$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft File: 1701ecde-5b4d-441b-badd-359ef0fbe0da.mft (raw, json) Hash identifier: e/XnssPuLm+Vy6ou++Et/BffmPbPRea6PdRGwvqBShA= Subject key identifier: 12:36:63:FC:1F:4B:FF:6C:37:98:11:38:F2:C4:EB:FE:A1:E3:5F:27 Authority key identifier: EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C Certificate issuer: /CN=1701ecde-5b4d-441b-badd-359ef0fbe0da Certificate serial: 010D0C9F43285849AE25904782405A0B069F8980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft Manifest number: 010D0C9F4328584493AC481EE54D51DEDEFB311F Signing time: Mon 28 Apr 2025 22:00:07 +0000 Manifest this update: Mon 28 Apr 2025 22:00:07 +0000 Manifest next update: Thu 01 May 2025 22:00:00 +0000 Files and hashes: 1: 1701ecde-5b4d-441b-badd-359ef0fbe0da.crl (hash: ha9YNUIstV/1zuT8SnnzdZqK2tyhgmfP5SSNOBGJxZ0=) 2: 43ccc856-98fc-3a84-b177-7d81508be29b.roa (hash: 2yQ+deFr9yC5Jsvm7PKJ/Tq45F1bn25TbwjISCF4YAs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:25:90:47:82:40:5a:0b:06:9f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1701ecde-5b4d-441b-badd-359ef0fbe0da Validity Not Before: Apr 28 22:00:07 2025 GMT Not After : May 1 22:00:00 2025 GMT Subject: CN=f0fecad3-24e4-4dc4-9404-70a608e6e946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:36:eb:29:1b:66:22:48:21:d9:de:ff:e5: 24:de:05:c0:59:19:06:74:4b:50:67:5d:f7:97:48: 80:1f:d8:ef:00:b0:33:b0:b3:e8:43:0e:20:4c:9c: 45:f1:be:0f:cb:5e:d0:86:a1:96:b8:f9:61:6b:d0: 91:af:b8:1d:70:7f:25:67:b5:95:4e:a2:eb:29:89: 8b:c9:71:b2:ed:28:10:1e:b0:5d:9d:a3:66:de:ee: 73:1b:b6:6d:df:6e:5b:9c:b0:54:fe:cb:46:c3:86: d5:ea:d3:da:da:dc:70:2d:d3:45:af:20:75:a3:e2: 94:13:c2:8b:18:58:a1:87:86:2b:74:87:44:35:35: b7:59:ab:4c:8e:32:f5:4c:b9:30:ba:a2:9a:b4:8d: 6a:cb:b1:aa:36:c7:aa:03:ac:91:10:cb:c2:94:ab: 36:17:14:42:57:ca:9b:68:1d:d0:a5:eb:85:f7:56: dc:58:48:85:ef:2f:51:89:44:8b:72:09:49:2d:d8: 11:fb:a0:42:44:31:bc:64:d5:fd:c2:4e:f6:93:8c: 8c:b4:92:d2:c2:58:80:5f:e2:96:05:1b:46:99:68: 55:a9:8d:48:d0:ac:cc:db:e3:d7:5a:04:99:6b:c4: 15:35:01:74:6c:50:91:c3:41:0e:d3:3d:67:1e:68: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:63:FC:1F:4B:FF:6C:37:98:11:38:F2:C4:EB:FE:A1:E3:5F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da/1701ecde-5b4d-441b-badd-359ef0fbe0da.crl X509v3 Authority Key Identifier: keyid:EA:16:5F:15:BB:9E:79:99:F1:45:B7:67:86:00:6C:08:9F:C6:55:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1701ecde-5b4d-441b-badd-359ef0fbe0da.