$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft File: 7c74b511-7d11-4209-84c2-f7b800242a7b.mft (raw, json) Hash identifier: l0YqXLeybGBZr2Kpq4Ml/J4LJbwRCUrjxoT98LBhxaA= Subject key identifier: 01:66:C1:11:F9:CE:BB:31:6C:03:CA:24:18:51:D4:06:24:17:51:FE Authority key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Certificate issuer: /CN=7c74b511-7d11-4209-84c2-f7b800242a7b Certificate serial: 010D0C9F43285849AD374D469AF5A65767DBD240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft Manifest number: 010D0C9F4328584073A855906714643088FFBA60 Signing time: Mon 28 Apr 2025 14:00:02 +0000 Manifest this update: Mon 28 Apr 2025 14:00:02 +0000 Manifest next update: Wed 30 Apr 2025 14:00:00 +0000 Files and hashes: 1: 7c74b511-7d11-4209-84c2-f7b800242a7b.crl (hash: 8tJG69syti9l6yVw3g+qrMnI4hwWZ2JmUv7EQ6vWnDA=) 2: d3a2508e-0220-3c1b-9180-e11c07412c6c.roa (hash: pXfsCSKGEPJbsRZHBWoSixjdOUKvpZUZknUPPQzIKTA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:37:4d:46:9a:f5:a6:57:67:db:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Validity Not Before: Apr 28 14:00:02 2025 GMT Not After : Apr 30 14:00:00 2025 GMT Subject: CN=a9a29186-1815-448e-a416-abbdcf247e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:10:bb:d3:f3:23:95:84:89:5f:8d:6a:3d: de:3c:58:cf:73:5e:e6:6b:66:b4:5d:24:2e:d2:9f: 7b:4e:1e:e2:23:42:99:35:e1:dc:db:0d:07:b3:e2: 49:85:1c:1f:28:dd:42:e5:9f:54:e2:b3:1e:df:69: c0:d7:e2:c2:5e:19:23:ea:73:9a:e6:d4:8e:89:64: 3c:95:7f:af:7e:53:ff:ec:b2:5b:41:7b:a4:de:99: 3f:c5:1d:2c:a7:da:45:24:c3:06:31:3a:46:b9:48: a1:14:94:86:aa:16:78:4b:fe:f2:b8:dd:31:f6:3d: 5c:74:68:1d:2f:ce:46:d9:1f:a3:6f:5f:f1:75:29: 58:ff:fa:34:7d:69:c3:95:d3:0e:51:16:2d:6b:ca: 41:a9:0c:77:31:7c:24:b8:88:b7:8e:b9:06:10:74: 42:0d:dc:12:42:3b:85:54:ac:3c:87:31:64:5a:69: ef:77:61:2c:d0:af:37:7c:f4:a9:c6:3d:6a:2c:08: 4b:66:fb:74:ff:97:db:c8:9d:dc:f0:47:6b:17:6d: 2a:72:eb:ce:b8:9a:64:72:70:33:21:60:74:db:8d: 42:c8:53:a7:5b:79:6d:1e:7f:5e:95:14:5c:f3:20: cd:48:bc:9a:b9:95:9e:39:9c:23:ed:bf:d2:89:fa: f8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:C1:11:F9:CE:BB:31:6C:03:CA:24:18:51:D4:06:24:17:51:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.crl X509v3 Authority Key Identifier: keyid:76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:55:94:f2:ae:d9:ef:d5:c2:53:a3:e2:6f:8f:47:87:1a:fa: b8:af:05:37:e5:1d:51:1f:6d:85:fc:e5:bf:80:6e:e4:82:3a: fc:e6:6f:89:69:c1:e5:7f:7f:bf:f1:9b:99:17:c1:d8:e9:33: 0c:59:5c:ee:6a:fb:d2:31:81:5e:a9:7d:cb:c4:fb:00:79:7a: 78:2c:05:bb:04:98:9d:fa:21:49:50:b0:71:47:63:73:44:54: e4:1a:34:cd:51:05:eb:6a:1f:56:9d:55:37:95:28:bd:65:dc: 4c:dd:e6:49:3e:cb:7f:2d:6d:b7:3e:eb:68:df:8c:f7:4c:54: 49:40:43:94:95:2b:85:05:16:38:94:ac:ff:36:54:cf:8b:56: 3f:7b:05:aa:1f:81:dd:f1:91:ce:90:2c:20:4e:34:69:06:70: df:59:65:38:5b:16:c2:eb:96:05:f3:4f:4d:b8:07:24:45:d7: a6:43:bb:86:db:0d:23:57:ec:71:01:6a:95:74:8e:07:b7:af: a0:5d:4d:af:ad:40:e8:c2:d7:cb:7c:0c:2a:e6:53:2a:8a:de: 0f:68:fa:13:07:d8:d6:62:34:63:49:5d:7d:68:bb:23:3d:f8: 8a:3e:2c:3b:91:ff:e4:25:1b:f1:c8:06:02:99:f4:cc:4f:c0: 61:14:ea:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtN01GmvWmV2fb0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQy YTdiMB4XDTI1MDQyODE0MDAwMloXDTI1MDQzMDE0MDAwMFowLzEtMCsGA1UEAxMk YTlhMjkxODYtMTgxNS00NDhlLWE0MTYtYWJiZGNmMjQ3ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqScQu9PzI5WEiV+Naj3ePFjPc17ma2a0XSQu 0p97Th7iI0KZNeHc2w0Hs+JJhRwfKN1C5Z9U4rMe32nA1+LCXhkj6nOa5tSOiWQ8 lX+vflP/7LJbQXuk3pk/xR0sp9pFJMMGMTpGuUihFJSGqhZ4S/7yuN0x9j1cdGgd L85G2R+jb1/xdSlY//o0fWnDldMOURYta8pBqQx3MXwkuIi3jrkGEHRCDdwSQjuF VKw8hzFkWmnvd2Es0K83fPSpxj1qLAhLZvt0/5fbyJ3c8EdrF20qcuvOuJpkcnAz IWB0241CyFOnW3ltHn9elRRc8yDNSLyauZWeOZwj7b/Sifr4FwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAFmwRH5zrsxbAPKJBhR1AYkF1H+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0 YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvN2M3NGI1MTEtN2QxMS00 MjA5LTg0YzItZjdiODAwMjQyYTdiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2M3NGI1MTEtN2QxMS00MjA5LTg0 YzItZjdiODAwMjQyYTdiLzdjNzRiNTExLTdkMTEtNDIwOS04NGMyLWY3YjgwMDI0 MmE3Yi5jcmwwHwYDVR0jBBgwFoAUdrk2h7hOo9mzUTQCIdYSL4LkLOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4 MDAyNDJhN2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChVZTyrtnv1cJTo+Jvj0eH Gvq4rwU35R1RH22F/OW/gG7kgjr85m+JacHlf3+/8ZuZF8HY6TMMWVzuavvSMYFe qX3LxPsAeXp4LAW7BJid+iFJULBxR2NzRFTkGjTNUQXrah9WnVU3lSi9ZdxM3eZJ Pst/LW23Puto34z3TFRJQEOUlSuFBRY4lKz/NlTPi1Y/ewWqH4Hd8ZHOkCwgTjRp BnDfWWU4WxbC65YF809NuAckRdemQ7uG2w0jV+xxAWqVdI4Ht6+gXU2vrUDowtfL fAwq5lMqit4PaPoTB9jWYjRjSV19aLsjPfiKPiw7kf/kJRvxyAYCmfTMT8BhFOou -----END CERTIFICATE-----Generated at Tue Apr 29 03:08:38 2025 by rpki-client