$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft File: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft (raw, json) Hash identifier: CBlJhCboz/nZeZZ/rs0tWj2OK1woaNFXw/U3rJ5PwTw= Subject key identifier: 88:EB:E0:69:F2:D3:1F:22:3D:E5:51:16:89:3E:E6:8E:97:6A:11:93 Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Certificate issuer: /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Certificate serial: 010D0C9F432858497E569E327FFB3CD9BC8F0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft Manifest number: 010D0C9F43285840F1B61272025108BE12B50EB3 Signing time: Fri 11 Apr 2025 19:00:07 +0000 Manifest this update: Fri 11 Apr 2025 19:00:07 +0000 Manifest next update: Mon 14 Apr 2025 19:00:00 +0000 Files and hashes: 1: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl (hash: T09N0srXJSccBM6QFfaHpX7x4BPccu6Ew47JHB9Dr9E=) 2: fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (hash: z6tXWlVhUK64dSbQIywfOsquIT4XPnmDcCwT6f8nbBE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:56:9e:32:7f:fb:3c:d9:bc:8f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Validity Not Before: Apr 11 19:00:07 2025 GMT Not After : Apr 14 19:00:00 2025 GMT Subject: CN=f328b12e-0d8f-4461-bdee-e0a765633bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:3a:41:d3:e0:bb:57:38:2b:09:67:31:9b: e0:79:ad:fb:20:e1:7c:5a:3a:5d:fe:8b:35:be:ad: 53:dd:20:5c:c3:bf:cb:71:41:59:87:8a:9e:24:c0: 69:d2:ba:5f:6e:0f:b8:6d:51:4c:19:d6:f4:fc:59: 61:93:2e:17:bb:0e:09:37:09:e3:18:58:89:d1:05: 28:30:af:e1:ce:f2:84:55:71:43:17:5a:4a:05:86: 42:45:72:ce:2b:47:67:98:ee:03:70:e4:5a:3d:75: 18:0b:e6:a8:60:6f:9f:02:e3:4d:50:f9:bb:39:49: 5a:8d:4c:2e:37:25:77:6f:9e:99:b3:d7:3d:e2:35: 23:15:a1:73:54:3d:24:df:78:5d:ec:29:2b:0d:6e: 41:67:b5:52:f5:dd:ec:df:c9:bb:f6:e1:f7:57:7c: 37:85:24:66:2c:74:7b:2b:45:f2:80:99:18:09:89: 15:9d:30:3f:bd:16:19:dc:7e:53:16:48:e5:d3:e8: 3f:b0:6c:14:30:0d:7f:dd:14:05:b4:76:95:7d:56: 66:e9:a9:da:0c:3c:5e:3a:14:96:8e:eb:36:5d:cf: d1:e5:59:2c:b4:9f:d4:35:0d:ca:7d:3d:0a:8f:57: b2:f4:6a:5b:f2:89:7f:f1:1c:c4:22:50:ab:f1:47: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:E0:69:F2:D3:1F:22:3D:E5:51:16:89:3E:E6:8E:97:6A:11:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl X509v3 Authority Key Identifier: keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:65:6c:1a:1b:19:7a:9a:cc:fb:23:49:e4:e7:21:f9:24: 13:a3:5e:83:86:05:c2:a5:74:41:48:42:e7:12:8f:77:51:a0: f4:a6:a7:79:f1:8c:52:18:a3:ad:ca:77:1c:40:fe:20:28:31: 25:5c:41:ed:72:ab:f2:93:c0:9a:21:55:e8:0e:15:84:46:bd: 4d:eb:8e:19:7f:78:c1:20:68:f1:74:cd:fc:6c:86:cf:ce:21: 29:07:38:c6:eb:8d:03:f1:8d:ab:6d:62:6f:7d:6b:16:27:ec: 76:4d:86:9d:f8:d9:6b:a4:bc:e4:72:97:13:a2:2d:f0:7e:3d: f5:bb:ce:6e:5c:b3:9a:9b:95:92:f8:12:f7:5c:32:84:1e:ab: 86:c1:b1:f0:8a:39:77:59:c6:bf:21:4f:9f:d1:09:58:84:04: 22:28:f5:76:53:68:6b:c1:5f:56:27:68:76:f9:16:44:15:69: 51:76:1f:b1:4d:82:03:4f:41:63:0e:12:48:cf:91:a6:9e:01: 34:92:3e:17:30:ff:75:35:8d:49:57:9e:f2:1e:b3:38:0c:44: 3f:3b:61:42:93:de:3e:b5:60:e1:db:65:24:84:00:5e:0c:90: 52:3c:8c:67:6e:f5:75:9c:be:4f:9b:67:34:e8:db:36:10:c6: 9d:a5:6c:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+Vp4yf/s82byPB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFi NmY5MB4XDTI1MDQxMTE5MDAwN1oXDTI1MDQxNDE5MDAwMFowLzEtMCsGA1UEAxMk ZjMyOGIxMmUtMGQ4Zi00NDYxLWJkZWUtZTBhNzY1NjMzYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6s6QdPgu1c4KwlnMZvgea37IOF8Wjpd/os1 vq1T3SBcw7/LcUFZh4qeJMBp0rpfbg+4bVFMGdb0/Flhky4Xuw4JNwnjGFiJ0QUo MK/hzvKEVXFDF1pKBYZCRXLOK0dnmO4DcORaPXUYC+aoYG+fAuNNUPm7OUlajUwu NyV3b56Zs9c94jUjFaFzVD0k33hd7CkrDW5BZ7VS9d3s38m79uH3V3w3hSRmLHR7 K0XygJkYCYkVnTA/vRYZ3H5TFkjl0+g/sGwUMA1/3RQFtHaVfVZm6anaDDxeOhSW jus2Xc/R5VkstJ/UNQ3KfT0Kj1ey9Gpb8ol/8RzEIlCr8UdfEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIjr4Gny0x8iPeVRFok+5o6XahGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iZTkw ODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvYmU5MDg5NWEtM2M0My00 YjM4LWE1YWEtYjFlYmMyNjFiNmY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmU5MDg5NWEtM2M0My00YjM4LWE1 YWEtYjFlYmMyNjFiNmY5L2JlOTA4OTVhLTNjNDMtNGIzOC1hNWFhLWIxZWJjMjYx YjZmOS5jcmwwHwYDVR0jBBgwFoAU8VVqNlvNKrthwKWsN7V+4tbW7gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWVi YzI2MWI2ZjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1UmVsGhsZeprM+yNJ5Och +SQTo16DhgXCpXRBSELnEo93UaD0pqd58YxSGKOtynccQP4gKDElXEHtcqvyk8Ca IVXoDhWERr1N644Zf3jBIGjxdM38bIbPziEpBzjG640D8Y2rbWJvfWsWJ+x2TYad +NlrpLzkcpcToi3wfj31u85uXLOam5WS+BL3XDKEHquGwbHwijl3Wca/IU+f0QlY hAQiKPV2U2hrwV9WJ2h2+RZEFWlRdh+xTYIDT0FjDhJIz5GmngE0kj4XMP91NY1J V57yHrM4DEQ/O2FCk94+tWDh22UkhABeDJBSPIxnbvV1nL5Pm2c06Ns2EMadpWyh -----END CERTIFICATE-----Generated at Sat Apr 12 13:59:36 2025 by rpki-client