$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft File: 4680d191-3a38-4cef-89dd-c84240e3a1cf.mft (raw, json) Hash identifier: Z8wNlaFM/v30HTgbmk971TI2lifaTyhYMrLr7yn3VRU= Subject key identifier: 8F:9A:DF:71:17:A0:81:9B:B5:33:7C:85:1C:FF:75:16:9F:6B:81:2C Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Certificate serial: 010D0C9F432858496789F9E9F8DF7B84569E9880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft Manifest number: 010D0C9F43285849276F14CDE0AA3B404E68EF18 Signing time: Thu 03 Apr 2025 15:00:03 +0000 Manifest this update: Thu 03 Apr 2025 15:00:03 +0000 Manifest next update: Sat 05 Apr 2025 15:00:00 +0000 Files and hashes: 1: 4680d191-3a38-4cef-89dd-c84240e3a1cf.crl (hash: cxGHPnWvpNqg6+rQx+2TUy+0cyTzHSlf3oWudHiDQbI=) 2: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (hash: 8SXPjhAHL6Wq0zXJ72wKy73aeTtuyHPutu1C6/Z0ebk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:89:f9:e9:f8:df:7b:84:56:9e:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf Validity Not Before: Apr 3 15:00:03 2025 GMT Not After : Apr 5 15:00:00 2025 GMT Subject: CN=04609e50-e07a-46c2-9497-30b21b06103f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6a:dc:bd:dc:2d:88:c4:43:49:7e:b0:14:4b: b7:2f:ba:a1:bc:f2:0a:61:ce:6f:44:ab:ed:d0:c4: 18:76:00:65:88:58:c5:f4:7c:ee:5e:2c:6d:e3:02: 09:28:68:22:b9:09:df:02:70:4d:85:68:16:11:d7: 71:ab:7e:e6:31:51:84:da:19:7a:94:b5:32:bd:d6: 85:c7:35:78:72:76:b7:9a:26:ab:a7:cd:e4:5e:bc: cc:65:1f:fa:bf:5c:5a:6a:28:50:40:2d:e1:64:eb: b2:63:1e:ca:13:b7:58:1f:76:56:2c:42:ba:0d:43: fe:00:88:4f:6e:09:6e:d4:e0:12:6f:e2:72:07:fc: 8e:ca:bb:1f:d4:9b:89:e2:76:1e:c2:7f:6e:db:c7: 53:98:75:bf:48:3f:c4:32:2d:46:3c:4b:95:75:16: ef:c0:e5:23:9b:db:89:21:47:00:fa:e9:20:7c:c4: 15:f0:a5:b3:fd:ab:f5:5e:fc:56:be:d6:4b:7c:b3: 4d:a0:aa:77:1d:d4:f7:b6:e3:c3:4f:32:dc:45:94: 87:cc:8b:97:df:30:67:98:13:aa:54:a4:2f:a8:48: 70:d9:5b:78:85:27:51:a3:7a:01:b7:54:84:22:c2: 41:f3:d1:bb:ea:bf:cb:a9:5b:a4:af:a1:4a:67:09: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9A:DF:71:17:A0:81:9B:B5:33:7C:85:1C:FF:75:16:9F:6B:81:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl X509v3 Authority Key Identifier: keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ff:f6:7c:e7:66:dd:c9:b8:d0:75:88:e8:b9:8c:f9:62:d0: d7:bc:c9:00:a8:b1:9a:ab:3b:7b:49:f6:b7:ed:c9:f5:9d:2a: 