$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft File: fd41a5ea-0768-429c-8541-83d829a5518c.mft (raw, json) Hash identifier: 381oT4FJABqvtdkaO7rHmvYohSL+qF7Fm18OxcHx4Ys= Subject key identifier: D7:FF:95:4E:4F:51:26:64:F6:CA:89:1F:31:7A:F5:75:4D:67:BA:1E Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 Certificate issuer: /CN=fd41a5ea-0768-429c-8541-83d829a5518c Certificate serial: 010D0C9F43285848E52452BBD817D1733EAF2600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft Manifest number: 010D0C9F4328584073A82CF6270475A8275DFB27 Signing time: Sat 15 Feb 2025 22:00:07 +0000 Manifest this update: Sat 15 Feb 2025 22:00:07 +0000 Manifest next update: Tue 18 Feb 2025 22:00:00 +0000 Files and hashes: 1: 2a6bf328-cf96-3ace-bda5-7008e51790d7.roa (hash: AWjRVPqkbwsLjzGdj19C5xtyL7Yo00KyKmgFfWQGqDM=) 2: 6fcc7d92-8595-368c-84db-26ab941ffc2f.roa (hash: kWzpE7zcTZIP3Xq1vzRiIPj8vPG0Kh3fuUQRx5D19zU=) 3: c986acf2-bb99-3d07-a932-f6b42ab2f85b.roa (hash: H5Qll2SUqg1r5hfMChmUY+caxsQj/QMOwRClds92b2g=) 4: fd41a5ea-0768-429c-8541-83d829a5518c.crl (hash: wwwDRFZfLYA7XDkvkMm+FT4CTk7amtnuHaRM7TuGhp0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:24:52:bb:d8:17:d1:73:3e:af:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c Validity Not Before: Feb 15 22:00:07 2025 GMT Not After : Feb 18 22:00:00 2025 GMT Subject: CN=8b31af7a-f27e-44cf-b572-76995f11c4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:6a:35:4f:6d:82:f0:e1:7e:0a:18:90:a2: 65:67:b4:ac:a6:23:c6:58:9e:6b:bd:31:af:24:1a: 64:e6:da:b0:62:3e:ed:44:ff:1d:ce:3e:6a:01:ce: 41:ab:c9:b4:ec:92:cc:84:80:5d:63:86:5c:fe:bb: 0b:9f:f4:98:3a:71:df:47:0c:eb:f6:91:3c:5d:45: 5b:fc:49:b1:8d:cd:35:7a:a9:84:d6:ca:63:5d:fa: 41:8c:01:2b:e6:41:f2:20:4b:84:77:ca:72:f1:31: 29:05:26:89:d3:0e:c5:2f:3e:33:e1:f4:ef:99:b2: d7:1d:72:b5:57:7a:7f:64:b2:3d:41:7c:5d:32:18: 34:ff:2e:95:06:2d:50:bf:98:75:bb:56:b1:ee:84: 43:ab:f0:a3:bc:e2:59:43:8f:09:98:e4:0b:ec:d5: a2:82:71:99:3d:dd:1a:0c:0f:9b:85:7a:be:20:d6: 08:d9:d7:68:6a:6c:34:52:bc:39:99:7b:46:4f:83: 1f:71:da:03:19:a2:72:72:4d:c3:4b:d7:7e:6c:91: b9:b0:be:92:2f:b6:71:25:11:d3:4c:44:85:b0:a2: 1e:e3:37:33:da:9b:52:23:31:83:62:cb:c5:f7:96: f3:62:27:bb:3f:f7:4c:8f:41:a5:12:a8:3d:24:d2: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FF:95:4E:4F:51:26:64:F6:CA:89:1F:31:7A:F5:75:4D:67:BA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl X509v3 Authority Key Identifier: keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:be:75:e1:a0:5c:a6:5e:9b:6c:86:21:89:09:4a:84:c7:8b: 