$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft File: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft (raw, json) Hash identifier: TZkMCqjW5l0vTwjV69UArHCZdWVriHcOznfHyF3OpYo= Subject key identifier: E2:5D:0F:DE:40:E8:79:31:4C:E0:52:35:B6:80:5B:EC:FE:4C:0C:78 Authority key identifier: 3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED Certificate issuer: /CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Certificate serial: 010D0C9F43285849A9F68695E4D960605C236760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft Manifest number: 010D0C9F432858496F552DCD0894BBF5A9254B75 Signing time: Sun 27 Apr 2025 10:02:07 +0000 Manifest this update: Sun 27 Apr 2025 10:02:07 +0000 Manifest next update: Tue 29 Apr 2025 10:00:00 +0000 Files and hashes: 1: 2670296f-b353-309c-ad96-a0e12b7068a5.roa (hash: W6aDSt6gyaO5pJNyLZ84JfkiDmrkW95nAmAD3NjsTBo=) 2: 86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl (hash: AcEPJpHKwHFkX6vOD5AaXRG4a75TAkNmqHtHidcui94=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:f6:86:95:e4:d9:60:60:5c:23:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c Validity Not Before: Apr 27 10:02:07 2025 GMT Not After : Apr 29 10:00:00 2025 GMT Subject: CN=b20934aa-4f80-4a08-a8d4-cd26388ddcd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:21:75:1c:ec:03:b7:45:00:52:d9:48:42:dd: 9b:9d:3c:f0:e3:69:db:51:8b:fa:bf:8b:93:00:35: 80:8f:f5:bc:ae:a0:4a:ab:d3:b4:17:94:48:24:93: ee:e3:9c:2d:f7:2a:2f:23:6a:fc:48:16:29:90:85: 9e:86:4d:7b:ea:a9:0c:4f:85:5c:13:37:24:18:7b: a9:04:c6:17:81:90:6e:9f:5e:9f:5b:03:67:8a:df: 95:39:b8:10:13:0c:c9:30:fa:18:7d:90:43:75:e0: d2:be:be:31:85:18:0e:21:2a:6d:ce:eb:39:aa:28: 10:d3:d7:1f:e6:f0:d0:46:71:5b:c8:d6:4b:3e:8e: 37:1f:48:9b:2d:a4:b8:a9:bc:3c:2a:ae:f7:e2:d0: 6c:9c:72:83:71:66:d9:aa:ed:0e:ba:5b:a5:69:5e: b4:86:00:98:b1:c1:36:af:ee:21:65:8a:94:b0:f7: 3e:55:c9:3a:ab:e5:b1:e1:16:9c:4d:c4:d7:95:87: 50:26:84:6f:ef:4d:e4:1a:ca:e6:44:65:5b:74:a8: c6:04:c0:ba:90:47:fa:16:29:5a:17:e6:51:02:ab: 26:60:18:51:0a:8a:5d:e7:30:ad:75:df:72:1b:c9: 72:45:6b:7a:76:8f:ff:48:04:7f:7e:de:03:57:8e: 73:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5D:0F:DE:40:E8:79:31:4C:E0:52:35:B6:80:5B:EC:FE:4C:0C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.crl X509v3 Authority Key Identifier: keyid:3C:AB:4A:18:60:AF:91:D3:E6:3F:C9:E5:F3:FA:8A:06:82:25:C3:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/86aaf6e5-f8a7-47f5-a3ff-1e14ee97c92c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:43:23:1a:0b:0a:05:3f:48:24:41:e0:f7:f6:5c:25:1d:a3: 