$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft File: c3e3599f-a90f-4544-a440-c15eca99db7f.mft (raw, json) Hash identifier: nsVUgeqCjPBoUKivbtoyLI+qci4+w9RwvopMbA/Or0w= Subject key identifier: 32:76:41:D1:F1:7A:D4:FC:93:86:B7:13:3B:D4:BD:71:2B:5B:4C:C8 Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 Certificate issuer: /CN=c3e3599f-a90f-4544-a440-c15eca99db7f Certificate serial: 010D0C9F432858496D5AE59E246E6FD31AF03D90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft Manifest number: 010D0C9F4328584073A81D4877564E5B466B37CB Signing time: Sat 05 Apr 2025 17:00:03 +0000 Manifest this update: Sat 05 Apr 2025 17:00:03 +0000 Manifest next update: Mon 07 Apr 2025 17:00:00 +0000 Files and hashes: 1: 6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (hash: gJat3FIkxM1YC0/ufeTlRy3gVx0/hoSPTAouRmM+6Xc=) 2: c3e3599f-a90f-4544-a440-c15eca99db7f.crl (hash: P1od6IZ6pXVWA7YgIV3Wc0lOcZiBARIikXW/Q6BtvBU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6d:5a:e5:9e:24:6e:6f:d3:1a:f0:3d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f Validity Not Before: Apr 5 17:00:03 2025 GMT Not After : Apr 7 17:00:00 2025 GMT Subject: CN=7a20d42c-4891-41a0-9529-8b7c71e9e033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:ee:59:8d:c0:e1:75:a3:8f:52:96:83:8b: 7e:6b:b8:6c:a8:6e:5f:76:a7:2c:09:5d:c8:96:f5: 5b:08:c9:15:8a:4b:42:bb:8c:65:d4:58:5e:26:aa: 4a:89:8c:25:b2:ca:93:58:8b:ce:4d:4b:13:7d:86: e1:f2:0b:31:25:a0:b0:07:e5:6f:c9:0a:1e:76:72: d9:59:ae:4c:c8:9d:3a:22:06:94:9e:67:39:3b:b8: c1:e4:e0:b8:52:9d:1a:1b:fd:a4:51:7f:11:cf:28: 17:45:1c:26:7f:eb:42:19:86:87:8e:68:56:a6:5d: df:54:81:52:14:90:9b:3c:2e:ea:bd:df:ab:6b:1e: 4a:a1:44:2e:43:a1:1a:26:4f:43:77:95:56:60:fa: 52:55:13:16:b3:0c:d5:f7:48:7b:5a:ab:43:e2:48: fb:5f:47:91:20:cf:c7:e6:c3:6a:55:0b:30:94:ce: 94:36:de:ad:48:6d:bb:70:52:5d:7e:c0:70:db:55: 7e:30:96:f9:a3:b4:5a:4b:f0:a4:a4:07:66:b9:79: 51:98:f5:15:d2:5d:23:5e:81:b8:50:ae:28:91:a6: 0b:cf:12:aa:43:71:45:3e:e0:16:ce:f9:8d:7d:54: 15:02:e7:2e:e8:61:da:15:f2:79:ec:ea:11:c8:39: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:76:41:D1:F1:7A:D4:FC:93:86:B7:13:3B:D4:BD:71:2B:5B:4C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl X509v3 Authority Key Identifier: keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:dd:20:b9:bd:09:c5:1b:1d:1a:d7:0d:88:a6:fb:8a:6a:aa: a2:fa:e1:d3:4a:b0:03:36:9c:9a:87:e9:99:ae:b9:4b:e3:90: