$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.mft File: 431389d5-6f88-4763-a957-cb167b00c5b9.mft (raw, json) Hash identifier: 8dsxTG3vj9KzOzP99ZvM0ll2iBpeEqIMyhgsTu9VgP8= Subject key identifier: D6:DC:51:4E:AB:B1:5D:D3:16:AE:07:9D:AE:9B:99:6A:37:EE:6C:8B Authority key identifier: 98:FC:E6:FD:9A:3A:C7:44:9B:A4:5B:69:E8:BD:FC:20:48:0F:59:BD Certificate issuer: /CN=431389d5-6f88-4763-a957-cb167b00c5b9 Certificate serial: 010D0C9F43285849B3F67F88421AE1BE4E703F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.mft Manifest number: 010D0C9F4328584073A8316803C896AF78139330 Signing time: Thu 01 May 2025 00:00:07 +0000 Manifest this update: Thu 01 May 2025 00:00:07 +0000 Manifest next update: Sun 04 May 2025 00:00:00 +0000 Files and hashes: 1: 431389d5-6f88-4763-a957-cb167b00c5b9.crl (hash: 8jKzaUAVj+D4VuxPa4lRN02Ory47YkK1N11qsW1W/JE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:f6:7f:88:42:1a:e1:be:4e:70:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431389d5-6f88-4763-a957-cb167b00c5b9 Validity Not Before: May 1 00:00:07 2025 GMT Not After : May 4 00:00:00 2025 GMT Subject: CN=b4532ac9-5a0e-4d3b-9c43-91b903cbb8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:0f:de:bf:49:fe:d1:95:de:f6:03:d7:37: 26:28:8b:b7:60:f9:62:65:58:13:d8:7f:4e:0e:de: 85:51:09:32:6d:8f:4e:77:7f:c6:21:cc:b7:fc:5f: a6:76:45:0b:9c:d3:52:42:b7:17:bb:2b:e6:cf:16: 2a:18:7e:88:f5:24:ba:b5:14:dc:03:c1:14:07:8f: 03:47:16:2f:9a:ba:28:13:a7:9d:80:82:36:38:bc: 8f:0b:65:66:79:55:be:74:69:81:81:03:7d:a4:77: df:a1:d4:15:ca:fe:00:cc:93:8f:57:30:ca:b2:d6: 1b:bf:72:0e:b3:63:08:28:b8:53:f6:93:7a:d8:20: a9:86:72:f0:2d:ab:07:45:00:16:70:75:aa:2c:a0: 35:08:ba:b0:3f:1d:e9:53:5a:5d:b5:02:42:11:d5: 2a:60:f1:56:81:f8:0a:2c:d3:4a:84:aa:4d:bb:78: a0:58:cd:0e:ba:6d:a1:6c:a1:0f:21:f8:62:0f:9a: 4e:f9:2e:93:14:48:df:be:7d:7a:72:4e:6b:cc:ce: be:d7:bf:98:14:f8:67:d8:bc:6f:8c:11:ef:87:52: bb:1c:a6:8d:df:77:b3:5c:11:60:41:18:54:97:9c: be:44:cf:f9:9d:19:7f:3c:55:ab:2a:e6:e3:07:37: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DC:51:4E:AB:B1:5D:D3:16:AE:07:9D:AE:9B:99:6A:37:EE:6C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9/431389d5-6f88-4763-a957-cb167b00c5b9.crl X509v3 Authority Key Identifier: keyid:98:FC:E6:FD:9A:3A:C7:44:9B:A4:5B:69:E8:BD:FC:20:48:0F:59:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/431389d5-6f88-4763-a957-cb167b00c5b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:65:d5:11:11:3c:d9:6c:1d:4a:43:2c:d5:c1:59:2b:c5:00: 