$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft File: 032fb77e-a6e2-484b-8175-944f82030164.mft (raw, json) Hash identifier: HR1ZmV8mU0hY1dDtWftgS3Gg26jgrcgi8+11qxwmp7w= Subject key identifier: BB:55:40:20:6B:4B:92:AA:34:C3:2C:B8:82:9F:2E:6A:79:BC:5B:84 Authority key identifier: CE:4D:66:FF:71:A1:45:9E:15:12:A8:ED:A4:73:04:A7:06:8D:36:E7 Certificate issuer: /CN=032fb77e-a6e2-484b-8175-944f82030164 Certificate serial: 010D0C9F432858497DFD494C7F67E5942C39CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft Manifest number: 010D0C9F4328584073A81B5B279691A4716CADD1 Signing time: Fri 11 Apr 2025 16:00:07 +0000 Manifest this update: Fri 11 Apr 2025 16:00:07 +0000 Manifest next update: Sun 13 Apr 2025 16:00:00 +0000 Files and hashes: 1: 032fb77e-a6e2-484b-8175-944f82030164.crl (hash: Q+hTn3XBj9NOo6JfNduDcRQy//HITfFT5OMA2EGU5xI=) 2: 63b5036e-4bfa-3cbe-a1cc-326e5c89a349.roa (hash: XdCHDxwu5Mo/eh1g6ymgynE824BKLnnO/6mqz3itIZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:fd:49:4c:7f:67:e5:94:2c:39:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032fb77e-a6e2-484b-8175-944f82030164 Validity Not Before: Apr 11 16:00:07 2025 GMT Not After : Apr 13 16:00:00 2025 GMT Subject: CN=4240c4cf-c9a5-45fe-b043-881b4965c834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:7b:c2:14:21:df:72:0d:69:85:bb:5f:5b: 53:01:3e:8f:2e:32:91:f1:e8:11:0c:1c:6c:21:fa: 79:ee:13:37:cc:dd:f9:68:fe:7a:1d:e3:a8:7f:c9: 13:65:10:ff:5b:60:02:7e:f5:a8:08:ff:cd:db:c6: 0d:ec:2f:c1:62:a4:10:ea:4c:cf:ca:aa:d3:32:15: c9:71:9b:73:5d:45:b0:7a:e1:18:de:16:af:95:db: b7:53:67:b9:83:09:22:fb:de:57:4d:a2:68:9c:f1: 5a:49:8c:5c:89:eb:d0:11:39:4c:10:b5:5b:64:9e: 8f:fa:11:6b:5d:b4:4a:fc:db:f0:68:15:65:8e:d3: 40:d9:1e:94:e5:de:7d:3f:73:06:10:93:03:cc:8e: 31:27:4c:c0:6c:f6:48:5e:fe:47:3c:0d:77:e6:bd: 16:07:5d:5e:03:3f:51:45:73:c3:a3:e8:f4:9e:b2: 2f:21:c4:7e:a4:47:e5:52:b0:9a:ff:bc:26:7f:60: b7:1a:d7:2e:65:a0:2a:00:60:eb:a5:03:e9:f8:b9: 92:b8:61:b5:74:49:c0:92:e7:c9:5d:c7:35:2b:5d: f8:cd:96:e5:de:66:22:1e:24:ac:04:7e:e4:6c:cf: 0b:78:b4:6d:c3:32:d5:3e:06:fa:bb:16:cd:ad:40: 19:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:55:40:20:6B:4B:92:AA:34:C3:2C:B8:82:9F:2E:6A:79:BC:5B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.crl X509v3 Authority Key Identifier: keyid:CE:4D:66:FF:71:A1:45:9E:15:12:A8:ED:A4:73:04:A7:06:8D:36:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1e:f3:5e:85:c7:6e:a3:66:94:e8:55:29:89:0f:a2:dd:83: 