$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft File: b676c353-1e86-47cb-b6c0-e0f33199eecd.mft (raw, json) Hash identifier: CKD0qQWNE9TAAKVLyFyJ2gSEwCVPICq8g5beLTqt/wg= Subject key identifier: 89:EB:21:DB:C3:D0:1F:9C:E5:D5:A2:EA:77:D6:95:F6:8A:13:4B:11 Authority key identifier: 3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0 Certificate issuer: /CN=b676c353-1e86-47cb-b6c0-e0f33199eecd Certificate serial: 010D0C9F43285849CC63EFE30EDFA1844F198780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft Manifest number: 010D0C9F432858487AA41A25A0697809C6457A7C Signing time: Fri 09 May 2025 18:00:03 +0000 Manifest this update: Fri 09 May 2025 18:00:03 +0000 Manifest next update: Sun 11 May 2025 18:00:00 +0000 Files and hashes: 1: b676c353-1e86-47cb-b6c0-e0f33199eecd.crl (hash: olh7Iv+RA9QIIDjz8IVi9koaoKpcfxCSrhaIiVFA2q8=) 2: d64d8a87-4817-352c-937d-5edb690187fd.roa (hash: x7tRisQFvBqAaJivJtCkONfjlCHUCCqaRHs1Zrm+I5Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:63:ef:e3:0e:df:a1:84:4f:19:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b676c353-1e86-47cb-b6c0-e0f33199eecd Validity Not Before: May 9 18:00:03 2025 GMT Not After : May 11 18:00:00 2025 GMT Subject: CN=3e1e20e3-8df9-42a0-82f6-084091ba2fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:bc:09:38:ae:42:d7:72:ff:04:67:35:b8: 78:2b:33:21:10:56:a3:0e:79:0e:80:be:82:18:11: ce:13:ad:e9:86:51:35:f4:a7:1c:e7:c8:31:4f:0a: a5:f5:76:2e:d3:e6:11:a1:69:25:90:ba:e5:29:39: 34:bb:31:05:29:d7:0d:f7:2a:2d:c4:a5:06:0f:c2: ce:49:9a:17:3e:b6:c1:f7:79:9d:5e:8f:f7:60:a9: 86:79:05:ba:5b:4c:41:7a:38:35:26:c7:b9:81:68: 37:e4:7c:bd:7f:3b:4f:4d:7c:5c:fd:9c:f7:c3:ba: ef:c1:52:13:61:85:eb:ea:f7:77:5f:ff:af:3b:26: 75:04:58:da:9b:c9:53:79:58:3d:53:8b:ae:50:00: ec:4a:8a:03:73:bc:6b:49:1a:7c:e6:a1:59:32:f9: ee:63:a2:d7:cf:dc:54:78:e6:ad:0d:90:dd:9d:41: b9:98:a2:f2:5d:8c:1d:5d:f5:bb:6d:72:df:ca:58: 0f:ba:5e:ba:89:98:4e:8c:d6:3b:6a:3f:4d:f9:86: 3e:1d:f0:ed:aa:47:32:a9:43:99:80:cd:1d:97:1a: 0f:b1:ae:2d:8f:78:c1:bc:8c:43:f6:c1:dd:6f:2a: a0:2f:47:f8:3f:09:27:ed:71:94:75:aa:02:5f:20: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EB:21:DB:C3:D0:1F:9C:E5:D5:A2:EA:77:D6:95:F6:8A:13:4B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd/b676c353-1e86-47cb-b6c0-e0f33199eecd.crl X509v3 Authority Key Identifier: keyid:3C:EC:8E:E8:0F:4F:67:74:C4:50:8D:33:29:F0:3F:88:D4:E8:2F:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b676c353-1e86-47cb-b6c0-e0f33199eecd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:79:f3:04:66:01:d6:ff:0b:f8:be:e4:10:60:cd:d8:cb:70: 