$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft File: 42b354ac-9561-4685-881b-1a696a6082f3.mft (raw, json) Hash identifier: iuxPcIoNuhEGbPdO1w4+t2hRfW5E2afKEyEqgNhBjgk= Subject key identifier: 0A:4A:0D:5A:38:B1:45:6C:F5:0A:B7:4C:D6:FC:91:4B:F5:18:F8:B9 Authority key identifier: 36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96 Certificate issuer: /CN=42b354ac-9561-4685-881b-1a696a6082f3 Certificate serial: 010D0C9F432858497DDF7FEBAF2326C339A9FFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft Manifest number: 010D0C9F4328584198BD05E46ADB497A865B20E6 Signing time: Fri 11 Apr 2025 15:00:07 +0000 Manifest this update: Fri 11 Apr 2025 15:00:07 +0000 Manifest next update: Mon 14 Apr 2025 15:00:00 +0000 Files and hashes: 1: 42b354ac-9561-4685-881b-1a696a6082f3.crl (hash: IwkQ960REa8Q/QRzPhumdb3ffg9qKsvjbtGHXNsByTY=) 2: cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa (hash: BthQ/mhxFf+juR0XnHyQEjtH0266k1A6xuDrX/nUvdE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:df:7f:eb:af:23:26:c3:39:a9:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b354ac-9561-4685-881b-1a696a6082f3 Validity Not Before: Apr 11 15:00:07 2025 GMT Not After : Apr 14 15:00:00 2025 GMT Subject: CN=1f842b51-9f8b-4ad9-8838-a4250a7d8cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d6:c2:1b:76:0b:1d:49:f3:f5:73:bf:93:38: 44:53:45:2f:4d:4f:b2:50:f3:41:c8:ee:fe:31:5f: 30:f8:03:a8:4d:8e:54:0f:56:ea:1f:d7:28:d9:2f: ba:bf:9e:e3:62:ab:68:ae:40:20:22:84:cd:51:64: fc:91:da:7e:07:44:be:ad:3f:4c:3a:63:75:ee:cc: 06:3f:31:7a:90:27:af:27:e0:7c:34:63:16:79:46: 85:ae:14:8f:db:c5:fd:03:a8:5b:dd:c1:90:43:ce: e0:58:cc:3f:05:80:c9:e7:da:7f:1e:4f:72:8d:b6: e6:92:98:0c:98:5f:9a:5e:2c:39:5c:18:bf:b0:77: 9d:1b:68:11:11:f8:69:e4:b5:da:84:49:44:a0:36: c3:c7:62:5b:f6:8d:31:1f:97:08:1c:d4:68:78:96: 38:35:fe:6e:fc:11:14:c2:e2:43:cf:ba:2f:f7:20: ac:db:64:e4:c9:84:e4:6a:54:07:30:3f:5f:6a:09: 09:f3:7d:93:76:f6:90:f3:e4:58:c3:da:a8:de:76: 22:22:96:72:f6:0b:4d:72:19:d4:ab:a8:1c:71:ab: f1:ed:24:b2:51:09:37:24:1e:11:7a:d2:cf:cc:31: 8c:af:38:91:13:54:79:ce:8f:86:13:bc:3f:bd:9a: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4A:0D:5A:38:B1:45:6C:F5:0A:B7:4C:D6:FC:91:4B:F5:18:F8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl X509v3 Authority Key Identifier: keyid:36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d9:81:03:b4:e0:02:a5:70:86:c6:ec:96:1d:bd:b2:0c:a2: 