$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft File: 5a431902-5d61-4220-a913-af4f21f3413d.mft (raw, json) Hash identifier: o4TubL6k3kZ3eA2j3cH8ue2GWwYjF9sCCsBIR/mz06I= Subject key identifier: E8:0D:10:F2:68:E9:53:5F:3B:C9:B9:18:4E:24:5A:B2:6F:56:0F:FE Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F432858496730A62EA5F585963DD9EE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft Manifest number: 010D0C9F43285843F099CC092612B2DA80AD1A22 Signing time: Thu 03 Apr 2025 12:00:03 +0000 Manifest this update: Thu 03 Apr 2025 12:00:03 +0000 Manifest next update: Sat 05 Apr 2025 12:00:00 +0000 Files and hashes: 1: 5a431902-5d61-4220-a913-af4f21f3413d.crl (hash: 50WNY4vpNotwI7Ig0dsVMUgkRCcSqFQzhLKUZPKopWM=) 2: 81971457-da63-315b-a46b-b1f35234d76e.roa (hash: ebsSJrQN7FS2AR3+KISUKC6CSks1d+XyxWcd49ySThE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:30:a6:2e:a5:f5:85:96:3d:d9:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Apr 3 12:00:03 2025 GMT Not After : Apr 5 12:00:00 2025 GMT Subject: CN=a7fdf414-6312-4085-a98c-f461e124d89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:e8:67:5b:66:3c:98:95:39:4b:ff:ba:6f: 05:25:cc:e7:63:99:e5:8c:48:b4:bd:f0:4b:88:f4: de:c5:0d:a1:5a:f9:8d:0f:ad:e1:51:82:c6:32:f3: 1b:4c:c7:d7:59:00:eb:0e:98:18:ed:44:15:f5:7c: 40:b4:5b:e8:50:b3:e4:fd:15:ae:4b:ec:66:52:b1: 71:4f:ca:01:b8:d1:13:a6:ca:84:51:33:cf:e8:37: d8:12:a6:8d:52:31:8f:78:a6:5c:89:22:a4:3b:39: d8:68:38:46:f5:b7:2b:e2:10:07:5e:23:04:44:b0: a9:8e:5e:43:5a:16:a5:b4:d0:48:98:da:a2:e7:bd: 95:92:ab:ed:d5:0b:51:0c:a2:91:2b:f5:04:98:e8: 6a:76:60:b8:0e:b9:57:71:f2:39:1c:db:4b:2c:d9: e4:31:11:36:71:94:31:c3:3c:c5:ee:a2:21:98:ff: 5b:91:85:f5:38:18:e4:d5:23:01:96:64:4a:4e:ba: d9:05:0d:ef:0d:8d:e2:0b:9c:13:e7:82:e3:f2:4e: 39:4d:9a:37:90:72:11:85:9c:d6:cc:1b:71:d2:7b: 5d:aa:dd:b2:a4:d7:27:dc:3e:95:81:e6:c9:38:68: bd:07:26:e7:d2:fd:e1:32:13:41:90:0f:60:40:0b: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0D:10:F2:68:E9:53:5F:3B:C9:B9:18:4E:24:5A:B2:6F:56:0F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e7:31:4e:c4:a1:79:98:6a:e4:ea:dc:6d:af:1a:96:69:76: 48:d4:82:91:36:16:8b:d2:05:32:f8:0c:fc:9b:f4:ae:96:8a: 02:eb:f2:97:6a:5e:da:9d:5c:26:e0:02:f7:50:92:c5:3b:9c: c5:f5:db:a9:3e:17:88:41:ba:50:b4:c8:70:52:fe:68:e0:a7: 0c:43:f4:97:5a:97:4f:ca:99:ac:75:f5:eb:ea:c3:10:97:98: b7:ea:a4:bd:fe:de:41:76:07:cf:ed:6f:0b:37:67:b3:b6:20: 74:bb:41:5a:9e:7b:fd:f7:19:fb:6c:96:39:45:8e:28:97:1e: 29:5e:eb:ae:f3:b1:6e:6e:fb:a4:d2:9f:95:58:05:08:00:db: 18:63:55:c6:0a:ce:fd:3d:0f:a1:b3:72:39:01:a7:74:7c:4e: c6:9c:43:8f:b4:8e:4b:d3:27:1a:e9:66:e1:3d:cd:fd:eb:ec: d8:b2:24:cd:7c:ce:a6:c6:b2:55:58:5e:20:0b:1b:4b:a1:13: 36:9c:44:4d:ec:dc:f4:57:bc:93:34:a6:3b:af:07:1c:6c:d5: c2:56:c2:da:1c:6e:69:ca:db:7f:b8:05:7a:0c:92:aa:5d:af: 96:f2:5d:2c:13:11:e1:12:e9:d5:75:52:d7:c5:14:58:c4:bc: fd:ed:82:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnMKYupfWFlj3Z7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI1MDQwMzEyMDAwM1oXDTI1MDQwNTEyMDAwMFowLzEtMCsGA1UEAxMk YTdmZGY0MTQtNjMxMi00MDg1LWE5OGMtZjQ2MWUxMjRkODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCvoZ1tmPJiVOUv/um8FJcznY5nljEi0vfBL iPTexQ2hWvmND63hUYLGMvMbTMfXWQDrDpgY7UQV9XxAtFvoULPk/RWuS+xmUrFx T8oBuNETpsqEUTPP6DfYEqaNUjGPeKZciSKkOznYaDhG9bcr4hAHXiMERLCpjl5D WhaltNBImNqi572Vkqvt1QtRDKKRK/UEmOhqdmC4DrlXcfI5HNtLLNnkMRE2cZQx wzzF7qIhmP9bkYX1OBjk1SMBlmRKTrrZBQ3vDY3iC5wT54Lj8k45TZo3kHIRhZzW zBtx0ntdqt2ypNcn3D6VgebJOGi9Bybn0v3hMhNBkA9gQAtcNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOgNEPJo6VNfO8m5GE4kWrJvVg/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvNWE0MzE5MDItNWQ2MS00 MjIwLWE5MTMtYWY0ZjIxZjM0MTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCB5zFOxKF5mGrk6txtrxqW aXZI1IKRNhaL0gUy+Az8m/SulooC6/KXal7anVwm4AL3UJLFO5zF9dupPheIQbpQ tMhwUv5o4KcMQ/SXWpdPypmsdfXr6sMQl5i36qS9/t5BdgfP7W8LN2eztiB0u0Fa nnv99xn7bJY5RY4olx4pXuuu87Fubvuk0p+VWAUIANsYY1XGCs79PQ+hs3I5Aad0 fE7GnEOPtI5L0yca6WbhPc396+zYsiTNfM6mxrJVWF4gCxtLoRM2nERN7Nz0V7yT NKY7rwccbNXCVsLaHG5pytt/uAV6DJKqXa+W8l0sExHhEunVdVLXxRRYxLz97YI5 -----END CERTIFICATE-----Generated at Thu Apr 3 22:13:37 2025 by rpki-client