$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft File: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft (raw, json) Hash identifier: k39fBY/5Qzud/RNi6PwvI7PDnNxnO1G2eC3zeBE7yxM= Subject key identifier: 8F:B5:F6:E3:4A:33:66:36:06:6C:61:D0:EC:FB:89:9C:9E:BB:07:52 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F43285849AA8A67F8B20594BA640CB900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft Manifest number: 010D0C9F4328584073A85A0DA80DD3D1C162DB60 Signing time: Sun 27 Apr 2025 15:00:03 +0000 Manifest this update: Sun 27 Apr 2025 15:00:03 +0000 Manifest next update: Wed 30 Apr 2025 15:00:00 +0000 Files and hashes: 1: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl (hash: 6YGLZvwRKpfQwtda/ApP3dmhF6uwPwJvcNYvWKc9FfU=) 2: 78358e57-94d9-3749-be72-74f054906580.roa (hash: I4W5U527sfRng5wiy3JLRYBtmcrG/T3mcQY8so/NVA0=) 3: eb3c909c-c830-354b-aa36-f3f5b62b50ef.roa (hash: f2nzpWcEPc5v8hKcMWF10UyQzuKUer8JElznb2kfHT0=) 4: feab4e24-c427-3262-ae07-c36619833029.roa (hash: J9FW3KlNe+nraj2Te7faZ0zLPkzjm5G7w//x1Gi5Vdc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:8a:67:f8:b2:05:94:ba:64:0c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Apr 27 15:00:03 2025 GMT Not After : Apr 30 15:00:00 2025 GMT Subject: CN=ba1f48d2-549d-4e80-93bc-c59a448a4ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:97:36:7e:58:5c:e1:5b:d8:67:ce:e8:8e: 02:ba:51:46:21:d7:be:7b:fe:e4:03:73:51:8a:2a: 64:b4:71:a9:c5:b5:5a:05:d2:c0:d0:47:6d:6c:d9: 35:c0:24:25:18:5c:15:b5:33:35:68:0a:8d:bb:5f: e9:1b:bf:29:20:b6:a5:3f:23:2b:92:6e:7d:80:d9: d0:9a:78:0a:75:fd:5e:34:c6:55:10:95:ce:49:23: 6f:cb:90:93:3c:fa:63:00:34:ae:db:cd:47:28:1d: ba:43:ee:0b:36:df:53:d8:1f:58:d0:a8:dd:cc:6b: e1:e0:2c:56:a6:ee:07:98:70:8e:6b:03:77:65:ab: 73:6a:ce:da:4a:db:a4:25:c2:63:b5:4a:5c:7f:b3: 11:86:21:3a:52:56:5d:3b:d9:b3:b4:3b:bd:91:95: 41:a6:4f:22:2e:4b:27:df:9f:89:35:6f:5d:21:f2: fd:13:d2:42:74:7f:74:ed:20:d0:44:e9:79:04:ca: d6:12:1f:7e:12:7d:75:6f:44:5b:77:33:f4:dd:e3: 77:56:cd:df:06:59:a7:6f:97:7c:fd:9a:53:a4:f2: e3:7f:f6:16:ca:1a:df:2e:47:7e:08:68:ac:11:50: cf:40:c5:a7:7e:3d:01:db:54:b1:34:4f:2f:bd:33: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:F6:E3:4A:33:66:36:06:6C:61:D0:EC:FB:89:9C:9E:BB:07:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3f:70:d7:36:b3:c7:15:a5:e1:81:ea:19:24:6e:23:3f:f7: af:e1:bd:76:13:6c:4a:f7:ca:18:7a:f2:0f:fe:48:c7:73:f9: f5:37:a8:f8:fa:7d:73:b1:d9:0a:be:b4:62:66:bb:03:3a:40: f2:5d:06:83:e8:70:80:4b:3a:23:3f:e4:7d:27:93:a6:f3:c0: 8b:13:6b:89:a0:f0:fd:01:ce:67:fb:14:2e:02:64:7f:d0:0d: 8c:64:21:66:df:8e:b6:df:24:2a:b1:af:25:ed:f3:66:49:fd: 8b:6d:a2:09:14:59:59:b5:e7:54:53:c4:b0:5e:dc:b8:90:4b: c0:69:42:15:95:a6:79:88:08:24:f8:af:0c:5c:cf:1d:d0:c4: ec:cf:bd:db:28:2c:0e:76:5d:35:90:8a:83:c0:6a:8e:87:fd: e3:a5:3f:51:1f:ab:47:67:31:0e:aa:70:56:a4:d2:6a:c4:0d: b9:e7:e9:e4:5c:32:1e:63:94:e8:9f:76:6c:89:a7:08:cb:40: ac:4a:bd:7d:ca:ef:bc:32:87:29:92:6f:a2:c9:d3:88:d4:e1: 80:46:6e:8a:5c:35:ec:65:68:7d:9c:91:af:0a:26:1e:cf:e9: da:eb:b1:2b:7d:dc:85:a9:63:64:d7:66:a7:81:7f:25:c5:9a: 8b:e3:96:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqimf4sgWUumQMuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MDQyNzE1MDAwM1oXDTI1MDQzMDE1MDAwMFowLzEtMCsGA1UEAxMk YmExZjQ4ZDItNTQ5ZC00ZTgwLTkzYmMtYzU5YTQ0OGE0ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F+XNn5YXOFb2GfO6I4CulFGIde+e/7kA3NR iipktHGpxbVaBdLA0EdtbNk1wCQlGFwVtTM1aAqNu1/pG78pILalPyMrkm59gNnQ mngKdf1eNMZVEJXOSSNvy5CTPPpjADSu281HKB26Q+4LNt9T2B9Y0KjdzGvh4CxW pu4HmHCOawN3Zatzas7aStukJcJjtUpcf7MRhiE6UlZdO9mztDu9kZVBpk8iLksn 35+JNW9dIfL9E9JCdH907SDQROl5BMrWEh9+En11b0RbdzP03eN3Vs3fBlmnb5d8 /ZpTpPLjf/YWyhrfLkd+CGisEVDPQMWnfj0B21SxNE8vvTOYywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+19uNKM2Y2Bmxh0Oz7iZyeuwdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvMmQxNDA3ZjktMzI4ZC00 YzQ0LWFiYzktMTFlNmQxOGU4YTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSP3DXNrPHFaXhgeoZJG4j P/ev4b12E2xK98oYevIP/kjHc/n1N6j4+n1zsdkKvrRiZrsDOkDyXQaD6HCASzoj P+R9J5Om88CLE2uJoPD9Ac5n+xQuAmR/0A2MZCFm34623yQqsa8l7fNmSf2LbaIJ FFlZtedUU8SwXty4kEvAaUIVlaZ5iAgk+K8MXM8d0MTsz73bKCwOdl01kIqDwGqO h/3jpT9RH6tHZzEOqnBWpNJqxA255+nkXDIeY5Ton3ZsiacIy0CsSr19yu+8Mocp km+iydOI1OGARm6KXDXsZWh9nJGvCiYez+na67ErfdyFqWNk12angX8lxZqL45a1 -----END CERTIFICATE-----Generated at Mon Apr 28 12:04:24 2025 by rpki-client