$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft (raw, json) Hash identifier: xOlGpaGCh9rUE5CCNqoPJU7GiZ4llGgZb3P+nWzW4OY= Subject key identifier: 14:54:43:A8:09:0C:B1:FF:76:64:01:05:82:CC:C3:65:3B:63:35:CF Authority key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Certificate issuer: /CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Certificate serial: 010D0C9F432858497C5C5E1FDCD9335A6D382860 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft Manifest number: 010D0C9F4328584073A836239D3A75822B1704D1 Signing time: Fri 11 Apr 2025 02:00:07 +0000 Manifest this update: Fri 11 Apr 2025 02:00:07 +0000 Manifest next update: Mon 14 Apr 2025 02:00:00 +0000 Files and hashes: 1: 454c9603-4dfb-34e7-9bc2-02242c547e78.roa (hash: gi0Q+Hvyp4Pk6x9EPPKtB8li3GpyeW9gwS4uUyrqjmo=) 2: 7c69f6d0-f92d-3ea9-91d2-5d8a53da8b6b.roa (hash: 51svDnjhoLhdRZWWnuTdZRwGlqR4pRy8fJZPTlNRrXc=) 3: d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl (hash: YImcBCnI92/VJ4gDRly7QEpQjx23+nXAiNECGrKEY5o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:5c:5e:1f:dc:d9:33:5a:6d:38:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Validity Not Before: Apr 11 02:00:07 2025 GMT Not After : Apr 14 02:00:00 2025 GMT Subject: CN=99489dfb-815a-4c65-b2ca-4daef2ebbe9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:97:bf:d0:80:17:ab:b9:ce:fd:8d:c0:7e: 42:89:0c:5e:6f:d4:bf:cd:22:0e:b9:eb:d8:b4:37: 78:ec:21:90:09:6e:91:3c:56:b4:35:75:af:fd:7e: 6d:aa:07:46:bd:7c:75:8f:36:29:52:b1:af:b5:61: 95:de:f5:36:55:6c:06:2d:20:d8:7b:10:e9:b3:12: ef:df:08:3d:b7:3d:05:04:53:5d:8f:4d:8e:5a:ff: 7d:43:0d:7a:68:47:ed:ae:a3:12:20:0f:24:58:b2: a3:f5:d6:cb:ad:06:51:58:e4:fd:e4:8d:2d:1a:70: 45:15:6f:1b:a5:ec:97:96:cd:ca:1e:54:78:14:07: 5e:31:0a:71:94:65:14:54:0d:cc:c6:3f:52:18:60: ac:6b:40:6d:7f:f3:79:f0:37:2d:c4:f6:ac:eb:50: 95:ea:5f:08:ae:d0:80:8a:30:14:c9:a4:d0:8e:73: e5:f5:9b:c2:c2:08:6f:71:af:ed:83:ba:49:29:79: 7b:5d:e4:a8:09:65:c5:eb:9e:44:30:a7:ca:5a:b8: 0e:06:be:b4:cf:24:77:70:ba:af:e0:09:1f:40:ba: d8:a8:47:af:d0:d8:90:2c:81:32:57:d1:14:6b:77: 39:c9:b8:d9:e8:7a:55:d2:4e:be:e3:8c:f4:17:35: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:54:43:A8:09:0C:B1:FF:76:64:01:05:82:CC:C3:65:3B:63:35:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl X509v3 Authority Key Identifier: keyid:47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:52:b2:66:5e:d4:10:4f:bb:d1:5b:71:11:fc:f4:53:e5:b7: 