$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft File: 9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft (raw, json) Hash identifier: b2aObyHY4d/mI1pVJQwMXdb9N2QTeitpxTVOus0nWeU= Subject key identifier: C2:4B:91:FA:10:0C:87:19:33:85:30:FB:3F:71:85:96:C8:78:72:FB Authority key identifier: D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B Certificate issuer: /CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Certificate serial: 010D0C9F4328584992763E8CC7B2D3AAF0477480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft Manifest number: 010D0C9F4328584073A832B112C63E72A04F0B4E Signing time: Sat 19 Apr 2025 00:00:03 +0000 Manifest this update: Sat 19 Apr 2025 00:00:03 +0000 Manifest next update: Tue 22 Apr 2025 00:00:00 +0000 Files and hashes: 1: 2963c665-992a-3711-97c8-3b7592a72c41.roa (hash: 34leb0207zJ3RvcYpAQFjgUUNS/qnBOAq9UEP26XAE4=) 2: 6bdbbdc8-b02f-3e8c-bd0a-e9a33ca394e8.roa (hash: 2qOpiWEuYhUw5TO7eQlvSPXf6JMOA/2G5eYEmtZYDhI=) 3: 9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl (hash: UhA0BxAtcmikdvqmGINRz3F6C+rC73QIt9Kx/2kUIKQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:76:3e:8c:c7:b2:d3:aa:f0:47:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Validity Not Before: Apr 19 00:00:03 2025 GMT Not After : Apr 22 00:00:00 2025 GMT Subject: CN=ef72ece6-2bf0-4aa7-afbf-de2c4357a36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:27:d5:b9:4f:7f:9a:f5:95:4a:1a:a3:b4: cd:c7:f0:7d:59:92:31:7a:93:60:15:db:11:bc:32: b5:ab:e9:41:b2:2b:47:31:18:74:60:0d:bf:fe:83: c3:ed:74:28:20:dc:bb:08:ca:c1:c9:27:89:87:a6: 55:2a:d1:4d:db:e8:62:ee:f3:3d:c0:88:f9:65:3e: d6:f0:01:07:4f:82:80:45:f5:ab:a6:ce:26:86:38: 3f:fc:fc:b7:84:3a:9f:98:15:ac:f6:2a:07:97:fb: cd:f1:61:f6:1f:e8:b5:9e:fa:2c:af:a1:e0:dd:85: d8:d5:da:d9:22:12:76:69:4c:23:7a:ac:23:87:f4: c9:a1:0f:20:36:5a:de:f7:0f:60:c6:71:d9:23:d7: 44:ef:9f:40:f3:f5:49:58:8d:d6:4b:f4:9c:48:d7: 89:97:1c:6d:7e:3c:06:7d:c2:63:e8:08:83:a4:e8: 6d:34:d0:b1:dc:3d:63:7b:52:b4:8b:a7:6a:5c:49: b2:f2:69:98:60:03:0e:8f:d8:6d:b4:27:9b:fc:97: 60:89:81:2e:93:95:05:82:7e:ae:71:a9:9f:12:5c: 5a:c1:08:6e:fb:1e:7b:29:a4:74:2a:30:a2:24:10: 79:48:bb:ec:0f:04:95:f1:af:80:c0:78:95:a0:5c: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4B:91:FA:10:0C:87:19:33:85:30:FB:3F:71:85:96:C8:78:72:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.crl X509v3 Authority Key Identifier: keyid:D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c3:17:21:1e:c7:db:db:3b:50:7d:4d:a3:8f:5c:99:38:7b: 