7b:a3:ef:75:69:a5:2c:81:37:7a:f4:6e:f5:65:25:7f:2f:7a: a1:fa:53:d0:4c:c0:d0:56:ad:a2:dc:46:1b:2b:cb:fd:2c:a0: c0:63:ee:23:18:08:90:b2:7b:ac:49:a7:77:c5:7d:ad:cb:77: 69:f8:87:30:97:3d:16:a5:cd:73:5e:fb:97:fc:fa:ba:36:36: 74:43:7d:06:83:ae:ed:3a:b4:ec:47:4c:f0:45:b0:9e:d4:26: 6a:0f:97:e5:8f:ca:5f:c3:b7:43:b6:0d:8a:b5:9d:7d:a9:1b: 84:92:5b:b6:d0:bc:89:68:18:1d:95:43:3a:2e:39:05:83:59: 9a:2a:2b:d2:f8:19:da:94:9d:1c:3c:e9:18:79:0d:18:e6:dc: 7e:f6:ed:22:c9:12:a9:08:b2:e2:b2:a8:2f:f2:6c:ef:91:ef: e9:e4:da:84:86:53:ec:4c:85:6e:97:2c:96:8b:0b:f2:d2:4d: b9:5f:a5:9d:f3:ec:0e:e1:61:ae:2e:18:dc:8c:7b:5c:e4:28: a3:4e:49:be:c9:03:c3:d4:e4:d9:d0:83:ff:1d:30:86:eb:48: 96:da:7e:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnifnp+N97hFaemIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY4MGQxOTEtM2EzOC00Y2VmLTg5ZGQtYzg0MjQwZTNh MWNmMB4XDTI1MDQwMzE1MDAwM1oXDTI1MDQwNTE1MDAwMFowLzEtMCsGA1UEAxMk MDQ2MDllNTAtZTA3YS00NmMyLTk0OTctMzBiMjFiMDYxMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWrcvdwtiMRDSX6wFEu3L7qhvPIKYc5vRKvt 0MQYdgBliFjF9HzuXixt4wIJKGgiuQnfAnBNhWgWEddxq37mMVGE2hl6lLUyvdaF xzV4cna3miarp83kXrzMZR/6v1xaaihQQC3hZOuyYx7KE7dYH3ZWLEK6DUP+AIhP bglu1OASb+JyB/yOyrsf1JuJ4nYewn9u28dTmHW/SD/EMi1GPEuVdRbvwOUjm9uJ IUcA+ukgfMQV8KWz/av1XvxWvtZLfLNNoKp3HdT3tuPDTzLcRZSHzIuX3zBnmBOq VKQvqEhw2Vt4hSdRo3oBt1SEIsJB89G76r/LqVukr6FKZwmLFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI+a33EXoIGbtTN8hRz/dRafa4EsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Njgw ZDE5MS0zYTM4LTRjZWYtODlkZC1jODQyNDBlM2ExY2YvNDY4MGQxOTEtM2EzOC00 Y2VmLTg5ZGQtYzg0MjQwZTNhMWNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDY4MGQxOTEtM2EzOC00Y2VmLTg5 ZGQtYzg0MjQwZTNhMWNmLzQ2ODBkMTkxLTNhMzgtNGNlZi04OWRkLWM4NDI0MGUz YTFjZi5jcmwwHwYDVR0jBBgwFoAUQBGFMvAsgQZZOVMnRPQpgGjeZBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80NjgwZDE5MS0zYTM4LTRjZWYtODlkZC1jODQy NDBlM2ExY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBr//Z852bdybjQdYjouYz5 YtDXvMkAqLGaqzt7Sfa37cn1nSp7o+91aaUsgTd69G71ZSV/L3qh+lPQTMDQVq2i 3EYbK8v9LKDAY+4jGAiQsnusSad3xX2ty3dp+Icwlz0Wpc1zXvuX/Pq6NjZ0Q30G g67tOrTsR0zwRbCe1CZqD5flj8pfw7dDtg2KtZ19qRuEklu20LyJaBgdlUM6LjkF g1maKivS+BnalJ0cPOkYeQ0Y5tx+9u0iyRKpCLLisqgv8mzvke/p5NqEhlPsTIVu lyyWiwvy0k25X6Wd8+wO4WGuLhjcjHtc5CijTkm+yQPD1OTZ0IP/HTCG60iW2n6X -----END CERTIFICATE-----Generated at Thu Apr 3 22:12:47 2025 by rpki-client