$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft File: 2fd6704c-2109-476c-8d4f-fea2428a7b88.mft (raw, json) Hash identifier: Y7J8gKL6FvHnQTLe3eKgbj+I5rOAJFduvyIamvqsth4= Subject key identifier: 9F:D6:4A:9B:88:F0:CE:22:20:EB:23:A4:44:2F:92:B7:FB:25:E4:78 Authority key identifier: EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C Certificate issuer: /CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Certificate serial: 010D0C9F432858497E1B10D8ECCAFED868842A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft Manifest number: 010D0C9F43285841854021A083A391EE824E5BDE Signing time: Fri 11 Apr 2025 17:00:07 +0000 Manifest this update: Fri 11 Apr 2025 17:00:07 +0000 Manifest next update: Sun 13 Apr 2025 17:00:00 +0000 Files and hashes: 1: 2fd6704c-2109-476c-8d4f-fea2428a7b88.crl (hash: V8gbiGtLB6C6ZGuGYfxnekZcDUmp+8TVcHP5iT5EtCY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7e:1b:10:d8:ec:ca:fe:d8:68:84:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd6704c-2109-476c-8d4f-fea2428a7b88 Validity Not Before: Apr 11 17:00:07 2025 GMT Not After : Apr 13 17:00:00 2025 GMT Subject: CN=c9859eec-b8f0-449a-983d-3f1e31fa48d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:db:77:f7:36:2b:dd:9c:c5:74:aa:38:a9: 16:88:f7:f9:3f:fa:ba:22:3e:0b:96:9a:0c:b7:af: 3d:6c:37:3d:bb:42:ab:c8:f2:64:36:d1:be:84:53: c6:98:b3:c4:1e:b5:a7:cb:bc:4b:09:c8:6d:42:87: eb:6d:0e:66:eb:04:4c:6f:1c:99:d3:20:e5:57:79: 27:8f:a3:b1:c4:d5:1d:1f:f2:ed:1d:69:92:df:e3: 20:3e:f0:17:6a:2a:42:f0:f6:cb:2e:82:82:b6:2f: 50:83:b3:41:b5:2e:5f:1b:06:6b:8a:a0:3c:22:64: a5:49:dd:d4:89:30:9c:fc:19:04:b7:ef:22:6a:49: 9e:1a:70:66:4b:35:bb:3d:e9:04:cb:4c:51:fd:0a: a1:c4:04:6f:85:de:67:b4:92:fd:1d:49:0d:c6:12: 05:64:53:41:06:08:da:0c:2d:00:db:d6:e7:7a:41: 53:2d:00:c3:46:37:a6:97:24:58:a9:cc:0f:ae:2f: c5:c4:53:3d:86:0a:bb:13:7f:79:f2:d3:1a:1b:b1: b7:d1:a0:22:84:cd:ef:12:36:9d:c2:c7:64:cd:e7: be:cb:b7:4c:19:f4:e9:c3:ea:43:6b:60:6b:e9:4a: e5:2d:86:dc:e0:1c:da:e7:e6:f0:94:e3:43:9f:05: 21:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D6:4A:9B:88:F0:CE:22:20:EB:23:A4:44:2F:92:B7:FB:25:E4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88/2fd6704c-2109-476c-8d4f-fea2428a7b88.crl X509v3 Authority Key Identifier: keyid:EA:D2:1E:7F:A7:5D:1C:A7:CB:5B:3A:E0:E3:D1:F7:DE:9A:F3:2D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2fd6704c-2109-476c-8d4f-fea2428a7b88.