$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft File: 6f5f23ad-ba92-4342-9c5f-7645311a9589.mft (raw, json) Hash identifier: kdCFTYchUft2QImnsMBvNrPEZVAL5zOkEM7hcdljDr4= Subject key identifier: DE:AB:C6:D9:FD:C7:AF:13:59:9A:E3:62:83:78:2A:BB:33:11:FB:50 Authority key identifier: 3B:51:FE:2E:75:1D:CB:65:7F:EC:E6:1E:12:50:28:A2:15:0F:1D:7C Certificate issuer: /CN=6f5f23ad-ba92-4342-9c5f-7645311a9589 Certificate serial: 010D0C9F4328584980C7F78D23EBCD30BE816508 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft Manifest number: 010D0C9F432858437E890146970A16DBBA8B8A68 Signing time: Sat 12 Apr 2025 16:00:07 +0000 Manifest this update: Sat 12 Apr 2025 16:00:07 +0000 Manifest next update: Mon 14 Apr 2025 16:00:00 +0000 Files and hashes: 1: 6f5f23ad-ba92-4342-9c5f-7645311a9589.crl (hash: hs7NrnWjPgV0KP396Fc+tLZ4voOtGDT5E8MMx0WgiNo=) 2: 904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer (hash: nrBnTNOS7QqMkzsWsyc6c9kFkO2j3wJYq1I2fXK79hY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:c7:f7:8d:23:eb:cd:30:be:81:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5f23ad-ba92-4342-9c5f-7645311a9589 Validity Not Before: Apr 12 16:00:07 2025 GMT Not After : Apr 14 16:00:00 2025 GMT Subject: CN=c269dcc2-db74-4044-bc11-0ea1ebf3c73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:b5:a0:da:27:4b:5c:9d:80:c5:63:a9:18: ce:57:f2:3b:28:22:b4:0c:c6:67:f0:c7:cb:ee:bd: ca:e8:48:94:fe:8d:e9:25:94:2a:e6:fa:ce:87:44: 75:cb:bb:e0:b0:d1:1d:08:ad:ed:83:4e:a0:93:10: dc:2b:a0:d8:bf:9a:19:4b:cd:82:be:ea:78:48:5a: 4a:d4:4e:79:3f:b4:e3:5c:4e:60:3b:ff:da:71:af: 01:b5:fb:4a:ea:bc:c6:5f:c7:37:23:12:b2:3f:4b: db:17:3a:5c:64:5c:72:70:f0:c9:8b:a1:bb:6a:f8: e3:7b:a1:01:55:6c:77:9a:a9:09:74:05:74:ff:c2: 0a:71:8c:44:89:14:97:e8:91:c9:45:67:a6:24:2d: 9d:8d:b1:97:ab:a8:28:61:3c:32:f0:bf:72:41:19: aa:67:61:ad:7f:44:e2:c3:25:f7:0c:59:5e:a7:41: 33:23:14:ef:64:eb:df:c5:4a:4c:2f:2b:16:7e:0a: 6c:98:a2:ed:3c:9d:bd:43:11:6b:2e:c0:ef:01:ef: 1f:71:1c:e5:78:02:14:bc:d5:97:03:c8:08:ce:f0: 58:67:56:c9:dd:9a:59:c8:b9:82:bc:96:4d:dd:95: e3:1c:fe:50:52:4e:17:87:ec:cc:d8:74:93:ee:d4: b9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:C6:D9:FD:C7:AF:13:59:9A:E3:62:83:78:2A:BB:33:11:FB:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl X509v3 Authority Key Identifier: keyid:3B:51:FE:2E:75:1D:CB:65:7F:EC:E6:1E:12:50:28:A2:15:0F:1D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2b:0f:53:d8:55:61:e2:72:08:03:62:40:08:54:bc:06:10: aa:08:83:30:40:77:fc:9f:8f:0e:7c:54:45:88:8a:67:fd:f2: 84:36:b8:34:31:ee:27:95:f1:71:5b:25:84:74:fe:20:59:0b: 34:9c:ee:10:78:74:27:b8:25:d2:6a:ab:2e:6e:24:21:26:8e: a9:e1:df:bf:5a:09:7b:fb:a0:74:f0:86:bc:b7:ab:99:55:33: 79:80:2a:16:f3:c0:0e:ed:cd:35:fb:a2:76:1c:d8:0b:96:d3: ac:b5:96:50:70:52:d1:3c:eb:ce:f0:0c:c2:29:d6:06:75:74: 50:81:45:5d:7f:af:56:a5:32:87:24:10:e5:44:c6:12:dd:bb: 85:af:a0:36:5a:68:e2:2a:20:2f:66:1c:eb:0f:e8:01:f2:8a: 72:f7:13:0d:38:13:5c:c8:a7:a4:71:67:5f:f1:74:e9:72:8d: a2:c1:83:fd:ea:84:e7:bc:88:61:82:ef:13:7b:73:65:24:cf: 74:17:d1:7f:19:57:03:ec:4c:ee:5c:5c:e1:ff:cc:3c:ea:cd: 26:63:bf:8c:35:05:da:0e:29:73:30:52:e4:96:1d:cc:d7:3c: 07:fd:7b:12:5a:0c:4e:4e:d6:2f:e4:fd:0a:2d:5a:ad:ed:3e: 05:20:b3:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmAx/eNI+vNML6BZQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY1ZjIzYWQtYmE5Mi00MzQyLTljNWYtNzY0NTMxMWE5 NTg5MB4XDTI1MDQxMjE2MDAwN1oXDTI1MDQxNDE2MDAwMFowLzEtMCsGA1UEAxMk YzI2OWRjYzItZGI3NC00MDQ0LWJjMTEtMGVhMWViZjNjNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxu1oNonS1ydgMVjqRjOV/I7KCK0DMZn8MfL 7r3K6EiU/o3pJZQq5vrOh0R1y7vgsNEdCK3tg06gkxDcK6DYv5oZS82Cvup4SFpK 1E55P7TjXE5gO//aca8BtftK6rzGX8c3IxKyP0vbFzpcZFxycPDJi6G7avjje6EB VWx3mqkJdAV0/8IKcYxEiRSX6JHJRWemJC2djbGXq6goYTwy8L9yQRmqZ2Gtf0Ti wyX3DFlep0EzIxTvZOvfxUpMLysWfgpsmKLtPJ29QxFrLsDvAe8fcRzleAIUvNWX A8gIzvBYZ1bJ3ZpZyLmCvJZN3ZXjHP5QUk4Xh+zM2HST7tS56QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN6rxtn9x68TWZrjYoN4KrszEftQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjVm MjNhZC1iYTkyLTQzNDItOWM1Zi03NjQ1MzExYTk1ODkvNmY1ZjIzYWQtYmE5Mi00 MzQyLTljNWYtNzY0NTMxMWE5NTg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY1ZjIzYWQtYmE5Mi00MzQyLTlj NWYtNzY0NTMxMWE5NTg5LzZmNWYyM2FkLWJhOTItNDM0Mi05YzVmLTc2NDUzMTFh OTU4OS5jcmwwHwYDVR0jBBgwFoAUO1H+LnUdy2V/7OYeElAoohUPHXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjVmMjNhZC1iYTkyLTQzNDItOWM1Zi03NjQ1 MzExYTk1ODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPKw9T2FVh4nIIA2JACFS8 BhCqCIMwQHf8n48OfFRFiIpn/fKENrg0Me4nlfFxWyWEdP4gWQs0nO4QeHQnuCXS aqsubiQhJo6p4d+/Wgl7+6B08Ia8t6uZVTN5gCoW88AO7c01+6J2HNgLltOstZZQ cFLRPOvO8AzCKdYGdXRQgUVdf69WpTKHJBDlRMYS3buFr6A2WmjiKiAvZhzrD+gB 8opy9xMNOBNcyKekcWdf8XTpco2iwYP96oTnvIhhgu8Te3NlJM90F9F/GVcD7Ezu XFzh/8w86s0mY7+MNQXaDilzMFLklh3M1zwH/XsSWgxOTtYv5P0KLVqt7T4FILNC -----END CERTIFICATE-----Generated at Sun Apr 13 10:30:09 2025 by rpki-client