$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft File: 7c534b20-f6a2-45cc-b3f2-861233813f8e.mft (raw, json) Hash identifier: xGWotfXkd7CLVcRJcJsY8IlaPvJygNLzEc49fk3q0PI= Subject key identifier: C4:46:AA:95:37:C2:35:9E:23:80:0D:AC:CD:72:D0:8B:07:CE:E5:56 Authority key identifier: 42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9 Certificate issuer: /CN=7c534b20-f6a2-45cc-b3f2-861233813f8e Certificate serial: 010D0C9F43285849BBFD2A5937EA8B42FE35AC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft Manifest number: 010D0C9F4328584073A82AB928FBF4040600ED66 Signing time: Sat 03 May 2025 21:00:03 +0000 Manifest this update: Sat 03 May 2025 21:00:03 +0000 Manifest next update: Mon 05 May 2025 21:00:00 +0000 Files and hashes: 1: 22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa (hash: O8H588i2NYgwDosNVILEingLZd2m6RDn+iSwOxYQPzc=) 2: 7c534b20-f6a2-45cc-b3f2-861233813f8e.crl (hash: GQakzNI2HG31IT9OkOsR6IH5bbjVKL/56OQEUgclfyk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:fd:2a:59:37:ea:8b:42:fe:35:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c534b20-f6a2-45cc-b3f2-861233813f8e Validity Not Before: May 3 21:00:03 2025 GMT Not After : May 5 21:00:00 2025 GMT Subject: CN=6ceb49fc-2e0b-4e33-9f61-4e4bb954b89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:74:61:11:60:91:df:0f:02:12:ff:f9:61: 09:34:cf:37:9f:9a:66:9b:1d:52:6d:06:c9:b7:d2: d8:c5:78:1e:07:c5:99:b0:87:21:cb:de:6a:bc:36: 43:4c:86:3d:b4:26:82:bf:84:10:05:2e:af:a6:ec: bc:22:ef:87:37:38:c6:ea:32:6b:a6:eb:d5:09:d9: fb:ef:7a:94:ad:c2:b1:8f:8d:30:5c:6d:40:6a:cd: 86:0d:32:b9:20:e7:56:c8:bb:6a:21:37:6e:4c:e9: 90:3b:5b:3e:04:dc:6c:6a:79:d8:ac:23:a8:f6:f2: d2:b2:47:5b:53:b7:a0:1c:e5:ae:a6:d4:df:63:1b: 40:06:ee:13:b0:dd:e5:f9:6e:98:40:f3:2b:8a:d0: 63:97:54:7d:d4:0b:1b:f1:e3:37:d7:fc:b7:fd:83: c4:18:61:1e:e5:df:47:19:17:f6:e7:67:5e:df:39: 54:3e:c9:2c:d7:4f:c9:84:f6:d3:d5:52:e1:d4:5b: af:8c:c4:85:51:71:0c:3c:d3:4a:76:3f:c1:22:cd: 34:cd:9d:7f:78:e0:ad:8e:0f:37:ff:e7:eb:4f:a5: 7c:a9:4c:83:05:c7:f7:d4:84:67:79:fa:41:f9:56: 49:8a:a9:31:98:57:bb:28:18:02:ba:87:e7:c7:3d: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:46:AA:95:37:C2:35:9E:23:80:0D:AC:CD:72:D0:8B:07:CE:E5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl X509v3 Authority Key Identifier: keyid:42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:96:30:51:a4:60:b8:11:20:84:8f:1e:d2:9e:b2:9b:61:77: 