$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft File: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft (raw, json) Hash identifier: gnquoS6l2AfDx6JMOFCC4+kZW3vfcFZ9EEQ7n4pJtcE= Subject key identifier: 77:50:36:DD:CC:1B:9E:24:7D:74:04:D2:EB:48:56:73:DF:D3:E2:5B Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 Certificate issuer: /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Certificate serial: 010D0C9F43285848E5244F5319B0A037C38BF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft Manifest number: 010D0C9F4328584073A82B47310678490807D999 Signing time: Sat 15 Feb 2025 22:00:07 +0000 Manifest this update: Sat 15 Feb 2025 22:00:07 +0000 Manifest next update: Tue 18 Feb 2025 22:00:00 +0000 Files and hashes: 1: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl (hash: f+IQ/ie1Bw3nCdQFsjTmXtr58Qi0gK5VkQkzuPu0AoM=) 2: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (hash: Q+i9RcGItOWyML/3lE21fDh3+gtkLiLCbpfkyYAq6Gc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:24:4f:53:19:b0:a0:37:c3:8b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711 Validity Not Before: Feb 15 22:00:07 2025 GMT Not After : Feb 18 22:00:00 2025 GMT Subject: CN=bcf1a62e-5f67-4551-a69c-571d7b5e718a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:f5:ab:dd:85:9c:a6:80:87:e6:41:09:be: 22:53:a5:83:42:e1:03:bc:bb:b3:34:4e:99:ed:2b: 37:ff:ec:09:2b:b4:1e:c2:a5:9f:c0:0b:0a:f4:21: 49:ef:d2:43:f4:2c:fb:d6:a4:8d:67:95:88:1a:a7: 06:ab:8b:8f:51:63:fa:e2:9b:54:a2:12:06:e2:75: 17:50:0b:14:1b:36:51:e3:09:10:c4:7b:5a:93:20: f2:a5:4e:38:98:54:4e:00:23:5f:1b:a2:7b:b2:5d: 37:49:1d:85:8b:5d:b2:b3:49:bc:04:03:53:7f:1d: 24:01:ab:aa:b8:68:bd:aa:aa:aa:99:6c:94:b2:f5: dd:15:ad:a1:3a:1f:89:6c:2a:2b:ac:4d:54:cc:92: 31:42:cb:c9:13:9e:38:75:6e:cc:84:d9:50:e9:f6: 01:43:ce:bc:4a:69:d6:63:fe:fe:a7:f1:63:95:42: 5f:c0:09:d1:21:46:42:70:9e:fb:ea:61:db:7f:db: 64:8b:84:66:2c:c2:1f:14:4a:5e:93:f7:e9:5b:80: 07:c1:58:8b:5e:f3:11:e2:f2:da:2e:92:65:8d:eb: 30:ca:35:a1:b9:fe:b3:15:05:47:87:b7:d6:6b:47: 31:90:06:88:b3:e3:21:c6:28:14:d9:f7:dc:a1:85: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:50:36:DD:CC:1B:9E:24:7D:74:04:D2:EB:48:56:73:DF:D3:E2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl X509v3 Authority Key Identifier: keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ba:5b:e5:18:9d:78:09:d8:d3:98:70:41:95:83:79:d9:11: 58:42:55:50:17:ce:a2:f4:88:88:c2:31:0c:a7:88:d2:b1:57: 9b:c6:f9:5d:44:82:1e:67:5b:2e:05:0c:eb:45:9e:34:a1:05: 21:1f:a5:90:a0:c4:48:7c:4f:e7:b2:53:6f:2e:9d:d8:d2:e9: c8:fe:f4:dd:56:a6:1d:d1:75:2f:06:19:3b:a1:e1:4d:2a:de: 26:9a:d5:b1:f0:e6:3b:52:50:88:0f:70:ff:f3:97:27:52:27: 45:90:ed:de:2b:61:10:2c:89:c3:b9:08:95:c3:ce:8f:e5:11: 97:a0:3c:52:b7:0e:84:ba:5e:59:0d:43:23:78:45:d8:01:24: 3b:b4:98:db:7e:11:e7:7a:fe:00:1b:84:7b:a7:ce:32:93:3e: a6:99:e4:00:81:fb:37:a6:0e:6f:d8:ac:00:fa:56:64:81:1f: 73:fc:0d:2f:67:1e:8b:05:a6:fc:3d:fe:b7:a6:51:9d:d5:2b: 59:0e:b5:87:6b:d7:b0:d1:46:7e:7c:b1:63:95:16:52:77:33: 37:e6:f5:d5:cf:11:1a:85:ce:c7:38:dd:25:0d:6b:96:3c:89: 64:20:ad:34:e7:45:b1:79:ba:60:10:a8:f6:49:04:f2:62:fb: 6a:58:53:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEjlJE9TGbCgN8OL9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExMWE4NWYtOGYzNy00YjU0LThmYTItZDZiYzA5Njcz NzExMB4XDTI1MDIxNTIyMDAwN1oXDTI1MDIxODIyMDAwMFowLzEtMCsGA1UEAxMk YmNmMWE2MmUtNWY2Ny00NTUxLWE2OWMtNTcxZDdiNWU3MThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi031q92FnKaAh+ZBCb4iU6WDQuEDvLuzNE6Z 7Ss3/+wJK7QewqWfwAsK9CFJ79JD9Cz71qSNZ5WIGqcGq4uPUWP64ptUohIG4nUX UAsUGzZR4wkQxHtakyDypU44mFROACNfG6J7sl03SR2Fi12ys0m8BANTfx0kAauq uGi9qqqqmWyUsvXdFa2hOh+JbCorrE1UzJIxQsvJE544dW7MhNlQ6fYBQ868SmnW Y/7+p/FjlUJfwAnRIUZCcJ776mHbf9tki4RmLMIfFEpek/fpW4AHwViLXvMR4vLa LpJljeswyjWhuf6zFQVHh7fWa0cxkAaIs+MhxigU2ffcoYW5wwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHdQNt3MG54kfXQE0utIVnPf0+JbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTEx YTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJjMDk2NzM3MTEvM2ExMWE4NWYtOGYzNy00 YjU0LThmYTItZDZiYzA5NjczNzExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExMWE4NWYtOGYzNy00YjU0LThm YTItZDZiYzA5NjczNzExLzNhMTFhODVmLThmMzctNGI1NC04ZmEyLWQ2YmMwOTY3 MzcxMS5jcmwwHwYDVR0jBBgwFoAUifRWhZUJdMbMuDb4v/S192fb/zUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTExYTg1Zi04ZjM3LTRiNTQtOGZhMi1kNmJj MDk2NzM3MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3ulvlGJ14CdjTmHBBlYN5 2RFYQlVQF86i9IiIwjEMp4jSsVebxvldRIIeZ1suBQzrRZ40oQUhH6WQoMRIfE/n slNvLp3Y0unI/vTdVqYd0XUvBhk7oeFNKt4mmtWx8OY7UlCID3D/85cnUidFkO3e K2EQLInDuQiVw86P5RGXoDxStw6Eul5ZDUMjeEXYASQ7tJjbfhHnev4AG4R7p84y kz6mmeQAgfs3pg5v2KwA+lZkgR9z/A0vZx6LBab8Pf63plGd1StZDrWHa9ew0UZ+ fLFjlRZSdzM35vXVzxEahc7HON0lDWuWPIlkIK0050WxebpgEKj2SQTyYvtqWFOo -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:12 2025 by rpki-client