$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft File: a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft (raw, json) Hash identifier: Hv55tkEN4AKRzW6O+KGngiiClc890QUxyiU8/y1Fu0o= Subject key identifier: D2:54:5A:82:EC:2F:F2:FC:74:20:EE:D2:5C:BF:21:B5:0A:30:EE:80 Authority key identifier: EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C Certificate issuer: /CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255 Certificate serial: 010D0C9F43285849AAE3B9E7398F3D7DAEE3DC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft Manifest number: 010D0C9F43285845B57D6DC646D0267030024834 Signing time: Sun 27 Apr 2025 18:00:03 +0000 Manifest this update: Sun 27 Apr 2025 18:00:03 +0000 Manifest next update: Tue 29 Apr 2025 18:00:00 +0000 Files and hashes: 1: a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl (hash: 6okwq6u/mDYl6nGL5IlUZpvaxOgFjAt9SWDaCOYeU+Q=) 2: eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa (hash: DmO9VCupOZYcY+4gybhUvAxO9deDAX3S/mE6ekwERRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:e3:b9:e7:39:8f:3d:7d:ae:e3:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255 Validity Not Before: Apr 27 18:00:03 2025 GMT Not After : Apr 29 18:00:00 2025 GMT Subject: CN=eb767b7c-ce2f-4ea2-9ae9-91a7b38f5c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:29:6a:98:a2:8d:b7:00:17:64:f0:86:69: 93:89:a7:e4:92:6f:ac:12:4c:de:0a:d8:65:5c:1d: f1:6b:22:fd:1c:b1:64:d1:06:79:40:52:bf:ba:14: 4f:30:12:ad:ef:fb:66:e0:96:0d:0a:00:d6:b7:0b: 56:57:d5:05:80:ec:e4:e9:0f:31:fa:81:55:5d:15: 70:de:96:8a:a5:00:a7:0d:d2:1a:49:94:d5:f1:43: 24:9c:90:c2:ee:97:0c:b4:95:77:07:0c:c6:58:75: 8a:42:13:9f:98:36:b7:49:de:19:89:44:30:bc:d2: 0f:2f:8a:31:31:54:1d:4e:5a:0c:d1:e5:78:5a:b8: 1b:5b:87:02:46:b1:76:b0:52:c7:22:26:0a:33:23: 73:5d:5a:59:ad:94:d2:41:3d:71:27:7a:0e:30:3a: 52:c8:c8:e2:c0:3b:d9:3f:1f:d5:b8:c8:58:c0:d9: 58:a7:81:05:84:1e:1f:a7:ce:94:59:51:b9:84:cb: 05:31:84:04:ae:7e:7b:65:59:68:3a:0f:2c:78:17: e0:e9:79:a3:94:73:36:5e:2d:e6:7e:cd:8c:07:bc: 89:eb:cb:2d:ab:c3:26:cf:a6:44:99:09:ee:11:ab: df:28:5b:eb:d9:1b:c0:47:ca:7c:31:2c:03:51:62: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:5A:82:EC:2F:F2:FC:74:20:EE:D2:5C:BF:21:B5:0A:30:EE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl X509v3 Authority Key Identifier: keyid:EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3c:25:56:be:c5:0a:7c:29:58:9b:4e:a5:2f:e7:7e:41:68: fb:57:62:a9:13:e9:4b:6a:e9:ef:67:05:07:3e:49:7b:42:92: a2:e9:a1:af:1c:2a:cb:90:82:94:4d:ab:97:59:a9:48:01:2a: d1:51:9c:d5:7f:8e:a1:2e:8b:a5:b0:57:fa:7f:66:a8:64:db: c3:15:f3:06:69:16:c0:82:39:0e:c9:52:f7:6b:52:2d:13:f7: cf:00:57:73:70:2f:d1:5e:d0:7c:69:01:21:ed:2d:15:cc:cb: 76:f7:13:1c:0d:36:28:2f:c6:4f:05:ed:32:e5:19:60:a6:57: 92:d3:58:33:93:a0:2e:6a:ba:a2:06:23:96:1b:ff:e0:38:30: ec:8a:8e:0d:c5:e8:d8:75:2a:6c:34:c9:c6:07:e9:48:eb:72: 2e:8a:51:15:df:6b:92:74:70:10:b0:34:6c:9b:ab:c8:40:c7: 0a:10:85:c5:07:92:f8:f0:f4:33:b3:8a:df:ed:4d:ca:ae:e6: e0:af:33:c7:6c:ba:43:96:1e:03:53:75:f0:3f:45:6f:5f:fb: 97:df:eb:7a:e3:b1:15:97:3e:70:3a:c1:06:31:17:6b:ab:5e: cc:09:2c:38:7d:8d:f2:88:17:2f:03:eb:bf:14:a0:cf:c8:db: a5:43:35:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmq47nnOY89fa7j3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhOWMzZjAtOWY4Mi00ZTY0LWJiZDAtYmUzNjUyZmVi MjU1MB4XDTI1MDQyNzE4MDAwM1oXDTI1MDQyOTE4MDAwMFowLzEtMCsGA1UEAxMk ZWI3NjdiN2MtY2UyZi00ZWEyLTlhZTktOTFhN2IzOGY1YzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkakpapiijbcAF2TwhmmTiafkkm+sEkzeCthl XB3xayL9HLFk0QZ5QFK/uhRPMBKt7/tm4JYNCgDWtwtWV9UFgOzk6Q8x+oFVXRVw 3paKpQCnDdIaSZTV8UMknJDC7pcMtJV3BwzGWHWKQhOfmDa3Sd4ZiUQwvNIPL4ox MVQdTloM0eV4WrgbW4cCRrF2sFLHIiYKMyNzXVpZrZTSQT1xJ3oOMDpSyMjiwDvZ Px/VuMhYwNlYp4EFhB4fp86UWVG5hMsFMYQErn57ZVloOg8seBfg6XmjlHM2Xi3m fs2MB7yJ68stq8Mmz6ZEmQnuEavfKFvr2RvAR8p8MSwDUWJMTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNJUWoLsL/L8dCDu0ly/IbUKMO6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmE5 YzNmMC05ZjgyLTRlNjQtYmJkMC1iZTM2NTJmZWIyNTUvYTJhOWMzZjAtOWY4Mi00 ZTY0LWJiZDAtYmUzNjUyZmViMjU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJhOWMzZjAtOWY4Mi00ZTY0LWJi ZDAtYmUzNjUyZmViMjU1L2EyYTljM2YwLTlmODItNGU2NC1iYmQwLWJlMzY1MmZl YjI1NS5jcmwwHwYDVR0jBBgwFoAU6h6k6ep7kmfOIF+dJ14SzKtJ/CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMmE5YzNmMC05ZjgyLTRlNjQtYmJkMC1iZTM2 NTJmZWIyNTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAPCVWvsUKfClYm06lL+d+ QWj7V2KpE+lLaunvZwUHPkl7QpKi6aGvHCrLkIKUTauXWalIASrRUZzVf46hLoul sFf6f2aoZNvDFfMGaRbAgjkOyVL3a1ItE/fPAFdzcC/RXtB8aQEh7S0VzMt29xMc DTYoL8ZPBe0y5RlgpleS01gzk6AuarqiBiOWG//gODDsio4NxejYdSpsNMnGB+lI 63IuilEV32uSdHAQsDRsm6vIQMcKEIXFB5L48PQzs4rf7U3KrubgrzPHbLpDlh4D U3XwP0VvX/uX3+t647EVlz5wOsEGMRdrq17MCSw4fY3yiBcvA+u/FKDPyNulQzUB -----END CERTIFICATE-----Generated at Sun Apr 27 22:20:08 2025 by rpki-client