$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: xjXRHriD6oVThp8adD+b1mShcZKg6GMU8xC5BwNeSfE= Subject key identifier: 00:45:9F:79:3F:1B:76:8E:53:0C:BA:90:63:AA:68:8D:B8:A3:69:C0 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F432858498BB720EC389318E9CF500C70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1E26 Signing time: Wed 16 Apr 2025 14:00:07 +0000 Manifest this update: Wed 16 Apr 2025 14:00:07 +0000 Manifest next update: Fri 18 Apr 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: uUovSan9qxg4hiGxUFkidBlN0HmJ5aopvx3QrmVVWpc=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: NlY7+j6lzLmNp0TnCRmfmuFGQnTZufhzIZFosG+gZug=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: TRGf5eWP69xqwKuv6r4xYhI/kZudVMw/TJkUkHnwgXA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:b7:20:ec:38:93:18:e9:cf:50:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Apr 16 14:00:07 2025 GMT Not After : Apr 18 14:00:00 2025 GMT Subject: CN=fbb07208-5b73-481c-8e34-6aefe865836c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:3f:00:ab:58:9c:72:d9:9b:fc:cb:e2:78: 80:7d:21:cb:5d:f6:5f:47:4e:92:cc:7f:bb:a9:32: ec:65:6c:00:2e:0b:d6:ec:50:44:c9:79:41:20:15: 9f:ec:a1:e0:3b:e2:25:10:b9:f4:20:71:ac:7e:0c: a6:8b:a2:ce:24:f3:3f:b4:5c:98:fe:9f:cc:c2:bf: 4e:c6:4d:e3:77:c0:cf:f3:ec:bc:61:88:37:1f:45: 53:e3:41:49:84:54:82:d3:54:bb:b2:53:85:f9:74: 17:2d:30:b6:a3:0f:e1:ee:43:79:3f:8f:9e:a1:54: c2:dd:9a:9a:9b:a0:1b:bf:9f:47:9d:16:89:e3:b4: 7e:e0:8e:4a:78:95:f5:98:1b:66:7b:c0:c6:a6:f8: 13:ce:ca:89:a9:ac:51:bc:f5:31:1b:a2:92:97:68: a2:0a:21:a1:fe:d9:78:ef:1d:e9:3a:4c:63:52:99: 83:f2:80:d3:96:0a:de:0d:a1:1f:69:53:cd:21:96: 1e:1a:cc:7d:e4:30:9a:2d:01:75:08:22:85:f2:43: b3:9b:69:e3:51:81:b7:17:3b:82:43:ad:0f:25:b9: 5c:11:3a:96:4e:0e:29:b1:77:92:df:ec:39:50:d6: e8:c7:3d:d6:8a:fb:be:37:e5:bb:e0:55:16:f1:f4: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:9F:79:3F:1B:76:8E:53:0C:BA:90:63:AA:68:8D:B8:A3:69:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:10:d8:3d:63:b7:09:47:85:ac:45:7d:3d:0e:03:e1:84:d3: cf:f4:22:4e:80:10:90:61:cb:1b:5b:ad:7b:a3:8d:0b:cd:09: e1:01:88:ac:5a:6b:85:21:e4:9d:81:7b:d0:8b:6b:c1:95:f0: a4:75:5f:a0:20:34:1f:4f:0b:72:08:15:4d:e7:14:24:1a:ad: 93:e9:76:b1:a3:0a:36:69:9c:dd:52:bd:c6:05:a8:b0:69:08: 03:97:4f:91:47:b1:c8:91:ee:3f:5b:7e:14:13:1e:5d:ea:34: d3:1b:fd:a6:63:08:da:84:b2:78:25:fb:30:c9:cf:e3:b2:7a: 92:6a:26:3a:ab:02:88:60:c9:0f:f6:d0:d0:a0:a7:75:38:03: 12:d0:be:ac:44:8b:40:c2:00:33:69:ba:fd:88:18:8f:6f:57: b2:11:e5:3e:c9:4b:4d:96:8a:f1:7d:cb:bb:71:2e:b1:95:8b: fd:3f:a7:56:ee:40:2e:b5:fb:16:4d:21:54:31:17:8c:d7:06: ee:91:dc:65:97:90:5e:4a:75:19:43:f2:10:ca:25:56:2f:13: 74:84:44:c5:38:c0:44:aa:29:52:01:aa:63:89:56:15:cd:71: c8:c3:f0:69:53:51:cf:90:8f:27:a3:43:f7:9d:c0:48:87:ce: ec:64:af:99 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmLtyDsOJMY6c9QDHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MDQxNjE0MDAwN1oXDTI1MDQxODE0MDAwMFowLzEtMCsGA1UEAxMk ZmJiMDcyMDgtNWI3My00ODFjLThlMzQtNmFlZmU4NjU4MzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuo/AKtYnHLZm/zL4niAfSHLXfZfR06SzH+7 qTLsZWwALgvW7FBEyXlBIBWf7KHgO+IlELn0IHGsfgymi6LOJPM/tFyY/p/Mwr9O xk3jd8DP8+y8YYg3H0VT40FJhFSC01S7slOF+XQXLTC2ow/h7kN5P4+eoVTC3Zqa m6Abv59HnRaJ47R+4I5KeJX1mBtme8DGpvgTzsqJqaxRvPUxG6KSl2iiCiGh/tl4 7x3pOkxjUpmD8oDTlgreDaEfaVPNIZYeGsx95DCaLQF1CCKF8kOzm2njUYG3FzuC Q60PJblcETqWTg4psXeS3+w5UNboxz3Wivu+N+W74FUW8fT0AwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFABFn3k/G3aOUwy6kGOqaI24o2nAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgENg9Y7cJR4WsRX09DgPh hNPP9CJOgBCQYcsbW617o40LzQnhAYisWmuFIeSdgXvQi2vBlfCkdV+gIDQfTwty CBVN5xQkGq2T6Xaxowo2aZzdUr3GBaiwaQgDl0+RR7HIke4/W34UEx5d6jTTG/2m YwjahLJ4Jfswyc/jsnqSaiY6qwKIYMkP9tDQoKd1OAMS0L6sRItAwgAzabr9iBiP b1eyEeU+yUtNlorxfcu7cS6xlYv9P6dW7kAutfsWTSFUMReM1wbukdxll5BeSnUZ Q/IQyiVWLxN0hETFOMBEqilSAapjiVYVzXHIw/BpU1HPkI8no0P3ncBIh87sZK+Z -----END CERTIFICATE-----Generated at Thu Apr 17 09:22:33 2025 by rpki-client