$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft File: 978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft (raw, json) Hash identifier: itLRdDkpJD6nJS3FtZywONLMVz84g2eBTL/l7NPNLdE= Subject key identifier: F2:A0:6A:DE:5C:3F:25:A1:EC:09:92:51:2A:22:BD:15:82:35:7F:61 Authority key identifier: 4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3 Certificate issuer: /CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9 Certificate serial: 010D0C9F43285849A72AD142F4C3A6AC81F58680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft Manifest number: 010D0C9F4328584073A84D869EBC5D1C57BBEC5F Signing time: Sat 26 Apr 2025 10:00:03 +0000 Manifest this update: Sat 26 Apr 2025 10:00:03 +0000 Manifest next update: Mon 28 Apr 2025 10:00:00 +0000 Files and hashes: 1: 978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl (hash: wTUW2zrFSzwLMa3L0lkUArUdSlxFLZU0dGP5lK/cCFI=) 2: ce2757a3-5b67-326d-b200-12e94dccea02.roa (hash: Nk07nEky2SKEB8b4YmrwAoaiaeQbAoxNbVuTdCDjDJQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:2a:d1:42:f4:c3:a6:ac:81:f5:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9 Validity Not Before: Apr 26 10:00:03 2025 GMT Not After : Apr 28 10:00:00 2025 GMT Subject: CN=02807ed1-eed5-4bd0-af23-8f7dd896fca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:f2:19:72:7e:64:cb:26:1c:b1:34:b3:ff: d8:e8:83:a9:6a:a0:21:fd:fb:1e:92:5e:2d:64:d3: 1b:61:40:de:16:78:fc:c4:2f:88:a0:45:ac:7c:15: 7a:8b:71:48:93:85:60:96:79:36:36:14:4b:17:14: b2:4c:b0:71:6f:07:dc:47:67:a8:e2:1f:ad:0c:36: 4d:2a:a9:7c:be:c6:74:69:1c:a8:cf:cf:b6:8d:b1: 6f:9e:0e:45:e4:35:fe:9b:fa:a0:a5:06:6c:b7:55: b7:aa:9a:db:71:c7:43:3f:4f:ae:4e:f6:37:81:50: 11:19:13:88:fd:b8:e6:96:47:b8:57:6c:45:4b:c9: 72:30:80:2c:aa:5d:fc:eb:6c:77:ad:6f:c3:7f:b4: 17:31:62:b7:5e:5a:8e:2a:5f:67:7e:db:fa:95:00: ef:b0:ae:53:55:e7:15:01:a4:7f:4d:27:6a:e1:e4: 00:fc:db:68:5a:02:fb:28:90:8e:0b:4f:1b:2a:64: 93:9b:40:eb:81:14:ba:49:21:1f:cf:a8:e2:fb:47: 45:70:a8:9a:5b:e1:45:9a:f3:5b:44:b2:85:92:fb: 1f:2c:8c:c5:7e:ca:06:6b:d9:64:16:32:0e:b6:56: dd:2e:97:91:41:dc:99:12:72:2b:ab:e5:89:1b:73: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:6A:DE:5C:3F:25:A1:EC:09:92:51:2A:22:BD:15:82:35:7F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.crl X509v3 Authority Key Identifier: keyid:4D:27:EF:33:4D:07:6A:91:5D:C7:56:79:D0:3B:B7:A2:B5:40:56:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/978dfd52-e4e1-4caa-bdae-21f1ccd9a4b9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:90:aa:78:11:f6:a3:43:39:0d:5f:34:53:80:24:02:e3:1b: 