$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft File: 0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft (raw, json) Hash identifier: 1rVDhjkyB9I0zayiANsxGr80d0hIxl5b5UnkwelABSY= Subject key identifier: 71:0D:C8:73:C2:85:57:D8:CD:FF:5D:E5:87:EA:BC:D9:02:FF:E5:F0 Authority key identifier: 72:1E:5B:49:43:8E:C0:C9:5D:40:79:8B:A7:88:77:8F:A9:54:CB:3A Certificate issuer: /CN=0a4f730e-74f5-4c41-9c06-be5d40c9917d Certificate serial: 010D0C9F432858496BF597F137DADA57EBB230C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft Manifest number: 010D0C9F4328584073A8405DFBDECC1988FB8CB6 Signing time: Sat 05 Apr 2025 05:00:07 +0000 Manifest this update: Sat 05 Apr 2025 05:00:07 +0000 Manifest next update: Tue 08 Apr 2025 05:00:00 +0000 Files and hashes: 1: 0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl (hash: nZjLZ44Gqg45KIUIoD7HKRX6j509jTotFRhuGShOsCA=) 2: 46abb15c5b3d343c97c09f99907da1dccd4c3a215af59e8233.cer (hash: mzmUUWoaLbGnGJNY129JLHOApI0imQ4X6z0Ofuhn4ns=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:f5:97:f1:37:da:da:57:eb:b2:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4f730e-74f5-4c41-9c06-be5d40c9917d Validity Not Before: Apr 5 05:00:07 2025 GMT Not After : Apr 8 05:00:00 2025 GMT Subject: CN=8a7b5b35-7c1e-4b3c-b9ce-eaa2db6c6731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:5c:9a:6d:5d:ed:c7:63:70:32:08:42:ff: 0e:32:1e:c6:0e:61:c0:a9:17:56:ae:09:8d:7d:ff: 2a:62:c0:f7:a1:e5:39:f0:b5:0c:8f:92:72:cc:32: 98:81:12:33:db:aa:ac:a9:d1:1e:07:40:a5:61:36: 58:04:ca:bc:1a:46:74:25:f6:4e:5c:12:90:51:4a: f2:ce:50:31:81:ff:24:d2:b1:ff:43:b2:7d:d6:14: a1:87:c7:87:83:57:81:65:b6:b1:6c:f0:7a:e5:d9: f0:cc:ed:91:23:d1:11:1c:a0:44:66:3a:d8:ed:1f: 8b:65:06:a5:bc:da:aa:bb:8e:98:9b:ea:b5:c4:87: 62:53:7d:a7:2a:91:71:ec:a3:87:dd:f1:89:57:08: c6:dd:f7:d1:75:da:43:38:59:62:9f:3f:e8:03:c4: 96:c1:57:60:8c:52:d3:a9:0a:c6:cb:4e:79:51:0f: 4b:9f:fd:ec:3f:49:da:e6:eb:2e:f8:37:df:99:ea: 36:7e:2c:d4:fb:be:f7:19:8e:41:02:ac:94:0e:f6: d8:53:26:02:ea:e5:95:1a:b0:96:47:0b:16:5f:1e: 7a:62:5a:86:0e:d8:b3:1b:2e:e6:dd:20:cc:82:3b: 12:fb:c5:92:75:cd:06:78:92:19:19:98:0f:5e:70: e8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0D:C8:73:C2:85:57:D8:CD:FF:5D:E5:87:EA:BC:D9:02:FF:E5:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d/0a4f730e-74f5-4c41-9c06-be5d40c9917d.crl X509v3 Authority Key Identifier: keyid:72:1E:5B:49:43:8E:C0:C9:5D:40:79:8B:A7:88:77:8F:A9:54:CB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a4f730e-74f5-4c41-9c06-be5d40c9917d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e1:ff:71:31:3a:7a:1f:f6:9f:e8:61:71:1c:7c:da:df:a2: d5:7c:b0:b4:c9:9e:d7:fc:66:1c:36:aa:f6:08:00:16:69:be: 73:da:59:a0:c8:96:2a:f3:4b:cf:10:2d:53:f4:6a:94:d0:05: 28:18:b9:68:d8:71:a4:19:40:f4:d9:ac:9e:cd:7f:af:b1:e4: 59:c2:2f:f2:d3:27:6a:69:4a:b4:4b:ba:eb:18:8d:85:f5:d1: 45:1d:0d:5b:4f:1d:63:44:eb:d2:1d:ff:87:57:68:f1:b6:cd: 66:6f:8c:c0:0f:4b:12:db:92:60:14:73:2c:f9:c4:0c:44:01: e7:d2:5d:a3:de:57:54:f7:98:e1:9d:60:74:3c:c1:93:d9:10: 0e:71:24:6e:87:78:70:af:8e:4e:a3:ff:8b:32:9d:31:87:7e: 0b:9a:ab:1c:60:70:20:ca:f6:c9:3e:d4:74:48:44:64:38:64: 35:da:9a:36:3a:81:57:4e:ae:55:40:a3:cc:25:e5:d8:5c:cf: ed:47:c5:c6:86:39:e3:47:45:65:d0:65:0e:d2:60:07:a9:01: 36:8a:5a:f1:34:4d:fe:c9:44:74:56:b5:6f:cb:25:f9:df:26: 66:92:96:18:c2:18:0c:42:24:60:b5:9c:04:21:48:7b:13:05: 63:de:10:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElr9ZfxN9raV+uyMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0ZjczMGUtNzRmNS00YzQxLTljMDYtYmU1ZDQwYzk5 MTdkMB4XDTI1MDQwNTA1MDAwN1oXDTI1MDQwODA1MDAwMFowLzEtMCsGA1UEAxMk OGE3YjViMzUtN2MxZS00YjNjLWI5Y2UtZWFhMmRiNmM2NzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdVcmm1d7cdjcDIIQv8OMh7GDmHAqRdWrgmN ff8qYsD3oeU58LUMj5JyzDKYgRIz26qsqdEeB0ClYTZYBMq8GkZ0JfZOXBKQUUry zlAxgf8k0rH/Q7J91hShh8eHg1eBZbaxbPB65dnwzO2RI9ERHKBEZjrY7R+LZQal vNqqu46Ym+q1xIdiU32nKpFx7KOH3fGJVwjG3ffRddpDOFlinz/oA8SWwVdgjFLT qQrGy055UQ9Ln/3sP0na5usu+Dffmeo2fizU+773GY5BAqyUDvbYUyYC6uWVGrCW RwsWXx56YlqGDtizGy7m3SDMgjsS+8WSdc0GeJIZGZgPXnDoJwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHENyHPChVfYzf9d5YfqvNkC/+XwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTRm NzMwZS03NGY1LTRjNDEtOWMwNi1iZTVkNDBjOTkxN2QvMGE0ZjczMGUtNzRmNS00 YzQxLTljMDYtYmU1ZDQwYzk5MTdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE0ZjczMGUtNzRmNS00YzQxLTlj MDYtYmU1ZDQwYzk5MTdkLzBhNGY3MzBlLTc0ZjUtNGM0MS05YzA2LWJlNWQ0MGM5 OTE3ZC5jcmwwHwYDVR0jBBgwFoAUch5bSUOOwMldQHmLp4h3j6lUyzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTRmNzMwZS03NGY1LTRjNDEtOWMwNi1iZTVk NDBjOTkxN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF4f9xMTp6H/af6GFxHHza 36LVfLC0yZ7X/GYcNqr2CAAWab5z2lmgyJYq80vPEC1T9GqU0AUoGLlo2HGkGUD0 2ayezX+vseRZwi/y0ydqaUq0S7rrGI2F9dFFHQ1bTx1jROvSHf+HV2jxts1mb4zA D0sS25JgFHMs+cQMRAHn0l2j3ldU95jhnWB0PMGT2RAOcSRuh3hwr45Oo/+LMp0x h34LmqscYHAgyvbJPtR0SERkOGQ12po2OoFXTq5VQKPMJeXYXM/tR8XGhjnjR0Vl 0GUO0mAHqQE2ilrxNE3+yUR0VrVvyyX53yZmkpYYwhgMQiRgtZwEIUh7EwVj3hCG -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:00 2025 by rpki-client