60:bc:ab:5a:e9:40:0a:5d:ea:70:d0:c6:1e:64:33:ab:cf:77: 25:91:cd:b1:59:cd:ff:b5:5f:dc:5b:0a:db:fe:7a:e4:ce:e9: 2b:d9:19:ba:09:f2:26:82:46:5e:31:1c:82:8f:a5:df:2c:85: 4b:21:70:80:36:f7:ca:eb:4f:25:43:51:2e:b5:06:ad:70:17: 3e:e8:59:4b:78:94:3a:40:68:11:cb:c7:fb:b7:b7:80:20:66: 74:80:af:82:00:e9:b7:74:63:66:3b:d0:3d:84:ca:d7:e9:c0: 7a:76:1b:28:af:d2:c1:13:ce:e4:a8:e3:89:5e:3c:e2:a5:bf: 33:12:9d:bd:17:5d:80:4c:f3:80:70:bf:ce:1e:8a:c9:e3:65: 86:c6:d3:dd:6e:ec:38:3d:6d:a5:d2:7c:2d:19:0f:94:ea:5f: 38:64:22:8d:fa:4f:0d:d4:30:2f:6f:11:e7:76:d2:ae:b9:a3: 8f:80:f6:30:2c:0e:96:7d:8a:38:ce:08:37:f5:cb:4a:5b:fd: 36:8d:d2:21:1c:a9:46:21:da:a2:e3:e3:b7:d9:4d:a4:41:ba: 32:51:40:6a:e4:4e:26:a6:d3:34:23:97:f7:6f:3b:f4:12:54: 24:06:be:62 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMY+/jDt+hhE8Zh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY3NmMzNTMtMWU4Ni00N2NiLWI2YzAtZTBmMzMxOTll ZWNkMB4XDTI1MDUwOTE4MDAwM1oXDTI1MDUxMTE4MDAwMFowLzEtMCsGA1UEAxMk M2UxZTIwZTMtOGRmOS00MmEwLTgyZjYtMDg0MDkxYmEyZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsO8CTiuQtdy/wRnNbh4KzMhEFajDnkOgL6C GBHOE63phlE19Kcc58gxTwql9XYu0+YRoWklkLrlKTk0uzEFKdcN9yotxKUGD8LO SZoXPrbB93mdXo/3YKmGeQW6W0xBejg1Jse5gWg35Hy9fztPTXxc/Zz3w7rvwVIT YYXr6vd3X/+vOyZ1BFjam8lTeVg9U4uuUADsSooDc7xrSRp85qFZMvnuY6LXz9xU eOatDZDdnUG5mKLyXYwdXfW7bXLfylgPul66iZhOjNY7aj9N+YY+HfDtqkcyqUOZ gM0dlxoPsa4tj3jBvIxD9sHdbyqgL0f4Pwkn7XGUdaoCXyASIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFInrIdvD0B+c5dWi6nfWlfaKE0sRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjc2 YzM1My0xZTg2LTQ3Y2ItYjZjMC1lMGYzMzE5OWVlY2QvYjY3NmMzNTMtMWU4Ni00 N2NiLWI2YzAtZTBmMzMxOTllZWNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY3NmMzNTMtMWU4Ni00N2NiLWI2 YzAtZTBmMzMxOTllZWNkL2I2NzZjMzUzLTFlODYtNDdjYi1iNmMwLWUwZjMzMTk5 ZWVjZC5jcmwwHwYDVR0jBBgwFoAUPOyO6A9PZ3TEUI0zKfA/iNToL/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjc2YzM1My0xZTg2LTQ3Y2ItYjZjMC1lMGYz MzE5OWVlY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6efMEZgHW/wv4vuQQYM3Y y3BgvKta6UAKXepw0MYeZDOrz3clkc2xWc3/tV/cWwrb/nrkzukr2Rm6CfImgkZe MRyCj6XfLIVLIXCANvfK608lQ1EutQatcBc+6FlLeJQ6QGgRy8f7t7eAIGZ0gK+C AOm3dGNmO9A9hMrX6cB6dhsor9LBE87kqOOJXjzipb8zEp29F12ATPOAcL/OHorJ 42WGxtPdbuw4PW2l0nwtGQ+U6l84ZCKN+k8N1DAvbxHndtKuuaOPgPYwLA6WfYo4 zgg39ctKW/02jdIhHKlGIdqi4+O32U2kQboyUUBq5E4mptM0I5f3bzv0ElQkBr5i -----END CERTIFICATE-----Generated at Sat May 10 06:53:32 2025 by rpki-client