$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft File: f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft (raw, json) Hash identifier: 4bAAIw1+oAcVtoKNvQiw1xpa7h+zfbGO/9sRsErafxU= Subject key identifier: 9C:A0:30:F1:EC:59:12:9B:7D:D0:A5:89:60:35:B8:F7:15:6D:88:E8 Authority key identifier: DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E Certificate issuer: /CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Certificate serial: 010D0C9F432858497C20D1D91D41082D4A238040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft Manifest number: 010D0C9F43285848008B984CEDA61AA469C041EB Signing time: Fri 11 Apr 2025 00:00:08 +0000 Manifest this update: Fri 11 Apr 2025 00:00:08 +0000 Manifest next update: Mon 14 Apr 2025 00:00:00 +0000 Files and hashes: 1: d0aa6771-362e-3935-947a-bfd5081d3828.roa (hash: II6sZZsPA3mUt/ABOpYWJgL5ZzRgb25PAxNlouqBy9E=) 2: f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl (hash: nCOQSFMOInE9/Hd3oNmKYS8TAGdv81lR6VZoOjs3l4A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:20:d1:d9:1d:41:08:2d:4a:23:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fa851f-0c6f-44a2-8017-7b062f4d8e74 Validity Not Before: Apr 11 00:00:08 2025 GMT Not After : Apr 14 00:00:00 2025 GMT Subject: CN=445eb004-28dd-44f5-bcaf-aa36faf2d878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:0d:e8:7d:37:c5:1b:8c:4f:ea:f5:47:2e: de:2b:9a:98:58:f3:81:6c:e6:7c:a0:74:3a:d3:99: b2:b2:21:33:ce:9b:ac:9b:29:f4:99:dd:b6:e8:9d: 31:04:c4:8e:ed:52:71:87:13:25:99:10:d8:a0:37: 91:0c:e4:25:04:fd:ea:e3:e5:dc:0d:d0:3b:5d:92: d7:b1:57:3a:18:bd:a5:fe:6c:1a:31:f8:2c:21:f5: 40:99:f2:60:55:fa:fa:b8:e2:ed:7f:37:5d:c9:47: 58:25:d1:dc:75:b9:86:ff:09:61:ad:44:70:22:ae: bb:61:b4:a0:7b:1e:23:26:0d:78:e9:12:ae:73:76: 1f:fa:36:74:0e:7e:5c:6a:f0:78:79:a0:bf:73:66: 94:ee:b7:2a:42:35:4a:8e:d0:1c:72:a5:fd:cb:aa: 4f:22:2a:eb:ac:f1:89:70:12:d4:ee:72:3b:7a:11: db:b4:62:ce:e7:90:ae:d1:13:d7:92:37:dc:19:81: a9:c2:2a:a5:b5:5b:9c:43:0f:c2:d5:0e:6f:17:48: b6:db:e0:10:c4:1f:a1:88:99:f1:6f:71:87:c8:33: b8:6c:6d:5c:42:1f:ec:c6:ff:eb:6d:7b:c3:f6:d6: bd:85:4d:f0:eb:f1:55:13:b6:b8:db:0d:ce:62:ed: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A0:30:F1:EC:59:12:9B:7D:D0:A5:89:60:35:B8:F7:15:6D:88:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.crl X509v3 Authority Key Identifier: keyid:DF:AE:29:DC:48:23:A0:74:F5:E6:38:79:26:77:86:E8:AC:D0:6B:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f8fa851f-0c6f-44a2-8017-7b062f4d8e74.