$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft File: 3194b2e8-7001-4efa-9998-f4eded0d24d2.mft (raw, json) Hash identifier: aaKISxQgjQvxWNwN6oSjWYl/rCYGoiP9Bblg3D2ZTXA= Subject key identifier: 72:52:C5:4C:2D:22:6A:C9:E5:87:B1:BE:85:33:97:D5:E5:D3:7B:03 Authority key identifier: DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC Certificate issuer: /CN=3194b2e8-7001-4efa-9998-f4eded0d24d2 Certificate serial: 010D0C9F432858497BE538197C5F622B9F7F9F88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft Manifest number: 010D0C9F4328584813D3E16BEC4A00B0B54FD067 Signing time: Thu 10 Apr 2025 22:00:03 +0000 Manifest this update: Thu 10 Apr 2025 22:00:03 +0000 Manifest next update: Sat 12 Apr 2025 22:00:00 +0000 Files and hashes: 1: 3194b2e8-7001-4efa-9998-f4eded0d24d2.crl (hash: Dey9/cia0WJ2XqZQ1Hi9M+4lZzMzx/mbMRhZVSyKerk=) 2: 77e2bbd9-ddc3-3bb5-9db5-ea6fe5a710d5.roa (hash: QF1uqgF59pfTkS/r6LmWyAkX2tOv8NoaZu0x1lINhDE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7b:e5:38:19:7c:5f:62:2b:9f:7f:9f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194b2e8-7001-4efa-9998-f4eded0d24d2 Validity Not Before: Apr 10 22:00:03 2025 GMT Not After : Apr 12 22:00:00 2025 GMT Subject: CN=68ed01d4-c4e2-4828-bc7e-303f79dabef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2a:dd:7d:6e:77:7f:16:4d:51:c6:f0:6d:6d: d0:67:78:e5:01:8b:9b:03:8e:96:02:64:88:93:2a: f5:9b:92:34:cd:b6:68:c1:4a:1c:26:e4:24:20:99: dc:31:5f:f3:78:bc:60:e5:49:7f:5b:98:36:7c:3f: ab:2f:f5:cb:2b:a7:19:72:d4:b2:55:46:cb:e2:8d: 50:e4:d9:6e:81:e3:9a:08:6c:d8:b1:fe:48:99:c5: a7:2a:e5:ea:bc:29:b7:ce:a7:46:58:92:fa:e7:ac: 8a:19:b9:cc:ee:a5:74:50:95:fe:de:bd:d4:da:96: 12:2d:44:25:a8:82:5e:78:92:7f:58:a4:10:24:ea: a4:3e:bb:95:b1:20:7d:8b:0e:a7:8f:21:fb:a6:1f: f2:ad:ff:b6:c3:0b:bc:4a:92:ca:76:fb:1a:c2:94: 2d:9a:e9:55:e7:ee:c8:60:7e:d7:28:3f:5e:09:d4: 05:36:5a:65:06:3d:6d:69:1c:67:28:64:b8:71:ed: 7e:54:39:05:37:c7:d6:b3:3c:25:fc:36:6d:df:c4: 4d:00:cb:0c:1a:47:d0:fa:d6:c0:de:0a:ee:5e:40: c8:65:0c:af:ea:ff:84:f8:46:e5:a2:9e:fd:9f:cf: e0:b8:b0:2f:ab:27:4d:3e:bc:13:94:ff:47:5a:0d: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:52:C5:4C:2D:22:6A:C9:E5:87:B1:BE:85:33:97:D5:E5:D3:7B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2/3194b2e8-7001-4efa-9998-f4eded0d24d2.crl X509v3 Authority Key Identifier: keyid:DA:DE:2D:C5:5E:6D:0F:19:32:02:2A:B8:0E:68:D1:FB:EC:6F:89:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3194b2e8-7001-4efa-9998-f4eded0d24d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:dd:3a:ee:fa:37:86:27:08:54:68:c5:5d:80:ed:ba:30:59: