$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft File: a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft (raw, json) Hash identifier: 4XfM5c/I2bU+pJuvRrR0pSGDheN0vMdGPkI3wCyzw5I= Subject key identifier: 71:AA:93:D6:01:7B:52:BC:2C:13:F3:DE:EA:21:03:9D:9C:3F:72:9E Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F43285849386DBD43E2E2962554163300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft Manifest number: 010D0C9F43285847CD87BC5E3F745E4DF6353F86 Signing time: Mon 17 Mar 2025 18:00:07 +0000 Manifest this update: Mon 17 Mar 2025 18:00:07 +0000 Manifest next update: Thu 20 Mar 2025 18:00:00 +0000 Files and hashes: 1: 022d5c6a-7e45-3587-8084-f8af25ed8817.roa (hash: fAiB5Vc8dIFE37OdInIszBDpnQcgi05/9VJLf/o4N2s=) 2: 9a9235ac-9ad1-3a83-b931-e086a9800ba2.roa (hash: R7BWTHBQZXfGUgbDHGdm0KE5N+kCb+H39iNGlQjq37A=) 3: a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl (hash: jmZoqBt8oZb0BCz3/YNcHV9uOlCh5/Q2aG6PehvxT70=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:38:6d:bd:43:e2:e2:96:25:54:16:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Mar 17 18:00:07 2025 GMT Not After : Mar 20 18:00:00 2025 GMT Subject: CN=5dfe3be6-c04c-4638-8c50-d860a2be314c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:a2:a3:57:63:36:71:20:8a:fa:b1:7a:9b: 44:83:da:a3:63:e9:f7:0f:3a:c3:50:5b:59:20:f1: 93:b9:43:e0:04:1e:71:b9:68:7f:f5:c7:66:7f:49: 86:a8:82:05:86:03:35:03:68:65:04:1d:a7:a9:8b: 03:d3:be:4e:47:6d:e0:86:c2:41:78:33:59:95:e2: 3c:1c:16:20:5e:23:55:9c:c7:06:f5:9b:5e:59:66: 62:37:d7:bd:d7:1b:90:4e:90:74:83:eb:ac:ba:7c: 10:13:b9:59:b3:ae:2a:9c:44:10:f8:5d:bc:11:79: 7c:9b:cb:f3:fd:73:61:6a:5f:db:d5:a2:25:b8:32: 72:a7:36:3e:3e:9b:78:c4:22:27:0c:4e:36:5f:94: 1f:78:7f:02:0e:c1:60:e9:27:d2:bd:4a:cb:69:1c: 1e:b3:df:fe:33:3c:7f:bd:b4:dd:53:bb:15:bb:24: 97:f9:39:09:0c:11:48:08:d7:2c:10:1b:dc:e0:64: 5b:97:a7:52:a9:94:b3:49:9c:7a:82:40:db:20:e1: 78:05:3a:69:df:86:31:ee:b7:96:6a:b7:f0:50:14: e6:d3:c7:2b:26:3d:be:55:8d:c7:02:b2:27:db:99: f3:5d:34:71:e0:52:98:70:52:b5:b4:0f:57:d5:f7: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:93:D6:01:7B:52:BC:2C:13:F3:DE:EA:21:03:9D:9C:3F:72:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:73:0b:3a:3f:7c:33:ba:9f:e0:28:98:28:0c:4c:6b:d6:66: 01:c3:7c:2a:fd:dd:3f:3e:da:8c:3f:b3:37:21:d0:22:71:67: 4a:01:fd:bb:70:76:26:20:24:2c:1c:98:85:3e:7d:cf:fa:5f: 4f:fb:e0:a3:0d:fe:45:bb:c5:c5:63:e7:74:a6:1b:e7:70:1c: b1:fe:41:c8:ac:d9:f0:2b:40:2a:18:95:6a:fd:e8:dc:96:5f: 65:dd:cd:c9:9d:30:d3:cf:0d:d8:c3:f5:53:83:6d:33:d3:06: 0c:20:2a:61:07:65:7c:e5:3e:97:42:55:09:87:ec:e1:65:d3: d1:49:c0:8b:3f:e8:d6:eb:d5:7e:87:ef:4b:80:e1:1d:79:78: 08:4f:84:cb:5f:3f:67:9e:2a:ce:5d:fc:b4:df:66:6f:57:d5: cf:97:11:6c:5a:b9:68:b9:47:13:f7:f4:4b:04:a0:23:69:6f: 0f:cb:f3:e0:ef:5c:49:d2:15:8c:3d:12:09:a4:d7:76:ed:ea: 6d:da:9e:ba:da:e0:ef:ca:a0:b9:88:ed:d9:72:11:6e:80:3a: bc:2d:cd:23:6f:bc:6b:54:f9:25:2b:05:4f:bf:48:8d:c7:19: 28:e2:53:2f:c9:83:8c:a2:ba:48:da:24:f2:74:1c:8a:63:47: fa:fc:63:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEk4bb1D4uKWJVQWMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI1MDMxNzE4MDAwN1oXDTI1MDMyMDE4MDAwMFowLzEtMCsGA1UEAxMk NWRmZTNiZTYtYzA0Yy00NjM4LThjNTAtZDg2MGEyYmUzMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zqio1djNnEgivqxeptEg9qjY+n3DzrDUFtZ IPGTuUPgBB5xuWh/9cdmf0mGqIIFhgM1A2hlBB2nqYsD075OR23ghsJBeDNZleI8 HBYgXiNVnMcG9ZteWWZiN9e91xuQTpB0g+usunwQE7lZs64qnEQQ+F28EXl8m8vz /XNhal/b1aIluDJypzY+Ppt4xCInDE42X5QfeH8CDsFg6SfSvUrLaRwes9/+Mzx/ vbTdU7sVuySX+TkJDBFICNcsEBvc4GRbl6dSqZSzSZx6gkDbIOF4BTpp34Yx7reW arfwUBTm08crJj2+VY3HArIn25nzXTRx4FKYcFK1tA9X1fcnqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHGqk9YBe1K8LBPz3uohA52cP3KeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvYTk2OTRjMjEtMTc4Yy00 ZTdiLTllNzgtMDhiYzk3OGM1ZTZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqcws6P3wzup/gKJgoDExr 1mYBw3wq/d0/PtqMP7M3IdAicWdKAf27cHYmICQsHJiFPn3P+l9P++CjDf5Fu8XF Y+d0phvncByx/kHIrNnwK0AqGJVq/ejcll9l3c3JnTDTzw3Yw/VTg20z0wYMICph B2V85T6XQlUJh+zhZdPRScCLP+jW69V+h+9LgOEdeXgIT4TLXz9nnirOXfy032Zv V9XPlxFsWrlouUcT9/RLBKAjaW8Py/Pg71xJ0hWMPRIJpNd27ept2p662uDvyqC5 iO3ZchFugDq8Lc0jb7xrVPklKwVPv0iNxxko4lMvyYOMorpI2iTydByKY0f6/GP6 -----END CERTIFICATE-----Generated at Tue Mar 18 04:27:19 2025 by rpki-client