$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft File: 0dca6695-752f-4d90-822c-1351355a562e.mft (raw, json) Hash identifier: Z1NcqhWwyPHCQXdJs66hIMQf8cOX5m6zlcpYgiyLKSw= Subject key identifier: 38:C2:13:14:53:BE:4F:A7:0A:D0:6D:C2:8E:70:FD:FF:1A:81:A8:35 Authority key identifier: 4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 Certificate issuer: /CN=0dca6695-752f-4d90-822c-1351355a562e Certificate serial: 010D0C9F432858496AE98CBE96329B5BBBFFE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft Manifest number: 010D0C9F4328584073A8240B597D0EBA2C6FB3A3 Signing time: Fri 04 Apr 2025 20:00:03 +0000 Manifest this update: Fri 04 Apr 2025 20:00:03 +0000 Manifest next update: Mon 07 Apr 2025 20:00:00 +0000 Files and hashes: 1: 0dca6695-752f-4d90-822c-1351355a562e.crl (hash: DARTlcDL5MjyEfw0lOHYyPCZwQrr+nMshVWygISeM7w=) 2: 77383938-33cf-301d-a6a4-348581ec9a6f.roa (hash: AB/XlW4wJL8RotLgCUrJMQ4crTkOVcaT5HyJI2sr3S0=) 3: b874dedc-9a39-3c5b-8eb0-fe349f0e60c9.roa (hash: dB70ZjPTzaYdXNXus/tCNkr+jrOFgBW1MnTrwdnDC3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:e9:8c:be:96:32:9b:5b:bb:ff:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dca6695-752f-4d90-822c-1351355a562e Validity Not Before: Apr 4 20:00:03 2025 GMT Not After : Apr 7 20:00:00 2025 GMT Subject: CN=15985a4c-c6e2-49b6-8d28-13ff18947500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:16:c4:9c:c8:78:7f:a7:21:51:1e:2c:3f: 1f:be:af:a9:c1:4a:2b:35:9f:6d:e1:9d:09:f2:d5: 26:8b:b2:17:3a:23:39:b7:ae:3d:fd:c2:b1:75:22: e8:ab:a1:02:d3:0c:ba:ed:ff:6a:75:70:f7:6b:12: ea:de:05:dd:e6:91:67:29:91:20:89:5f:50:ee:43: cb:1c:99:24:ee:06:02:b3:39:ae:72:08:fa:f1:7d: ae:8b:1c:32:cb:b6:54:50:47:9d:73:d0:e3:26:7b: 88:a9:bb:94:08:e1:1b:d9:dc:5f:85:77:16:fb:32: b0:37:1e:dd:8f:98:8c:cf:2a:11:13:9b:84:60:a1: c9:fb:d7:8f:54:88:e4:91:a0:ec:58:fa:ea:34:1f: 84:4e:d2:60:cf:1a:d2:5a:e2:a7:03:cd:20:05:c7: 38:5a:8a:c9:8c:91:44:5a:dd:c8:6c:43:1e:87:0d: 28:fc:63:1e:94:24:c7:2f:90:92:c1:bb:d0:ae:e4: ac:83:db:c3:ad:28:a4:54:43:9f:e3:40:9b:dd:64: b7:a3:d1:15:22:0d:79:db:d4:f2:9c:18:cc:3f:ca: d2:a2:10:33:ce:ca:ab:2c:3e:b5:88:d1:29:2f:8a: b5:76:e3:1b:5b:eb:d9:95:d2:29:4d:87:60:87:59: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C2:13:14:53:BE:4F:A7:0A:D0:6D:C2:8E:70:FD:FF:1A:81:A8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.crl X509v3 Authority Key Identifier: keyid:4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:46:8c:e7:df:fb:d7:c2:b6:ac:7b:3c:39:0f:a9:e7:58:52: 