$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft File: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft (raw, json) Hash identifier: nTFvSG7NgvS3bxjgN4WnDOGW5GF++omZcZ4ENFnGj3g= Subject key identifier: C0:80:12:64:E6:35:64:95:A2:B7:68:1A:A0:A3:E6:C0:94:AA:E5:D0 Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF Certificate issuer: /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89 Certificate serial: 010D0C9F43285849A7BFBA0DA318EBC17CF2BB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft Manifest number: 010D0C9F43285842EA6511F68AE8111CAA609803 Signing time: Sat 26 Apr 2025 15:00:03 +0000 Manifest this update: Sat 26 Apr 2025 15:00:03 +0000 Manifest next update: Tue 29 Apr 2025 15:00:00 +0000 Files and hashes: 1: 1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (hash: CemT6VqLRlqtb0Qb+BAb6xQktn0xxGPFEC8Nvf83AmI=) 2: 23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (hash: nX1mw3e612UYc64y1XT4cUtKACux9jTlzf10ZSzLXQY=) 3: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl (hash: onNiFAwswyJWxIDkJekA+ASAYrMFwD0HZiHuboH/VkI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:bf:ba:0d:a3:18:eb:c1:7c:f2:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89 Validity Not Before: Apr 26 15:00:03 2025 GMT Not After : Apr 29 15:00:00 2025 GMT Subject: CN=63a87da7-dd4e-46ba-8c2a-ff0ddff30411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:7e:b2:17:43:f6:77:9d:e0:c9:92:02:f4: 8e:05:c4:d9:05:a2:2c:31:6f:12:82:0d:92:14:e8: c5:87:53:d8:e8:d3:08:48:af:a3:ac:67:08:b7:4e: ba:a9:33:00:a8:52:a7:aa:09:2f:90:65:fc:5d:7c: fe:c7:ed:6a:3d:6d:44:bf:8d:0d:a2:05:c4:d2:c9: 97:7b:36:79:d0:73:2b:fe:fd:d3:30:3a:09:aa:8a: a6:c4:00:b8:cb:ee:06:65:b9:ec:b0:b2:bc:79:df: 56:b9:48:29:79:1f:f9:0a:58:26:2d:b3:29:ac:c2: 41:7c:f3:41:4d:5a:5d:6a:ca:d6:fc:30:a1:ef:22: 4b:84:6d:60:78:00:9a:5e:29:13:f0:50:01:11:8e: 9e:8a:a0:e1:83:79:2e:3e:a1:c1:d5:93:80:9f:45: b8:d2:73:46:11:2d:69:d8:52:54:db:b8:e9:f0:05: d7:c2:37:e2:41:50:d7:c8:f6:00:18:b9:fd:52:94: 5b:b1:07:58:f8:9b:ed:5d:17:3e:b3:f2:ad:57:04: f6:5a:bf:d4:07:41:c2:08:bf:e3:5e:87:f3:84:c3: cf:be:e0:23:94:20:f1:33:4a:1d:f7:0e:73:32:27: eb:ed:2c:98:05:14:96:66:53:25:34:df:e8:51:0f: 8d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:12:64:E6:35:64:95:A2:B7:68:1A:A0:A3:E6:C0:94:AA:E5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl X509v3 Authority Key Identifier: keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a7:6e:64:92:66:25:ac:2b:1f:aa:b6:59:25:2a:4d:cc:95: 