$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft File: add35f11-0294-4be9-94b7-49cac2bcb001.mft (raw, json) Hash identifier: 7MHwiN/b6tBWNcDIXfNXHSgzRzL+VoZEoXHW1kqlmfk= Subject key identifier: F8:C6:0D:EA:2C:BA:3C:90:86:DE:E2:F3:5A:47:6B:97:C1:D6:19:B9 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F43285849A7DD879F43E2D28D401D2640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft Manifest number: 010D0C9F4328584073A81AE12C42C5F2542C3187 Signing time: Sat 26 Apr 2025 16:00:07 +0000 Manifest this update: Sat 26 Apr 2025 16:00:07 +0000 Manifest next update: Tue 29 Apr 2025 16:00:00 +0000 Files and hashes: 1: 724dc813-9136-3075-bcba-f77834af4133.roa (hash: N650mvvedp/nTrcW2RaCZjFJAgGTBSBghQAUwWS8Evg=) 2: 76b42bc4-57ac-394d-ba88-7d614145118a.roa (hash: hFMG4jFkJyDq/sMvj+dV7GVUULdWOv8RXswqoQcpFF0=) 3: add35f11-0294-4be9-94b7-49cac2bcb001.crl (hash: ZsxocTOhOi7Of7hIvUO28tGIpjvPcmlVOfCkyMI6Q+E=) 4: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (hash: MH3ZuKJvFkQ/LDsK1Mp6WlDekKQmZYewR7gCkxn1AE0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:dd:87:9f:43:e2:d2:8d:40:1d:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Apr 26 16:00:07 2025 GMT Not After : Apr 29 16:00:00 2025 GMT Subject: CN=c2fbc94f-da13-4d92-8943-4835248b367b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:b0:59:09:9c:06:5a:78:56:33:3b:97:95: 9c:fd:d7:17:02:14:ab:cf:61:08:0f:66:e4:9d:8a: 5c:5c:1c:bc:96:2b:21:22:8d:2a:1a:4b:b3:e3:6b: 1c:5a:8e:6e:9d:e4:d8:86:7d:29:d5:ac:db:82:e6: fa:5e:f3:87:16:f6:21:19:ea:ac:49:b0:15:c0:11: ef:8f:9b:7b:22:14:a5:3b:02:f0:7a:94:eb:55:10: d8:98:52:11:9e:65:33:90:d3:45:4f:a7:3f:81:eb: d5:1a:03:81:7c:32:28:72:85:ba:40:c5:b0:5b:17: a0:9b:18:6e:df:6c:31:43:ca:83:7f:1a:44:19:e4: cd:2a:63:b4:7a:97:76:6d:29:68:2b:c7:c4:90:a8: 4e:05:2c:73:25:b4:6f:a0:13:82:35:7d:0f:d3:ee: cd:e2:f4:a6:41:e0:15:a9:9a:b4:11:93:b3:ad:b7: af:d9:a7:72:b5:95:d0:76:03:a8:be:0a:f9:48:94: b4:2a:83:a7:0a:09:34:12:9d:8c:4f:39:25:10:54: d8:73:35:d4:fb:91:33:b8:09:da:43:da:e2:c9:4e: 48:fe:98:fb:77:a9:9a:d9:71:dc:c4:b3:38:e9:66: a5:dc:5e:5e:f1:0a:03:dd:8d:07:9d:aa:26:b1:fa: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C6:0D:EA:2C:BA:3C:90:86:DE:E2:F3:5A:47:6B:97:C1:D6:19:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5e:de:6f:72:bf:38:8c:fd:37:6e:c2:4d:21:73:38:d9:70: eb:1f:07:d5:a6:b4:7e:ce:4d:98:bf:69:f6:d5:7d:b1:c8:f6: c0:bc:87:cc:c3:67:1b:f3:93:93:8b:36:81:92:10:e1:fa:4a: 83:b1:02:b9:cc:61:56:78:02:44:2b:45:a4:e0:eb:9d:c2:46: 5f:a2:90:27:84:75:64:55:7a:83:60:58:8d:77:f5:73:fb:1f: 16:d7:80:6d:3c:b7:eb:3f:0f:b4:c5:7e:99:90:81:41:3f:71: de:0c:19:64:25:66:2a:4d:52:28:33:7e:84:cb:30:d0:5a:06: 3c:dd:2a:a9:96:ce:df:ff:cf:f6:2b:40:cd:1c:e0:0f:a9:f3: d5:af:9f:08:8e:5f:00:b0:00:7d:9f:0f:c8:40:bb:7e:83:d5: da:0e:d4:71:11:54:be:dd:55:f5:36:73:c5:39:b3:df:1f:2f: 36:14:82:87:fc:8e:21:54:43:25:92:0f:5f:a7:22:e2:9d:7a: 29:b5:46:92:00:8c:05:b9:72:35:ee:ef:43:a8:19:4c:54:e1: b0:55:48:8e:7f:22:38:d0:0c:be:a9:46:f6:62:a4:6d:68:50: 0b:c8:a8:4f:0f:06:df:f7:1d:d2:6d:ef:a8:68:1d:1a:bc:00: 16:d6:eb:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmn3YefQ+LSjUAdJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDQyNjE2MDAwN1oXDTI1MDQyOTE2MDAwMFowLzEtMCsGA1UEAxMk YzJmYmM5NGYtZGExMy00ZDkyLTg5NDMtNDgzNTI0OGIzNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLiwWQmcBlp4VjM7l5Wc/dcXAhSrz2EID2bk nYpcXBy8lishIo0qGkuz42scWo5uneTYhn0p1azbgub6XvOHFvYhGeqsSbAVwBHv j5t7IhSlOwLwepTrVRDYmFIRnmUzkNNFT6c/gevVGgOBfDIocoW6QMWwWxegmxhu 32wxQ8qDfxpEGeTNKmO0epd2bSloK8fEkKhOBSxzJbRvoBOCNX0P0+7N4vSmQeAV qZq0EZOzrbev2adytZXQdgOovgr5SJS0KoOnCgk0Ep2MTzklEFTYczXU+5EzuAna Q9riyU5I/pj7d6ma2XHcxLM46Wal3F5e8QoD3Y0Hnaomsfo8bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPjGDeosujyQht7i81pHa5fB1hm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYWRkMzVmMTEtMDI5NC00 YmU5LTk0YjctNDljYWMyYmNiMDAxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPXt5vcr84jP03bsJNIXM4 2XDrHwfVprR+zk2Yv2n21X2xyPbAvIfMw2cb85OTizaBkhDh+kqDsQK5zGFWeAJE K0Wk4OudwkZfopAnhHVkVXqDYFiNd/Vz+x8W14BtPLfrPw+0xX6ZkIFBP3HeDBlk JWYqTVIoM36EyzDQWgY83Sqpls7f/8/2K0DNHOAPqfPVr58Ijl8AsAB9nw/IQLt+ g9XaDtRxEVS+3VX1NnPFObPfHy82FIKH/I4hVEMlkg9fpyLinXoptUaSAIwFuXI1 7u9DqBlMVOGwVUiOfyI40Ay+qUb2YqRtaFALyKhPDwbf9x3Sbe+oaB0avAAW1uth -----END CERTIFICATE-----Generated at Sun Apr 27 07:41:35 2025 by rpki-client