$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft File: cbfbd197-84de-44e6-b527-b42dddca269d.mft (raw, json) Hash identifier: X86BaYZjw4uaytSI46HiCnBlTwbDdmkcy8ct2mNbOmA= Subject key identifier: 88:66:2E:6F:AB:91:6F:87:A5:DF:52:FA:B0:51:98:7E:AD:51:4E:44 Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED Certificate issuer: /CN=cbfbd197-84de-44e6-b527-b42dddca269d Certificate serial: 010D0C9F43285849CC0AA9741F96EAF5FFB8FDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft Manifest number: 010D0C9F432858487A2EF97910AC9452A4C2ADFC Signing time: Fri 09 May 2025 15:00:09 +0000 Manifest this update: Fri 09 May 2025 15:00:09 +0000 Manifest next update: Sun 11 May 2025 15:00:00 +0000 Files and hashes: 1: cbfbd197-84de-44e6-b527-b42dddca269d.crl (hash: 6SAp39fCFwcLJTdNZV7xzd4gs6x4XU9Ny+79Vn7rLG0=) 2: f842fac7-cd73-3534-92f5-b9959d9393b4.roa (hash: sPXWHFHfqCJ+GMzOSkY+uq8cwfsZqJNkixk50QqsvtY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:0a:a9:74:1f:96:ea:f5:ff:b8:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d Validity Not Before: May 9 15:00:09 2025 GMT Not After : May 11 15:00:00 2025 GMT Subject: CN=ad42acd5-36db-4a9b-bfbc-44c4c4ba5e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:13:25:5c:7b:49:53:66:e5:16:99:77:f5:4b: 53:36:59:fd:b7:70:50:d7:99:fa:3a:26:ca:f9:a6: 2a:26:e7:97:ab:19:93:aa:bf:aa:0a:2b:79:de:ab: b5:b5:96:e1:e8:94:8d:90:3a:41:85:c3:4f:7b:e8: 4c:56:f7:ac:9a:f3:f4:b3:01:3e:d5:21:c0:0a:dd: e6:54:95:2f:8e:35:97:9b:2d:b9:0a:e6:76:26:87: 33:f2:f2:c3:5a:07:1a:16:d6:c2:90:cf:11:06:4c: 8a:48:6a:74:35:6c:ff:96:f8:c7:ad:e4:13:60:c5: 6e:87:c8:3a:a2:c3:3e:17:aa:b3:fb:d9:1b:b1:75: 91:80:13:d7:f0:18:90:14:b1:33:1b:73:6f:e2:db: 69:52:44:3a:49:00:f0:29:00:e7:c7:3a:75:db:60: 5e:c7:fa:24:ac:39:b2:af:bb:40:2d:b5:0f:80:91: 1a:5c:30:30:49:76:9e:03:ce:44:89:ea:29:c6:53: 32:55:62:61:65:4b:af:3a:5a:c3:3e:62:ed:8e:3a: 70:7e:fb:04:02:ab:7e:01:19:87:28:49:a4:bc:ed: e9:25:cd:f0:52:cd:a7:c6:1d:14:7a:e8:b5:17:c6: 80:97:62:7c:61:cc:af:b2:4e:f6:25:4c:24:ad:18: 1f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:2E:6F:AB:91:6F:87:A5:DF:52:FA:B0:51:98:7E:AD:51:4E:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl X509v3 Authority Key Identifier: keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:fa:82:60:10:bf:f1:5b:6f:77:bc:5d:f0:59:bd:d1:f3:4c: 7b:4e:f1:a4:d2:bf:fe:cd:b5:17:5e:db:10:3f:5a:83:d7:83: 