$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: 4K8LDdfspsTgZB2e9KSCVilqpCFbQnNq4FZiAFxNLq0= Subject key identifier: 68:0A:C5:D0:43:1C:0D:AD:75:1E:B0:BD:D9:B8:77:7D:39:7E:72:7A Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584967C5948F6FCDAB63C9D6A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3588 Signing time: Thu 03 Apr 2025 17:00:07 +0000 Manifest this update: Thu 03 Apr 2025 17:00:07 +0000 Manifest next update: Sat 05 Apr 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: /dPPFFxpFvDZZLtrdmb3UWay8LBNplwvNOPZuuhe/9k=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: Rv7ZtNoErIzhtQmZZJYfC+tnoh64yyLjR8nruE11jHI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:c5:94:8f:6f:cd:ab:63:c9:d6:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Apr 3 17:00:07 2025 GMT Not After : Apr 5 17:00:00 2025 GMT Subject: CN=e02a14c8-3d46-428a-8d61-e0a9fff698cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:82:d1:15:4a:5c:50:cc:ed:da:32:11:12:70: 3c:b4:b0:18:ff:39:62:71:9f:26:87:af:3f:a2:1d: 8b:2f:4e:c9:65:ac:ee:b1:d3:2d:a4:8a:94:07:d9: 54:0d:67:6d:30:ab:b8:8b:99:de:25:11:01:d9:c0: c4:b7:c8:fa:e0:d5:ef:a1:4a:e2:3b:9a:97:f5:6c: 35:b5:fa:d8:e3:22:68:6e:29:26:c6:0c:63:91:ea: 4e:b4:93:20:a7:00:14:22:95:49:a4:60:f1:d8:bf: bb:d7:fa:08:e8:1b:a2:c0:83:df:21:db:92:a1:20: 8b:2d:d1:75:a9:b7:44:1c:72:4e:02:f4:a4:27:a3: de:e4:26:51:0b:50:92:e1:22:76:4f:0c:d6:75:68: 9e:f0:d2:c9:62:9d:32:0e:e9:a3:d8:db:05:06:98: f7:b8:cd:23:86:9a:57:5b:d2:6c:2c:b4:2d:02:6a: 49:e1:eb:e4:40:59:3e:78:c2:65:af:05:27:7b:38: b3:07:24:27:f9:e5:bc:4b:40:c9:69:e4:42:27:b8: b8:83:82:93:3b:0e:6b:74:0e:1d:82:b4:92:f7:2f: 0a:bb:ad:26:74:2e:51:13:fd:fa:e2:13:c3:58:e0: 15:7f:ac:33:c7:06:61:9c:41:9a:1f:56:ed:60:4f: ed:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:C5:D0:43:1C:0D:AD:75:1E:B0:BD:D9:B8:77:7D:39:7E:72:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f7:2f:6e:94:08:da:88:09:47:41:89:e7:b8:16:8b:44:b0: f3:17:8b:82:7f:f8:c1:95:b4:bf:50:76:8d:cf:bb:c8:b0:03: c7:c9:3e:cc:b8:09:0b:ec:28:3e:fa:ef:b2:2c:de:db:84:82: d9:2a:f6:6d:21:ec:f9:37:43:53:e2:8d:48:c6:a7:47:d1:f5: b0:57:06:15:59:67:f6:6f:bd:46:9b:15:bc:3c:d5:cc:1b:a5: f7:dd:c3:e5:da:1f:56:0f:77:b2:e4:3e:de:35:dd:71:4c:4b: 8c:03:28:0c:b8:c0:d9:81:09:e9:93:3c:f8:64:c6:96:f8:2a: 2c:07:4b:3f:0f:cc:93:74:e8:92:e3:8b:b5:da:12:2d:9c:6c: e7:9d:38:f9:f6:d3:34:68:6f:99:2a:52:7e:68:d5:05:a5:b0: 48:76:f3:20:b2:fd:28:ba:41:71:14:0f:37:f9:e7:9a:df:29: f8:99:43:9b:cf:46:42:c2:c0:e4:51:9d:14:1f:aa:8f:08:30: 02:e1:32:15:15:24:4a:a6:3f:9c:77:33:d9:7c:ae:8c:17:dc: 3a:27:6b:1a:a0:eb:4b:10:e7:af:7d:72:49:76:f3:37:70:18: 29:ad:32:b4:a8:b2:86:45:b1:13:85:fe:b7:05:cb:a3:63:7d: 34:38:82:30 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElnxZSPb82rY8nWowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MDQwMzE3MDAwN1oXDTI1MDQwNTE3MDAwMFowLzEtMCsGA1UEAxMk ZTAyYTE0YzgtM2Q0Ni00MjhhLThkNjEtZTBhOWZmZjY5OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4LRFUpcUMzt2jIREnA8tLAY/zlicZ8mh68/ oh2LL07JZazusdMtpIqUB9lUDWdtMKu4i5neJREB2cDEt8j64NXvoUriO5qX9Ww1 tfrY4yJobikmxgxjkepOtJMgpwAUIpVJpGDx2L+71/oI6BuiwIPfIduSoSCLLdF1 qbdEHHJOAvSkJ6Pe5CZRC1CS4SJ2TwzWdWie8NLJYp0yDumj2NsFBpj3uM0jhppX W9JsLLQtAmpJ4evkQFk+eMJlrwUnezizByQn+eW8S0DJaeRCJ7i4g4KTOw5rdA4d grSS9y8Ku60mdC5RE/364hPDWOAVf6wzxwZhnEGaH1btYE/tbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGgKxdBDHA2tdR6wvdm4d305fnJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk9y9ulAjaiAlHQYnnuBaL RLDzF4uCf/jBlbS/UHaNz7vIsAPHyT7MuAkL7Cg++u+yLN7bhILZKvZtIez5N0NT 4o1IxqdH0fWwVwYVWWf2b71GmxW8PNXMG6X33cPl2h9WD3ey5D7eNd1xTEuMAygM uMDZgQnpkzz4ZMaW+CosB0s/D8yTdOiS44u12hItnGznnTj59tM0aG+ZKlJ+aNUF pbBIdvMgsv0oukFxFA83+eea3yn4mUObz0ZCwsDkUZ0UH6qPCDAC4TIVFSRKpj+c dzPZfK6MF9w6J2saoOtLEOevfXJJdvM3cBgprTK0qLKGRbEThf63BcujY300OIIw -----END CERTIFICATE-----Generated at Fri Apr 4 15:59:48 2025 by rpki-client