$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft File: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft (raw, json) Hash identifier: rEJ7fpM8e0aL7yAPD0/SwYLSUhhgy8Q7dblDReH6UQo= Subject key identifier: A1:7B:C2:B8:19:37:3F:DE:FA:35:D1:0C:E5:26:6F:5A:09:93:40:12 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F432858497F44D6FC525B3EB8AE99FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft Manifest number: 010D0C9F432858487BBB0833A7DA59D64374D41F Signing time: Sat 12 Apr 2025 03:00:07 +0000 Manifest this update: Sat 12 Apr 2025 03:00:07 +0000 Manifest next update: Mon 14 Apr 2025 03:00:00 +0000 Files and hashes: 1: 3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl (hash: 17runSSN/L5W3kQj1Vs5iKrT+HkYj1UdVf98C/UDFi4=) 2: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (hash: 32nxby4kcte4mLRG12aEwGU8gERTcdEQb+oQNbKfUZ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:44:d6:fc:52:5b:3e:b8:ae:99:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Apr 12 03:00:07 2025 GMT Not After : Apr 14 03:00:00 2025 GMT Subject: CN=97a62bae-c71d-48b0-833f-ead4bb7f1f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:8e:3a:f7:d5:09:16:45:32:76:82:ed:60: 38:41:58:58:fb:01:34:c5:51:4f:35:d0:95:5c:65: f9:00:43:2a:81:6e:ed:9e:87:13:c3:00:e8:8f:e2: 5e:0b:a0:97:2f:8c:85:1d:d8:b7:29:23:8b:0e:ab: d0:55:09:d0:a8:84:4b:6e:13:eb:0a:1d:b2:47:04: 75:2c:e8:0c:a7:83:49:e4:0f:cb:f9:47:d6:84:ed: 57:28:87:8a:14:22:7c:f4:ad:1e:c8:40:d2:6e:86: 29:b9:0f:e5:a6:cd:0b:be:e9:2d:82:7e:9d:b6:d6: d2:d2:0e:a4:6f:c4:56:67:34:2f:ba:a3:91:e5:5f: 85:00:4e:a8:05:d0:75:3d:e4:4e:26:d9:2e:6b:8f: 3b:87:57:41:16:b9:2a:03:70:be:6e:ba:98:6b:da: bd:ab:76:52:3e:bc:e4:02:b7:3c:3d:24:1f:66:a8: 9f:a8:4c:2e:44:4a:82:7f:82:8b:91:0d:00:7f:99: 9d:03:ea:5d:52:79:5d:b4:4f:e7:49:bd:db:ad:67: 34:40:c7:8b:4d:92:d7:58:35:4e:ec:61:36:92:74: f2:2b:54:5a:99:1d:da:56:3f:d5:3a:ff:70:a2:9a: bc:b0:cc:42:0d:c5:b2:f0:53:f9:a1:be:56:12:3c: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7B:C2:B8:19:37:3F:DE:FA:35:D1:0C:E5:26:6F:5A:09:93:40:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b2:45:a6:68:40:f6:21:89:31:ba:42:dc:ee:e6:52:f1:7b: 04:1d:ba:d6:65:58:39:d5:27:7d:44:de:bc:f1:92:f1:d5:be: ad:af:21:bd:70:48:30:ff:e7:ff:da:b2:85:2a:9f:6d:3c:55: fa:ba:a6:ec:af:17:7a:29:05:54:19:e7:f0:71:55:a2:c4:4f: 5b:69:ad:1c:4e:b2:07:be:36:a5:88:7c:e0:8e:57:28:69:d4: b6:15:25:01:37:5e:16:48:f7:2f:3d:b9:ce:84:2c:c2:e5:8d: 77:b2:b9:5b:88:ca:13:ae:41:39:eb:9d:44:6f:e3:30:02:e1: eb:a2:d2:b1:27:15:35:91:a4:bc:48:96:e7:80:ff:91:4e:c3: 5f:96:04:19:ba:2b:3a:ad:1f:60:cd:77:e2:62:d7:9e:bf:e8: aa:cb:fb:c1:8e:68:b2:41:52:e5:7f:f6:3c:64:68:51:19:44: ee:0b:a7:ef:81:42:83:b9:07:e2:6a:7a:93:7b:72:27:6b:aa: e1:89:66:75:b6:87:6f:2e:1a:03:2a:81:7c:5e:1f:9f:57:40: 16:71:10:67:51:e9:62:af:1d:97:91:58:0d:9a:41:0d:d3:90: f9:db:be:ba:d0:b2:7c:00:10:bb:e6:2f:5b:b2:65:24:c4:5a: 91:a1:c1:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl/RNb8Uls+uK6Z/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI1MDQxMjAzMDAwN1oXDTI1MDQxNDAzMDAwMFowLzEtMCsGA1UEAxMk OTdhNjJiYWUtYzcxZC00OGIwLTgzM2YtZWFkNGJiN2YxZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvmOOvfVCRZFMnaC7WA4QVhY+wE0xVFPNdCV XGX5AEMqgW7tnocTwwDoj+JeC6CXL4yFHdi3KSOLDqvQVQnQqIRLbhPrCh2yRwR1 LOgMp4NJ5A/L+UfWhO1XKIeKFCJ89K0eyEDSboYpuQ/lps0Lvuktgn6dttbS0g6k b8RWZzQvuqOR5V+FAE6oBdB1PeROJtkua487h1dBFrkqA3C+brqYa9q9q3ZSPrzk Arc8PSQfZqifqEwuREqCf4KLkQ0Af5mdA+pdUnldtE/nSb3brWc0QMeLTZLXWDVO 7GE2knTyK1RamR3aVj/VOv9wopq8sMxCDcWy8FP5ob5WEjxFuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKF7wrgZNz/e+jXRDOUmb1oJk0ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvM2I0YTQ0MWYtNWQwYi00 ODEzLTgzNmUtMmFlZmQ1NGIwY2ExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNskWmaED2IYkxukLc7uZS 8XsEHbrWZVg51Sd9RN688ZLx1b6tryG9cEgw/+f/2rKFKp9tPFX6uqbsrxd6KQVU GefwcVWixE9baa0cTrIHvjaliHzgjlcoadS2FSUBN14WSPcvPbnOhCzC5Y13srlb iMoTrkE5651Eb+MwAuHrotKxJxU1kaS8SJbngP+RTsNflgQZuis6rR9gzXfiYtee v+iqy/vBjmiyQVLlf/Y8ZGhRGUTuC6fvgUKDuQfianqTe3Ina6rhiWZ1todvLhoD KoF8Xh+fV0AWcRBnUelirx2XkVgNmkEN05D527660LJ8ABC75i9bsmUkxFqRocHo -----END CERTIFICATE-----Generated at Sat Apr 12 13:32:42 2025 by rpki-client