$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft File: 850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft (raw, json) Hash identifier: tVqKcDdbC6NOtDvj6BzRX5W6W2WF4BtwjtHYJ2iK3JY= Subject key identifier: DA:68:B0:02:67:6C:3D:69:42:99:BA:66:54:D6:38:FE:5C:ED:C5:B7 Authority key identifier: 8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B Certificate issuer: /CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Certificate serial: 010D0C9F432858497CD37CA852669008E4506C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft Manifest number: 010D0C9F4328584073A843239665730D54DE0013 Signing time: Fri 11 Apr 2025 06:00:07 +0000 Manifest this update: Fri 11 Apr 2025 06:00:07 +0000 Manifest next update: Mon 14 Apr 2025 06:00:00 +0000 Files and hashes: 1: 1af7f89d-d1da-35f0-bbd2-2132fad40618.roa (hash: klJf8H0MpBVo4IONvDDGfbouFUqpL99wgmOSmLc4OqI=) 2: 850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl (hash: WqQJ9nwrjCbka4WVTsMt4dqG5tjj2+jbKOCcg2XWNpc=) 3: 9296b1a3-7429-3df2-8e3c-0f19dd8f5bef.roa (hash: csAC7BP40tKkOUUOsqqxfIbUe/TurWJ6+YjCgVCduEs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:d3:7c:a8:52:66:90:08:e4:50:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850d1bb9-2ef9-4810-8109-25cdd5afc4fd Validity Not Before: Apr 11 06:00:07 2025 GMT Not After : Apr 14 06:00:00 2025 GMT Subject: CN=72e59097-e98a-4da4-a0bc-b62d15c01095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:4e:e4:c9:97:50:e4:20:18:88:ae:6c:c0: e0:66:03:b5:97:fd:67:44:d8:c3:05:f3:7d:77:87: 6c:9c:22:81:83:6a:7e:a1:23:6f:5b:b8:d7:9d:e1: 20:87:52:79:59:ab:88:ea:79:50:64:6b:05:2d:81: f4:f6:0b:53:63:a4:b0:53:8f:ab:9d:cf:69:af:74: f0:8d:09:04:33:c7:16:0d:db:b1:88:a6:d1:a0:68: 4c:af:27:91:34:89:6e:fb:2e:01:99:91:5f:5a:42: ec:c8:c9:bd:5f:3b:e3:f5:74:c0:10:42:bc:28:7f: 4f:00:03:ba:14:11:d8:07:1d:55:50:c2:e6:9a:e3: b1:cf:96:d8:9e:1d:a8:de:71:ae:08:8d:81:d6:d5: e3:52:2f:fe:d8:4b:1a:30:43:68:07:c2:f2:3c:8f: 4b:eb:9a:7f:0c:b3:4a:74:ef:dc:0e:3e:24:54:61: a3:0a:12:55:17:bf:4e:5a:05:ea:48:cf:6a:22:06: 80:e9:c6:e9:2d:56:27:0b:11:75:27:0c:31:40:4f: 67:e1:b9:e1:97:0a:e8:71:51:f3:3a:de:8f:03:93: d0:36:0d:cf:24:40:48:74:88:c0:58:9b:73:00:6e: 76:f2:e4:7e:01:7e:6b:3a:10:4c:07:3f:77:3b:dc: 81:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:68:B0:02:67:6C:3D:69:42:99:BA:66:54:D6:38:FE:5C:ED:C5:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.crl X509v3 Authority Key Identifier: keyid:8B:76:97:37:A9:39:6D:0D:9E:04:E8:3B:64:42:6D:63:C6:90:00:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/850d1bb9-2ef9-4810-8109-25cdd5afc4fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e8:ef:be:ad:a3:ba:51:40:05:d2:6a:71:f6:b8:b1:b1:b7: 