17:0e:b8:84:63:94:df:ab:f9:d7:7a:f8:4a:fd:8d:6a:71:e2: 6c:20:73:5b:bf:ba:19:05:b3:d2:c8:ed:aa:ba:1d:b5:10:73: f2:86:0c:06:9d:25:c6:f9:8c:c8:fc:bb:32:1e:45:67:28:7b: bf:1e:b3:c6:f7:51:c6:72:da:89:0a:25:2c:fc:91:3f:ba:d7: bb:5d:25:7b:ee:a4:57:0b:a3:4a:b5:0c:c7:e3:83:9a:d0:b4: 72:d8:58:2f:bd:82:1f:b9:69:c3:50:51:17:ac:cb:68:a8:e8: df:91:5c:38:58:45:a0:9d:bf:15:cb:d1:64:0e:b2:9f:42:ac: ce:98:5f:68:69:d6:b6:37:b8:f9:c2:68:2d:fb:df:40:fc:b4: 7d:6d:14:e2:82:7a:56:83:83:17:ed:df:b6:15:32:1a:87:ab: a7:11:df:46:83:0d:a5:a0:36:8d:51:05:c3:56:67:37:0c:8f: 3c:c9:dc:04:98:29:39:2a:c1:21:78:80:bb:9b:54:bb:91:7e: 89:f1:eb:ff:c8:eb:c0:71:23:2a:cb:96:0d:94:34:0f:68:9a: f1:ca:c9:43:0d:15:16:54:cc:f9:8b:7d:1b:e0:f9:b4:1e:21: e1:65:5c:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmp9oaV5NlgYFwjZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZhYWY2ZTUtZjhhNy00N2Y1LWEzZmYtMWUxNGVlOTdj OTJjMB4XDTI1MDQyNzEwMDIwN1oXDTI1MDQyOTEwMDAwMFowLzEtMCsGA1UEAxMk YjIwOTM0YWEtNGY4MC00YTA4LWE4ZDQtY2QyNjM4OGRkY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iF1HOwDt0UAUtlIQt2bnTzw42nbUYv6v4uT ADWAj/W8rqBKq9O0F5RIJJPu45wt9yovI2r8SBYpkIWehk176qkMT4VcEzckGHup BMYXgZBun16fWwNnit+VObgQEwzJMPoYfZBDdeDSvr4xhRgOISptzus5qigQ09cf 5vDQRnFbyNZLPo43H0ibLaS4qbw8Kq734tBsnHKDcWbZqu0OululaV60hgCYscE2 r+4hZYqUsPc+Vck6q+Wx4RacTcTXlYdQJoRv703kGsrmRGVbdKjGBMC6kEf6Fila F+ZRAqsmYBhRCopd5zCtdd9yG8lyRWt6do//SAR/ft4DV45z/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOJdD95A6HkxTOBSNbaAW+z+TAx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NmFh ZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0ZWU5N2M5MmMvODZhYWY2ZTUtZjhhNy00 N2Y1LWEzZmYtMWUxNGVlOTdjOTJjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODZhYWY2ZTUtZjhhNy00N2Y1LWEz ZmYtMWUxNGVlOTdjOTJjLzg2YWFmNmU1LWY4YTctNDdmNS1hM2ZmLTFlMTRlZTk3 YzkyYy5jcmwwHwYDVR0jBBgwFoAUPKtKGGCvkdPmP8nl8/qKBoIlw+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NmFhZjZlNS1mOGE3LTQ3ZjUtYTNmZi0xZTE0 ZWU5N2M5MmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoQyMaCwoFP0gkQeD39lwl HaMXDriEY5Tfq/nXevhK/Y1qceJsIHNbv7oZBbPSyO2quh21EHPyhgwGnSXG+YzI /LsyHkVnKHu/HrPG91HGctqJCiUs/JE/ute7XSV77qRXC6NKtQzH44Oa0LRy2Fgv vYIfuWnDUFEXrMtoqOjfkVw4WEWgnb8Vy9FkDrKfQqzOmF9oada2N7j5wmgt+99A /LR9bRTignpWg4MX7d+2FTIah6unEd9Ggw2loDaNUQXDVmc3DI88ydwEmCk5KsEh eIC7m1S7kX6J8ev/yOvAcSMqy5YNlDQPaJrxyslDDRUWVMz5i30b4Pm0HiHhZVxH -----END CERTIFICATE-----Generated at Mon Apr 28 09:17:23 2025 by rpki-client