$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft File: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft (raw, json) Hash identifier: 18hYlEXDW3ELHNGZWfOMad/h5M79F5i5Kjj6XtRA0+s= Subject key identifier: DB:59:D2:87:53:03:8C:07:2C:9A:3D:60:3D:AA:8B:D5:58:79:AB:97 Authority key identifier: 76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 Certificate issuer: /CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Certificate serial: 010D0C9F432858497E7465A8329AD65AC32F9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft Manifest number: 010D0C9F432858479E50A350BF51B81F781245AC Signing time: Fri 11 Apr 2025 20:00:07 +0000 Manifest this update: Fri 11 Apr 2025 20:00:07 +0000 Manifest next update: Mon 14 Apr 2025 20:00:00 +0000 Files and hashes: 1: ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl (hash: nMFZrphH8zSgSGuOCaF9gLLtoGWQQ+Dn93AqxGFItF0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:74:65:a8:32:9a:d6:5a:c3:2f:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e Validity Not Before: Apr 11 20:00:07 2025 GMT Not After : Apr 14 20:00:00 2025 GMT Subject: CN=881ac3b5-c198-49b9-a890-4e3bf71c7e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:f1:cf:67:ae:33:bf:5b:9b:95:a6:18:89: e0:2f:d1:a4:ab:61:3a:ba:94:a2:fd:46:5f:83:7a: 35:5e:21:e4:4c:b4:c2:13:51:94:90:ee:77:37:82: 75:a8:44:1f:1f:53:1e:14:bb:5c:59:be:fa:05:63: 7b:ec:1c:e2:6d:6c:35:3c:d1:5a:2d:58:b5:8c:d7: 4d:6c:bd:63:fa:b9:1b:9c:93:98:4c:2d:ca:08:35: 97:ff:2f:d9:7f:14:48:bc:95:56:87:0f:51:08:d3: 6b:f7:0d:c1:37:1c:ce:17:d7:d7:fc:93:2f:b8:bf: 3f:3f:e7:30:5c:c0:fa:ca:13:8d:24:ff:c6:a8:f1: 8b:8e:8a:67:c0:73:80:95:c6:d1:7d:a4:2d:34:71: 83:9c:54:a9:ba:9d:7e:48:6a:8a:54:33:4c:d1:c2: e3:eb:59:c8:5c:b9:f2:50:2b:47:f2:38:2e:9a:da: a8:6d:34:df:02:8a:cd:32:d1:7e:eb:c2:69:16:9e: 47:95:be:e3:1a:f1:c9:4e:3b:84:39:f0:f5:19:6e: 17:2b:d7:0e:ca:11:f3:d0:86:8b:bf:40:9b:e6:8c: 34:84:10:02:ee:28:c0:27:48:6d:6f:0a:59:7f:eb: df:ca:95:07:f5:d6:ac:21:14:42:e8:33:c9:25:7d: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:D2:87:53:03:8C:07:2C:9A:3D:60:3D:AA:8B:D5:58:79:AB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.crl X509v3 Authority Key Identifier: keyid:76:8F:EA:CF:C0:A2:28:93:9E:CD:8A:8A:3B:E3:9A:2D:0A:48:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ecf1bcea-9baf-4eee-9979-24bc1fbdfe1e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3c:d7:6a:db:1e:ab:6a:f9:12:4b:69:e1:8f:de:e6:ca:01: 