$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft File: 903f8e05-f3a5-4300-8c04-39c3103ddccb.mft (raw, json) Hash identifier: oYD0nYGTEJWVWF8YkV61cgGsxrO9O4tL46ZkzIMBhiY= Subject key identifier: C0:5D:DE:C9:6E:FC:4F:B4:E1:D3:AB:06:B7:48:18:98:0B:06:9B:45 Authority key identifier: 5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69 Certificate issuer: /CN=903f8e05-f3a5-4300-8c04-39c3103ddccb Certificate serial: 010D0C9F43285849AE6121BAA05C2F64BD3D9F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft Manifest number: 010D0C9F4328584073A83119F63479D18544F022 Signing time: Tue 29 Apr 2025 00:00:07 +0000 Manifest this update: Tue 29 Apr 2025 00:00:07 +0000 Manifest next update: Fri 02 May 2025 00:00:00 +0000 Files and hashes: 1: 903f8e05-f3a5-4300-8c04-39c3103ddccb.crl (hash: 0ADQxndP3s473FCR3IPwhHTRNimehvRiOLwHs0ti2zc=) 2: baa67771-dc3e-3be1-a4f0-fa51b81508c7.roa (hash: OVQk6fWT9apjbQs85APbd2Z5g/2Gw2Eea9aH5Jy0Nvo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:61:21:ba:a0:5c:2f:64:bd:3d:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=903f8e05-f3a5-4300-8c04-39c3103ddccb Validity Not Before: Apr 29 00:00:07 2025 GMT Not After : May 2 00:00:00 2025 GMT Subject: CN=1d038f9c-caef-4c2f-ac1e-ea129480486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:cd:a6:75:da:3c:7e:eb:47:72:e4:cd:a3: 44:60:ef:6d:05:90:76:10:22:bd:b0:93:d0:f3:bf: e3:b4:9f:b7:6b:c3:ff:70:bb:90:37:16:0f:dc:8e: 35:ea:bf:c9:20:28:d4:93:d8:da:1d:30:3e:29:9d: 53:00:64:7b:bd:b7:33:e5:48:a9:9c:87:74:9f:22: dd:d7:e4:27:a0:cc:e4:d3:a5:a3:0f:87:d5:9c:43: 6b:3a:fc:a6:04:86:02:8d:1e:f3:c9:c2:ed:71:27: 86:7f:b1:2c:fe:e1:cc:12:4a:b2:81:d9:41:05:7c: be:f2:b5:3f:70:ef:c7:d8:7f:dd:29:cc:59:68:6e: f2:5e:74:09:a7:9a:88:67:aa:d5:14:b1:b7:54:35: bd:47:77:7a:50:9c:ca:06:52:05:5a:44:fb:a4:f8: b0:2a:c9:7f:73:a7:cc:1b:aa:08:a5:d6:88:53:b4: a7:35:31:cb:17:16:65:fa:18:94:ff:0f:0f:f6:d6: dc:a9:6c:4b:31:3f:94:d6:07:27:0c:20:6e:9b:cb: a4:1e:be:fb:e3:28:54:5b:e3:17:6f:4b:db:42:a0: 53:52:60:08:eb:b9:b7:e8:a0:4e:8e:44:d2:ba:e9: 9e:a2:73:49:7e:2b:2d:9a:3f:5e:a3:5a:13:47:2e: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5D:DE:C9:6E:FC:4F:B4:E1:D3:AB:06:B7:48:18:98:0B:06:9B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb/903f8e05-f3a5-4300-8c04-39c3103ddccb.crl X509v3 Authority Key Identifier: keyid:5E:D8:BC:5A:D1:72:8D:9B:80:AE:17:1A:F1:02:3C:5E:0D:E1:71:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/903f8e05-f3a5-4300-8c04-39c3103ddccb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c2:b7:04:bb:73:43:40:81:c9:6e:50:54:01:97:38:e5:85: c6:c4:1f:f2:d1:b4:fc:0d:33:6b:ce:bf:0d:c3:f6:3a:a1:15: ce:7f:c3:8a:bc:43:44:22:a1:d2:0b:88:d3:65:46:26:25:2b: f4:d0:e7:5c:43:a0:83:8c:52:66:fe:09:f2:47:ae:2f:46:56: 77:b7:57:ae:d0:79:55:36:d8:d8:fa:1a:72:ea:0c:78:94:40: df:a6:5b:dc:44:1f:e7:d5:b9:a1:c9:fd:2c:2b:8f:a1:2c:e2: 79:07:c0:16:6a:95:19:51:39:16:ab:c1:13:d5:42:b3:cd:28: a0:da:34:e8:cb:d8:01:33:a0:ae:2e:34:e4:87:a7:d4:ae:a7: 9c:06:0f:a8:a2:c8:67:da:e9:ab:9e:7d:9b:ba:32:a9:2d:49: a4:26:50:ac:da:7e:18:0f:cd:79:ff:3d:31:56:cc:47:66:23: 25:9b:18:79:07:e9:c1:e8:64:9d:74:a1:3a:7f:4b:f5:8a:ba: a9:0a:bd:21:51:c8:47:97:56:36:5d:61:8d:a0:b2:de:3d:f5: 49:6a:50:63:01:3d:d9:61:59:19:91:e0:e2:66:f8:63:c6:40: aa:a4:45:f7:f2:4c:98:70:fa:d6:db:4f:5b:bb:d2:dd:8b:2d: 66:1f:d2:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuYSG6oFwvZL09nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzZjhlMDUtZjNhNS00MzAwLThjMDQtMzljMzEwM2Rk Y2NiMB4XDTI1MDQyOTAwMDAwN1oXDTI1MDUwMjAwMDAwMFowLzEtMCsGA1UEAxMk MWQwMzhmOWMtY2FlZi00YzJmLWFjMWUtZWExMjk0ODA0ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPbNpnXaPH7rR3LkzaNEYO9tBZB2ECK9sJPQ 87/jtJ+3a8P/cLuQNxYP3I416r/JICjUk9jaHTA+KZ1TAGR7vbcz5UipnId0nyLd 1+QnoMzk06WjD4fVnENrOvymBIYCjR7zycLtcSeGf7Es/uHMEkqygdlBBXy+8rU/ cO/H2H/dKcxZaG7yXnQJp5qIZ6rVFLG3VDW9R3d6UJzKBlIFWkT7pPiwKsl/c6fM G6oIpdaIU7SnNTHLFxZl+hiU/w8P9tbcqWxLMT+U1gcnDCBum8ukHr774yhUW+MX b0vbQqBTUmAI67m36KBOjkTSuumeonNJfistmj9eo1oTRy4iGwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMBd3slu/E+04dOrBrdIGJgLBptFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MDNm OGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMzMTAzZGRjY2IvOTAzZjhlMDUtZjNhNS00 MzAwLThjMDQtMzljMzEwM2RkY2NiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTAzZjhlMDUtZjNhNS00MzAwLThj MDQtMzljMzEwM2RkY2NiLzkwM2Y4ZTA1LWYzYTUtNDMwMC04YzA0LTM5YzMxMDNk ZGNjYi5jcmwwHwYDVR0jBBgwFoAUXti8WtFyjZuArhca8QI8Xg3hcWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MDNmOGUwNS1mM2E1LTQzMDAtOGMwNC0zOWMz MTAzZGRjY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4wrcEu3NDQIHJblBUAZc4 5YXGxB/y0bT8DTNrzr8Nw/Y6oRXOf8OKvENEIqHSC4jTZUYmJSv00OdcQ6CDjFJm /gnyR64vRlZ3t1eu0HlVNtjY+hpy6gx4lEDfplvcRB/n1bmhyf0sK4+hLOJ5B8AW apUZUTkWq8ET1UKzzSig2jToy9gBM6CuLjTkh6fUrqecBg+ooshn2umrnn2bujKp LUmkJlCs2n4YD815/z0xVsxHZiMlmxh5B+nB6GSddKE6f0v1irqpCr0hUchHl1Y2 XWGNoLLePfVJalBjAT3ZYVkZkeDiZvhjxkCqpEX38kyYcPrW209bu9Ldiy1mH9LI -----END CERTIFICATE-----Generated at Tue Apr 29 20:31:01 2025 by rpki-client