3f:54:8d:4e:78:92:e0:e3:b6:7c:c6:1e:d0:c5:83:53:51:42: e4:09:7f:a1:5d:9b:85:e5:3f:67:d8:ba:5a:40:82:ce:5c:2f: 79:15:84:84:2d:49:3f:3c:89:3e:03:f5:b8:bb:b5:fa:85:0c: 96:8e:09:38:8c:2c:78:c6:41:a2:91:76:5c:f0:94:da:c5:e0: 40:61:1f:e8:2b:2c:35:0e:10:b2:12:32:65:ed:6a:21:bd:67: 79:4b:5c:d7:6e:dd:60:43:ef:cf:48:19:51:af:da:77:9c:29: 80:3e:94:49:12:75:d4:27:cd:7b:06:23:5f:3d:1a:82:08:8e: c9:72:00:67:52:3d:d7:f8:f7:4c:95:d3:76:12:40:0e:37:e9: 6e:f6:77:5c:3f:de:72:96:26:77:86:c0:c3:1f:0d:1b:df:79: 48:ce:c1:96:ec:89:58:63:8a:44:0a:df:98:0e:31:16:23:bd: 0a:6f:9f:a7:c0:8a:94:89:f2:45:f0:15:d9:4f:7f:b5:16:1a: 05:6c:20:fe:02:84:8b:73:e0:9c:c3:ab:03:8c:b7:40:b5:93: 16:a9:c2:96:b0:b4:a5:a3:8f:37:9b:6d:55:f9:56:db:76:b4: 89:18:2e:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm7/SpZN+qLQv41rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M1MzRiMjAtZjZhMi00NWNjLWIzZjItODYxMjMzODEz ZjhlMB4XDTI1MDUwMzIxMDAwM1oXDTI1MDUwNTIxMDAwMFowLzEtMCsGA1UEAxMk NmNlYjQ5ZmMtMmUwYi00ZTMzLTlmNjEtNGU0YmI5NTRiODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmt0YRFgkd8PAhL/+WEJNM83n5pmmx1SbQbJ t9LYxXgeB8WZsIchy95qvDZDTIY9tCaCv4QQBS6vpuy8Iu+HNzjG6jJrpuvVCdn7 73qUrcKxj40wXG1Aas2GDTK5IOdWyLtqITduTOmQO1s+BNxsannYrCOo9vLSskdb U7egHOWuptTfYxtABu4TsN3l+W6YQPMritBjl1R91Asb8eM31/y3/YPEGGEe5d9H GRf252de3zlUPsks10/JhPbT1VLh1FuvjMSFUXEMPNNKdj/BIs00zZ1/eOCtjg83 /+frT6V8qUyDBcf31IRnefpB+VZJiqkxmFe7KBgCuofnxz3WLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMRGqpU3wjWeI4ANrM1y0IsHzuVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YzUz NGIyMC1mNmEyLTQ1Y2MtYjNmMi04NjEyMzM4MTNmOGUvN2M1MzRiMjAtZjZhMi00 NWNjLWIzZjItODYxMjMzODEzZjhlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2M1MzRiMjAtZjZhMi00NWNjLWIz ZjItODYxMjMzODEzZjhlLzdjNTM0YjIwLWY2YTItNDVjYy1iM2YyLTg2MTIzMzgx M2Y4ZS5jcmwwHwYDVR0jBBgwFoAUQh2S2nl6H+jxSByhRrZwPv3j7bkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YzUzNGIyMC1mNmEyLTQ1Y2MtYjNmMi04NjEy MzM4MTNmOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhljBRpGC4ESCEjx7SnrKb YXc/VI1OeJLg47Z8xh7QxYNTUULkCX+hXZuF5T9n2LpaQILOXC95FYSELUk/PIk+ A/W4u7X6hQyWjgk4jCx4xkGikXZc8JTaxeBAYR/oKyw1DhCyEjJl7WohvWd5S1zX bt1gQ+/PSBlRr9p3nCmAPpRJEnXUJ817BiNfPRqCCI7JcgBnUj3X+PdMldN2EkAO N+lu9ndcP95yliZ3hsDDHw0b33lIzsGW7IlYY4pECt+YDjEWI70Kb5+nwIqUifJF 8BXZT3+1FhoFbCD+AoSLc+Ccw6sDjLdAtZMWqcKWsLSlo483m21V+VbbdrSJGC72 -----END CERTIFICATE-----Generated at Sun May 4 21:05:17 2025 by rpki-client