$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft File: e88e678b-ac52-45d1-af21-8805bf2307d2.mft (raw, json) Hash identifier: pc0awcD4xVFm3/JajgqMAT5bYh+UVaEArX3s8StOmjI= Subject key identifier: 29:E1:7F:9C:23:FF:D6:C5:04:7B:F5:E7:AB:83:33:69:FD:61:17:78 Authority key identifier: F4:B6:0B:45:B2:E6:55:85:08:51:6D:B8:29:24:92:E7:8B:F2:A2:19 Certificate issuer: /CN=e88e678b-ac52-45d1-af21-8805bf2307d2 Certificate serial: 010D0C9F43285849A7FB48106D74D3DD6FDA7880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft Manifest number: 010D0C9F43285846A5806F6F05D1DFA1BE95D88D Signing time: Sat 26 Apr 2025 17:00:03 +0000 Manifest this update: Sat 26 Apr 2025 17:00:03 +0000 Manifest next update: Tue 29 Apr 2025 17:00:00 +0000 Files and hashes: 1: 712d1a2b-b5b8-3735-ab0d-e057322b7e05.roa (hash: o1nUQyEfvGK6avVY1rMc5d2uDbFbsDsHlhUAzuo7nIk=) 2: e88e678b-ac52-45d1-af21-8805bf2307d2.crl (hash: fMpRtFi7uOAmCZOdfN6TociWXECq9aTn1onOJ/Dh74M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:fb:48:10:6d:74:d3:dd:6f:da:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e88e678b-ac52-45d1-af21-8805bf2307d2 Validity Not Before: Apr 26 17:00:03 2025 GMT Not After : Apr 29 17:00:00 2025 GMT Subject: CN=0b52387d-a8d1-45fb-8286-a25f57e70cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:76:39:61:2b:4e:5b:6c:c9:dd:63:15:98: 2a:fc:01:fb:0b:37:94:c4:ff:ea:92:e3:a8:fa:4a: 57:70:1c:5b:e5:4a:84:a3:88:c6:ba:d3:a7:7f:79: b9:f5:6b:79:62:39:a5:e0:3d:ed:7c:02:19:d5:7d: f2:d4:0c:c4:53:55:f7:9a:bd:e1:35:ad:1b:db:ff: f9:66:fd:26:63:09:ce:2b:c0:2a:25:84:59:f4:3d: e6:37:f0:6f:9f:3d:57:d3:1f:ab:ab:1a:c1:bb:49: d9:58:64:98:19:eb:e2:e3:95:89:76:8f:0b:bc:74: 7c:88:c9:ab:65:84:86:0d:11:1b:b6:a6:66:7a:c2: e2:ff:0c:d7:9d:3c:7a:37:98:18:23:1f:de:a6:b7: aa:fb:72:37:b1:1a:b2:76:11:bc:ef:0b:6b:81:29: c6:10:98:3d:52:d6:40:5c:6e:4a:87:35:ac:f0:c9: 73:3c:c7:4b:3c:b1:39:f8:91:8c:95:02:bc:bc:31: 8f:8d:44:63:27:02:fa:0f:f5:0d:6b:a9:ed:40:35: 1f:fd:48:4b:87:4a:ee:a1:93:ac:78:13:79:cb:a0: 97:5a:2b:a2:8d:bd:b4:a3:bd:2d:fe:e8:76:bc:88: dd:fc:20:a7:ac:0e:c0:69:e9:0b:d4:dc:7f:2b:12: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E1:7F:9C:23:FF:D6:C5:04:7B:F5:E7:AB:83:33:69:FD:61:17:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2/e88e678b-ac52-45d1-af21-8805bf2307d2.crl X509v3 Authority Key Identifier: keyid:F4:B6:0B:45:B2:E6:55:85:08:51:6D:B8:29:24:92:E7:8B:F2:A2:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e88e678b-ac52-45d1-af21-8805bf2307d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e6:e7:88:ff:84:c8:9b:e1:e7:59:cd:21:5e:98:b1:1b:30: 