21:69:db:ea:62:28:0b:d1:0c:cb:a1:e2:37:73:76:29:ea:fc: 7c:3f:c9:ad:bc:9e:75:d8:47:82:c4:68:39:7e:00:d2:c4:e9: b1:8c:71:f7:8e:23:4c:fe:f3:0d:3a:e5:0a:2a:2a:52:f5:87: 0f:5c:29:d2:ff:29:1e:72:65:a3:8d:4b:70:62:5a:47:8f:97: 53:bb:da:09:09:dc:8f:5f:68:71:0b:f0:65:4d:3d:85:d8:9b: 6c:01:12:9a:3d:50:f4:93:e0:d4:e8:29:d7:9c:b6:39:7f:0e: 60:ad:fd:38:1a:83:72:ba:57:98:df:09:d7:a3:eb:43:99:96: ff:03:87:80:49:de:f6:ff:ce:38:22:7f:42:ce:95:33:ac:1a: b1:65:c1:26:43:96:3b:85:a3:ea:8d:05:c3:f0:8a:4b:67:c1: 8c:c8:ee:45:c5:c7:2a:bd:d9:14:e5:9a:a7:98:a5:bf:55:c6: f5:4e:5e:3d:5f:31:38:60:2f:43:c1:ae:11:4c:ff:7e:b7:07: c8:70:a3:e3:6b:69:ba:d0:bc:bb:4d:5c:30:b0:1c:b9:df:ff: f5:92:e2:2f:67:cc:e8:2e:ea:31:2d:1f:92:02:bc:62:4d:07: 96:e4:71:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElq6Yy+ljKbW7v/4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjYTY2OTUtNzUyZi00ZDkwLTgyMmMtMTM1MTM1NWE1 NjJlMB4XDTI1MDQwNDIwMDAwM1oXDTI1MDQwNzIwMDAwMFowLzEtMCsGA1UEAxMk MTU5ODVhNGMtYzZlMi00OWI2LThkMjgtMTNmZjE4OTQ3NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQIWxJzIeH+nIVEeLD8fvq+pwUorNZ9t4Z0J 8tUmi7IXOiM5t649/cKxdSLoq6EC0wy67f9qdXD3axLq3gXd5pFnKZEgiV9Q7kPL HJkk7gYCszmucgj68X2uixwyy7ZUUEedc9DjJnuIqbuUCOEb2dxfhXcW+zKwNx7d j5iMzyoRE5uEYKHJ+9ePVIjkkaDsWPrqNB+ETtJgzxrSWuKnA80gBcc4WorJjJFE Wt3IbEMehw0o/GMelCTHL5CSwbvQruSsg9vDrSikVEOf40Cb3WS3o9EVIg1529Ty nBjMP8rSohAzzsqrLD61iNEpL4q1duMbW+vZldIpTYdgh1mUdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDjCExRTvk+nCtBtwo5w/f8agag1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNh NjY5NS03NTJmLTRkOTAtODIyYy0xMzUxMzU1YTU2MmUvMGRjYTY2OTUtNzUyZi00 ZDkwLTgyMmMtMTM1MTM1NWE1NjJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGRjYTY2OTUtNzUyZi00ZDkwLTgy MmMtMTM1MTM1NWE1NjJlLzBkY2E2Njk1LTc1MmYtNGQ5MC04MjJjLTEzNTEzNTVh NTYyZS5jcmwwHwYDVR0jBBgwFoAUStvTRSGefpWBEKCsgute0ZpGDHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZGNhNjY5NS03NTJmLTRkOTAtODIyYy0xMzUx MzU1YTU2MmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyRozn3/vXwrasezw5D6nn WFIhadvqYigL0QzLoeI3c3Yp6vx8P8mtvJ512EeCxGg5fgDSxOmxjHH3jiNM/vMN OuUKKipS9YcPXCnS/ykecmWjjUtwYlpHj5dTu9oJCdyPX2hxC/BlTT2F2JtsARKa PVD0k+DU6CnXnLY5fw5grf04GoNyuleY3wnXo+tDmZb/A4eASd72/844In9CzpUz rBqxZcEmQ5Y7haPqjQXD8IpLZ8GMyO5FxccqvdkU5ZqnmKW/Vcb1Tl49XzE4YC9D wa4RTP9+twfIcKPja2m60Ly7TVwwsBy53//1kuIvZ8zoLuoxLR+SArxiTQeW5HEr -----END CERTIFICATE-----Generated at Sat Apr 5 01:40:24 2025 by rpki-client