3b:e2:72:e7:b6:d5:a2:86:7d:66:e6:25:91:86:41:b1:0d:30: 05:00:11:36:aa:dc:85:47:49:de:e0:9c:cb:96:11:8a:55:22: 5e:bf:c4:30:52:0a:cb:20:f0:d7:48:05:1f:1e:98:b5:a0:95: 45:ca:ca:7c:23:c5:2c:d5:76:10:1b:bd:02:80:3c:ea:e3:9e: 95:58:27:65:58:2a:28:58:f0:3e:3a:ed:e4:b7:a0:96:54:df: 3f:86:3c:14:59:98:1c:34:df:ba:8b:9e:71:17:d7:bb:91:bf: 10:67:40:a1:7d:95:d1:75:79:51:bf:92:51:79:ab:59:be:b1: 0e:cd:4a:e5:f4:5a:7d:32:90:c7:81:b1:6f:bd:ae:66:98:74: 88:39:ec:23:cc:12:53:9f:e6:4f:dc:9d:a5:02:f2:77:fa:1c: c2:4f:88:a7:8b:12:13:c4:6c:aa:f5:e5:e8:17:08:7c:4d:b2: 2c:30:d1:89:76:1a:4f:43:de:53:a0:df:fe:a8:9c:29:5e:8d: f1:fd:b6:60:cf:27:7f:b4:30:5d:bb:42:fd:2b:ea:cc:fc:96: 32:7d:8e:0a:3f:91:23:74:b4:3c:2a:e8:a5:0d:70:ad:10:17: a3:f3:23:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+dGWoMprWWsMvkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNmMWJjZWEtOWJhZi00ZWVlLTk5NzktMjRiYzFmYmRm ZTFlMB4XDTI1MDQxMTIwMDAwN1oXDTI1MDQxNDIwMDAwMFowLzEtMCsGA1UEAxMk ODgxYWMzYjUtYzE5OC00OWI5LWE4OTAtNGUzYmY3MWM3ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdbxz2euM79bm5WmGIngL9Gkq2E6upSi/UZf g3o1XiHkTLTCE1GUkO53N4J1qEQfH1MeFLtcWb76BWN77BzibWw1PNFaLVi1jNdN bL1j+rkbnJOYTC3KCDWX/y/ZfxRIvJVWhw9RCNNr9w3BNxzOF9fX/JMvuL8/P+cw XMD6yhONJP/GqPGLjopnwHOAlcbRfaQtNHGDnFSpup1+SGqKVDNM0cLj61nIXLny UCtH8jgumtqobTTfAorNMtF+68JpFp5Hlb7jGvHJTjuEOfD1GW4XK9cOyhHz0IaL v0Cb5ow0hBAC7ijAJ0htbwpZf+vfypUH9dasIRRC6DPJJX047wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNtZ0odTA4wHLJo9YD2qi9VYeauXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lY2Yx YmNlYS05YmFmLTRlZWUtOTk3OS0yNGJjMWZiZGZlMWUvZWNmMWJjZWEtOWJhZi00 ZWVlLTk5NzktMjRiYzFmYmRmZTFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWNmMWJjZWEtOWJhZi00ZWVlLTk5 NzktMjRiYzFmYmRmZTFlL2VjZjFiY2VhLTliYWYtNGVlZS05OTc5LTI0YmMxZmJk ZmUxZS5jcmwwHwYDVR0jBBgwFoAUdo/qz8CiKJOezYqKO+OaLQpINvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lY2YxYmNlYS05YmFmLTRlZWUtOTk3OS0yNGJj MWZiZGZlMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVPNdq2x6ravkSS2nhj97m ygE74nLnttWihn1m5iWRhkGxDTAFABE2qtyFR0ne4JzLlhGKVSJev8QwUgrLIPDX SAUfHpi1oJVFysp8I8Us1XYQG70CgDzq456VWCdlWCooWPA+Ou3kt6CWVN8/hjwU WZgcNN+6i55xF9e7kb8QZ0ChfZXRdXlRv5JReatZvrEOzUrl9Fp9MpDHgbFvva5m mHSIOewjzBJTn+ZP3J2lAvJ3+hzCT4inixITxGyq9eXoFwh8TbIsMNGJdhpPQ95T oN/+qJwpXo3x/bZgzyd/tDBdu0L9K+rM/JYyfY4KP5EjdLQ8KuilDXCtEBej8yNV -----END CERTIFICATE-----Generated at Sat Apr 12 00:10:28 2025 by rpki-client