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:30:72:d5:89:93:62:67:e9:97:95:78:3f:d3:24:2a:0c:8f: 03:c0:e7:21:6f:5c:6b:4f:8d:c6:7a:06:d9:89:a3:20:86:3d: 8d:5f:20:59:52:a6:ee:a4:bb:ca:70:e1:79:a6:34:1b:1b:72: af:67:ed:76:6f:cc:84:2f:c6:c8:a9:42:29:43:0a:d6:46:95: 40:83:a4:c5:07:91:6b:a4:27:64:ee:20:52:fb:5c:4e:cc:16: fe:70:71:46:c4:3b:7a:de:e1:cc:61:05:74:e9:70:75:8e:df: 45:78:63:48:28:c6:c4:52:37:df:f4:ac:09:ff:53:93:ae:d3: 03:ce:d2:74:f1:e6:f7:40:22:01:cc:1e:32:90:cc:ca:64:41: ff:fc:e9:1e:64:7d:f7:be:30:1b:0b:a4:42:c4:90:8a:10:41: 8c:db:ed:86:49:4c:26:ed:aa:7c:55:31:e5:4a:0d:bd:ed:a5: 55:90:ff:ff:25:79:b4:71:3b:05:cb:60:c1:2f:d0:d0:d9:be: 96:23:34:4c:47:e1:4d:93:e0:33:3d:ac:90:d4:ae:a8:e5:1c: a1:ce:17:0d:6e:8e:6c:00:ca:94:f4:62:26:78:7d:85:d0:3c: 08:75:08:5d:2b:aa:b7:b3:33:d5:a3:cf:68:a1:25:ef:2d:d8: ff:7e:e9:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl8INHZHUEILUojgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhmYTg1MWYtMGM2Zi00NGEyLTgwMTctN2IwNjJmNGQ4 ZTc0MB4XDTI1MDQxMTAwMDAwOFoXDTI1MDQxNDAwMDAwMFowLzEtMCsGA1UEAxMk NDQ1ZWIwMDQtMjhkZC00NGY1LWJjYWYtYWEzNmZhZjJkODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoewN6H03xRuMT+r1Ry7eK5qYWPOBbOZ8oHQ6 05mysiEzzpusmyn0md226J0xBMSO7VJxhxMlmRDYoDeRDOQlBP3q4+XcDdA7XZLX sVc6GL2l/mwaMfgsIfVAmfJgVfr6uOLtfzddyUdYJdHcdbmG/wlhrURwIq67YbSg ex4jJg146RKuc3Yf+jZ0Dn5cavB4eaC/c2aU7rcqQjVKjtAccqX9y6pPIirrrPGJ cBLU7nI7ehHbtGLO55Cu0RPXkjfcGYGpwiqltVucQw/C1Q5vF0i22+AQxB+hiJnx b3GHyDO4bG1cQh/sxv/rbXvD9ta9hU3w6/FVE7a42w3OYu15IwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJygMPHsWRKbfdCliWA1uPcVbYjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOGZh ODUxZi0wYzZmLTQ0YTItODAxNy03YjA2MmY0ZDhlNzQvZjhmYTg1MWYtMGM2Zi00 NGEyLTgwMTctN2IwNjJmNGQ4ZTc0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjhmYTg1MWYtMGM2Zi00NGEyLTgw MTctN2IwNjJmNGQ4ZTc0L2Y4ZmE4NTFmLTBjNmYtNDRhMi04MDE3LTdiMDYyZjRk OGU3NC5jcmwwHwYDVR0jBBgwFoAU364p3EgjoHT15jh5JneG6KzQa54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOGZhODUxZi0wYzZmLTQ0YTItODAxNy03YjA2 MmY0ZDhlNzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0MHLViZNiZ+mXlXg/0yQq DI8DwOchb1xrT43GegbZiaMghj2NXyBZUqbupLvKcOF5pjQbG3KvZ+12b8yEL8bI qUIpQwrWRpVAg6TFB5FrpCdk7iBS+1xOzBb+cHFGxDt63uHMYQV06XB1jt9FeGNI KMbEUjff9KwJ/1OTrtMDztJ08eb3QCIBzB4ykMzKZEH//OkeZH33vjAbC6RCxJCK EEGM2+2GSUwm7ap8VTHlSg297aVVkP//JXm0cTsFy2DBL9DQ2b6WIzRMR+FNk+Az PayQ1K6o5RyhzhcNbo5sAMqU9GImeH2F0DwIdQhdK6q3szPVo89ooSXvLdj/fulK -----END CERTIFICATE-----Generated at Fri Apr 11 21:06:55 2025 by rpki-client