38:bc:c4:2a:39:35:ab:8a:a7:a3:b5:11:5d:a0:49:4d:d0:52: f6:ca:4f:7f:87:a9:04:9e:1e:f9:e8:c6:d3:4e:7e:51:d3:06: 2e:ed:db:aa:fd:6a:de:2c:b9:f3:4c:0b:08:d3:08:61:f7:27: 44:70:68:09:51:79:b5:03:6a:76:0e:68:e4:ef:5a:65:cd:1f: 59:8a:fc:ef:bb:ea:1e:c9:6f:4a:6e:9c:89:36:03:6e:f8:9c: 36:c6:b8:12:80:ef:bc:f2:fb:df:d6:b1:d3:b7:85:c1:a6:70: 71:08:7a:d1:a3:f6:44:0d:f7:c8:ec:96:ee:46:7d:36:8a:0b: 42:04:9e:c4:50:81:6e:fb:50:11:17:03:6a:48:c6:3b:ff:74: 8e:25:82:4c:78:93:78:d6:d5:2d:6d:cd:00:44:7b:bf:02:81: 24:23:73:84:92:8f:c2:41:ab:5c:18:d9:e1:67:b4:b0:25:19: d1:fd:dd:3d:46:7d:6d:50:0a:cc:d8:65:a5:df:8a:2f:99:df: 58:bd:e5:04:fc:d1:a1:ea:0f:e2:56:ea:8b:63:c5:c7:b5:24: 52:ec:46:ed:b7:a8:d2:36:1b:27:b1:40:c9:94:af:b7:c3:6d: b0:1e:ec:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnKtFC9MOmrIH1hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc4ZGZkNTItZTRlMS00Y2FhLWJkYWUtMjFmMWNjZDlh NGI5MB4XDTI1MDQyNjEwMDAwM1oXDTI1MDQyODEwMDAwMFowLzEtMCsGA1UEAxMk MDI4MDdlZDEtZWVkNS00YmQwLWFmMjMtOGY3ZGQ4OTZmY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYbyGXJ+ZMsmHLE0s//Y6IOpaqAh/fsekl4t ZNMbYUDeFnj8xC+IoEWsfBV6i3FIk4Vglnk2NhRLFxSyTLBxbwfcR2eo4h+tDDZN Kql8vsZ0aRyoz8+2jbFvng5F5DX+m/qgpQZst1W3qprbccdDP0+uTvY3gVARGROI /bjmlke4V2xFS8lyMIAsql3862x3rW/Df7QXMWK3XlqOKl9nftv6lQDvsK5TVecV AaR/TSdq4eQA/NtoWgL7KJCOC08bKmSTm0DrgRS6SSEfz6ji+0dFcKiaW+FFmvNb RLKFkvsfLIzFfsoGa9lkFjIOtlbdLpeRQdyZEnIrq+WJG3ME0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPKgat5cPyWh7AmSUSoivRWCNX9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Nzhk ZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYxY2NkOWE0YjkvOTc4ZGZkNTItZTRlMS00 Y2FhLWJkYWUtMjFmMWNjZDlhNGI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTc4ZGZkNTItZTRlMS00Y2FhLWJk YWUtMjFmMWNjZDlhNGI5Lzk3OGRmZDUyLWU0ZTEtNGNhYS1iZGFlLTIxZjFjY2Q5 YTRiOS5jcmwwHwYDVR0jBBgwFoAUTSfvM00HapFdx1Z50Du3orVAVuMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NzhkZmQ1Mi1lNGUxLTRjYWEtYmRhZS0yMWYx Y2NkOWE0YjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOkKp4EfajQzkNXzRTgCQC 4xs4vMQqOTWriqejtRFdoElN0FL2yk9/h6kEnh756MbTTn5R0wYu7duq/WreLLnz TAsI0whh9ydEcGgJUXm1A2p2Dmjk71plzR9Zivzvu+oeyW9KbpyJNgNu+Jw2xrgS gO+88vvf1rHTt4XBpnBxCHrRo/ZEDffI7JbuRn02igtCBJ7EUIFu+1ARFwNqSMY7 /3SOJYJMeJN41tUtbc0ARHu/AoEkI3OEko/CQatcGNnhZ7SwJRnR/d09Rn1tUArM 2GWl34ovmd9YveUE/NGh6g/iVuqLY8XHtSRS7Ebtt6jSNhsnsUDJlK+3w22wHuy8 -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:23 2025 by rpki-client