$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft File: 529c456a-0a45-44a6-8d94-800e442e44a9.mft (raw, json) Hash identifier: KQLx+0VQm5VHi/Vd6YwUXsTn8KUWoMQ3N+bfCRnYZ6s= Subject key identifier: 43:BA:8D:04:33:50:67:4C:CF:70:7E:13:9E:65:FF:DF:2A:9D:E4:15 Authority key identifier: 76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 Certificate issuer: /CN=529c456a-0a45-44a6-8d94-800e442e44a9 Certificate serial: 010D0C9F432858497DDF7E01143BCA5FA7D1F240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft Manifest number: 010D0C9F4328584659E265B2C6F1188D0BDC2F2A Signing time: Fri 11 Apr 2025 15:00:07 +0000 Manifest this update: Fri 11 Apr 2025 15:00:07 +0000 Manifest next update: Mon 14 Apr 2025 15:00:00 +0000 Files and hashes: 1: 529c456a-0a45-44a6-8d94-800e442e44a9.crl (hash: GIs44dMmT2jI/l52/UlnLqBh7i1jhvcFJXIL6OpuqaI=) 2: 73f2506f-bf58-34a0-a0a8-51f114b130ce.roa (hash: OtvUHFhSNdNn8kgIbHUOoHtSIdyh2yF/H8m8zNgTkYI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:df:7e:01:14:3b:ca:5f:a7:d1:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=529c456a-0a45-44a6-8d94-800e442e44a9 Validity Not Before: Apr 11 15:00:07 2025 GMT Not After : Apr 14 15:00:00 2025 GMT Subject: CN=37f0f519-b096-4981-aa86-6131690de987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:be:a2:11:6c:26:d0:09:c8:89:ef:37:66: d6:02:5e:c2:bf:3d:51:67:fe:88:33:52:42:47:2f: 73:48:14:d4:2b:b3:6c:4e:96:55:34:bb:d4:64:10: 6e:3a:10:16:8b:09:94:36:03:18:84:52:77:41:fe: 28:6e:b8:b1:5a:9f:e3:df:7f:74:01:1c:76:43:e2: e6:2f:57:e0:7f:55:f7:6f:33:1b:97:17:d0:55:6a: 07:d3:53:37:24:5e:84:97:1b:5f:18:09:e2:d6:ef: 6b:79:f6:9e:f4:b6:5a:27:f4:63:98:96:6b:d7:ef: 07:f5:9d:a4:49:ed:11:55:d5:2c:e8:fe:ce:e7:3e: 49:92:b3:b2:13:93:66:69:5a:8d:7a:be:ae:ac:0e: 36:52:19:55:7b:59:86:d0:f4:54:63:60:21:40:2d: df:89:da:71:44:c6:08:b8:38:51:c9:c4:32:ba:8f: 6a:84:c8:b1:1b:ff:19:3b:99:93:49:03:91:d2:ad: 9a:e5:3c:a3:b4:37:a8:6e:ff:74:90:c7:b9:1b:ee: f5:e4:a7:54:22:ef:9f:3d:1b:b4:8a:b0:a5:74:ff: f8:63:fa:14:97:d9:dd:77:b0:a6:93:96:8b:8f:6e: fc:ac:23:da:f7:f5:4e:19:22:7d:1d:e4:f8:d3:72: db:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BA:8D:04:33:50:67:4C:CF:70:7E:13:9E:65:FF:DF:2A:9D:E4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.crl X509v3 Authority Key Identifier: keyid:76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:67:50:e4:bd:1a:4f:84:4d:94:de:cd:7b:e8:3c:a5:0b:62: b3:f4:67:73:0e:94:56:58:e6:e7:e6:fe:cd:cb:c9:42:86:a8: ca:85:3c:df:20:0a:97:73:4c:27:85:d5:5e:b7:43:95:fe:41: b4:b4:12:82:24:cf:86:9d:68:02:6b:f0:fb:3c:e6:6d:0d:33: 32:6c:eb:d6:fe:fc:aa:6b:f6:c3:a9:bc:22:3f:5a:cb:c0:03: b3:6e:a0:c0:4e:69:6c:ee:9c:cb:67:a7:12:ff:36:21:e5:fb: 6a:ce:46:da:69:a1:27:ba:88:d7:b8:48:28:bf:e3:52:f9:95: 19:9a:de:fe:9f:fb:2c:82:2d:34:cc:e4:c4:17:e8:34:a0:ba: 1a:a5:30:f1:64:06:3c:66:3d:9c:f2:86:75:4d:c5:50:f6:af: 37:3c:88:43:22:aa:86:4a:97:bf:c5:e9:51:8b:c5:9f:cd:92: 70:b9:a4:15:dc:d4:27:fa:20:28:46:f6:84:53:6a:00:1d:2a: 52:f6:f8:e8:3c:8c:0f:70:ce:27:28:f1:30:76:67:8e:ff:b9: b6:51:0d:14:49:1d:56:d3:92:ba:7d:9c:6c:3f:9e:86:8b:2a: 8a:d9:12:b8:38:a7:3b:82:8b:a3:a8:64:6f:82:5c:91:ba:85: c0:77:61:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl9334BFDvKX6fR8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0 NGE5MB4XDTI1MDQxMTE1MDAwN1oXDTI1MDQxNDE1MDAwMFowLzEtMCsGA1UEAxMk MzdmMGY1MTktYjA5Ni00OTgxLWFhODYtNjEzMTY5MGRlOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uC+ohFsJtAJyInvN2bWAl7Cvz1RZ/6IM1JC Ry9zSBTUK7NsTpZVNLvUZBBuOhAWiwmUNgMYhFJ3Qf4obrixWp/j3390ARx2Q+Lm L1fgf1X3bzMblxfQVWoH01M3JF6ElxtfGAni1u9refae9LZaJ/RjmJZr1+8H9Z2k Se0RVdUs6P7O5z5JkrOyE5NmaVqNer6urA42UhlVe1mG0PRUY2AhQC3fidpxRMYI uDhRycQyuo9qhMixG/8ZO5mTSQOR0q2a5TyjtDeobv90kMe5G+715KdUIu+fPRu0 irCldP/4Y/oUl9ndd7Cmk5aLj278rCPa9/VOGSJ9HeT403LbKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEO6jQQzUGdMz3B+E55l/98qneQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Mjlj NDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvNTI5YzQ1NmEtMGE0NS00 NGE2LThkOTQtODAwZTQ0MmU0NGE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTI5YzQ1NmEtMGE0NS00NGE2LThk OTQtODAwZTQ0MmU0NGE5LzUyOWM0NTZhLTBhNDUtNDRhNi04ZDk0LTgwMGU0NDJl NDRhOS5jcmwwHwYDVR0jBBgwFoAUdkyoaAug9g7c3MxmybTs5uGD8KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBl NDQyZTQ0YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhZ1DkvRpPhE2U3s176Dyl C2Kz9GdzDpRWWObn5v7Ny8lChqjKhTzfIAqXc0wnhdVet0OV/kG0tBKCJM+GnWgC a/D7POZtDTMybOvW/vyqa/bDqbwiP1rLwAOzbqDATmls7pzLZ6cS/zYh5ftqzkba aaEnuojXuEgov+NS+ZUZmt7+n/ssgi00zOTEF+g0oLoapTDxZAY8Zj2c8oZ1TcVQ 9q83PIhDIqqGSpe/xelRi8WfzZJwuaQV3NQn+iAoRvaEU2oAHSpS9vjoPIwPcM4n KPEwdmeO/7m2UQ0USR1W05K6fZxsP56GiyqK2RK4OKc7goujqGRvglyRuoXAd2Fr -----END CERTIFICATE-----Generated at Fri Apr 11 21:48:58 2025 by rpki-client