20:98:32:3f:09:f3:b6:a1:b9:0a:d4:d9:1d:63:22:67:10:8c: 57:27:96:66:69:21:39:26:b8:30:60:2b:86:7c:a3:a6:91:98: a4:12:d8:da:7f:6e:ea:a6:e5:37:af:aa:83:da:f8:97:3e:11: 6c:a5:6c:95:55:e7:0a:1b:34:ad:71:28:94:ac:99:0e:e3:ee: 0e:cc:11:8a:db:71:55:cc:cc:7d:53:29:8b:f3:f1:ba:76:fc: 22:fe:7e:a1:ba:c0:bd:1d:31:e4:fe:46:39:43:37:f1:3f:a3: 5e:af:c5:e4:6f:43:6f:50:1c:d4:98:e8:e8:12:75:ff:14:ef: 0c:6e:9a:36:21:5e:39:83:48:94:76:48:0c:1a:49:f8:62:f7: 33:9a:2c:fe:82:7a:e1:3a:8d:bc:7f:4a:f3:10:4c:67:3e:c4: 04:9f:03:8a:7f:b1:d6:ce:27:2f:73:cd:c8:cf:e8:22:fa:a5: e7:04:f2:9e:0a:00:da:9e:2a:6c:c7:aa:7e:91:49:d0:72:bd: c9:9d:af:31:21:5e:61:3b:6a:5e:d8:c5:95:2b:f6:80:be:d9: 8c:85:a5:56:b2:74:c0:28:d0:f1:d5:af:6f:87:af:ec:04:a4: c0:7f:b5:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmn+0gQbXTT3W/aeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg4ZTY3OGItYWM1Mi00NWQxLWFmMjEtODgwNWJmMjMw N2QyMB4XDTI1MDQyNjE3MDAwM1oXDTI1MDQyOTE3MDAwMFowLzEtMCsGA1UEAxMk MGI1MjM4N2QtYThkMS00NWZiLTgyODYtYTI1ZjU3ZTcwY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldp2OWErTltsyd1jFZgq/AH7CzeUxP/qkuOo +kpXcBxb5UqEo4jGutOnf3m59Wt5Yjml4D3tfAIZ1X3y1AzEU1X3mr3hNa0b2//5 Zv0mYwnOK8AqJYRZ9D3mN/Bvnz1X0x+rqxrBu0nZWGSYGevi45WJdo8LvHR8iMmr ZYSGDREbtqZmesLi/wzXnTx6N5gYIx/epreq+3I3sRqydhG87wtrgSnGEJg9UtZA XG5KhzWs8MlzPMdLPLE5+JGMlQK8vDGPjURjJwL6D/UNa6ntQDUf/UhLh0ruoZOs eBN5y6CXWiuijb20o70t/uh2vIjd/CCnrA7AaekL1Nx/KxK+zwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCnhf5wj/9bFBHv156uDM2n9YRd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lODhl Njc4Yi1hYzUyLTQ1ZDEtYWYyMS04ODA1YmYyMzA3ZDIvZTg4ZTY3OGItYWM1Mi00 NWQxLWFmMjEtODgwNWJmMjMwN2QyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTg4ZTY3OGItYWM1Mi00NWQxLWFm MjEtODgwNWJmMjMwN2QyL2U4OGU2NzhiLWFjNTItNDVkMS1hZjIxLTg4MDViZjIz MDdkMi5jcmwwHwYDVR0jBBgwFoAU9LYLRbLmVYUIUW24KSSS54vyohkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9lODhlNjc4Yi1hYzUyLTQ1ZDEtYWYyMS04ODA1 YmYyMzA3ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr5ueI/4TIm+HnWc0hXpix GzAgmDI/CfO2obkK1NkdYyJnEIxXJ5ZmaSE5JrgwYCuGfKOmkZikEtjaf27qpuU3 r6qD2viXPhFspWyVVecKGzStcSiUrJkO4+4OzBGK23FVzMx9UymL8/G6dvwi/n6h usC9HTHk/kY5QzfxP6Ner8Xkb0NvUBzUmOjoEnX/FO8Mbpo2IV45g0iUdkgMGkn4 Yvczmiz+gnrhOo28f0rzEExnPsQEnwOKf7HWzicvc83Iz+gi+qXnBPKeCgDanips x6p+kUnQcr3Jna8xIV5hO2pe2MWVK/aAvtmMhaVWsnTAKNDx1a9vh6/sBKTAf7WQ -----END CERTIFICATE-----Generated at Sun Apr 27 09:32:55 2025 by rpki-client