$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft File: 87b2cd91-4c9b-4f87-9a28-f01df0224611.mft (raw, json) Hash identifier: fStbhZqvIcKQ0nDuUDxO6hkKW2QQWqP0vxXdFBpadeo= Subject key identifier: F8:6F:E0:21:67:D6:01:1A:02:63:8F:4B:4E:E1:15:88:55:55:7C:02 Authority key identifier: DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C Certificate issuer: /CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Certificate serial: 010D0C9F432858496BD7C85B8A5513FE09792880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft Manifest number: 010D0C9F4328584073A83E10B8933F40B8F43648 Signing time: Sat 05 Apr 2025 04:00:03 +0000 Manifest this update: Sat 05 Apr 2025 04:00:03 +0000 Manifest next update: Tue 08 Apr 2025 04:00:00 +0000 Files and hashes: 1: 87b2cd91-4c9b-4f87-9a28-f01df0224611.crl (hash: kroqY3Hckj4aESmBILbMjGooUbngDLc9Hu+ITi1l0g0=) 2: bf2887aa-43e9-37de-b469-8642f6a243b3.roa (hash: ixwyq0BQdAHk/eRdqq5FB2RjbZGc+tYaK/cAlWb/vYQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:d7:c8:5b:8a:55:13:fe:09:79:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87b2cd91-4c9b-4f87-9a28-f01df0224611 Validity Not Before: Apr 5 04:00:03 2025 GMT Not After : Apr 8 04:00:00 2025 GMT Subject: CN=779e2d31-6047-4bdb-9566-c37b8d3d62ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:5d:1a:80:8b:7c:62:58:cf:64:09:1e:df: 41:67:1f:3c:e8:6f:36:17:a8:0e:95:ac:88:ed:4d: 06:d0:37:db:38:b7:e2:45:ec:2e:65:a5:c9:d5:f9: 0e:8b:95:53:6e:06:58:d9:9e:58:9c:6e:9c:d9:de: 14:56:bb:48:45:56:7f:50:f9:30:96:11:79:2f:2e: 02:5b:8e:5d:89:82:6a:88:df:22:26:26:ac:43:af: 26:7f:8f:b7:df:95:75:fe:3b:cb:98:35:91:75:00: 64:93:88:59:71:63:5d:33:e7:d0:a4:91:35:49:10: a9:f3:35:2e:26:c0:a0:35:ba:8d:65:8a:ed:19:fc: 8f:39:a9:14:d6:46:58:ee:5e:8d:75:b7:eb:f1:4a: 4e:2b:28:20:5d:da:24:07:29:27:31:2c:65:d3:15: 8f:eb:40:03:11:f3:a5:42:b5:f8:7e:44:e3:72:8d: 09:14:4f:a3:af:30:e9:7c:bb:e5:a8:95:90:15:ae: aa:f7:ea:f6:99:fa:18:ac:de:3f:6f:dd:ec:ee:86: 9e:73:20:22:f8:96:f2:00:ee:1b:71:32:c1:e0:c9: 04:ad:2c:dc:a7:2d:e8:ab:67:ee:95:6f:db:a5:ef: 47:a5:6a:79:4e:97:6f:05:da:fc:bc:47:dd:75:b1: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6F:E0:21:67:D6:01:1A:02:63:8F:4B:4E:E1:15:88:55:55:7C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611/87b2cd91-4c9b-4f87-9a28-f01df0224611.crl X509v3 Authority Key Identifier: keyid:DF:93:3C:3F:32:06:6E:7B:B0:A8:C6:06:FD:F6:C2:E2:2E:06:D8:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/87b2cd91-4c9b-4f87-9a28-f01df0224611.