64:b8:57:b3:9a:54:57:54:91:60:07:a1:78:7d:78:95:bf:14: bd:5a:b7:1f:8a:f5:b2:75:32:61:d6:84:39:9e:41:b4:c9:bc: af:28:8d:5f:15:ab:98:f0:b3:45:2c:eb:4f:3c:38:0d:97:ac: c0:7e:98:17:ab:9c:34:3e:c5:bc:b0:bc:36:d6:fd:51:9f:5b: 11:56:a2:7c:e1:dd:e4:cf:3b:95:9e:64:34:58:2c:cf:80:1e: 0e:6a:4c:ea:aa:fc:69:ea:78:11:f0:a2:da:50:d0:9b:ba:9e: 39:0d:4a:83:b6:83:7f:e0:fd:60:47:41:81:bd:fe:cc:e5:8d: 36:04:83:24:aa:9d:29:9b:df:2a:ca:b8:59:78:d9:d5:f1:71: c7:49:19:2d:01:e0:e6:f6:b4:0e:bc:da:82:51:60:c8:f8:c3: 3e:5c:14:da:35:66:35:c7:d4:c0:76:e7:9b:0d:16:e1:f6:c1: 68:a7:d1:24:fb:b7:82:21:98:04:3e:62:fc:fa:2e:91:d8:a3: 83:77:11:dd:4b:62:25:e0:c4:ca:31:5e:c7:61:2b:29:a0:d3: 60:df:50:d6:23:65:7b:31:64:77:a3:a3:12:a6:c9:5b:e3:3d: 29:e2:20:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8XF4f3NkzWm04KGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFh MmE2MB4XDTI1MDQxMTAyMDAwN1oXDTI1MDQxNDAyMDAwMFowLzEtMCsGA1UEAxMk OTk0ODlkZmItODE1YS00YzY1LWIyY2EtNGRhZWYyZWJiZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR6Xv9CAF6u5zv2NwH5CiQxeb9S/zSIOuevY tDd47CGQCW6RPFa0NXWv/X5tqgdGvXx1jzYpUrGvtWGV3vU2VWwGLSDYexDpsxLv 3wg9tz0FBFNdj02OWv99Qw16aEftrqMSIA8kWLKj9dbLrQZRWOT95I0tGnBFFW8b peyXls3KHlR4FAdeMQpxlGUUVA3Mxj9SGGCsa0Btf/N58DctxPas61CV6l8IrtCA ijAUyaTQjnPl9ZvCwghvca/tg7pJKXl7XeSoCWXF655EMKfKWrgOBr60zyR3cLqv 4AkfQLrYqEev0NiQLIEyV9EUa3c5ybjZ6HpV0k6+44z0FzU7hwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBRUQ6gJDLH/dmQBBYLMw2U7YzXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcx ZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvZDY3MWU5NWMtZTQ4NC00 YjUzLTkxZmYtZTE0ZDMzZWFhMmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDY3MWU5NWMtZTQ4NC00YjUzLTkx ZmYtZTE0ZDMzZWFhMmE2L2Q2NzFlOTVjLWU0ODQtNGI1My05MWZmLWUxNGQzM2Vh YTJhNi5jcmwwHwYDVR0jBBgwFoAUR9sbpctPjkRcwmwsWddit+ypMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRk MzNlYWEyYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJUrJmXtQQT7vRW3ER/PRT 5bdkuFezmlRXVJFgB6F4fXiVvxS9WrcfivWydTJh1oQ5nkG0ybyvKI1fFauY8LNF LOtPPDgNl6zAfpgXq5w0PsW8sLw21v1Rn1sRVqJ84d3kzzuVnmQ0WCzPgB4Oakzq qvxp6ngR8KLaUNCbup45DUqDtoN/4P1gR0GBvf7M5Y02BIMkqp0pm98qyrhZeNnV 8XHHSRktAeDm9rQOvNqCUWDI+MM+XBTaNWY1x9TAduebDRbh9sFop9Ek+7eCIZgE PmL8+i6R2KODdxHdS2Il4MTKMV7HYSspoNNg31DWI2V7MWR3o6MSpslb4z0p4iAc -----END CERTIFICATE-----Generated at Fri Apr 11 21:41:02 2025 by rpki-client