2d:c0:67:a5:bb:d9:b3:e2:7d:f9:e2:85:dd:5f:7c:08:de:5b: 28:05:62:32:ea:60:eb:76:0b:48:e3:46:56:7f:88:00:00:06: 3c:66:04:8b:79:98:45:ed:76:f8:f6:26:1b:14:d3:64:d8:16: 80:0f:be:89:37:f5:13:6e:cc:54:ea:9e:9c:8a:f6:20:ae:14: f2:0a:d5:9d:a5:01:77:53:fb:63:fa:7b:2e:5f:42:48:f6:92: d3:78:5b:04:40:a2:f4:fe:3e:bc:db:d7:24:ef:06:2b:48:45: fb:89:74:67:ff:c7:47:8c:ed:c5:bc:0e:5d:22:4c:31:a5:9a: c1:73:66:0b:e0:e1:04:f2:b2:cd:b0:52:2b:50:86:ae:4d:f7: 4a:8a:3b:57:3a:74:5d:fc:74:78:d5:95:93:7c:d1:57:70:77: 35:55:10:40:ff:1a:2b:2a:b1:d4:80:e7:47:9b:76:77:72:45: 58:fa:85:dd:da:7b:fb:52:98:e1:bc:6e:ab:01:2b:1b:5d:a9: 93:5a:b7:56:d2:57:08:de:55:8c:ea:dc:49:7c:30:43:a0:25: 41:01:37:8e:c0:9f:68:03:54:72:6b:ac:6d:21:30:94:19:af: 0e:82:bf:77 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmz9n+IQhrhvk5wPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMxMzg5ZDUtNmY4OC00NzYzLWE5NTctY2IxNjdiMDBj NWI5MB4XDTI1MDUwMTAwMDAwN1oXDTI1MDUwNDAwMDAwMFowLzEtMCsGA1UEAxMk YjQ1MzJhYzktNWEwZS00ZDNiLTljNDMtOTFiOTAzY2JiOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQcP3r9J/tGV3vYD1zcmKIu3YPliZVgT2H9O Dt6FUQkybY9Od3/GIcy3/F+mdkULnNNSQrcXuyvmzxYqGH6I9SS6tRTcA8EUB48D RxYvmrooE6edgII2OLyPC2VmeVW+dGmBgQN9pHffodQVyv4AzJOPVzDKstYbv3IO s2MIKLhT9pN62CCphnLwLasHRQAWcHWqLKA1CLqwPx3pU1pdtQJCEdUqYPFWgfgK LNNKhKpNu3igWM0Oum2hbKEPIfhiD5pO+S6TFEjfvn16ck5rzM6+17+YFPhn2Lxv jBHvh1K7HKaN33ezXBFgQRhUl5y+RM/5nRl/PFWrKubjBzckIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNbcUU6rsV3TFq4Hna6bmWo37myLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzEz ODlkNS02Zjg4LTQ3NjMtYTk1Ny1jYjE2N2IwMGM1YjkvNDMxMzg5ZDUtNmY4OC00 NzYzLWE5NTctY2IxNjdiMDBjNWI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMxMzg5ZDUtNmY4OC00NzYzLWE5 NTctY2IxNjdiMDBjNWI5LzQzMTM4OWQ1LTZmODgtNDc2My1hOTU3LWNiMTY3YjAw YzViOS5jcmwwHwYDVR0jBBgwFoAUmPzm/Zo6x0SbpFtp6L38IEgPWb0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzEzODlkNS02Zjg4LTQ3NjMtYTk1Ny1jYjE2 N2IwMGM1YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhZdURETzZbB1KQyzVwVkr xQAtwGelu9mz4n354oXdX3wI3lsoBWIy6mDrdgtI40ZWf4gAAAY8ZgSLeZhF7Xb4 9iYbFNNk2BaAD76JN/UTbsxU6p6civYgrhTyCtWdpQF3U/tj+nsuX0JI9pLTeFsE QKL0/j6829ck7wYrSEX7iXRn/8dHjO3FvA5dIkwxpZrBc2YL4OEE8rLNsFIrUIau TfdKijtXOnRd/HR41ZWTfNFXcHc1VRBA/xorKrHUgOdHm3Z3ckVY+oXd2nv7Upjh vG6rASsbXamTWrdW0lcI3lWM6txJfDBDoCVBATeOwJ9oA1Rya6xtITCUGa8Ogr93 -----END CERTIFICATE-----Generated at Thu May 1 10:08:00 2025 by rpki-client