3c:c1:65:37:a8:dc:b5:87:78:39:12:54:9a:81:ea:b6:82:07: bf:73:67:73:f8:67:69:c6:51:61:7f:ce:9b:73:b7:f4:05:a7: 67:e5:1f:89:db:2e:ea:45:6e:7c:2e:24:90:01:c3:9d:db:e6: 9d:2a:70:11:92:93:b6:23:ea:c4:65:ad:27:09:15:5a:07:df: d6:0e:8e:a3:7e:9b:c1:1e:a8:02:4e:52:d0:27:51:14:c9:84: 1f:d7:27:8e:d9:de:01:18:0e:09:1a:6b:9b:67:34:5e:13:7d: 4c:ce:08:09:30:92:88:20:b5:ef:09:ee:b3:0a:81:01:db:2b: 82:e2:4d:82:9e:06:83:84:6a:21:b9:9f:33:8d:20:f4:81:1e: 3d:b2:e8:92:8d:72:0a:aa:c2:61:08:79:76:4c:93:a4:76:c5: e9:98:e9:59:1e:48:cd:e4:f7:a9:48:b9:13:88:06:b5:0b:21: 40:27:d0:4b:4d:ef:97:55:14:fd:71:54:aa:d0:b5:fa:89:4b: 58:4f:70:39:b3:cc:d2:ac:a0:a6:84:5c:a0:49:52:f1:d8:95: fd:57:f3:b2:67:64:14:d3:f3:1e:0c:ee:21:34:6e:ff:c9:ac: 84:35:88:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl933/rryMmwzmp/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiMzU0YWMtOTU2MS00Njg1LTg4MWItMWE2OTZhNjA4 MmYzMB4XDTI1MDQxMTE1MDAwN1oXDTI1MDQxNDE1MDAwMFowLzEtMCsGA1UEAxMk MWY4NDJiNTEtOWY4Yi00YWQ5LTg4MzgtYTQyNTBhN2Q4Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdbCG3YLHUnz9XO/kzhEU0UvTU+yUPNByO7+ MV8w+AOoTY5UD1bqH9co2S+6v57jYqtorkAgIoTNUWT8kdp+B0S+rT9MOmN17swG PzF6kCevJ+B8NGMWeUaFrhSP28X9A6hb3cGQQ87gWMw/BYDJ59p/Hk9yjbbmkpgM mF+aXiw5XBi/sHedG2gREfhp5LXahElEoDbDx2Jb9o0xH5cIHNRoeJY4Nf5u/BEU wuJDz7ov9yCs22TkyYTkalQHMD9fagkJ832TdvaQ8+RYw9qo3nYiIpZy9gtNchnU q6gccavx7SSyUQk3JB4RetLPzDGMrziRE1R5zo+GE7w/vZqZnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFApKDVo4sUVs9Qq3TNb8kUv1GPi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MmIz NTRhYy05NTYxLTQ2ODUtODgxYi0xYTY5NmE2MDgyZjMvNDJiMzU0YWMtOTU2MS00 Njg1LTg4MWItMWE2OTZhNjA4MmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDJiMzU0YWMtOTU2MS00Njg1LTg4 MWItMWE2OTZhNjA4MmYzLzQyYjM1NGFjLTk1NjEtNDY4NS04ODFiLTFhNjk2YTYw ODJmMy5jcmwwHwYDVR0jBBgwFoAUNmBHyQndmfgWTddrp4PWnIw8i5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MmIzNTRhYy05NTYxLTQ2ODUtODgxYi0xYTY5 NmE2MDgyZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBx2YEDtOACpXCGxuyWHb2y DKI8wWU3qNy1h3g5ElSageq2gge/c2dz+GdpxlFhf86bc7f0Badn5R+J2y7qRW58 LiSQAcOd2+adKnARkpO2I+rEZa0nCRVaB9/WDo6jfpvBHqgCTlLQJ1EUyYQf1yeO 2d4BGA4JGmubZzReE31MzggJMJKIILXvCe6zCoEB2yuC4k2CngaDhGohuZ8zjSD0 gR49suiSjXIKqsJhCHl2TJOkdsXpmOlZHkjN5PepSLkTiAa1CyFAJ9BLTe+XVRT9 cVSq0LX6iUtYT3A5s8zSrKCmhFygSVLx2JX9V/OyZ2QU0/MeDO4hNG7/yayENYgV -----END CERTIFICATE-----Generated at Fri Apr 11 23:29:33 2025 by rpki-client