$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft File: 40a485a4-e936-4174-8999-571e03203823.mft (raw, json) Hash identifier: Sjl8Xh8JsBwoC+QkxWwd/fIbcFZf7nY/0HUHLdZJZYc= Subject key identifier: 09:6D:F8:54:DC:85:4A:63:85:E6:A7:A6:0D:5D:34:0C:92:A3:E0:EA Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Certificate issuer: /CN=40a485a4-e936-4174-8999-571e03203823 Certificate serial: 010D0C9F43285849B64A07FC98372CF27DE88700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft Manifest number: 010D0C9F4328584073A825D34C38BD0BF05689E5 Signing time: Thu 01 May 2025 20:00:03 +0000 Manifest this update: Thu 01 May 2025 20:00:03 +0000 Manifest next update: Sat 03 May 2025 20:00:00 +0000 Files and hashes: 1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: wFQpabxSlzipCp7/qETD7I2A0TPXkBN3zdpzTeohceM=) 2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: K1cgkWks+5bohg/6i9w2IuE0yfpyxnrXaFF10H+yL9Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:4a:07:fc:98:37:2c:f2:7d:e8:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a485a4-e936-4174-8999-571e03203823 Validity Not Before: May 1 20:00:03 2025 GMT Not After : May 3 20:00:00 2025 GMT Subject: CN=b6ff4d14-e97b-427b-b951-820c3742ebf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:3e:c4:0b:e6:5d:36:c0:e1:bd:a4:3a:d5: 43:22:11:de:5a:83:89:94:a6:6e:9c:c2:5c:bc:dd: 1b:b3:fa:cd:1d:3f:b2:4d:5d:34:b2:06:2a:3c:cc: d2:7d:3a:0a:3d:71:27:cf:9a:9a:7c:f4:2c:3f:c7: d4:41:21:88:1f:d8:0b:6e:4b:15:81:4a:61:5c:e4: 54:35:5e:38:c3:11:21:ec:59:c6:25:4d:e0:f5:0c: 01:9d:1d:cb:f3:60:fb:0c:b4:24:87:b7:a5:bd:f2: 0c:c3:20:02:0c:ae:8d:70:ad:6c:31:76:f5:a2:77: 34:87:39:de:49:21:c7:00:8d:a2:c9:c9:e1:b2:c2: 11:e4:4a:81:1e:88:fb:59:77:30:d9:e2:1b:5b:f5: 99:b0:ec:52:ce:45:b9:b0:47:c3:89:a3:d2:1e:22: ae:0b:a6:c7:51:a1:32:0e:b9:a4:b1:46:bf:56:d4: e3:58:92:5c:cd:65:7a:f3:0e:9b:aa:1f:9a:c4:b6: ce:83:8d:b1:6a:39:b0:0a:bc:a0:c6:59:5b:2b:cf: 21:47:4a:f3:e3:ed:0b:bf:c5:cb:4a:be:30:4a:eb: 68:d9:af:4b:ef:84:47:01:19:a7:49:43:83:f1:4a: ee:55:55:1a:8c:d1:f9:46:51:92:3f:e8:49:54:cb: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6D:F8:54:DC:85:4A:63:85:E6:A7:A6:0D:5D:34:0C:92:A3:E0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl X509v3 Authority Key Identifier: keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fb:ec:db:90:62:87:85:07:5a:57:f8:ad:91:88:89:f1:ae: fc:2e:48:ad:1a:c9:47:f0:d8:60:2c:f1:86:b9:fe:0f:24:16: 4c:cf:4a:ea:68:0f:d2:0a:5c:3f:00:13:05:9f:70:a8:13:e9: 04:34:bf:8e:c4:c8:2c:f1:e0:29:32:cb:2b:33:85:0b:81:7f: 6b:ad:a9:d6:4d:23:a8:e9:b1:87:94:8f:30:4f:89:49:58:8f: fc:0e:f0:bd:08:40:a4:5a:26:04:2b:8a:40:c2:19:34:78:db: db:0a:41:bc:5f:1a:35:c2:28:83:36:a9:b2:b3:98:39:fc:5c: f4:a4:d5:f6:57:22:31:fe:82:76:ea:dd:e9:b1:76:55:c1:c6: 1f:52:be:9c:97:e4:41:63:a6:d4:0a:48:79:89:fb:d7:33:0f: 5e:96:6a:90:6f:2f:35:0b:fa:61:86:5f:62:5b:41:af:a5:75: 2a:00:a3:45:72:0e:dc:17:39:93:69:6e:ec:c3:c7:72:f9:99: 09:82:14:89:bf:76:49:ce:e3:35:87:7f:c7:3b:49:ad:d3:df: e0:a1:3e:4f:c4:bb:8b:28:41:6b:b4:cd:e7:d4:ea:1c:32:a5: 9a:d8:26:29:a3:b7:3b:df:aa:f9:27:01:9b:cf:12:a4:40:0d: f0:43:46:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm2Sgf8mDcs8n3ohwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAz ODIzMB4XDTI1MDUwMTIwMDAwM1oXDTI1MDUwMzIwMDAwMFowLzEtMCsGA1UEAxMk YjZmZjRkMTQtZTk3Yi00MjdiLWI5NTEtODIwYzM3NDJlYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1M+xAvmXTbA4b2kOtVDIhHeWoOJlKZunMJc vN0bs/rNHT+yTV00sgYqPMzSfToKPXEnz5qafPQsP8fUQSGIH9gLbksVgUphXORU NV44wxEh7FnGJU3g9QwBnR3L82D7DLQkh7elvfIMwyACDK6NcK1sMXb1onc0hzne SSHHAI2iycnhssIR5EqBHoj7WXcw2eIbW/WZsOxSzkW5sEfDiaPSHiKuC6bHUaEy DrmksUa/VtTjWJJczWV68w6bqh+axLbOg42xajmwCrygxllbK88hR0rz4+0Lv8XL Sr4wSuto2a9L74RHARmnSUOD8UruVVUajNH5RlGSP+hJVMsWwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAlt+FTchUpjheanpg1dNAySo+DqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0 ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvNDBhNDg1YTQtZTkzNi00 MTc0LTg5OTktNTcxZTAzMjAzODIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBhNDg1YTQtZTkzNi00MTc0LTg5 OTktNTcxZTAzMjAzODIzLzQwYTQ4NWE0LWU5MzYtNDE3NC04OTk5LTU3MWUwMzIw MzgyMy5jcmwwHwYDVR0jBBgwFoAUjttyFOw3amh7eRYhJCe0sEBCSQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFl MDMyMDM4MjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBz++zbkGKHhQdaV/itkYiJ 8a78LkitGslH8NhgLPGGuf4PJBZMz0rqaA/SClw/ABMFn3CoE+kENL+OxMgs8eAp MssrM4ULgX9rranWTSOo6bGHlI8wT4lJWI/8DvC9CECkWiYEK4pAwhk0eNvbCkG8 Xxo1wiiDNqmys5g5/Fz0pNX2VyIx/oJ26t3psXZVwcYfUr6cl+RBY6bUCkh5ifvX Mw9elmqQby81C/phhl9iW0GvpXUqAKNFcg7cFzmTaW7sw8dy+ZkJghSJv3ZJzuM1 h3/HO0mt09/goT5PxLuLKEFrtM3n1OocMqWa2CYpo7c736r5JwGbzxKkQA3wQ0aE -----END CERTIFICATE-----Generated at Fri May 2 04:30:26 2025 by rpki-client