$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft File: bc3aa731-9547-4b21-8f65-60f3717ca369.mft (raw, json) Hash identifier: uhKl0zfL8LxnvmD8+4jletehBTTYhhGT+cU0fKuxfVQ= Subject key identifier: A5:28:19:56:00:85:6D:36:EA:69:49:FC:42:29:10:FA:C2:96:7A:6B Authority key identifier: 51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 Certificate issuer: /CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Certificate serial: 010D0C9F432858499882C5AD5E61FE0FFF5FB680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft Manifest number: 010D0C9F432858496EAE60AF4A8023AB427755D0 Signing time: Mon 21 Apr 2025 04:00:07 +0000 Manifest this update: Mon 21 Apr 2025 04:00:07 +0000 Manifest next update: Wed 23 Apr 2025 04:00:00 +0000 Files and hashes: 1: a2fefabd-2f02-3245-a2c8-36de47abeaf7.roa (hash: Ou5ZFjaB4pkx5IehbNdBcN9kKTiKb+NSUYeFIUdGGc0=) 2: bc3aa731-9547-4b21-8f65-60f3717ca369.crl (hash: QfYqe/gt+cbHmB4QhS9ByyjNsg0KP0+P+tQEdfrUt8U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:82:c5:ad:5e:61:fe:0f:ff:5f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3aa731-9547-4b21-8f65-60f3717ca369 Validity Not Before: Apr 21 04:00:07 2025 GMT Not After : Apr 23 04:00:00 2025 GMT Subject: CN=fe4ed103-e997-4539-8f85-35fa9b1ee5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:17:bb:75:04:29:9e:de:2e:9c:08:a3:15: d4:d1:37:ae:68:bf:4f:78:c8:31:18:79:be:42:f5: 16:90:f1:de:1e:fe:52:4a:83:3d:a0:88:c9:f5:2e: df:05:13:1e:a4:c3:64:68:cc:04:29:ab:e2:23:c3: 3a:a1:9e:9e:ce:3c:ad:b8:d0:e8:d5:52:3f:f1:ff: 08:9d:65:14:48:53:27:d6:58:17:7d:73:d2:c0:be: 54:eb:6b:4c:15:bc:f9:dd:be:dd:fb:75:10:59:af: 0c:63:39:2e:c1:ff:66:b6:51:8e:ef:27:3f:cf:f5: 27:21:fc:89:c0:b5:d2:28:82:05:0d:b3:42:ba:4a: 2a:83:fa:0e:32:88:52:c8:90:4a:c7:1a:35:23:9c: 0e:47:44:b5:d3:26:5b:08:30:f0:ee:ef:81:c4:e2: 7d:c9:97:43:5b:9a:a4:87:4d:a6:e1:1d:eb:5e:b7: b1:9a:7d:31:65:ed:8d:b2:06:35:61:70:4f:b9:e1: 9c:15:ba:ab:4c:fd:de:02:d4:c9:ca:f5:52:14:b4: e1:bb:b8:db:26:7f:d5:6b:ac:ae:88:1a:d3:89:16: 53:b0:72:71:b5:8b:41:87:2d:cb:e4:04:ef:ca:96: 1e:de:76:73:25:1d:1a:ba:b0:e7:a6:c6:ea:02:25: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:28:19:56:00:85:6D:36:EA:69:49:FC:42:29:10:FA:C2:96:7A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369/bc3aa731-9547-4b21-8f65-60f3717ca369.crl X509v3 Authority Key Identifier: keyid:51:41:76:B5:8C:94:B6:76:8B:D8:5A:30:55:62:46:17:E5:FF:27:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/bc3aa731-9547-4b21-8f65-60f3717ca369.