aa:c2:d2:94:11:9f:2a:45:8b:55:8c:ad:fc:d6:82:ec:1b:16: 90:d3:6f:c4:c6:3e:c6:c5:bb:ff:69:eb:e2:71:3f:5c:6e:a2: e0:13:a3:83:30:d7:c9:3c:35:40:a9:3d:db:f9:32:6e:39:86: 14:6a:c0:46:d2:fd:e5:94:76:43:97:95:fc:ae:9a:09:06:f2: 16:18:df:a9:be:99:ad:85:4b:d0:15:0e:d2:8e:92:27:b1:66: 53:08:7c:ba:2a:f7:87:c4:8e:f2:68:ac:e8:c0:d3:9d:ee:57: b1:2c:41:e7:6e:f2:15:83:37:2c:a1:5b:b9:c7:bf:68:98:c0: 51:0b:a2:6e:23:a9:c8:28:2e:84:35:55:2c:2c:f2:16:b4:88: 78:10:11:a5:56:ac:a3:98:5c:b9:0f:07:50:52:36:fc:3b:56: a4:0d:22:b8:5b:e7:7f:c7:aa:cc:53:ea:73:41:da:5f:8f:ee: ed:9c:91:4e:99:65:b0:58:87:f4:7f:a9:ba:bf:cb:c9:13:94: cb:12:ca:7f:14:f3:2e:79:cc:87:bd:3b:f7:1b:01:d6:f8:1d: b8:8a:4d:30:38:24:7d:e6:d1:8f:1f:2c:4c:15:19:77:ea:5d: 7e:69:4d:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl75TgZfF9iK59/n4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE5NGIyZTgtNzAwMS00ZWZhLTk5OTgtZjRlZGVkMGQy NGQyMB4XDTI1MDQxMDIyMDAwM1oXDTI1MDQxMjIyMDAwMFowLzEtMCsGA1UEAxMk NjhlZDAxZDQtYzRlMi00ODI4LWJjN2UtMzAzZjc5ZGFiZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCrdfW53fxZNUcbwbW3QZ3jlAYubA46WAmSI kyr1m5I0zbZowUocJuQkIJncMV/zeLxg5Ul/W5g2fD+rL/XLK6cZctSyVUbL4o1Q 5NlugeOaCGzYsf5ImcWnKuXqvCm3zqdGWJL656yKGbnM7qV0UJX+3r3U2pYSLUQl qIJeeJJ/WKQQJOqkPruVsSB9iw6njyH7ph/yrf+2wwu8SpLKdvsawpQtmulV5+7I YH7XKD9eCdQFNlplBj1taRxnKGS4ce1+VDkFN8fWszwl/DZt38RNAMsMGkfQ+tbA 3gruXkDIZQyv6v+E+Eblop79n8/guLAvqydNPrwTlP9HWg2EAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHJSxUwtImrJ5YexvoUzl9Xl03sDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMTk0 YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVkZWQwZDI0ZDIvMzE5NGIyZTgtNzAwMS00 ZWZhLTk5OTgtZjRlZGVkMGQyNGQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzE5NGIyZTgtNzAwMS00ZWZhLTk5 OTgtZjRlZGVkMGQyNGQyLzMxOTRiMmU4LTcwMDEtNGVmYS05OTk4LWY0ZWRlZDBk MjRkMi5jcmwwHwYDVR0jBBgwFoAU2t4txV5tDxkyAiq4DmjR++xviewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMTk0YjJlOC03MDAxLTRlZmEtOTk5OC1mNGVk ZWQwZDI0ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/3Tru+jeGJwhUaMVdgO26 MFmqwtKUEZ8qRYtVjK381oLsGxaQ02/Exj7Gxbv/aevicT9cbqLgE6ODMNfJPDVA qT3b+TJuOYYUasBG0v3llHZDl5X8rpoJBvIWGN+pvpmthUvQFQ7SjpInsWZTCHy6 KveHxI7yaKzowNOd7lexLEHnbvIVgzcsoVu5x79omMBRC6JuI6nIKC6ENVUsLPIW tIh4EBGlVqyjmFy5DwdQUjb8O1akDSK4W+d/x6rMU+pzQdpfj+7tnJFOmWWwWIf0 f6m6v8vJE5TLEsp/FPMuecyHvTv3GwHW+B24ik0wOCR95tGPHyxMFRl36l1+aU1J -----END CERTIFICATE-----Generated at Fri Apr 11 21:22:06 2025 by rpki-client