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:eb:26:f5:ab:35:03:d8:72:9c:f2:de:c2:bd:e7:17:8c:db: 51:21:b1:23:cc:8d:de:d9:6f:f3:64:a7:2f:a8:8a:4b:2d:bc: 54:14:fc:d7:68:d0:d6:ce:3b:ae:82:11:28:98:14:bf:ff:c5: b5:67:96:b6:b6:85:77:ef:6e:19:97:91:7c:f9:eb:2b:9c:91: 50:43:6d:7a:fc:59:98:d5:d1:45:3d:5c:53:02:93:74:c6:81: 6b:b0:05:72:4a:fe:1b:f0:b2:9a:69:11:29:d5:52:c8:f3:d5: 59:09:87:39:c1:28:2c:b1:b6:ef:58:f3:3a:e3:27:89:1a:73: 62:c4:1d:f5:a1:de:35:0f:f5:73:ef:72:55:26:7c:1f:cf:44: b4:9d:a9:e2:38:2f:28:1a:30:38:67:d1:9f:3a:df:cd:fa:05: 83:2c:75:88:44:9f:7c:1f:85:97:0a:ef:ee:61:5a:ec:5d:ca: 8c:1d:66:f5:86:11:6f:a3:67:29:00:fc:8f:e2:4a:27:8f:46: 39:db:57:8c:e3:03:51:b4:a7:57:0d:31:9a:ee:48:1f:44:11: bc:17:51:dc:56:b6:82:4a:ce:73:ff:18:a3:84:08:da:24:1a: 5a:5b:83:e6:a3:2c:7b:0e:9a:cf:7c:07:e3:d8:6a:0c:f7:56: bc:6f:9d:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl+GxDY7Mr+2GiEKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkNjcwNGMtMjEwOS00NzZjLThkNGYtZmVhMjQyOGE3 Yjg4MB4XDTI1MDQxMTE3MDAwN1oXDTI1MDQxMzE3MDAwMFowLzEtMCsGA1UEAxMk Yzk4NTllZWMtYjhmMC00NDlhLTk4M2QtM2YxZTMxZmE0OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7/bd/c2K92cxXSqOKkWiPf5P/q6Ij4LlpoM t689bDc9u0KryPJkNtG+hFPGmLPEHrWny7xLCchtQofrbQ5m6wRMbxyZ0yDlV3kn j6OxxNUdH/LtHWmS3+MgPvAXaipC8PbLLoKCti9Qg7NBtS5fGwZriqA8ImSlSd3U iTCc/BkEt+8iakmeGnBmSzW7PekEy0xR/QqhxARvhd5ntJL9HUkNxhIFZFNBBgja DC0A29bnekFTLQDDRjemlyRYqcwPri/FxFM9hgq7E3958tMaG7G30aAihM3vEjad wsdkzee+y7dMGfTpw+pDa2Br6UrlLYbc4Bza5+bwlONDnwUhpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ/WSpuI8M4iIOsjpEQvkrf7JeR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2 NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEyNDI4YTdiODgvMmZkNjcwNGMtMjEwOS00 NzZjLThkNGYtZmVhMjQyOGE3Yjg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmZkNjcwNGMtMjEwOS00NzZjLThk NGYtZmVhMjQyOGE3Yjg4LzJmZDY3MDRjLTIxMDktNDc2Yy04ZDRmLWZlYTI0Mjhh N2I4OC5jcmwwHwYDVR0jBBgwFoAU6tIef6ddHKfLWzrg49H33przLXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yZmQ2NzA0Yy0yMTA5LTQ3NmMtOGQ0Zi1mZWEy NDI4YTdiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/6yb1qzUD2HKc8t7CvecX jNtRIbEjzI3e2W/zZKcvqIpLLbxUFPzXaNDWzjuughEomBS//8W1Z5a2toV3724Z l5F8+esrnJFQQ216/FmY1dFFPVxTApN0xoFrsAVySv4b8LKaaREp1VLI89VZCYc5 wSgssbbvWPM64yeJGnNixB31od41D/Vz73JVJnwfz0S0naniOC8oGjA4Z9GfOt/N +gWDLHWIRJ98H4WXCu/uYVrsXcqMHWb1hhFvo2cpAPyP4konj0Y521eM4wNRtKdX DTGa7kgfRBG8F1HcVraCSs5z/xijhAjaJBpaW4Pmoyx7DprPfAfj2GoM91a8b522 -----END CERTIFICATE-----Generated at Fri Apr 11 21:00:49 2025 by rpki-client