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d6:ab:bc:44:cd:63:be:46:35:76:8c:ab:c5:b0:8c:48:8c: 87:23:1c:09:79:7f:bb:23:eb:2f:5e:f2:45:ac:4d:df:b2:22: 7a:0d:6f:e0:2e:80:60:a5:4c:c9:03:8b:7d:40:f7:ab:84:12: d6:4f:2b:38:70:e5:b4:35:2b:e1:ae:a9:1e:fb:e8:84:90:82: a2:49:8a:ca:20:d7:e9:a6:27:ad:cd:9a:bc:f5:ce:9f:4f:78: c7:c3:57:2b:59:15:3c:6e:a3:4f:a3:97:be:6b:79:e7:b6:db: 14:3c:a8:c5:25:c6:f2:3a:db:96:85:1e:de:47:a3:62:37:07: 4f:b2:a1:05:5d:84:5c:67:ae:da:4e:9e:b8:c3:6a:0b:4a:c1: 7b:96:5f:7a:d9:50:6a:61:31:9a:6b:c2:48:15:4b:57:ed:a7: d3:8b:67:28:26:91:65:6a:3b:a1:9c:0e:f9:9c:12:d4:f4:1e: a0:60:93:f6:70:9d:f1:f7:ac:19:69:a3:bb:98:01:ba:6a:a4: d5:c5:ab:15:da:25:da:5e:e4:bd:36:70:a3:22:16:2f:6e:0d: 3a:8f:81:60:fa:04:f7:71:cb:31:eb:74:64:5c:48:ab:52:17: e8:c0:af:0d:4e:ca:db:96:47:60:49:15:81:27:d7:f5:3d:cf: 1e:5c:16:39 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmYgsWtXmH+D/9ftoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYWE3MzEtOTU0Ny00YjIxLThmNjUtNjBmMzcxN2Nh MzY5MB4XDTI1MDQyMTA0MDAwN1oXDTI1MDQyMzA0MDAwMFowLzEtMCsGA1UEAxMk ZmU0ZWQxMDMtZTk5Ny00NTM5LThmODUtMzVmYTliMWVlNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwoXu3UEKZ7eLpwIoxXU0TeuaL9PeMgxGHm+ QvUWkPHeHv5SSoM9oIjJ9S7fBRMepMNkaMwEKaviI8M6oZ6ezjytuNDo1VI/8f8I nWUUSFMn1lgXfXPSwL5U62tMFbz53b7d+3UQWa8MYzkuwf9mtlGO7yc/z/UnIfyJ wLXSKIIFDbNCukoqg/oOMohSyJBKxxo1I5wOR0S10yZbCDDw7u+BxOJ9yZdDW5qk h02m4R3rXrexmn0xZe2NsgY1YXBPueGcFbqrTP3eAtTJyvVSFLThu7jbJn/Va6yu iBrTiRZTsHJxtYtBhy3L5ATvypYe3nZzJR0aurDnpsbqAiWu5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKUoGVYAhW026mlJ/EIpEPrClnprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNh YTczMS05NTQ3LTRiMjEtOGY2NS02MGYzNzE3Y2EzNjkvYmMzYWE3MzEtOTU0Ny00 YjIxLThmNjUtNjBmMzcxN2NhMzY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmMzYWE3MzEtOTU0Ny00YjIxLThm NjUtNjBmMzcxN2NhMzY5L2JjM2FhNzMxLTk1NDctNGIyMS04ZjY1LTYwZjM3MTdj YTM2OS5jcmwwHwYDVR0jBBgwFoAUUUF2tYyUtnaL2FowVWJGF+X/J/kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYzNhYTczMS05NTQ3LTRiMjEtOGY2NS02MGYz NzE3Y2EzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC1qu8RM1jvkY1doyrxbCM SIyHIxwJeX+7I+svXvJFrE3fsiJ6DW/gLoBgpUzJA4t9QPerhBLWTys4cOW0NSvh rqke++iEkIKiSYrKINfppietzZq89c6fT3jHw1crWRU8bqNPo5e+a3nnttsUPKjF JcbyOtuWhR7eR6NiNwdPsqEFXYRcZ67aTp64w2oLSsF7ll962VBqYTGaa8JIFUtX 7afTi2coJpFlajuhnA75nBLU9B6gYJP2cJ3x96wZaaO7mAG6aqTVxasV2iXaXuS9 NnCjIhYvbg06j4Fg+gT3ccsx63RkXEirUhfowK8NTsrblkdgSRWBJ9f1Pc8eXBY5 -----END CERTIFICATE-----Generated at Tue Apr 22 01:32:56 2025 by rpki-client