$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft File: c3e3599f-a90f-4544-a440-c15eca99db7f.mft (raw, json) Hash identifier: f+J5Gdd+Q8gDD3ywO6FbuBPHkxlksXX4GzOaEHinNMY= Subject key identifier: 5C:79:3B:38:11:8C:25:03:9E:F1:5F:FA:1A:2C:CA:4D:76:42:D7:BC Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 Certificate issuer: /CN=c3e3599f-a90f-4544-a440-c15eca99db7f Certificate serial: 010D0C9F43285849AD90A55A56DDB0EB21175800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft Manifest number: 010D0C9F4328584073A81D4877564E5B466B37E2 Signing time: Mon 28 Apr 2025 17:00:03 +0000 Manifest this update: Mon 28 Apr 2025 17:00:03 +0000 Manifest next update: Thu 01 May 2025 17:00:00 +0000 Files and hashes: 1: 6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (hash: gJat3FIkxM1YC0/ufeTlRy3gVx0/hoSPTAouRmM+6Xc=) 2: c3e3599f-a90f-4544-a440-c15eca99db7f.crl (hash: zp3TBZaQdOYlvAuTX8Y4S1g8Fy8zOhryk41LG3s367Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:90:a5:5a:56:dd:b0:eb:21:17:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f Validity Not Before: Apr 28 17:00:03 2025 GMT Not After : May 1 17:00:00 2025 GMT Subject: CN=3bfe8bab-93c7-43ab-afa2-b178837a911a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:4f:a5:25:41:f5:3c:79:b6:bd:0a:a4:22: 6c:e4:24:1d:21:cc:1e:d6:5c:4c:f4:9e:c2:af:9f: c9:fc:5c:7a:2a:88:46:47:0e:bf:b3:95:53:79:08: b8:2b:bf:53:47:f1:5d:09:7c:b9:9f:91:30:6d:31: 7b:a3:f6:09:b1:30:44:60:b3:e7:4d:48:ad:0a:ad: 5b:83:6a:dd:b5:c0:54:33:0c:68:05:cb:fc:e6:45: 72:6c:8e:3f:07:49:bd:22:68:bf:40:b3:62:cf:80: 7f:15:46:25:04:b3:cf:c6:d7:42:6d:cf:6b:14:8b: 39:5b:78:8c:bb:c4:79:8a:d1:73:7d:bd:28:9d:3c: 20:01:64:c1:ad:1f:26:21:1b:ac:02:38:6e:6e:1f: 41:90:05:a9:dc:07:44:06:68:d7:e3:6e:4b:ad:9a: ca:71:6a:db:2a:b6:b8:75:ba:4c:dc:8e:ad:d0:8c: 0b:e7:20:9b:b0:37:e2:cf:eb:c7:55:11:29:3b:55: 92:1b:09:05:fd:d7:e9:ca:d2:37:93:2e:c4:aa:a9: e1:f3:e2:43:cf:ae:be:28:7e:da:21:cf:4d:53:54: a9:00:8c:af:ad:f3:1e:a4:39:4e:f3:e7:37:34:61: ad:96:e6:0a:9a:b6:bf:6f:e6:6d:17:78:cf:45:19: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:79:3B:38:11:8C:25:03:9E:F1:5F:FA:1A:2C:CA:4D:76:42:D7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl X509v3 Authority Key Identifier: keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4f:b6:e7:e8:76:11:75:68:7f:cf:fe:35:b5:ff:c3:0e:c7: 0f:02:db:25:de:9a:f4:b7:9c:24:41:f5:6f:96:17:e4:d6:8b: 