$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft File: d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft (raw, json) Hash identifier: OnavhfdUiwU05l7jw7dr7OQUW1IYh8/oYvFffp8x1sE= Subject key identifier: 3E:3D:02:0A:C3:B0:AB:BA:81:B1:36:1F:1E:17:FE:EA:CC:D3:D0:E5 Authority key identifier: 22:DE:B8:10:D2:AA:A5:55:21:70:32:E8:F5:86:1C:EA:2E:43:9A:80 Certificate issuer: /CN=d3ea6eab-f41f-4e46-a8f6-3da4a128d78c Certificate serial: 010D0C9F432858493B1AA1D8653D511FA386B7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft Manifest number: 010D0C9F4328584073A81D19CF4B222702B9E687 Signing time: Tue 18 Mar 2025 17:00:07 +0000 Manifest this update: Tue 18 Mar 2025 17:00:07 +0000 Manifest next update: Thu 20 Mar 2025 17:00:00 +0000 Files and hashes: 1: 97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer (hash: /guciZi5bhd34AJqj1Zm1C5iM2n88/6MmY+5TRwGjHQ=) 2: d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl (hash: cRcbENCpqgLzkPkkq7QLUII0TgQs1Ko3vxALZQNiTa4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:1a:a1:d8:65:3d:51:1f:a3:86:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3ea6eab-f41f-4e46-a8f6-3da4a128d78c Validity Not Before: Mar 18 17:00:07 2025 GMT Not After : Mar 20 17:00:00 2025 GMT Subject: CN=d4d9cd2b-786a-4b33-90e0-644620b7f10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:f6:8e:ab:d3:31:81:39:d5:0b:97:6b:a4: 12:fa:e9:96:95:37:d7:bf:b6:ce:b6:09:a7:d3:66: a0:b2:90:32:d5:3c:fe:97:04:42:f2:86:3b:12:e9: ca:6e:37:70:65:70:cc:02:37:79:4e:90:57:bf:4c: 4f:10:e7:33:e0:a4:39:df:92:9b:09:b7:5e:06:a3: 30:57:20:ca:2e:4b:f1:47:10:92:6d:ed:ef:e8:05: 5d:37:ab:35:cf:ad:3c:14:90:c1:38:24:6a:cd:81: cc:ee:b1:26:e1:11:8f:37:fb:a1:63:91:b7:5f:f2: 6c:95:dc:b7:64:76:31:f3:74:ad:e3:7b:a5:ce:b6: 3d:e1:71:2f:63:a5:e6:e9:ed:86:55:8a:b0:9e:2a: 44:07:20:64:b8:c3:a5:e8:b6:3d:2e:03:03:21:fd: fd:d3:03:9e:49:3e:f1:7e:65:4c:aa:59:1a:2b:c3: 56:dd:33:fc:1a:b0:e2:81:60:c9:3a:bb:9d:a9:47: 18:f6:3e:6c:8b:de:6e:c3:ad:ae:99:ce:05:10:7c: f6:a8:bd:03:3c:99:89:7e:ec:88:df:8f:a2:65:1d: 9f:fc:03:3e:21:e6:c9:71:48:b5:c3:2e:7f:20:7c: d7:42:d3:bc:8d:fe:6c:b0:26:99:82:a0:63:44:56: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3D:02:0A:C3:B0:AB:BA:81:B1:36:1F:1E:17:FE:EA:CC:D3:D0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl X509v3 Authority Key Identifier: keyid:22:DE:B8:10:D2:AA:A5:55:21:70:32:E8:F5:86:1C:EA:2E:43:9A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7f:5c:bd:44:88:88:90:fe:89:e8:8a:f9:b4:ff:55:d8:a1: f8:7b:69:f9:f3:44:8a:3a:82:86:6f:4a:71:7e:e7:3f:20:5b: 84:a9:e0:73:39:99:fd:4e:9a:46:13:a7:cf:66:7d:ae:1e:ce: bd:6c:99:09:60:6c:ea:ab:4b:a8:ec:0b:81:24:68:8f:e0:26: e5:8e:96:56:00:4b:91:85:98:fd:20:6e:f3:60:e4:dd:65:00: ea:48:6e:50:ef:8d:ab:f5:15:2a:59:e7:3f:33:a3:26:29:9b: b4:ab:e9:34:5c:d1:e7:e5:b5:73:bf:30:aa:e7:50:5d:a3:2f: 40:30:b6:3a:5f:0b:fc:37:91:ba:cb:3e:4d:b0:df:2c:93:50: 26:8f:9c:eb:96:e1:c6:82:ba:50:52:46:dd:42:82:a4:df:d4: 6b:5f:28:60:15:3c:a0:cb:14:06:3f:c0:fb:c2:a7:be:af:a5: f7:9a:ad:32:42:c3:05:3c:13:8b:78:03:cc:f9:2a:b6:65:b3: 41:39:77:1a:ff:16:94:9e:ab:70:ae:77:6e:94:66:cd:92:55: c1:c0:b7:84:76:09:a1:57:22:91:6e:c2:09:40:8c:16:7f:73: 14:83:18:0c:10:d4:57:54:a3:87:6d:1b:e7:94:57:06:ad:96: 03:e4:4d:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEk7GqHYZT1RH6OGt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNlYTZlYWItZjQxZi00ZTQ2LWE4ZjYtM2RhNGExMjhk NzhjMB4XDTI1MDMxODE3MDAwN1oXDTI1MDMyMDE3MDAwMFowLzEtMCsGA1UEAxMk ZDRkOWNkMmItNzg2YS00YjMzLTkwZTAtNjQ0NjIwYjdmMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTz2jqvTMYE51QuXa6QS+umWlTfXv7bOtgmn 02agspAy1Tz+lwRC8oY7EunKbjdwZXDMAjd5TpBXv0xPEOcz4KQ535KbCbdeBqMw VyDKLkvxRxCSbe3v6AVdN6s1z608FJDBOCRqzYHM7rEm4RGPN/uhY5G3X/Jsldy3 ZHYx83St43ulzrY94XEvY6Xm6e2GVYqwnipEByBkuMOl6LY9LgMDIf390wOeST7x fmVMqlkaK8NW3TP8GrDigWDJOrudqUcY9j5si95uw62umc4FEHz2qL0DPJmJfuyI 34+iZR2f/AM+IebJcUi1wy5/IHzXQtO8jf5ssCaZgqBjRFaDdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD49AgrDsKu6gbE2Hx4X/urM09DlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2Vh NmVhYi1mNDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvZDNlYTZlYWItZjQxZi00 ZTQ2LWE4ZjYtM2RhNGExMjhkNzhjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDNlYTZlYWItZjQxZi00ZTQ2LWE4 ZjYtM2RhNGExMjhkNzhjL2QzZWE2ZWFiLWY0MWYtNGU0Ni1hOGY2LTNkYTRhMTI4 ZDc4Yy5jcmwwHwYDVR0jBBgwFoAUIt64ENKqpVUhcDLo9YYc6i5DmoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1mNDFmLTRlNDYtYThmNi0zZGE0 YTEyOGQ3OGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlf1y9RIiIkP6J6Ir5tP9V 2KH4e2n580SKOoKGb0pxfuc/IFuEqeBzOZn9TppGE6fPZn2uHs69bJkJYGzqq0uo 7AuBJGiP4CbljpZWAEuRhZj9IG7zYOTdZQDqSG5Q742r9RUqWec/M6MmKZu0q+k0 XNHn5bVzvzCq51Bdoy9AMLY6Xwv8N5G6yz5NsN8sk1Amj5zrluHGgrpQUkbdQoKk 39RrXyhgFTygyxQGP8D7wqe+r6X3mq0yQsMFPBOLeAPM+Sq2ZbNBOXca/xaUnqtw rndulGbNklXBwLeEdgmhVyKRbsIJQIwWf3MUgxgMENRXVKOHbRvnlFcGrZYD5E32 -----END CERTIFICATE-----Generated at Tue Mar 18 19:56:06 2025 by rpki-client