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1b:52:3d:69:b1:7c:c4:28:4e:fd:7d:f4:0d:c7:a9:36:c0: 16:61:c2:23:b5:d5:07:84:b2:b1:0d:32:42:b0:d7:25:16:e8: 6a:a1:a9:40:ec:37:71:df:14:67:48:d5:8e:6c:21:89:a1:e8: 0b:ee:45:ea:36:a2:a1:6f:75:1e:22:d6:c3:b0:e3:30:2a:64: ed:be:b2:34:73:39:e2:6c:37:fe:66:9c:da:1c:37:50:a5:6f: 41:99:3b:73:4f:29:29:da:c6:3d:b0:8a:85:29:5d:c1:57:81: 8c:d2:c1:6d:04:4f:9b:4d:10:92:ab:e5:2d:d6:3f:81:5b:f2: a0:f5:f8:33:a5:7e:7d:78:c1:f1:3a:46:7d:47:c7:b3:d6:76: 0b:8f:0c:55:fb:3c:96:d7:22:04:13:92:fb:da:e9:6b:1b:c7: 10:20:f8:8d:de:27:9b:04:ef:41:2e:82:81:94:31:51:af:df: 73:dd:7c:0b:44:b5:0e:32:ae:0f:8a:ab:7c:8c:0c:b2:81:2e: 65:d2:6f:56:89:6e:5c:43:d7:6b:5b:bc:31:74:40:2f:ad:c6: a1:bc:6f:16:0c:02:37:e3:14:b1:6a:65:e2:37:ca:24:b6:a6: 5b:eb:e5:47:e7:af:bc:b7:4b:32:ee:0f:0c:9f:36:17:2b:8d: 60:52:9d:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuJZBHgkBaCwafiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcwMWVjZGUtNWI0ZC00NDFiLWJhZGQtMzU5ZWYwZmJl MGRhMB4XDTI1MDQyODIyMDAwN1oXDTI1MDUwMTIyMDAwMFowLzEtMCsGA1UEAxMk ZjBmZWNhZDMtMjRlNC00ZGM0LTk0MDQtNzBhNjA4ZTZlOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijo26ykbZiJIIdne/+Uk3gXAWRkGdEtQZ133 l0iAH9jvALAzsLPoQw4gTJxF8b4Py17QhqGWuPlha9CRr7gdcH8lZ7WVTqLrKYmL yXGy7SgQHrBdnaNm3u5zG7Zt325bnLBU/stGw4bV6tPa2txwLdNFryB1o+KUE8KL GFihh4YrdIdENTW3WatMjjL1TLkwuqKatI1qy7GqNseqA6yREMvClKs2FxRCV8qb aB3QpeuF91bcWEiF7y9RiUSLcglJLdgR+6BCRDG8ZNX9wk72k4yMtJLSwliAX+KW BRtGmWhVqY1I0KzM2+PXWgSZa8QVNQF0bFCRw0EO0z1nHmgU1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBI2Y/wfS/9sN5gROPLE6/6h418nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xNzAx ZWNkZS01YjRkLTQ0MWItYmFkZC0zNTllZjBmYmUwZGEvMTcwMWVjZGUtNWI0ZC00 NDFiLWJhZGQtMzU5ZWYwZmJlMGRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTcwMWVjZGUtNWI0ZC00NDFiLWJh ZGQtMzU5ZWYwZmJlMGRhLzE3MDFlY2RlLTViNGQtNDQxYi1iYWRkLTM1OWVmMGZi ZTBkYS5jcmwwHwYDVR0jBBgwFoAU6hZfFbueeZnxRbdnhgBsCJ/GVTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xNzAxZWNkZS01YjRkLTQ0MWItYmFkZC0zNTll ZjBmYmUwZGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEG1I9abF8xChO/X30Dcep NsAWYcIjtdUHhLKxDTJCsNclFuhqoalA7Ddx3xRnSNWObCGJoegL7kXqNqKhb3Ue ItbDsOMwKmTtvrI0cznibDf+ZpzaHDdQpW9BmTtzTykp2sY9sIqFKV3BV4GM0sFt BE+bTRCSq+Ut1j+BW/Kg9fgzpX59eMHxOkZ9R8ez1nYLjwxV+zyW1yIEE5L72ulr G8cQIPiN3iebBO9BLoKBlDFRr99z3XwLRLUOMq4Piqt8jAyygS5l0m9WiW5cQ9dr W7wxdEAvrcahvG8WDAI34xSxamXiN8oktqZb6+VH56+8t0sy7g8MnzYXK41gUp0O -----END CERTIFICATE-----Generated at Tue Apr 29 22:57:15 2025 by rpki-client