$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: BMQ3OQlJKcjkY6ytSmcVQAzvEcTOVaxs/605BZ+VSXg= Subject key identifier: 9F:40:67:53:14:6A:91:A9:61:19:DB:9B:94:AC:AD:0E:E0:C8:E1:23 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F432858497C0306C5043B757E00CA9440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70C9E3 Signing time: Thu 10 Apr 2025 23:00:07 +0000 Manifest this update: Thu 10 Apr 2025 23:00:07 +0000 Manifest next update: Sun 13 Apr 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: 0ppFSoXXgWBFlmbS7KH8HPHIBJ+Q5nPgNlBwM/Iy23s=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: lbP0BbqswA+dMxlaBhoSqEwf8kOrsfj0EfuV3AooxSo=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: keFcAAG2dpfEBJhM9ZqePULThzcDmoPhvHmuAcZs9s8=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: BMWvpJL97gzIBeft9pejjY6q0UDKsWrGvVjA0epj1Do=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:03:06:c5:04:3b:75:7e:00:ca:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Apr 10 23:00:07 2025 GMT Not After : Apr 13 23:00:00 2025 GMT Subject: CN=40c9f290-4ac4-406d-b998-87b9bb1b4d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:13:ff:90:f1:81:08:75:d4:ad:fd:23:aa: 9b:60:cc:94:fc:d2:d8:9f:4c:4e:8f:60:b8:98:70: de:31:0d:82:38:60:81:10:8c:76:1c:89:fa:58:0f: 13:7f:ae:85:f3:c3:81:57:45:f9:fc:53:61:ce:77: 85:4d:b3:27:4a:ea:45:71:a2:72:34:a1:8c:5f:ee: 07:26:4b:39:33:3e:35:e0:84:12:a0:b5:9a:db:63: 04:63:c7:2b:6a:00:fb:c7:57:c8:72:0b:55:10:ac: 7b:57:34:43:d5:8e:26:8b:f4:cb:98:32:78:4d:a0: 2a:9f:7e:9c:87:48:a0:03:8d:1a:96:38:bd:b0:7f: c0:ae:d2:0a:b9:f9:4c:40:07:75:b4:23:b9:77:2d: cb:77:d4:36:34:f2:de:0f:f9:b6:f0:5d:97:18:15: 45:46:5d:68:10:a5:5c:1f:9a:d5:74:18:56:ee:5e: f6:69:66:fc:3d:f8:91:7d:83:a9:53:6d:12:bb:c5: ff:6d:be:60:85:e1:56:5a:eb:95:f5:f6:03:39:04: 55:bb:78:b3:0b:8a:b7:21:23:13:84:da:60:b2:0e: b2:32:62:56:9b:ad:ee:28:54:b5:15:bb:c0:ac:c0: c2:88:49:25:c3:77:f8:a2:b3:cf:12:07:b2:0a:95: d6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:40:67:53:14:6A:91:A9:61:19:DB:9B:94:AC:AD:0E:E0:C8:E1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f6:00:7a:41:58:b4:1d:b2:5e:ac:f7:66:f7:e5:84:41:c1: 13:c2:81:65:ec:ba:b7:ba:c2:6b:67:a3:01:5c:b3:ff:67:38: 49:b4:f3:10:da:39:57:cd:3f:af:eb:9d:3e:27:ed:68:a0:11: 1b:88:db:56:57:37:5e:4f:f2:d6:a3:ae:ef:fe:c1:49:cb:9d: 28:81:0b:22:88:a3:39:8e:c6:fc:11:0b:60:46:57:35:85:5e: 66:2b:9f:f2:36:67:ea:bc:af:7b:b2:07:43:3b:83:de:94:a2: d3:60:e5:9c:54:16:82:01:08:e5:5b:76:58:6e:bf:02:90:9c: 20:73:9c:fa:0a:b7:45:33:5d:2f:25:c7:64:34:b7:3b:0d:93: 77:6f:70:95:fd:c7:77:84:5f:66:3e:fc:f8:b4:6a:1c:04:7b: 69:56:63:ed:5e:14:ff:26:32:dc:80:95:f4:87:67:f1:46:9a: c0:01:76:21:d7:4e:db:5d:d4:d8:49:37:79:66:7c:5e:14:7a: fc:94:68:4d:df:73:51:5e:95:aa:8f:ac:0e:75:46:9a:00:cc: 93:10:62:b7:33:c3:df:bd:9a:00:f3:5a:3b:53:09:32:6c:f9: d7:4c:60:14:95:ef:3c:b0:4f:f2:e4:ea:64:7c:8a:27:9c:90: a8:c0:62:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8AwbFBDt1fgDKlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDQxMDIzMDAwN1oXDTI1MDQxMzIzMDAwMFowLzEtMCsGA1UEAxMk NDBjOWYyOTAtNGFjNC00MDZkLWI5OTgtODdiOWJiMWI0ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/UT/5DxgQh11K39I6qbYMyU/NLYn0xOj2C4 mHDeMQ2COGCBEIx2HIn6WA8Tf66F88OBV0X5/FNhzneFTbMnSupFcaJyNKGMX+4H Jks5Mz414IQSoLWa22MEY8cragD7x1fIcgtVEKx7VzRD1Y4mi/TLmDJ4TaAqn36c h0igA40alji9sH/ArtIKuflMQAd1tCO5dy3Ld9Q2NPLeD/m28F2XGBVFRl1oEKVc H5rVdBhW7l72aWb8PfiRfYOpU20Su8X/bb5gheFWWuuV9fYDOQRVu3izC4q3ISMT hNpgsg6yMmJWm63uKFS1FbvArMDCiEklw3f4orPPEgeyCpXWyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ9AZ1MUapGpYRnbm5SsrQ7gyOEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF9gB6QVi0HbJerPdm9+WE QcETwoFl7Lq3usJrZ6MBXLP/ZzhJtPMQ2jlXzT+v650+J+1ooBEbiNtWVzdeT/LW o67v/sFJy50ogQsiiKM5jsb8EQtgRlc1hV5mK5/yNmfqvK97sgdDO4PelKLTYOWc VBaCAQjlW3ZYbr8CkJwgc5z6CrdFM10vJcdkNLc7DZN3b3CV/cd3hF9mPvz4tGoc BHtpVmPtXhT/JjLcgJX0h2fxRprAAXYh107bXdTYSTd5ZnxeFHr8lGhN33NRXpWq j6wOdUaaAMyTEGK3M8PfvZoA81o7UwkybPnXTGAUle88sE/y5OpkfIonnJCowGJF -----END CERTIFICATE-----Generated at Fri Apr 11 21:06:49 2025 by rpki-client