9c:dd:77:a8:41:5f:d7:17:31:74:56:92:71:d3:dd:24:de:c7: 2a:9a:68:73:dd:7a:5f:fb:fa:3d:21:4e:00:7a:ac:e0:db:57: 4f:13:64:56:c4:bb:79:35:da:85:b4:65:5f:61:a9:ba:24:7c: d1:b8:36:aa:10:b5:a3:2d:b7:a6:76:4e:14:26:ad:c6:4d:03: 91:3e:be:04:44:fc:a5:95:47:47:80:29:2b:7d:78:09:c9:4f: 09:40:65:8d:25:14:a6:cb:9c:d8:c3:92:36:d1:17:7e:c6:3a: cf:24:8d:ed:0e:b9:21:19:df:5a:c9:9c:64:33:4e:79:5b:a6: fe:61:80:ee:d5:ff:fe:4a:d8:82:b0:1a:b3:31:d1:1b:21:0d: fe:39:38:dc:d0:1f:c0:1c:0f:49:93:7e:6e:b9:79:20:e0:a4: 98:0c:ad:8e:26:55:49:5f:4b:c9:78:6e:6b:83:fb:77:0b:43: 12:ef:47:cf:d1:ad:1f:25:57:30:74:90:30:c1:ef:f8:64:be: aa:d3:1e:b9:b4:fb:e6:89:a1:9a:4a:0a:e9:8f:10:a3:7d:f7: 6a:54:49:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnMCql0H5bq9f+4/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmYmQxOTctODRkZS00NGU2LWI1MjctYjQyZGRkY2Ey NjlkMB4XDTI1MDUwOTE1MDAwOVoXDTI1MDUxMTE1MDAwMFowLzEtMCsGA1UEAxMk YWQ0MmFjZDUtMzZkYi00YTliLWJmYmMtNDRjNGM0YmE1ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhMlXHtJU2blFpl39UtTNln9t3BQ15n6OibK +aYqJueXqxmTqr+qCit53qu1tZbh6JSNkDpBhcNPe+hMVvesmvP0swE+1SHACt3m VJUvjjWXmy25CuZ2Jocz8vLDWgcaFtbCkM8RBkyKSGp0NWz/lvjHreQTYMVuh8g6 osM+F6qz+9kbsXWRgBPX8BiQFLEzG3Nv4ttpUkQ6SQDwKQDnxzp122Bex/okrDmy r7tALbUPgJEaXDAwSXaeA85EieopxlMyVWJhZUuvOlrDPmLtjjpwfvsEAqt+ARmH KEmkvO3pJc3wUs2nxh0Ueui1F8aAl2J8Ycyvsk72JUwkrRgf6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIhmLm+rkW+Hpd9S+rBRmH6tUU5EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYmZi ZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJkZGRjYTI2OWQvY2JmYmQxOTctODRkZS00 NGU2LWI1MjctYjQyZGRkY2EyNjlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2JmYmQxOTctODRkZS00NGU2LWI1 MjctYjQyZGRkY2EyNjlkL2NiZmJkMTk3LTg0ZGUtNDRlNi1iNTI3LWI0MmRkZGNh MjY5ZC5jcmwwHwYDVR0jBBgwFoAUYA4spE9QqBKH+KqN+PXoTKVAmu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYmZiZDE5Ny04NGRlLTQ0ZTYtYjUyNy1iNDJk ZGRjYTI2OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBi+oJgEL/xW293vF3wWb3R 80x7TvGk0r/+zbUXXtsQP1qD14Oc3XeoQV/XFzF0VpJx090k3scqmmhz3Xpf+/o9 IU4Aeqzg21dPE2RWxLt5NdqFtGVfYam6JHzRuDaqELWjLbemdk4UJq3GTQORPr4E RPyllUdHgCkrfXgJyU8JQGWNJRSmy5zYw5I20Rd+xjrPJI3tDrkhGd9ayZxkM055 W6b+YYDu1f/+StiCsBqzMdEbIQ3+OTjc0B/AHA9Jk35uuXkg4KSYDK2OJlVJX0vJ eG5rg/t3C0MS70fP0a0fJVcwdJAwwe/4ZL6q0x65tPvmiaGaSgrpjxCjffdqVEnp -----END CERTIFICATE-----Generated at Fri May 9 17:40:09 2025 by rpki-client