$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft File: 7e70a287-ad97-4c1e-9564-9ca069f57b17.mft (raw, json) Hash identifier: /MNBfZJZh3/oXSlDmaxIEgQTM0RwHmGSBcXLZMvH1pI= Subject key identifier: 53:0F:08:4C:2C:28:60:03:F9:98:12:90:7E:16:7B:66:EF:A3:D5:83 Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F432858497FF780D4CFB2489D031C6490 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft Manifest number: 010D0C9F4328584073A84A2792840918C6A14D50 Signing time: Sat 12 Apr 2025 09:00:07 +0000 Manifest this update: Sat 12 Apr 2025 09:00:07 +0000 Manifest next update: Mon 14 Apr 2025 09:00:00 +0000 Files and hashes: 1: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (hash: GQySP7mJ9WZeb+2a6UUNHhFEat4mJjl5KRninAnWQc0=) 2: 7e70a287-ad97-4c1e-9564-9ca069f57b17.crl (hash: Yx+vibkSvyEVrTOuzK02b9D0SrBYALx4M9DFzvViHsY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:f7:80:d4:cf:b2:48:9d:03:1c:64:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Apr 12 09:00:07 2025 GMT Not After : Apr 14 09:00:00 2025 GMT Subject: CN=4218a795-6fd9-43fd-8b9e-609a53343e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:af:18:e0:98:87:51:e5:f9:ea:3c:46:92:80: d5:68:22:02:d0:38:79:ee:4c:16:57:22:88:e1:c9: 94:eb:e0:79:11:64:98:cf:e0:52:f4:f0:51:c5:bf: 40:90:1f:4e:c7:da:bc:07:70:75:de:bc:0a:eb:d9: e4:c3:99:bc:29:f7:c0:30:46:4a:00:6b:8a:cf:bd: 73:f3:a6:42:c8:40:05:1a:51:21:53:67:58:79:24: 58:69:0f:6b:48:31:09:c2:1f:02:c8:a1:ba:0f:dd: 4f:da:17:b0:86:e7:82:77:05:17:c6:e7:18:04:f5: ab:f8:a8:0c:bd:22:c1:79:e8:27:43:d7:ab:3f:73: 1e:b8:41:ae:7e:00:d0:9c:43:21:6c:e0:2f:5a:58: 11:a8:09:75:c7:a2:16:8c:96:a8:b8:e2:fa:10:35: f0:7f:0a:c3:da:f4:52:01:9f:c1:03:d6:39:12:f8: cb:d5:27:26:a2:6f:66:1d:81:86:77:c8:cb:f5:d0: 67:01:1a:43:9b:e8:9b:0d:01:a5:85:86:54:2a:d9: c6:4a:79:42:97:df:14:fe:3e:90:14:35:bc:e3:78: 0e:bf:7b:ad:a1:70:13:30:4a:c9:26:76:7b:5c:42: d1:bb:08:a6:a2:5a:09:d1:69:78:11:4a:fc:d4:c2: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0F:08:4C:2C:28:60:03:F9:98:12:90:7E:16:7B:66:EF:A3:D5:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:de:c8:6a:80:27:fc:fb:a5:5d:19:56:9e:1c:96:85:a3:6f: a3:50:ea:d9:23:02:32:dd:68:a9:7b:65:3b:45:03:4e:22:14: e4:ae:23:ad:03:ee:8e:a7:5b:97:d2:31:32:db:00:d4:91:e6: 11:cf:60:e8:ce:54:fa:8e:64:c6:21:ab:6b:4e:3a:72:15:7c: 52:b0:26:33:90:24:33:0b:03:60:a1:74:7c:d1:d5:e4:1d:65: cb:14:99:97:28:83:f2:00:bd:06:7f:8a:7f:91:db:3e:d2:cd: 60:82:61:bb:1d:37:9f:04:3d:d2:ce:91:2b:d3:14:2b:41:8e: 9b:7c:a7:3b:86:38:31:99:1b:6c:11:2e:5e:89:ef:52:77:64: e1:57:18:ec:b8:7e:d0:d5:4f:71:39:9b:70:e7:6b:b4:eb:6e: 63:66:f4:18:93:3a:8f:64:c3:96:a0:1a:9b:ea:13:ca:e5:ae: 40:b9:b9:9f:c9:0c:00:d9:81:a0:fb:1e:1a:99:ab:da:43:4f: ef:1b:bd:41:bf:45:c6:3a:af:78:f7:3a:2d:21:9b:c4:61:ed: 8d:4f:dd:e8:e4:5c:b0:d3:fa:cf:6a:e3:d6:c2:16:40:09:34: 03:41:d3:69:0a:8a:b3:f8:f4:8c:32:67:0c:78:18:3e:3d:65: e7:05:7c:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/94DUz7JInQMcZJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MDQxMjA5MDAwN1oXDTI1MDQxNDA5MDAwMFowLzEtMCsGA1UEAxMk NDIxOGE3OTUtNmZkOS00M2ZkLThiOWUtNjA5YTUzMzQzZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa8Y4JiHUeX56jxGkoDVaCIC0Dh57kwWVyKI 4cmU6+B5EWSYz+BS9PBRxb9AkB9Ox9q8B3B13rwK69nkw5m8KffAMEZKAGuKz71z 86ZCyEAFGlEhU2dYeSRYaQ9rSDEJwh8CyKG6D91P2hewhueCdwUXxucYBPWr+KgM vSLBeegnQ9erP3MeuEGufgDQnEMhbOAvWlgRqAl1x6IWjJaouOL6EDXwfwrD2vRS AZ/BA9Y5EvjL1Scmom9mHYGGd8jL9dBnARpDm+ibDQGlhYZUKtnGSnlCl98U/j6Q FDW843gOv3utoXATMErJJnZ7XELRuwimoloJ0Wl4EUr81MJDeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFMPCEwsKGAD+ZgSkH4We2bvo9WDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvN2U3MGEyODctYWQ5Ny00 YzFlLTk1NjQtOWNhMDY5ZjU3YjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAS3shqgCf8+6VdGVaeHJaF o2+jUOrZIwIy3Wipe2U7RQNOIhTkriOtA+6Op1uX0jEy2wDUkeYRz2DozlT6jmTG IatrTjpyFXxSsCYzkCQzCwNgoXR80dXkHWXLFJmXKIPyAL0Gf4p/kds+0s1ggmG7 HTefBD3SzpEr0xQrQY6bfKc7hjgxmRtsES5eie9Sd2ThVxjsuH7Q1U9xOZtw52u0 625jZvQYkzqPZMOWoBqb6hPK5a5AubmfyQwA2YGg+x4amavaQ0/vG71Bv0XGOq94 9zotIZvEYe2NT93o5Fyw0/rPauPWwhZACTQDQdNpCoqz+PSMMmcMeBg+PWXnBXxb -----END CERTIFICATE-----Generated at Sat Apr 12 13:52:14 2025 by rpki-client