$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.mft File: d3f6e139-58be-4d6a-b3c6-398860ef8f16.mft (raw, json) Hash identifier: q61mYk/bXvMPx3NQH9BENs8REIaDhaLi6FbdedA3WV8= Subject key identifier: 21:4F:A7:CF:9E:8F:E5:56:1B:63:98:ED:96:5D:FF:2B:C1:8C:5D:A5 Authority key identifier: 1C:8E:2A:B4:36:07:53:B3:D0:76:05:F2:A9:52:2B:31:EC:31:73:7E Certificate issuer: /CN=d3f6e139-58be-4d6a-b3c6-398860ef8f16 Certificate serial: 010D0C9F43285849AC66E549AF663EAA9B9CFC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.mft Manifest number: 010D0C9F432858448134739F928294A14700A564 Signing time: Mon 28 Apr 2025 07:00:07 +0000 Manifest this update: Mon 28 Apr 2025 07:00:07 +0000 Manifest next update: Thu 01 May 2025 07:00:00 +0000 Files and hashes: 1: 615170f0-6374-35a3-9f46-b8b1811c3add.roa (hash: p6LOTZ0oghcKIimU5NID2EcymfnD3FyJS4LXC6utze4=) 2: d3f6e139-58be-4d6a-b3c6-398860ef8f16.crl (hash: qGgct7diJSFUEUbHMftPJz1BGhA41xyHJDG9GrgusIo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:66:e5:49:af:66:3e:aa:9b:9c:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3f6e139-58be-4d6a-b3c6-398860ef8f16 Validity Not Before: Apr 28 07:00:07 2025 GMT Not After : May 1 07:00:00 2025 GMT Subject: CN=f760ba9b-d33f-436d-889b-44be246dee86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:39:cb:c2:eb:9e:4c:fe:5e:c0:ab:e3:07: ff:66:a3:70:78:61:c4:cc:40:67:f8:d4:ef:4b:2a: 71:2d:4d:ee:d6:51:2c:b9:99:c9:55:55:1c:65:c7: ba:e5:04:90:ce:fc:3b:0c:05:25:05:1d:08:a8:9d: 42:fc:46:ab:55:10:cb:6b:7f:0d:20:bc:0f:1f:39: 59:41:17:c6:fa:2e:44:6d:bd:5a:81:b7:a3:ee:8d: 82:0d:37:df:b5:e2:ec:81:f1:ca:c7:d1:88:dc:4f: 48:71:67:23:41:fb:5d:b9:dd:50:d7:21:e3:39:30: e4:91:dc:74:a4:af:ed:ab:85:5b:ff:5d:ad:cb:25: e1:24:e7:48:e5:1b:ea:9c:42:7c:34:e1:b5:5f:e7: 40:66:51:aa:07:e7:b2:81:71:5e:b1:48:96:3c:d8: 03:16:f9:56:e7:e8:fb:b4:6a:86:d0:13:27:79:94: d7:9c:e9:6a:d9:07:e4:b8:d7:43:39:a0:3e:f6:95: d2:10:79:ae:e5:f8:8e:99:ee:24:59:cc:37:cc:6d: c6:d6:8a:57:78:10:6b:a8:33:1e:fa:6a:9f:de:aa: 13:96:47:44:8f:c7:a9:40:67:4f:71:fb:38:20:6e: 2c:fd:47:c3:03:d8:ee:e2:03:67:c3:ef:85:0f:b4: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:A7:CF:9E:8F:E5:56:1B:63:98:ED:96:5D:FF:2B:C1:8C:5D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16/d3f6e139-58be-4d6a-b3c6-398860ef8f16.crl X509v3 Authority Key Identifier: keyid:1C:8E:2A:B4:36:07:53:B3:D0:76:05:F2:A9:52:2B:31:EC:31:73:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3f6e139-58be-4d6a-b3c6-398860ef8f16.