:b1:59:86:dc:9c: c0:b4:50:0e:37:48:36:9e:e4:af:6e:64:62:4f:1d: a3:52:bc:4c:c7:1f:d6:6f:be:20:39:07:de:3f:a0: 59:01:e0:eb:e7:f2:a1:c2:4b:05:78:50:1a:7e:9e: a9:92:9b:1f:22:7d:1a:49:ef:6d:3c:c1:01:b7:56: 7f:14:6c:ca:ac:87:16:71:50:3c:b4:67:53:b9:b5: fd:9b:39:49:42:df:a5:95:3b:97:71:8c:ac:5a:35: ee:3f:26:fd:fc:2b:66:8b:e9:07:5f:ff:ab:dd:25: 32:a0:e4:25:da:6c:06:9a:26:8b:fe:f5:79:c7:c2: bb:71:fc:39:9e:49:61:9f:d9:8b:4e:fa:7b:0b:ae: 0d:a9:60:05:b1:c4:a8:4b:0f:c6:97:72:53:b0:92: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:0A:3C:2E:78:BC:4A:68:FF:FC:43:2A:D2:79:DA:1C:CD:E8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24/3e9fb25a-438f-4e1d-a136-5c878d065c24.crl X509v3 Authority Key Identifier: keyid:D3:0E:76:B1:A3:15:98:01:FE:2F:9F:43:FC:51:43:0A:3A:FA:EA:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3e9fb25a-438f-4e1d-a136-5c878d065c24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9f:0a:9b:14:7c:7d:54:43:f9:50:b9:ed:7a:93:79:39:2e: 89:26:8f:11:14:61:40:32:f1:aa:9f:80:a0:38:14:de:01:2a: ed:41:97:79:8e:69:be:03:c4:f4:3f:1c:97:27:ca:65:51:32: 97:e9:97:16:b8:ec:66:b8:69:64:1f:e1:a3:b6:3b:ff:df:c4: 54:55:d7:b3:6c:47:29:15:56:22:fb:ec:c7:b5:9d:8b:83:37: 09:67:a8:0b:f1:0c:47:59:d7:dc:58:35:c9:00:08:ab:07:91: b2:23:d0:b7:de:01:4d:5b:ab:b0:bf:ab:a4:10:a4:47:a0:e7: 29:ef:e5:85:b0:66:e7:87:81:e3:4a:f3:2a:7a:15:bb:f5:e5: 27:eb:da:fd:68:ed:c4:75:c1:2d:72:8a:fc:ab:ae:57:06:dd: 2d:3d:89:77:b6:5a:3d:4b:5f:63:11:eb:6a:cd:a8:86:39:27: 13:3f:53:f1:06:b5:19:69:b2:34:9a:89:a0:11:e8:c6:dd:bf: 1a:c6:de:8c:5c:ca:0f:f8:41:a8:c3:5f:a8:f2:47:ff:ab:f1: 58:8c:f2:a8:7d:c0:1a:b4:f4:56:fe:89:c4:71:0b:fc:dd:b4: f1:1a:1d:e4:7d:1c:3d:d6:35:30:df:66:45:0e:4e:4f:ba:7a: b4:a5:13:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnEIan17QT8Jg68tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5ZmIyNWEtNDM4Zi00ZTFkLWExMzYtNWM4NzhkMDY1 YzI0MB4XDTI1MDUwNjE5MDAwM1oXDTI1MDUwOTE5MDAwMFowLzEtMCsGA1UEAxMk Y2Q4OWM0MmYtMjNiNi00MWQ4LTg5MGEtZjFiODg0ZTRmYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttt0oRNjgN+xPLGy2d13pW+4YQiomi+4jDjY IoJGuWvsyzVwfBouaI1jWArk0Kt8TEQzYnc2m/hf/E7rcwXfW9I+rqgkIzPnxrIN HE7btIyb6W2SHsHzxatYg5MtPAeRAS11sVmG3JzAtFAON0g2nuSvbmRiTx2jUrxM xx/Wb74gOQfeP6BZAeDr5/KhwksFeFAafp6pkpsfIn0aSe9tPMEBt1Z/FGzKrIcW cVA8tGdTubX9mzlJQt+llTuXcYysWjXuPyb9/Ctmi+kHX/+r3SUyoOQl2mwGmiaL /vV5x8K7cfw5nklhn9mLTvp7C64NqWAFscSoSw/Gl3JTsJJhbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA9LCjwueLxKaP/8QyrSedoczeiIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zZTlm YjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3OGQwNjVjMjQvM2U5ZmIyNWEtNDM4Zi00 ZTFkLWExMzYtNWM4NzhkMDY1YzI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2U5ZmIyNWEtNDM4Zi00ZTFkLWEx MzYtNWM4NzhkMDY1YzI0LzNlOWZiMjVhLTQzOGYtNGUxZC1hMTM2LTVjODc4ZDA2 NWMyNC5jcmwwHwYDVR0jBBgwFoAU0w52saMVmAH+L59D/FFDCjr66gQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zZTlmYjI1YS00MzhmLTRlMWQtYTEzNi01Yzg3 OGQwNjVjMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgnwqbFHx9VEP5ULntepN5 OS6JJo8RFGFAMvGqn4CgOBTeASrtQZd5jmm+A8T0PxyXJ8plUTKX6ZcWuOxmuGlk H+Gjtjv/38RUVdezbEcpFVYi++zHtZ2LgzcJZ6gL8QxHWdfcWDXJAAirB5GyI9C3 3gFNW6uwv6ukEKRHoOcp7+WFsGbnh4HjSvMqehW79eUn69r9aO3EdcEtcor8q65X Bt0tPYl3tlo9S19jEetqzaiGOScTP1PxBrUZabI0momgEejG3b8axt6MXMoP+EGo w1+o8kf/q/FYjPKofcAatPRW/onEcQv83bTxGh3kfRw91jUw32ZFDk5Punq0pRNj -----END CERTIFICATE-----Generated at Tue May 6 22:27:04 2025 by rpki-client