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f2:c5:7b:e2:a4:13:01:0d:0d:92:21:fb:2c:c4:2a:f1:17: c9:a3:42:ad:7a:b7:17:83:d8:8d:5d:1d:65:ec:7c:5e:d0:6c: e9:a9:8e:80:c9:3b:6f:1f:de:95:ee:97:d5:4c:f6:cc:5c:9b: 86:d0:ee:f7:cc:18:f5:d5:d3:5a:2c:65:5d:19:72:23:7b:75: b3:68:77:85:d4:2f:96:92:8f:c0:70:dd:23:fb:d3:8b:c5:fd: f4:66:b0:72:be:88:d1:d6:bb:1b:cc:b8:eb:9b:06:8a:66:3c: 80:42:b3:4d:e8:36:e9:6e:12:34:01:42:77:36:99:a7:fe:bc: 75:3f:d0:b1:e1:15:b2:82:05:b4:17:60:8b:f4:5f:1f:fb:65: fa:a1:b6:a3:c2:d3:dc:ca:e4:cb:10:b3:86:4e:06:ae:b5:1b: 0c:86:a4:a6:0e:fe:a3:4d:bd:36:cb:07:6a:90:41:de:64:c7: 86:23:37:d5:99:42:f9:13:b0:88:59:fd:be:3c:c4:e8:6c:4a: e4:b6:89:00:69:fb:ea:5e:89:5f:28:92:1c:9a:e9:54:12:5c: d4:94:c2:92:5b:c3:b3:bd:29:91:0d:98:36:41:12:6b:d9:cf: 11:e4:39:12:ce:96:48:5b:21:99:0c:e0:a7:d6:b6:2e:f5:df: 56:7a:27:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElr18hbilUT/gl5KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiMmNkOTEtNGM5Yi00Zjg3LTlhMjgtZjAxZGYwMjI0 NjExMB4XDTI1MDQwNTA0MDAwM1oXDTI1MDQwODA0MDAwMFowLzEtMCsGA1UEAxMk Nzc5ZTJkMzEtNjA0Ny00YmRiLTk1NjYtYzM3YjhkM2Q2MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ1dGoCLfGJYz2QJHt9BZx886G82F6gOlayI 7U0G0DfbOLfiRewuZaXJ1fkOi5VTbgZY2Z5YnG6c2d4UVrtIRVZ/UPkwlhF5Ly4C W45diYJqiN8iJiasQ68mf4+335V1/jvLmDWRdQBkk4hZcWNdM+fQpJE1SRCp8zUu JsCgNbqNZYrtGfyPOakU1kZY7l6Ndbfr8UpOKyggXdokByknMSxl0xWP60ADEfOl QrX4fkTjco0JFE+jrzDpfLvlqJWQFa6q9+r2mfoYrN4/b93s7oaecyAi+JbyAO4b cTLB4MkErSzcpy3oq2fulW/bpe9HpWp5TpdvBdr8vEfddbHd2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPhv4CFn1gEaAmOPS07hFYhVVXwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84N2Iy Y2Q5MS00YzliLTRmODctOWEyOC1mMDFkZjAyMjQ2MTEvODdiMmNkOTEtNGM5Yi00 Zjg3LTlhMjgtZjAxZGYwMjI0NjExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODdiMmNkOTEtNGM5Yi00Zjg3LTlh MjgtZjAxZGYwMjI0NjExLzg3YjJjZDkxLTRjOWItNGY4Ny05YTI4LWYwMWRmMDIy NDYxMS5jcmwwHwYDVR0jBBgwFoAU35M8PzIGbnuwqMYG/fbC4i4G2CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84N2IyY2Q5MS00YzliLTRmODctOWEyOC1mMDFk ZjAyMjQ2MTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQ8sV74qQTAQ0NkiH7LMQq 8RfJo0KtercXg9iNXR1l7Hxe0GzpqY6AyTtvH96V7pfVTPbMXJuG0O73zBj11dNa LGVdGXIje3WzaHeF1C+Wko/AcN0j+9OLxf30ZrByvojR1rsbzLjrmwaKZjyAQrNN 6DbpbhI0AUJ3Npmn/rx1P9Cx4RWyggW0F2CL9F8f+2X6obajwtPcyuTLELOGTgau tRsMhqSmDv6jTb02ywdqkEHeZMeGIzfVmUL5E7CIWf2+PMTobErktokAafvqXolf KJIcmulUElzUlMKSW8OzvSmRDZg2QRJr2c8R5DkSzpZIWyGZDOCn1rYu9d9WeidV -----END CERTIFICATE-----Generated at Sat Apr 5 13:30:54 2025 by rpki-client