84:7c:a3:6a:39:3f:d3:a4:2d:d5:9b:10:dc:aa:4e:37:f7:b5: 67:bb:27:2b:c3:b9:65:5f:69:c8:78:3e:54:a6:fd:1f:e8:c4: cb:fc:f1:63:d7:22:1d:30:2c:1f:f5:44:24:25:0b:41:14:de: e9:e8:be:16:8f:77:f6:52:8c:36:36:7e:eb:bf:ee:88:4f:54: 4f:6a:07:c9:70:c9:7a:2c:06:6f:f7:a8:25:86:25:82:11:b8: 18:06:6d:e3:84:49:0d:6b:ab:5e:2b:30:83:27:8b:0d:db:83: f9:48:2a:61:b6:1d:f0:89:1a:2c:dd:ad:11:a1:fe:74:80:c6: e3:29:62:13:c3:8b:43:75:e7:cf:50:c5:d3:42:ff:47:1f:f3: ab:45:1e:ba:da:24:64:43:3f:13:4b:3f:11:6f:3a:88:14:dc: 1e:45:68:f5:5f:ae:4d:4d:40:d8:b0:0c:3f:47:6c:90:44:76: ed:86:a3:ac:9b:0b:81:cf:0d:e4:42:97:0f:e2:1e:3d:d7:8f: c3:9e:40:e2:29:39:00:9f:3a:b4:96:ff:15:5d:27:35:87:7b: c8:d9:e4:19:9d:b2:05:f6:d1:7e:98:98:1c:c3:bc:7b:5b:93: 7f:0a:a2:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9/UlMf2fllCw5y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyZmI3N2UtYTZlMi00ODRiLTgxNzUtOTQ0ZjgyMDMw MTY0MB4XDTI1MDQxMTE2MDAwN1oXDTI1MDQxMzE2MDAwMFowLzEtMCsGA1UEAxMk NDI0MGM0Y2YtYzlhNS00NWZlLWIwNDMtODgxYjQ5NjVjODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXt7whQh33INaYW7X1tTAT6PLjKR8egRDBxs Ifp57hM3zN35aP56HeOof8kTZRD/W2ACfvWoCP/N28YN7C/BYqQQ6kzPyqrTMhXJ cZtzXUWweuEY3havldu3U2e5gwki+95XTaJonPFaSYxcievQETlMELVbZJ6P+hFr XbRK/NvwaBVljtNA2R6U5d59P3MGEJMDzI4xJ0zAbPZIXv5HPA135r0WB11eAz9R RXPDo+j0nrIvIcR+pEflUrCa/7wmf2C3GtcuZaAqAGDrpQPp+LmSuGG1dEnAkufJ Xcc1K134zZbl3mYiHiSsBH7kbM8LeLRtwzLVPgb6uxbNrUAZlQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLtVQCBrS5KqNMMsuIKfLmp5vFuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMzJm Yjc3ZS1hNmUyLTQ4NGItODE3NS05NDRmODIwMzAxNjQvMDMyZmI3N2UtYTZlMi00 ODRiLTgxNzUtOTQ0ZjgyMDMwMTY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDMyZmI3N2UtYTZlMi00ODRiLTgx NzUtOTQ0ZjgyMDMwMTY0LzAzMmZiNzdlLWE2ZTItNDg0Yi04MTc1LTk0NGY4MjAz MDE2NC5jcmwwHwYDVR0jBBgwFoAUzk1m/3GhRZ4VEqjtpHMEpwaNNucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMzJmYjc3ZS1hNmUyLTQ4NGItODE3NS05NDRm ODIwMzAxNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKHvNehcduo2aU6FUpiQ+i 3YOEfKNqOT/TpC3VmxDcqk4397Vnuycrw7llX2nIeD5Upv0f6MTL/PFj1yIdMCwf 9UQkJQtBFN7p6L4Wj3f2Uow2Nn7rv+6IT1RPagfJcMl6LAZv96glhiWCEbgYBm3j hEkNa6teKzCDJ4sN24P5SCphth3wiRos3a0Rof50gMbjKWITw4tDdefPUMXTQv9H H/OrRR662iRkQz8TSz8RbzqIFNweRWj1X65NTUDYsAw/R2yQRHbthqOsmwuBzw3k QpcP4h4914/DnkDiKTkAnzq0lv8VXSc1h3vI2eQZnbIF9tF+mJgcw7x7W5N/CqIw -----END CERTIFICATE-----Generated at Fri Apr 11 22:45:28 2025 by rpki-client