14:a0:2f:c1:4f:10:fe:77:27:be:31:d2:91:41:58:7c:a5:4b: 61:8f:d8:c2:e6:84:18:98:a2:7d:7f:b5:b6:bb:2c:be:28:42: 54:9f:2b:7d:03:ff:12:8c:a4:c2:7e:30:25:e6:b9:53:15:fd: c1:44:9b:f3:8f:b7:e6:35:5f:2c:26:7e:5b:34:5e:35:19:48: dd:3b:c6:08:d9:aa:b1:1d:07:a9:5b:5e:fe:11:18:34:79:1b: f0:3e:58:e6:8f:3c:f2:18:bd:ab:06:02:ee:9a:73:13:54:10: 0d:3a:7e:3b:a9:55:1d:20:99:76:c3:31:db:28:29:93:38:c4: cd:be:e8:aa:fe:31:d2:f9:9f:93:a0:b0:db:e1:9d:3e:0d:c2: 5d:7d:11:6c:39:55:8b:4f:8b:a6:34:2e:b4:0f:71:4e:64:7e: 16:9f:7c:c7:51:74:28:03:f8:9d:de:a5:17:1f:fb:87:1d:3a: 9f:b6:5c:83:ec:21:2b:ef:b4:86:80:a0:8d:c8:8c:d0:28:49: ae:f6:ef:db:9c:82:5f:17:ca:49:d9:41:1b:79:cc:a9:4d:b1: e7:a1:8b:bd:89:26:cd:38:8e:c5:78:79:ce:df:d2:2d:c0:ad: 74:3a:6b:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmSdj6Mx7LTqvBHdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM0OGNkMjUtYzUyOS00NGE5LWE3YWUtZjNlNGJmNzJk OWI0MB4XDTI1MDQxOTAwMDAwM1oXDTI1MDQyMjAwMDAwMFowLzEtMCsGA1UEAxMk ZWY3MmVjZTYtMmJmMC00YWE3LWFmYmYtZGUyYzQzNTdhMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYMn1blPf5r1lUoao7TNx/B9WZIxepNgFdsR vDK1q+lBsitHMRh0YA2//oPD7XQoINy7CMrBySeJh6ZVKtFN2+hi7vM9wIj5ZT7W 8AEHT4KARfWrps4mhjg//Py3hDqfmBWs9ioHl/vN8WH2H+i1nvosr6Hg3YXY1drZ IhJ2aUwjeqwjh/TJoQ8gNlre9w9gxnHZI9dE759A8/VJWI3WS/ScSNeJlxxtfjwG fcJj6AiDpOhtNNCx3D1je1K0i6dqXEmy8mmYYAMOj9httCeb/JdgiYEuk5UFgn6u camfElxawQhu+x57KaR0KjCiJBB5SLvsDwSV8a+AwHiVoFzFSwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMJLkfoQDIcZM4Uw+z9xhZbIeHL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzQ4 Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0YmY3MmQ5YjQvOWM0OGNkMjUtYzUyOS00 NGE5LWE3YWUtZjNlNGJmNzJkOWI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWM0OGNkMjUtYzUyOS00NGE5LWE3 YWUtZjNlNGJmNzJkOWI0LzljNDhjZDI1LWM1MjktNDRhOS1hN2FlLWYzZTRiZjcy ZDliNC5jcmwwHwYDVR0jBBgwFoAU2ASZw13m/Q/BTH9pQw3mBWR9+DswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzQ4Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0 YmY3MmQ5YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAwxchHsfb2ztQfU2jj1yZ OHsUoC/BTxD+dye+MdKRQVh8pUthj9jC5oQYmKJ9f7W2uyy+KEJUnyt9A/8SjKTC fjAl5rlTFf3BRJvzj7fmNV8sJn5bNF41GUjdO8YI2aqxHQepW17+ERg0eRvwPljm jzzyGL2rBgLumnMTVBANOn47qVUdIJl2wzHbKCmTOMTNvuiq/jHS+Z+ToLDb4Z0+ DcJdfRFsOVWLT4umNC60D3FOZH4Wn3zHUXQoA/id3qUXH/uHHTqftlyD7CEr77SG gKCNyIzQKEmu9u/bnIJfF8pJ2UEbecypTbHnoYu9iSbNOI7FeHnO39ItwK10OmsT -----END CERTIFICATE-----Generated at Sat Apr 19 17:17:03 2025 by rpki-client