14:18:7c:7a:ea:a0:d0:d6:b6:9e:23:fd:6c:e9:54:da:be:c9: 4a:45:b3:5b:42:9f:5e:6a:7e:02:10:b9:f5:42:d4:03:b9:98: f6:47:bc:b6:40:52:d7:3e:53:1a:d6:a0:70:e5:30:86:f9:e7: a6:59:f4:c7:6e:01:7b:bf:dd:8f:75:6d:99:85:7e:2f:a0:70: d9:bc:b2:ef:88:ad:82:59:8a:24:5f:1e:06:00:be:89:dc:2c: 1f:da:34:53:5c:9f:de:22:0e:e8:63:8e:d1:2f:60:20:8d:43: 7c:83:2d:52:3e:a4:fc:38:9e:0b:3a:ca:96:3c:8c:cc:56:26: 85:e7:07:0d:10:6d:30:9c:ef:b1:b7:1b:56:43:66:2a:12:b1: fb:80:f2:44:87:52:2b:3c:da:95:5f:ed:78:f8:60:6d:d6:9d: 0f:fd:c9:dc:2b:39:fc:e2:37:ab:96:8d:e8:48:93:09:a6:cc: 96:3e:24:7e:2d:a6:7e:aa:1b:33:12:51:b9:b9:f7:19:a7:12: 07:a8:e8:68:40:72:df:ee:7a:e1:94:75:44:cd:b1:e4:c5:4e: dd:e4:6f:96 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtkKVaVt2w6yEXWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNlMzU5OWYtYTkwZi00NTQ0LWE0NDAtYzE1ZWNhOTlk YjdmMB4XDTI1MDQyODE3MDAwM1oXDTI1MDUwMTE3MDAwMFowLzEtMCsGA1UEAxMk M2JmZThiYWItOTNjNy00M2FiLWFmYTItYjE3ODgzN2E5MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkRPpSVB9Tx5tr0KpCJs5CQdIcwe1lxM9J7C r5/J/Fx6KohGRw6/s5VTeQi4K79TR/FdCXy5n5EwbTF7o/YJsTBEYLPnTUitCq1b g2rdtcBUMwxoBcv85kVybI4/B0m9Imi/QLNiz4B/FUYlBLPPxtdCbc9rFIs5W3iM u8R5itFzfb0onTwgAWTBrR8mIRusAjhubh9BkAWp3AdEBmjX425LrZrKcWrbKra4 dbpM3I6t0IwL5yCbsDfiz+vHVREpO1WSGwkF/dfpytI3ky7Eqqnh8+JDz66+KH7a Ic9NU1SpAIyvrfMepDlO8+c3NGGtluYKmra/b+ZtF3jPRRmqfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFx5OzgRjCUDnvFf+hosyk12Qte8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jM2Uz NTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVlY2E5OWRiN2YvYzNlMzU5OWYtYTkwZi00 NTQ0LWE0NDAtYzE1ZWNhOTlkYjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzNlMzU5OWYtYTkwZi00NTQ0LWE0 NDAtYzE1ZWNhOTlkYjdmL2MzZTM1OTlmLWE5MGYtNDU0NC1hNDQwLWMxNWVjYTk5 ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUZi35ozyT0O7irIv3BNlz1RVsf1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jM2UzNTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVl Y2E5OWRiN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxT7bn6HYRdWh/z/41tf/D DscPAtsl3pr0t5wkQfVvlhfk1osUGHx66qDQ1raeI/1s6VTavslKRbNbQp9ean4C ELn1QtQDuZj2R7y2QFLXPlMa1qBw5TCG+eemWfTHbgF7v92PdW2ZhX4voHDZvLLv iK2CWYokXx4GAL6J3Cwf2jRTXJ/eIg7oY47RL2AgjUN8gy1SPqT8OJ4LOsqWPIzM ViaF5wcNEG0wnO+xtxtWQ2YqErH7gPJEh1IrPNqVX+14+GBt1p0P/cncKzn84jer lo3oSJMJpsyWPiR+LaZ+qhszElG5ufcZpxIHqOhoQHLf7nrhlHVEzbHkxU7d5G+W -----END CERTIFICATE-----Generated at Tue Apr 29 09:34:16 2025 by rpki-client