54:aa:f7:1f:a6:d8:bb:67:8c:6a:ef:b9:9b:b1:a9:11:39:2d: 80:fe:f2:58:12:13:5d:19:d9:6c:2e:31:44:b0:fa:50:1b:8c: ea:51:6f:1c:df:2f:90:fc:50:ec:9b:3e:19:94:1e:41:d2:0a: 15:ce:20:55:65:93:31:f3:38:db:49:8d:62:36:66:e4:1d:ad: e9:0a:25:9b:ff:e6:aa:18:1b:cb:f9:05:c5:6f:9a:7e:db:c3: 2a:ce:97:1b:a3:36:ed:c3:04:83:c6:5d:77:f1:e1:ec:9d:9c: 09:71:ab:02:0b:5b:b5:a5:9b:a2:eb:28:91:a1:ca:ab:2c:0e: ad:a8:1a:e0:c0:76:3f:a0:db:83:bc:74:d7:f6:a7:b6:bc:2e: d1:94:87:09:67:f8:ee:ed:55:7b:43:40:eb:d3:9a:4c:01:43: ef:ca:98:fc:19:1e:6b:00:fe:12:3b:66:69:84:fd:b4:33:08: 0c:4e:c0:3e:53:cf:07:a6:41:ef:2a:a9:9b:03:f8:1d:c5:00: e4:b0:c5:72:82:22:67:7a:6d:4c:03:3f:ea:39:97:8d:bf:14: db:12:f6:20:f3:00:87:b6:b6:fc:9f:74:b0:90:ac:d3:51:6c: c8:20:b5:e6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnv7oNoxjrwXzyu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZDNiNTctNGRhNC00NDUyLThiNWUtOWI1MjQ4NDk0 Yjg5MB4XDTI1MDQyNjE1MDAwM1oXDTI1MDQyOTE1MDAwMFowLzEtMCsGA1UEAxMk NjNhODdkYTctZGQ0ZS00NmJhLThjMmEtZmYwZGRmZjMwNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dh+shdD9ned4MmSAvSOBcTZBaIsMW8Sgg2S FOjFh1PY6NMISK+jrGcIt066qTMAqFKnqgkvkGX8XXz+x+1qPW1Ev40NogXE0smX ezZ50HMr/v3TMDoJqoqmxAC4y+4GZbnssLK8ed9WuUgpeR/5ClgmLbMprMJBfPNB TVpdasrW/DCh7yJLhG1geACaXikT8FABEY6eiqDhg3kuPqHB1ZOAn0W40nNGES1p 2FJU27jp8AXXwjfiQVDXyPYAGLn9UpRbsQdY+JvtXRc+s/KtVwT2Wr/UB0HCCL/j XofzhMPPvuAjlCDxM0od9w5zMifr7SyYBRSWZlMlNN/oUQ+NYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMCAEmTmNWSVordoGqCj5sCUquXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YzFk M2I1Ny00ZGE0LTQ0NTItOGI1ZS05YjUyNDg0OTRiODkvOGMxZDNiNTctNGRhNC00 NDUyLThiNWUtOWI1MjQ4NDk0Yjg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGMxZDNiNTctNGRhNC00NDUyLThi NWUtOWI1MjQ4NDk0Yjg5LzhjMWQzYjU3LTRkYTQtNDQ1Mi04YjVlLTliNTI0ODQ5 NGI4OS5jcmwwHwYDVR0jBBgwFoAURur3uYQbE3zNzB/dkUojjTD5Kf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YzFkM2I1Ny00ZGE0LTQ0NTItOGI1ZS05YjUy NDg0OTRiODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFp25kkmYlrCsfqrZZJSpN zJVUqvcfpti7Z4xq77mbsakROS2A/vJYEhNdGdlsLjFEsPpQG4zqUW8c3y+Q/FDs mz4ZlB5B0goVziBVZZMx8zjbSY1iNmbkHa3pCiWb/+aqGBvL+QXFb5p+28Mqzpcb ozbtwwSDxl138eHsnZwJcasCC1u1pZui6yiRocqrLA6tqBrgwHY/oNuDvHTX9qe2 vC7RlIcJZ/ju7VV7Q0Dr05pMAUPvypj8GR5rAP4SO2ZphP20MwgMTsA+U88HpkHv KqmbA/gdxQDksMVygiJnem1MAz/qOZeNvxTbEvYg8wCHtrb8n3SwkKzTUWzIILXm -----END CERTIFICATE-----Generated at Sun Apr 27 11:23:01 2025 by rpki-client