$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft File: cea06048-7bc3-4b65-8443-4c600b73bc11.mft (raw, json) Hash identifier: Rgtk8TV71nryzEUtmrJhz7/yCG4KTaWxeoQ15QwcH8w= Subject key identifier: B9:F9:50:72:F9:FB:70:37:D8:2B:A5:41:93:E0:AA:63:58:6E:75:85 Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Certificate issuer: /CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Certificate serial: 010D0C9F43285849AE9CA34B68894143655503E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft Manifest number: 010D0C9F4328584073A8389DDFFA881819A768E1 Signing time: Tue 29 Apr 2025 02:00:03 +0000 Manifest this update: Tue 29 Apr 2025 02:00:03 +0000 Manifest next update: Fri 02 May 2025 02:00:00 +0000 Files and hashes: 1: 36273f28-a723-33e1-a389-9416819cddb6.roa (hash: 6EaNLAP5QVf/bKVDqIM5GR2TMRs5cAGxzmVQDAum0HI=) 2: cea06048-7bc3-4b65-8443-4c600b73bc11.crl (hash: AmoYtWYQr+c6ZgQX33d+OGIO6lfHcjZQGGtjqflh+YY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:9c:a3:4b:68:89:41:43:65:55:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Validity Not Before: Apr 29 02:00:03 2025 GMT Not After : May 2 02:00:00 2025 GMT Subject: CN=fac1eda5-6312-48ee-b126-24ec66383eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:c9:fd:b6:0d:44:f9:e9:ad:42:6c:22:08: 98:3b:89:cf:28:6a:15:f4:08:9b:f0:25:c3:cf:fb: 5e:20:d6:c5:81:87:3c:8e:e4:76:8b:c2:f4:8b:70: 79:c0:2b:29:dc:89:e1:e6:89:12:56:72:81:d7:d3: f2:75:43:77:66:20:cc:64:57:ec:00:be:9f:cf:d2: 3d:67:7c:96:56:d6:62:32:64:83:5a:a4:eb:c6:b7: 48:3a:86:80:01:0e:72:a3:bb:56:8a:b5:b3:48:5d: fa:54:47:93:32:fc:f1:77:6e:73:4b:35:df:aa:37: 55:c0:5c:4b:36:c1:c2:56:3a:23:a7:6b:39:47:1b: 7b:fc:10:34:1a:bf:38:5d:2d:35:8f:6d:06:da:e4: dc:45:67:62:43:36:2c:a1:61:4d:01:6c:8d:d1:a7: 95:37:41:bd:18:e7:fa:f0:80:24:60:81:c2:21:fa: 6f:5d:ed:32:18:4e:58:b1:01:66:6a:09:34:15:b9: d4:94:7c:62:ce:c4:9d:d8:d3:45:96:e2:1a:5a:30: 44:9b:91:28:48:be:df:51:7e:35:18:45:b8:d8:f0: 1e:c1:f5:a0:cf:2c:00:6e:1f:f3:37:70:5f:4f:f3: c3:a4:27:e7:4d:aa:dc:57:03:60:d4:c8:dd:e0:e7: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F9:50:72:F9:FB:70:37:D8:2B:A5:41:93:E0:AA:63:58:6E:75:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl X509v3 Authority Key Identifier: keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0a:67:f2:3f:08:4d:d5:a1:00:0b:89:c0:5d:54:97:2f:8f: 0b:36:98:79:a8:78:28:30:42:99:82:0e:40:eb:8c:43:67:d0: c8:8f:79:87:c9:76:03:95:24:f1:ff:59:89:94:4d:33:98:22: 9b:78:60:e2:fc:0d:75:2c:18:43:d5:9c:3d:bf:d3:7f:4f:04: 5f:ac:b6:b1:f7:a2:f1:99:2d:2a:d1:b2:cb:29:fd:00:49:e1: 9f:34:34:d6:7f:65:fa:0b:df:c6:2b:9a:a7:e0:fa:5c:13:91: 81:58:7e:84:c8:3a:be:5d:a5:54:7e:b1:1b:f8:43:b3:c7:9e: ef:e0:12:58:3e:4c:7c:68:d9:dd:e6:42:ed:ef:e3:4b:a7:a9: a0:79:e1:ed:42:43:c9:9d:35:82:50:d9:84:9d:e2:8b:5a:f8: db:c9:ca:2a:b4:07:8f:01:8b:50:98:9d:4b:9c:f8:77:7e:e5: 32:1a:b3:ce:71:20:68:62:b8:07:68:9a:6a:16:53:5e:38:5d: dd:57:4c:ba:9c:b6:ab:5c:df:4d:55:ed:7e:7e:45:85:d1:1d: ce:25:d9:e9:6f:8b:c0:01:70:87:9b:b8:1e:e1:6f:c2:13:c6: ea:f6:5b:8e:f6:1e:6d:c7:0b:71:24:09:0e:2b:35:b2:1e:48: 95:16:47:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmunKNLaIlBQ2VVA+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNi YzExMB4XDTI1MDQyOTAyMDAwM1oXDTI1MDUwMjAyMDAwMFowLzEtMCsGA1UEAxMk ZmFjMWVkYTUtNjMxMi00OGVlLWIxMjYtMjRlYzY2MzgzZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NXJ/bYNRPnprUJsIgiYO4nPKGoV9Aib8CXD z/teINbFgYc8juR2i8L0i3B5wCsp3Inh5okSVnKB19PydUN3ZiDMZFfsAL6fz9I9 Z3yWVtZiMmSDWqTrxrdIOoaAAQ5yo7tWirWzSF36VEeTMvzxd25zSzXfqjdVwFxL NsHCVjojp2s5Rxt7/BA0Gr84XS01j20G2uTcRWdiQzYsoWFNAWyN0aeVN0G9GOf6 8IAkYIHCIfpvXe0yGE5YsQFmagk0FbnUlHxizsSd2NNFluIaWjBEm5EoSL7fUX41 GEW42PAewfWgzywAbh/zN3BfT/PDpCfnTarcVwNg1Mjd4OdV9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLn5UHL5+3A32CulQZPgqmNYbnWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEw NjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvY2VhMDYwNDgtN2JjMy00 YjY1LTg0NDMtNGM2MDBiNzNiYzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2VhMDYwNDgtN2JjMy00YjY1LTg0 NDMtNGM2MDBiNzNiYzExL2NlYTA2MDQ4LTdiYzMtNGI2NS04NDQzLTRjNjAwYjcz YmMxMS5jcmwwHwYDVR0jBBgwFoAUcv59GQtXmt7bYV7V2MtgXR9QrtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYw MGI3M2JjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTCmfyPwhN1aEAC4nAXVSX L48LNph5qHgoMEKZgg5A64xDZ9DIj3mHyXYDlSTx/1mJlE0zmCKbeGDi/A11LBhD 1Zw9v9N/TwRfrLax96LxmS0q0bLLKf0ASeGfNDTWf2X6C9/GK5qn4PpcE5GBWH6E yDq+XaVUfrEb+EOzx57v4BJYPkx8aNnd5kLt7+NLp6mgeeHtQkPJnTWCUNmEneKL WvjbycoqtAePAYtQmJ1LnPh3fuUyGrPOcSBoYrgHaJpqFlNeOF3dV0y6nLarXN9N Ve1+fkWF0R3OJdnpb4vAAXCHm7ge4W/CE8bq9luO9h5txwtxJAkOKzWyHkiVFkcV -----END CERTIFICATE-----Generated at Tue Apr 29 04:18:08 2025 by rpki-client