$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft File: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft (raw, json) Hash identifier: XXbF+rnp2DddSiazr/Nm4MfdYkCZZiVw2gfYTl8p2rw= Subject key identifier: 58:70:E4:22:3A:F1:DB:3E:EF:82:45:D4:6C:7C:05:70:69:24:21:35 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F43285849AD90A65F176D04ED27DE2C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft Manifest number: 010D0C9F4328584073A81F41A8F9BAE8BF3A86CA Signing time: Mon 28 Apr 2025 17:00:03 +0000 Manifest this update: Mon 28 Apr 2025 17:00:03 +0000 Manifest next update: Thu 01 May 2025 17:00:00 +0000 Files and hashes: 1: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (hash: vaKOr13AX7WnCEDueB3/D+yMx0Ts+g+YX525jvhd1aw=) 2: dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl (hash: nGMLSvm0mDkJAVromntifBD884LnKuz1rJvvS43DMPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:90:a6:5f:17:6d:04:ed:27:de:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Apr 28 17:00:03 2025 GMT Not After : May 1 17:00:00 2025 GMT Subject: CN=4ec2eaf7-7a69-46e8-a74f-469992d8cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:2a:a6:dc:03:20:ec:a1:87:65:a3:7c:62: a9:53:21:85:24:7e:88:04:3d:b3:58:36:f9:75:bd: 40:2f:55:be:fc:dd:19:be:e1:46:1b:75:30:34:8c: fd:fd:e3:a5:d6:a3:f6:18:2e:02:24:44:e7:68:39: 01:ff:ce:02:3e:d6:3b:39:a5:d0:b8:d9:32:8c:bb: bb:bf:5e:3e:0d:a6:79:5c:c4:77:57:75:e6:a6:ba: 52:3e:1c:02:f2:c9:a9:c4:9d:4f:97:9d:b1:76:1d: 93:2a:9c:0e:2b:4d:46:e1:6b:79:6b:e4:9c:11:aa: ad:f1:ce:8f:05:4e:88:fb:7d:51:5f:0a:81:ee:56: 17:a4:31:13:2f:89:46:0a:f9:4b:a2:a7:15:54:59: f0:f5:11:38:2b:97:f5:66:20:33:d7:5a:2e:e6:85: 1f:65:cf:c5:98:7d:ee:ba:82:a5:64:92:84:f1:c6: b9:46:06:06:4f:8c:57:12:61:84:ed:d7:b3:6c:3e: 28:42:f9:95:1b:f8:29:c8:4c:d4:0c:7c:2f:33:12: f2:35:a2:6a:ae:db:db:48:d9:b9:87:cc:0a:4a:7f: 96:05:50:e8:4b:bd:f5:74:82:c2:5e:0e:ea:8e:32: 40:f6:be:d9:61:c0:db:ac:ba:aa:15:7e:23:80:4e: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:E4:22:3A:F1:DB:3E:EF:82:45:D4:6C:7C:05:70:69:24:21:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:9a:71:44:03:d6:4c:dd:90:18:cc:93:7d:8a:6f:09:25:93: 1b:a5:51:8e:3b:25:53:9f:1f:5f:d0:98:8f:91:ca:62:dd:72: 1a:ea:30:4c:aa:bd:d2:84:59:07:f7:58:e6:4e:4b:40:f7:f2: 95:e1:8d:d3:8e:bc:a8:7d:a1:56:89:83:5f:fc:93:73:82:5f: d7:b8:b7:a2:96:06:f0:82:56:ad:03:63:3f:74:be:e8:b0:51: 4b:e0:72:00:c8:5d:b0:70:b3:94:46:98:0b:92:46:79:d0:3b: 4b:55:af:dc:63:d9:d9:b7:0d:b4:78:04:8c:bc:ac:a2:da:e4: 2c:14:d5:f5:06:39:e2:5d:7b:e5:27:f4:5b:ae:30:51:1d:02: da:73:57:9f:cb:8c:c5:55:d7:69:3d:0c:c0:70:0a:80:fe:b1: 49:02:fd:38:21:c8:12:f7:72:09:fe:f6:8b:9e:5e:72:fb:7c: 8c:e0:a6:55:06:55:f6:fa:bc:f7:72:3f:1e:84:ed:d3:d1:e9: bc:51:d0:70:dc:d3:53:ae:2b:4a:70:09:0c:77:30:84:ca:43: 33:9c:03:ec:f8:b0:54:53:a2:37:28:eb:ec:21:d6:1f:0d:02: b1:16:79:0e:5c:db:9d:db:2c:8b:b1:92:b0:ee:24:ec:96:b7: 13:ed:c9:51 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtkKZfF20E7SfeLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MDQyODE3MDAwM1oXDTI1MDUwMTE3MDAwMFowLzEtMCsGA1UEAxMk NGVjMmVhZjctN2E2OS00NmU4LWE3NGYtNDY5OTkyZDhjZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNwqptwDIOyhh2WjfGKpUyGFJH6IBD2zWDb5 db1AL1W+/N0ZvuFGG3UwNIz9/eOl1qP2GC4CJETnaDkB/84CPtY7OaXQuNkyjLu7 v14+DaZ5XMR3V3XmprpSPhwC8smpxJ1Pl52xdh2TKpwOK01G4Wt5a+ScEaqt8c6P BU6I+31RXwqB7lYXpDETL4lGCvlLoqcVVFnw9RE4K5f1ZiAz11ou5oUfZc/FmH3u uoKlZJKE8ca5RgYGT4xXEmGE7dezbD4oQvmVG/gpyEzUDHwvMxLyNaJqrtvbSNm5 h8wKSn+WBVDoS731dILCXg7qjjJA9r7ZYcDbrLqqFX4jgE7A1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFhw5CI68ds+74JF1Gx8BXBpJCE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvZGZkNWYzNWQtNWIwMi00 ODRhLThlMGUtYTczMGFiZDk4ZmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDMmnFEA9ZM3ZAYzJN9im8J JZMbpVGOOyVTnx9f0JiPkcpi3XIa6jBMqr3ShFkH91jmTktA9/KV4Y3TjryofaFW iYNf/JNzgl/XuLeilgbwglatA2M/dL7osFFL4HIAyF2wcLOURpgLkkZ50DtLVa/c Y9nZtw20eASMvKyi2uQsFNX1BjniXXvlJ/RbrjBRHQLac1efy4zFVddpPQzAcAqA /rFJAv04IcgS93IJ/vaLnl5y+3yM4KZVBlX2+rz3cj8ehO3T0em8UdBw3NNTritK cAkMdzCEykMznAPs+LBUU6I3KOvsIdYfDQKxFnkOXNud2yyLsZKw7iTslrcT7clR -----END CERTIFICATE-----Generated at Mon Apr 28 23:29:54 2025 by rpki-client