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:09:7d:19:ae:d4:cd:16:44:94:6a:5d:e2:3f:35:b0:69:e3: 23:2f:96:d3:38:68:d9:38:35:47:34:c6:2a:c9:4b:72:2e:1a: cf:df:62:af:7a:72:34:e4:ce:06:27:97:3b:81:2c:d1:46:fb: 8c:97:c5:82:12:bc:ca:72:fe:9e:44:de:a2:91:d3:e1:eb:67: 50:b3:ab:12:93:41:2b:44:84:45:dc:8e:48:ea:40:56:0b:d2: 86:f5:fb:5f:f7:1e:25:3e:a7:9a:aa:87:48:6d:97:33:fb:fa: 5c:0b:94:55:ea:37:26:71:ec:42:90:12:d5:15:3a:d9:e9:2e: 59:60:cd:b7:cb:5e:24:a9:85:62:f5:0a:10:49:6a:1b:de:4f: 00:86:4b:8f:5b:ae:39:2c:06:f9:7f:41:2d:c9:b3:24:72:88: 9d:65:ff:15:7f:d7:77:22:51:44:d6:82:0f:e1:e6:23:56:0c: 7b:22:3d:90:7e:be:58:16:19:4b:41:9c:b1:93:e8:41:8b:c7: 65:80:26:15:05:6a:e4:d1:3f:83:6c:f7:63:62:4f:12:ff:09: 82:7e:5a:f4:cf:2f:e7:d8:0f:45:a5:d9:7d:e2:39:55:74:61: 93:6e:bf:62:44:6d:8d:50:88:92:b4:76:56:01:82:c0:72:7d: db:60:cb:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmsZuVJr2Y+qpuc/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNmNmUxMzktNThiZS00ZDZhLWIzYzYtMzk4ODYwZWY4 ZjE2MB4XDTI1MDQyODA3MDAwN1oXDTI1MDUwMTA3MDAwMFowLzEtMCsGA1UEAxMk Zjc2MGJhOWItZDMzZi00MzZkLTg4OWItNDRiZTI0NmRlZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI85y8Lrnkz+XsCr4wf/ZqNweGHEzEBn+NTv SypxLU3u1lEsuZnJVVUcZce65QSQzvw7DAUlBR0IqJ1C/EarVRDLa38NILwPHzlZ QRfG+i5Ebb1agbej7o2CDTffteLsgfHKx9GI3E9IcWcjQftdud1Q1yHjOTDkkdx0 pK/tq4Vb/12tyyXhJOdI5RvqnEJ8NOG1X+dAZlGqB+eygXFesUiWPNgDFvlW5+j7 tGqG0BMneZTXnOlq2QfkuNdDOaA+9pXSEHmu5fiOme4kWcw3zG3G1opXeBBrqDMe +mqf3qoTlkdEj8epQGdPcfs4IG4s/UfDA9ju4gNnw++FD7QMMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCFPp8+ej+VWG2OY7ZZd/yvBjF2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kM2Y2 ZTEzOS01OGJlLTRkNmEtYjNjNi0zOTg4NjBlZjhmMTYvZDNmNmUxMzktNThiZS00 ZDZhLWIzYzYtMzk4ODYwZWY4ZjE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDNmNmUxMzktNThiZS00ZDZhLWIz YzYtMzk4ODYwZWY4ZjE2L2QzZjZlMTM5LTU4YmUtNGQ2YS1iM2M2LTM5ODg2MGVm OGYxNi5jcmwwHwYDVR0jBBgwFoAUHI4qtDYHU7PQdgXyqVIrMewxc34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kM2Y2ZTEzOS01OGJlLTRkNmEtYjNjNi0zOTg4 NjBlZjhmMTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOCX0ZrtTNFkSUal3iPzWw aeMjL5bTOGjZODVHNMYqyUtyLhrP32KvenI05M4GJ5c7gSzRRvuMl8WCErzKcv6e RN6ikdPh62dQs6sSk0ErRIRF3I5I6kBWC9KG9ftf9x4lPqeaqodIbZcz+/pcC5RV 6jcmcexCkBLVFTrZ6S5ZYM23y14kqYVi9QoQSWob3k8AhkuPW645LAb5f0EtybMk coidZf8Vf9d3IlFE1oIP4eYjVgx7Ij2Qfr5YFhlLQZyxk+hBi8dlgCYVBWrk0T+D bPdjYk8S/wmCflr0zy/n2A9Fpdl94jlVdGGTbr9iRG2NUIiStHZWAYLAcn3bYMvD -----END CERTIFICATE-----Generated at Mon Apr 28 14:27:45 2025 by rpki-client