82:d5:7c:21:5f:19:63:e2:ba:7f:23:21:96:da:c3:26:b2:27: 99:52:2d:c1:74:d0:94:c2:b1:b6:f4:b7:4d:67:0a:ca:42:ff: 53:de:77:fd:ea:8b:02:26:7d:52:65:fd:21:52:7b:4f:d4:d3: f5:97:46:df:97:1c:0f:e6:61:e9:00:a4:07:2c:f3:97:03:59: 2e:67:d2:ba:8b:cf:40:2a:1b:a0:e6:0d:06:45:3d:03:13:02: b3:fb:c4:49:b8:3c:97:a8:82:3c:e1:6d:1b:d2:4d:b0:70:f8: 4a:24:b3:a4:28:1e:1c:68:72:0a:5d:bc:e5:63:ee:c9:ac:d3: f8:66:e8:d4:25:32:03:23:68:c1:c4:78:66:9f:4d:0f:a5:ba: d9:9d:5f:54:85:c6:62:62:29:5c:29:e6:e4:b3:dc:b8:ee:41: 97:d4:85:84:37:06:8b:9d:cd:9d:4d:32:72:75:d0:ee:08:18: 16:cd:4f:59:77:84:ea:da:0d:64:04:a5:aa:a2:65:37:8a:df: 82:18:c6:56:3f:6d:be:ea:58:96:30:d6:e6:21:51:92:6c:09: ee:7e:bc:4f:db:fa:22:c9:25:6f:6e:cb:09:ff:1d:a4:9b:ba: 2f:e6:19:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEjlJFK72BfRcz6vJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ0MWE1ZWEtMDc2OC00MjljLTg1NDEtODNkODI5YTU1 MThjMB4XDTI1MDIxNTIyMDAwN1oXDTI1MDIxODIyMDAwMFowLzEtMCsGA1UEAxMk OGIzMWFmN2EtZjI3ZS00NGNmLWI1NzItNzY5OTVmMTFjNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ5qNU9tgvDhfgoYkKJlZ7SspiPGWJ5rvTGv JBpk5tqwYj7tRP8dzj5qAc5Bq8m07JLMhIBdY4Zc/rsLn/SYOnHfRwzr9pE8XUVb /Emxjc01eqmE1spjXfpBjAEr5kHyIEuEd8py8TEpBSaJ0w7FLz4z4fTvmbLXHXK1 V3p/ZLI9QXxdMhg0/y6VBi1Qv5h1u1ax7oRDq/CjvOJZQ48JmOQL7NWignGZPd0a DA+bhXq+INYI2ddoamw0Urw5mXtGT4MfcdoDGaJyck3DS9d+bJG5sL6SL7ZxJRHT TESFsKIe4zcz2ptSIzGDYsvF95bzYie7P/dMj0GlEqg9JNIXQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNf/lU5PUSZk9sqJHzF69XVNZ7oeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQx YTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4MjlhNTUxOGMvZmQ0MWE1ZWEtMDc2OC00 MjljLTg1NDEtODNkODI5YTU1MThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQ0MWE1ZWEtMDc2OC00MjljLTg1 NDEtODNkODI5YTU1MThjL2ZkNDFhNWVhLTA3NjgtNDI5Yy04NTQxLTgzZDgyOWE1 NTE4Yy5jcmwwHwYDVR0jBBgwFoAU820DKve7/3fBl4oa0MkJUZI8pyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDQxYTVlYS0wNzY4LTQyOWMtODU0MS04M2Q4 MjlhNTUxOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTvnXhoFymXptshiGJCUqE x4uC1XwhXxlj4rp/IyGW2sMmsieZUi3BdNCUwrG29LdNZwrKQv9T3nf96osCJn1S Zf0hUntP1NP1l0bflxwP5mHpAKQHLPOXA1kuZ9K6i89AKhug5g0GRT0DEwKz+8RJ uDyXqII84W0b0k2wcPhKJLOkKB4caHIKXbzlY+7JrNP4ZujUJTIDI2jBxHhmn00P pbrZnV9UhcZiYilcKebks9y47kGX1IWENwaLnc2dTTJyddDuCBgWzU9Zd4Tq2g1k BKWqomU3it+CGMZWP22+6liWMNbmIVGSbAnufrxP2/oiySVvbssJ/x2km7ov5hk1 -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:41 2025 by rpki-client