$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft File: 2fd6704c-2109-476c-8d4f-fea2428a7b88.mft (raw, json) Hash identifier: sF9c+hroRouIiOiGbQZifT4Y5fXJe9uFzAqDxzCq6RM= Subject key identifier: A9:C6:D2:2A:69:43:D8:9A:75:19:06:75:0C:A3:4E:E6:7D:CC:27:1B Authority key identifier: EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C Certificate issuer: /CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Certificate serial: 010D0C9F43285849C11B7174355C2BA89B29C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft Manifest number: 010D0C9F43285841854021A083A391EE824E5BF6 Signing time: Mon 05 May 2025 17:00:03 +0000 Manifest this update: Mon 05 May 2025 17:00:03 +0000 Manifest next update: Wed 07 May 2025 17:00:00 +0000 Files and hashes: 1: 2fd6704c-2109-476c-8d4f-fea2428a7b88.crl (hash: /nmcsgB7X0LLNEp2xkjMsj27rSrLGDXdqRHU3NS1spM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:1b:71:74:35:5c:2b:a8:9b:29:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Validity Not Before: May 5 17:00:03 2025 GMT Not After : May 7 17:00:00 2025 GMT Subject: CN=68c08e84-41ee-4055-b29a-8383efc8d5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:bf:ad:f8:21:71:8f:fe:bc:42:63:ac:98: 5e:72:35:34:a4:e2:47:35:80:90:af:9d:80:22:da: b1:e9:b2:32:b2:7f:de:dd:3f:11:6f:19:c1:aa:fa: 64:d3:83:c8:59:fd:e1:5b:8c:bc:36:b3:e6:b9:54: 29:6a:4d:33:d0:fa:e2:28:4b:7e:88:bb:c6:55:13: 7b:39:67:42:c9:83:c8:19:42:38:35:b1:42:37:93: f3:6e:7a:a1:e2:4d:26:58:9c:5e:2d:4d:66:69:03: b1:1d:db:cc:5c:27:c2:f8:af:7e:7d:61:e3:b6:0b: 9b:4a:ed:5e:56:de:72:59:58:8e:42:51:87:3a:01: a2:31:08:ef:14:e8:f0:dc:0c:0f:f8:fa:96:de:d4: 84:06:f8:79:75:d0:d4:9b:ba:be:e7:06:e7:a5:10: f0:a3:80:72:af:b8:f2:e5:7f:fd:fe:9c:47:79:25: 59:49:fe:9b:5f:02:8c:36:29:92:50:f3:c8:46:ae: 59:8a:c2:57:81:29:b0:ad:75:10:31:f4:93:1b:f9: b4:1f:7f:bb:0f:23:de:8d:58:88:ab:0a:9a:e4:f9: b9:28:0d:a2:c8:e1:3c:0f:34:1c:25:94:f8:09:dc: 1f:6f:5e:0a:aa:31:8f:d0:19:a7:28:3e:f9:5c:7a: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:D2:2A:69:43:D8:9A:75:19:06:75:0C:A3:4E:E6:7D:CC:27:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl X509v3 Authority Key Identifier: keyid:EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:51:7e:26:32:32:18:dc:c4:ea:3e:45:02:73:86:34:60:54: 75:d8:2c:b6:77:2f:b1:7f:7d:63:cf:5c:d6:a1:57:23:53:f0: c0:dd:bb:35:45:8d:ac:f5:3d:3d:4d:6a:d6:65:fb:80:e4:09: b7:21:10:ea:5f:ed:7f:5d:a6:d3:e1:07:47:0a:b3:23:0a:1f: b9:82:38:1d:9c:4d:43:4d:01:61:53:3f:e9:22:46:04:0b:ad: 8c:14:01:d3:54:c9:a2:c6:50:d1:da:18:c1:92:be:3f:3a:58: 28:50:6b:3e:36:1c:71:bd:33:dd:3b:43:59:66:7a:71:0f:ff: 5b:b1:a5:e2:17:5d:1e:f9:a0:9c:6d:8d:f7:c1:b9:65:d0:10: 71:e5:b6:1b:9c:0c:7d:2c:23:ab:4d:2f:52:24:95:1c:e5:45: 1e:e8:fa:cb:55:53:d0:18:cf:3f:c1:39:f2:b2:16:c3:cf:67: 91:b4:e6:2c:0f:ba:08:11:19:e9:86:ad:6f:e5:2f:54:db:06: 3d:68:cc:f9:22:00:fa:fd:1e:e7:86:81:52:ba:6d:c7:e7:3c: cc:e9:7f:dd:79:53:f0:95:de:36:d5:41:28:69:27:c5:0a:f3: ac:d3:9b:fb:58:ab:c1:a6:0e:7b:4a:b2:49:e6:70:de:8d:b8: e2:9b:ea:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEnBG3F0NVwrqJspyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkNjcwNGMtMjEwOS00NzZjLThkNGYtZmVhMjQyOGE3 Yjg4MB4XDTI1MDUwNTE3MDAwM1oXDTI1MDUwNzE3MDAwMFowLzEtMCsGA1UEAxMk NjhjMDhlODQtNDFlZS00MDU1LWIyOWEtODM4M2VmYzhkNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0K/rfghcY/+vEJjrJhecjU0pOJHNYCQr52A Itqx6bIysn/e3T8RbxnBqvpk04PIWf3hW4y8NrPmuVQpak0z0PriKEt+iLvGVRN7 OWdCyYPIGUI4NbFCN5Pzbnqh4k0mWJxeLU1maQOxHdvMXCfC+K9+fWHjtgubSu1e Vt5yWViOQlGHOgGiMQjvFOjw3AwP+PqW3tSEBvh5ddDUm7q+5wbnpRDwo4Byr7jy 5X/9/pxHeSVZSf6bXwKMNimSUPPIRq5ZisJXgSmwrXUQMfSTG/m0H3+7DyPejViI qwqa5Pm5KA2iyOE8DzQcJZT4Cdwfb14KqjGP0BmnKD75XHrNgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKnG0ippQ9iadRkGdQyjTuZ9zCcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2 NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEyNDI4YTdiODgvMmZkNjcwNGMtMjEwOS00 NzZjLThkNGYtZmVhMjQyOGE3Yjg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmZkNjcwNGMtMjEwOS00NzZjLThk NGYtZmVhMjQyOGE3Yjg4LzJmZDY3MDRjLTIxMDktNDc2Yy04ZDRmLWZlYTI0Mjhh N2I4OC5jcmwwHwYDVR0jBBgwFoAU6tIef6ddHKfLWzrg49H33przLXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEy NDI4YTdiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZUX4mMjIY3MTqPkUCc4Y0 YFR12Cy2dy+xf31jz1zWoVcjU/DA3bs1RY2s9T09TWrWZfuA5Am3IRDqX+1/XabT 4QdHCrMjCh+5gjgdnE1DTQFhUz/pIkYEC62MFAHTVMmixlDR2hjBkr4/OlgoUGs+ NhxxvTPdO0NZZnpxD/9bsaXiF10e+aCcbY33wbll0BBx5bYbnAx9LCOrTS9SJJUc 5UUe6PrLVVPQGM8/wTnyshbDz2eRtOYsD7oIERnphq1v5S9U2wY9aMz5IgD6/R7n hoFSum3H5zzM6X/deVPwld421UEoaSfFCvOs05v7WKvBpg57SrJJ5nDejbjim+rL -----END CERTIFICATE-----Generated at Mon May 5 21:46:45 2025 by rpki-client