90:1b:ef:86:3a:09:54:4c:cb:39:05:ed:2c:4a:f5:bc:26:5c: 21:b7:69:39:9f:e1:f5:33:fd:ee:d5:04:a1:04:11:cd:88:ab: 47:5c:31:2b:37:1a:73:fe:10:2f:f5:fb:9b:8a:ab:f4:00:e1: 66:cf:1c:39:0d:e6:25:e9:e1:0f:19:64:eb:6a:e5:d1:a9:7e: 61:74:ba:19:d9:3c:4e:c7:98:9f:a8:7e:58:98:0f:fe:8a:7f: 50:77:52:45:6c:03:56:5c:a3:b2:b8:6b:67:83:89:03:b6:0e: 7d:9c:f9:ce:35:f0:0a:80:bb:a2:d6:2d:35:87:1b:56:6a:c2: 05:4d:8c:a8:7c:bf:8c:52:9b:94:bd:04:9e:16:f4:0e:b1:70: 9a:a8:15:09:e3:c4:8d:33:2f:c0:5d:0e:a7:38:0b:86:ab:d4: 76:c0:56:ad:d9:6e:86:48:e0:66:56:6e:38:8e:db:cc:44:83: f9:58:d7:44:45:67:6f:d5:7c:f9:d1:84:d2:49:ab:47:8d:ed: 62:24:56:a3:a6:72:b2:44:e8:a3:98:3b:be:fb:aa:5e:7a:02: bf:c0:d0:fd:1f:f3:3b:f9:9e:25:7e:f6:59:1b:6b:82:82:2e: e5:fa:85:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl803yoUmaQCORQbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUwZDFiYjktMmVmOS00ODEwLTgxMDktMjVjZGQ1YWZj NGZkMB4XDTI1MDQxMTA2MDAwN1oXDTI1MDQxNDA2MDAwMFowLzEtMCsGA1UEAxMk NzJlNTkwOTctZTk4YS00ZGE0LWEwYmMtYjYyZDE1YzAxMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDJO5MmXUOQgGIiubMDgZgO1l/1nRNjDBfN9 d4dsnCKBg2p+oSNvW7jXneEgh1J5WauI6nlQZGsFLYH09gtTY6SwU4+rnc9pr3Tw jQkEM8cWDduxiKbRoGhMryeRNIlu+y4BmZFfWkLsyMm9Xzvj9XTAEEK8KH9PAAO6 FBHYBx1VUMLmmuOxz5bYnh2o3nGuCI2B1tXjUi/+2EsaMENoB8LyPI9L65p/DLNK dO/cDj4kVGGjChJVF79OWgXqSM9qIgaA6cbpLVYnCxF1JwwxQE9n4bnhlwrocVHz Ot6PA5PQNg3PJEBIdIjAWJtzAG528uR+AX5rOhBMBz93O9yB4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNposAJnbD1pQpm6ZlTWOP5c7cW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBk MWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNkZDVhZmM0ZmQvODUwZDFiYjktMmVmOS00 ODEwLTgxMDktMjVjZGQ1YWZjNGZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODUwZDFiYjktMmVmOS00ODEwLTgx MDktMjVjZGQ1YWZjNGZkLzg1MGQxYmI5LTJlZjktNDgxMC04MTA5LTI1Y2RkNWFm YzRmZC5jcmwwHwYDVR0jBBgwFoAUi3aXN6k5bQ2eBOg7ZEJtY8aQAHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NTBkMWJiOS0yZWY5LTQ4MTAtODEwOS0yNWNk ZDVhZmM0ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBf6O++raO6UUAF0mpx9rix sbeQG++GOglUTMs5Be0sSvW8Jlwht2k5n+H1M/3u1QShBBHNiKtHXDErNxpz/hAv 9fubiqv0AOFmzxw5DeYl6eEPGWTrauXRqX5hdLoZ2TxOx5ifqH5YmA/+in9Qd1JF bANWXKOyuGtng4kDtg59nPnONfAKgLui1i01hxtWasIFTYyofL+MUpuUvQSeFvQO sXCaqBUJ48SNMy/AXQ6nOAuGq9R2wFat2W6GSOBmVm44jtvMRIP5WNdERWdv1Xz5 0YTSSatHje1iJFajpnKyROijmDu++6peegK/wND9H/M7+Z4lfvZZG2uCgi7l+oVW -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:07 2025 by rpki-client