$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft File: 914c4a10-97c5-4f06-914d-13485f7f3e12.mft (raw, json) Hash identifier: KTKHUzeg5PbKYqVRPQVFIur+iG65m/ROwHgsdYGndBg= Subject key identifier: 10:4F:81:B9:C3:C2:83:C3:77:E8:5A:5B:4B:B1:4E:33:9E:56:AA:F6 Authority key identifier: DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 Certificate issuer: /CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Certificate serial: 010D0C9F43285849C3C856C5F238B9C1F608B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft Manifest number: 010D0C9F4328584913E940F0ADBFFD1622EE53BF Signing time: Tue 06 May 2025 16:00:03 +0000 Manifest this update: Tue 06 May 2025 16:00:03 +0000 Manifest next update: Thu 08 May 2025 16:00:00 +0000 Files and hashes: 1: 5e96c0cf-3077-3854-81df-de74836c1b82.roa (hash: mHhXD5Bgxrj0SCE627Ef0V8irrKRofKGhyUeLsac+fQ=) 2: 914c4a10-97c5-4f06-914d-13485f7f3e12.crl (hash: QqaDgIxvS8B048eFqsqC6lYn1dK2/n9Xp1EVVmrds50=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:c8:56:c5:f2:38:b9:c1:f6:08:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Validity Not Before: May 6 16:00:03 2025 GMT Not After : May 8 16:00:00 2025 GMT Subject: CN=f2500b63-a2f9-485c-a5da-9c9da6c4ac78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:aa:c5:02:98:c7:78:0c:e5:7f:e9:c1:ce: 90:89:f3:67:1c:b3:ae:e4:a8:7f:4e:1f:c7:91:89: 84:7c:a4:6e:8a:de:fb:d4:b3:8c:b3:71:54:09:23: 85:a9:13:29:d9:b3:e4:f3:5e:a3:d9:47:15:7e:9c: 96:72:ff:22:48:67:13:b6:47:1d:01:f6:09:8d:69: 50:5e:27:a6:6a:a0:08:d8:fa:51:02:64:a3:65:c6: 49:f0:4e:85:32:62:8e:c0:af:fa:a1:cc:df:03:8a: 09:06:b1:a9:ea:01:d2:24:09:78:b5:4f:bf:66:2c: 0c:57:a7:64:c5:59:be:66:d5:a5:c5:2b:87:4f:05: 2c:ff:25:a8:59:5b:3c:69:d1:9b:23:1a:90:7e:ca: dc:d3:77:1b:69:ca:23:4d:0c:11:05:2d:07:0d:2a: 15:88:b7:da:db:ac:69:e3:cc:92:e9:40:9d:75:4d: e6:7c:e2:22:42:61:92:b2:bc:e9:26:68:c5:96:40: 4e:18:d8:03:82:2b:07:4f:9c:aa:d2:38:08:53:6a: 52:8e:15:75:e7:85:12:f7:ba:36:0f:19:78:81:bc: c7:fb:15:e1:88:cb:25:8b:17:3e:3b:86:07:b1:ca: b4:d5:1f:72:24:49:f7:0f:8c:8a:b3:c2:63:7a:ce: f2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4F:81:B9:C3:C2:83:C3:77:E8:5A:5B:4B:B1:4E:33:9E:56:AA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl X509v3 Authority Key Identifier: keyid:DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:04:39:25:65:fc:be:c7:fd:9a:fe:59:8c:c3:9a:3f:30:ad: 4a:c9:a7:97:61:ca:e3:89:3d:73:37:c9:a4:52:d2:bd:8b:93: b8:6e:6e:05:d8:aa:c7:61:a2:2d:df:58:9f:4c:85:4f:22:21: c7:3c:b5:bf:5d:d2:d4:bd:7a:1f:17:e4:25:61:67:6d:28:0c: fe:f2:bd:a9:c3:af:93:b4:84:56:f2:80:2b:5a:93:db:3f:4c: bc:7f:86:5f:12:bf:3d:e2:55:3f:41:fe:33:73:c5:c7:ee:f8: df:da:2d:cb:23:ea:d5:9d:ab:83:9d:50:31:05:f2:24:0d:4e: f6:58:1d:13:f9:1e:2b:b4:80:79:2e:14:28:af:55:91:de:d1: 76:dc:a6:61:91:f3:57:e5:eb:3f:cd:74:60:fa:d7:28:c0:91: 22:33:44:1d:3a:38:67:55:00:4d:85:ca:95:3f:36:bd:76:3b: 9e:3a:21:27:63:1b:48:aa:54:d8:1c:07:37:62:94:09:c1:43: b4:7c:4b:1d:67:7b:04:10:2d:82:1f:22:e5:58:46:3c:05:f1: 51:4f:5b:16:65:7d:d2:a5:8b:4f:75:dc:36:0e:8d:3c:cf:9e: 6e:51:e1:c0:2f:8b:39:09:16:de:f8:d6:dc:81:44:d8:85:d6: db:60:7c:d7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnDyFbF8ji5wfYItAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0YzRhMTAtOTdjNS00ZjA2LTkxNGQtMTM0ODVmN2Yz ZTEyMB4XDTI1MDUwNjE2MDAwM1oXDTI1MDUwODE2MDAwMFowLzEtMCsGA1UEAxMk ZjI1MDBiNjMtYTJmOS00ODVjLWE1ZGEtOWM5ZGE2YzRhYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpmqxQKYx3gM5X/pwc6QifNnHLOu5Kh/Th/H kYmEfKRuit771LOMs3FUCSOFqRMp2bPk816j2UcVfpyWcv8iSGcTtkcdAfYJjWlQ XiemaqAI2PpRAmSjZcZJ8E6FMmKOwK/6oczfA4oJBrGp6gHSJAl4tU+/ZiwMV6dk xVm+ZtWlxSuHTwUs/yWoWVs8adGbIxqQfsrc03cbacojTQwRBS0HDSoViLfa26xp 48yS6UCddU3mfOIiQmGSsrzpJmjFlkBOGNgDgisHT5yq0jgIU2pSjhV154US97o2 Dxl4gbzH+xXhiMslixc+O4YHscq01R9yJEn3D4yKs8Jjes7ygQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBBPgbnDwoPDd+haW0uxTjOeVqr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MTRj NGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4NWY3ZjNlMTIvOTE0YzRhMTAtOTdjNS00 ZjA2LTkxNGQtMTM0ODVmN2YzZTEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTE0YzRhMTAtOTdjNS00ZjA2LTkx NGQtMTM0ODVmN2YzZTEyLzkxNGM0YTEwLTk3YzUtNGYwNi05MTRkLTEzNDg1Zjdm M2UxMi5jcmwwHwYDVR0jBBgwFoAU27iy9N+fLp0UCDfueAqiajEKloMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MTRjNGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4 NWY3ZjNlMTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0BDklZfy+x/2a/lmMw5o/ MK1KyaeXYcrjiT1zN8mkUtK9i5O4bm4F2KrHYaIt31ifTIVPIiHHPLW/XdLUvXof F+QlYWdtKAz+8r2pw6+TtIRW8oArWpPbP0y8f4ZfEr894lU/Qf4zc8XH7vjf2i3L I+rVnauDnVAxBfIkDU72WB0T+R4rtIB5LhQor1WR3tF23KZhkfNX5es/zXRg+tco wJEiM0QdOjhnVQBNhcqVPza9djueOiEnYxtIqlTYHAc3YpQJwUO0fEsdZ3sEEC2C HyLlWEY8BfFRT1sWZX3SpYtPddw2Do08z55uUeHAL4s5CRbe+NbcgUTYhdbbYHzX -----END CERTIFICATE-----Generated at Wed May 7 10:04:44 2025 by rpki-client