cb:e9:8f:07:c6:13:aa:59:63:80:d0:0c:bb:aa:8d:13:45:02: c2:c4:92:27:86:f5:cb:7f:4f:f8:0c:38:47:99:79:c1:be:90: d3:17:8a:d6:7f:60:f0:a1:1f:1e:66:eb:4d:87:5a:51:29:fd: 61:00:d9:d7:b9:0b:32:f9:5c:25:1a:bb:b4:67:bb:5b:1a:67: d2:ee:20:d5:5e:56:ad:e4:c4:c9:b8:78:88:65:0a:66:d3:f7: ca:81:d2:69:71:7a:b9:b9:58:f2:50:49:cb:c3:82:fa:d4:64: 96:6a:23:75:af:f7:f2:e4:92:15:e5:1c:45:bd:c6:6f:cd:65: 7b:0d:63:64:97:56:45:e4:4c:f1:4d:6b:7b:2e:13:26:20:6f: d4:32:80:66:e1:8f:c5:91:c3:6d:4b:85:1a:42:00:29:88:1b: cf:b0:0a:89:91:db:06:c6:ee:cd:35:ad:59:85:74:2e:b4:71: aa:71:e7:86:be:c7:13:5e:af:aa:87:6e:9a:a8:4b:7e:b4:9b: 7c:6f:42:e5:32:de:02:a8:b6:84:49:8d:8c:9f:ef:3e:eb:30: 2c:2e:2b:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEltWuWeJG5v0xrwPZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNlMzU5OWYtYTkwZi00NTQ0LWE0NDAtYzE1ZWNhOTlk YjdmMB4XDTI1MDQwNTE3MDAwM1oXDTI1MDQwNzE3MDAwMFowLzEtMCsGA1UEAxMk N2EyMGQ0MmMtNDg5MS00MWEwLTk1MjktOGI3YzcxZTllMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjruWY3A4XWjj1KWg4t+a7hsqG5fdqcsCV3I lvVbCMkViktCu4xl1FheJqpKiYwlssqTWIvOTUsTfYbh8gsxJaCwB+VvyQoednLZ Wa5MyJ06IgaUnmc5O7jB5OC4Up0aG/2kUX8RzygXRRwmf+tCGYaHjmhWpl3fVIFS FJCbPC7qvd+rax5KoUQuQ6EaJk9Dd5VWYPpSVRMWswzV90h7WqtD4kj7X0eRIM/H 5sNqVQswlM6UNt6tSG27cFJdfsBw21V+MJb5o7RaS/CkpAdmuXlRmPUV0l0jXoG4 UK4okaYLzxKqQ3FFPuAWzvmNfVQVAucu6GHaFfJ57OoRyDlYOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDJ2QdHxetT8k4a3EzvUvXErW0zIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jM2Uz NTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVlY2E5OWRiN2YvYzNlMzU5OWYtYTkwZi00 NTQ0LWE0NDAtYzE1ZWNhOTlkYjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzNlMzU5OWYtYTkwZi00NTQ0LWE0 NDAtYzE1ZWNhOTlkYjdmL2MzZTM1OTlmLWE5MGYtNDU0NC1hNDQwLWMxNWVjYTk5 ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUZi35ozyT0O7irIv3BNlz1RVsf1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jM2UzNTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVl Y2E5OWRiN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBc3SC5vQnFGx0a1w2IpvuK aqqi+uHTSrADNpyah+mZrrlL45DL6Y8HxhOqWWOA0Ay7qo0TRQLCxJInhvXLf0/4 DDhHmXnBvpDTF4rWf2DwoR8eZutNh1pRKf1hANnXuQsy+VwlGru0Z7tbGmfS7iDV Xlat5MTJuHiIZQpm0/fKgdJpcXq5uVjyUEnLw4L61GSWaiN1r/fy5JIV5RxFvcZv zWV7DWNkl1ZF5EzxTWt7LhMmIG/UMoBm4Y/FkcNtS4UaQgApiBvPsAqJkdsGxu7N Na1ZhXQutHGqceeGvscTXq+qh26aqEt+tJt8b0LlMt4CqLaESY2Mn+8+6zAsLiui -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:49 2025 by rpki-client