$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft File: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft (raw, json) Hash identifier: redKNyn5IOOL/Z/r5UUCwbUlDin+EZQIg/0m8QTaaAU= Subject key identifier: 4C:DF:BC:10:BA:5C:51:96:7E:D5:B8:17:87:29:78:F6:13:F8:9F:E6 Authority key identifier: B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA Certificate issuer: /CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Certificate serial: 010D0C9F432858497CB5B6409BAB0D88EAD20900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft Manifest number: 010D0C9F43285848EB9EF9CB5EADD579954BD736 Signing time: Fri 11 Apr 2025 05:00:07 +0000 Manifest this update: Fri 11 Apr 2025 05:00:07 +0000 Manifest next update: Mon 14 Apr 2025 05:00:00 +0000 Files and hashes: 1: a3871f56-f25e-36fb-97ca-6b0dba5160a1.roa (hash: +sdQ3fYCHuWRj7OH8+FWa+Q3WVGvJLW4MBmXHFk4V08=) 2: e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl (hash: uuXdrZy3WIF9ysr8VCBgn+DYSIVNn7KYtS1m54SpstU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:b5:b6:40:9b:ab:0d:88:ea:d2:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef Validity Not Before: Apr 11 05:00:07 2025 GMT Not After : Apr 14 05:00:00 2025 GMT Subject: CN=afeb389d-4972-4085-968b-e25a622e1032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0e:0d:84:c8:6e:b9:4b:c7:c8:0a:c6:1c:8f: df:0e:54:87:aa:54:15:d9:6e:36:5c:3c:e0:cd:82: da:2e:56:b7:97:73:3a:09:53:42:74:d5:9f:52:d4: 1b:ab:2e:54:77:2e:f2:f5:73:aa:5f:98:c7:8b:06: 3b:0f:b8:1e:13:51:86:fc:a5:7d:2b:33:2a:a1:3f: 12:fc:15:68:90:c2:83:e3:94:7e:0b:09:fa:f4:91: 94:ac:5d:8a:19:64:34:96:2c:17:d4:78:95:d5:20: 7f:81:91:0c:af:be:4f:44:09:6a:4f:78:ea:89:bb: e9:ee:81:33:ef:39:15:8a:00:d7:ac:b3:68:46:24: 95:18:49:f4:7f:84:69:9b:24:37:94:0a:39:ca:e0: 00:47:c5:ff:c8:59:3d:48:e3:25:c8:7c:b4:85:82: 2c:90:c5:42:43:38:d1:3d:f7:42:13:96:81:8d:7f: 61:79:bc:0e:b6:5e:fa:22:57:22:84:fd:4c:c7:71: 34:1b:31:0c:86:8e:50:09:46:4a:6c:0b:d8:26:8c: 72:18:10:a7:fe:ad:49:a3:fa:30:1a:14:5b:35:da: 20:51:28:15:3b:17:07:5a:89:3e:26:c7:69:62:4d: c8:6d:51:67:a7:34:b3:5f:89:cd:89:02:a4:c1:bc: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:BC:10:BA:5C:51:96:7E:D5:B8:17:87:29:78:F6:13:F8:9F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.crl X509v3 Authority Key Identifier: keyid:B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:02:14:fc:99:93:86:02:09:52:5b:f3:f5:b2:f8:f7:9a:fd: 29:26:b7:11:f5:c3:80:c6:93:81:19:8b:d3:da:36:99:07:6b: e0:6c:e3:91:9b:2d:5a:f2:d3:ce:51:c2:20:7a:6a:16:96:ae: 01:ed:a3:b8:ce:d6:c0:76:12:08:63:11:97:3f:2a:ac:52:57: fa:6c:45:48:9a:41:5e:33:d0:11:73:84:69:55:ac:20:1a:26: 64:da:fa:d5:8d:02:66:0b:9d:97:e3:af:80:6a:6f:f3:f0:f4: 2d:89:21:83:0a:f4:6c:72:0b:34:c2:a9:9b:28:ab:f4:5e:fc: 98:f5:2f:bd:c3:7d:84:61:ac:a3:f5:5e:3b:4f:30:03:29:43: 42:0a:b9:ce:9e:81:68:17:97:c5:25:fd:81:92:60:cc:9c:88: ae:6b:4e:e5:68:e1:af:96:14:b5:f2:27:b3:d9:61:9e:4f:a0: 72:bd:26:6f:74:69:92:f4:88:d5:be:e9:08:0e:ed:b5:66:52: ed:9b:3a:40:1b:51:c9:17:b8:ef:83:84:1f:a6:57:1f:8f:08: 40:86:01:aa:78:ff:d8:4a:9d:6e:e9:6f:68:4d:f2:eb:53:ab: 79:c5:48:88:09:e1:ba:6b:86:6f:9f:66:80:76:fe:79:3f:15: 39:c8:0d:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8tbZAm6sNiOrSCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhNTM4YWUtZmEyNS00YTM4LWIxZjEtMzIwZTJlOWYx NmVmMB4XDTI1MDQxMTA1MDAwN1oXDTI1MDQxNDA1MDAwMFowLzEtMCsGA1UEAxMk YWZlYjM4OWQtNDk3Mi00MDg1LTk2OGItZTI1YTYyMmUxMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg4NhMhuuUvHyArGHI/fDlSHqlQV2W42XDzg zYLaLla3l3M6CVNCdNWfUtQbqy5Udy7y9XOqX5jHiwY7D7geE1GG/KV9KzMqoT8S /BVokMKD45R+Cwn69JGUrF2KGWQ0liwX1HiV1SB/gZEMr75PRAlqT3jqibvp7oEz 7zkVigDXrLNoRiSVGEn0f4RpmyQ3lAo5yuAAR8X/yFk9SOMlyHy0hYIskMVCQzjR PfdCE5aBjX9hebwOtl76IlcihP1Mx3E0GzEMho5QCUZKbAvYJoxyGBCn/q1Jo/ow GhRbNdogUSgVOxcHWok+JsdpYk3IbVFnpzSzX4nNiQKkwbzFuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEzfvBC6XFGWftW4F4cpePYT+J/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1 MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBlMmU5ZjE2ZWYvZTZhNTM4YWUtZmEyNS00 YTM4LWIxZjEtMzIwZTJlOWYxNmVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTZhNTM4YWUtZmEyNS00YTM4LWIx ZjEtMzIwZTJlOWYxNmVmL2U2YTUzOGFlLWZhMjUtNGEzOC1iMWYxLTMyMGUyZTlm MTZlZi5jcmwwHwYDVR0jBBgwFoAUtyyMyJ51ztdTHmylketyq4EsCrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lNmE1MzhhZS1mYTI1LTRhMzgtYjFmMS0zMjBl MmU5ZjE2ZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7AhT8mZOGAglSW/P1svj3 mv0pJrcR9cOAxpOBGYvT2jaZB2vgbOORmy1a8tPOUcIgemoWlq4B7aO4ztbAdhII YxGXPyqsUlf6bEVImkFeM9ARc4RpVawgGiZk2vrVjQJmC52X46+Aam/z8PQtiSGD CvRscgs0wqmbKKv0XvyY9S+9w32EYayj9V47TzADKUNCCrnOnoFoF5fFJf2BkmDM nIiua07laOGvlhS18iez2WGeT6ByvSZvdGmS9IjVvukIDu21ZlLtmzpAG1HJF7jv g4QfplcfjwhAhgGqeP/YSp1u6W9oTfLrU6t5xUiICeG6a4Zvn2aAdv55PxU5yA2L -----END CERTIFICATE-----Generated at Fri Apr 11 21:15:47 2025 by rpki-client