$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft File: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft (raw, json) Hash identifier: B4A+C/jB3DORbfwPCsb2rFprcnB9B6YOA2IizcHZXWA= Subject key identifier: 98:99:E5:70:96:91:B0:49:2B:E2:AB:C6:AF:41:56:D7:F2:0D:6C:B9 Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F Certificate issuer: /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Certificate serial: 010D0C9F43285849A97E6E8AC7A1A5F4C3D5E520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft Manifest number: 010D0C9F4328584073A8419EE8E3E5AE11DFE460 Signing time: Sun 27 Apr 2025 06:00:07 +0000 Manifest this update: Sun 27 Apr 2025 06:00:07 +0000 Manifest next update: Wed 30 Apr 2025 06:00:00 +0000 Files and hashes: 1: 0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl (hash: ioN/C6fQgjxX4QJLmInwiwPe2SSATLvsa03z5PpxHi0=) 2: 6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (hash: 2DL2ZAK3lM8S3JCEIeX5J/z65CZD/XzDs9icDKSpvHQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:7e:6e:8a:c7:a1:a5:f4:c3:d5:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3 Validity Not Before: Apr 27 06:00:07 2025 GMT Not After : Apr 30 06:00:00 2025 GMT Subject: CN=805d3111-be21-4808-982f-96d287cd04cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:63:2e:7e:30:99:97:ee:f4:91:4d:ec:65: 6a:4d:8d:db:c0:7a:a6:51:7b:62:5d:4b:c8:5a:3c: bb:69:88:d6:b6:c2:85:b0:de:49:8b:81:20:a4:c9: d8:58:6b:e1:d8:8e:7d:3e:88:53:80:de:2e:58:91: 01:f6:4b:11:1a:0e:ac:34:90:54:a5:91:41:64:f3: de:6c:d9:5b:1c:58:7d:40:61:bc:d7:03:40:8f:83: c3:8d:0e:a9:d8:dc:ad:46:b4:ef:82:5b:94:87:25: 1e:b4:23:46:5c:4c:8b:0e:96:83:63:4f:ed:90:27: e5:93:08:17:9f:5f:d0:36:e8:7f:e9:83:f7:12:1e: df:55:12:ec:89:96:7c:b6:e2:98:ad:7e:a1:45:5d: d4:bd:27:55:a5:3c:11:04:1a:48:5f:51:6a:2a:f2: 0e:7a:06:d4:d1:b2:09:78:48:0b:c8:8f:46:d0:05: 11:5a:d0:7f:03:0a:e7:3a:b1:b2:d0:95:29:15:1e: e8:b5:34:52:d1:2d:1e:a9:b6:89:aa:91:e7:13:d9: f4:02:81:a3:09:76:0b:11:5d:d1:97:c2:0e:82:f3: 5f:19:07:35:52:49:78:50:4f:8f:36:bf:8c:98:fd: ef:5f:ac:6b:52:3a:55:5c:f8:80:32:63:40:86:45: 8f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:99:E5:70:96:91:B0:49:2B:E2:AB:C6:AF:41:56:D7:F2:0D:6C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl X509v3 Authority Key Identifier: keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ca:e9:0b:90:15:ae:07:33:4e:80:3d:b3:0c:ee:13:15:ec: de:56:c0:89:49:9c:a1:13:08:92:fa:02:70:d3:52:4c:58:6e: db:da:6c:53:1a:86:38:43:ef:95:3f:76:b7:1a:bb:0e:95:27: 5a:cd:e3:2c:ef:34:8d:3c:31:6e:43:36:23:58:f9:a7:45:24: ed:d4:d0:87:4b:3c:23:15:c4:37:73:db:f7:2e:65:a1:29:b1: 3b:7e:70:db:49:81:f3:d1:c3:b2:26:3b:b0:64:78:22:e3:56: a5:a7:af:74:07:08:34:9f:71:7a:a4:84:a0:dc:33:7b:c4:34: cf:de:08:3e:8e:8a:79:d6:e7:13:d8:fb:64:1d:19:d4:ae:38: 3a:d4:52:15:04:a2:a8:22:a9:61:b7:97:59:b6:4c:4c:be:84: 80:9e:c5:80:11:27:2c:db:e0:dd:62:ec:6b:af:27:e3:e9:69: 84:ae:46:a6:cd:15:2b:f6:be:cd:a3:74:fa:8f:59:1b:80:3c: 1f:29:a0:83:68:41:a0:52:45:45:0d:4b:db:90:d3:70:44:a2: ae:75:69:fd:30:98:08:cb:9b:1e:e1:18:98:8c:2a:42:c6:51: b8:f2:94:2f:62:14:23:cb:18:3c:88:3d:76:cc:c1:0b:be:bb: 86:04:13:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmpfm6Kx6Gl9MPV5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRlMzdkMTctMjY2NC00Yzg1LTliZTQtYTM1YmFmMGZk MmIzMB4XDTI1MDQyNzA2MDAwN1oXDTI1MDQzMDA2MDAwMFowLzEtMCsGA1UEAxMk ODA1ZDMxMTEtYmUyMS00ODA4LTk4MmYtOTZkMjg3Y2QwNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9tjLn4wmZfu9JFN7GVqTY3bwHqmUXtiXUvI Wjy7aYjWtsKFsN5Ji4EgpMnYWGvh2I59PohTgN4uWJEB9ksRGg6sNJBUpZFBZPPe bNlbHFh9QGG81wNAj4PDjQ6p2NytRrTvgluUhyUetCNGXEyLDpaDY0/tkCflkwgX n1/QNuh/6YP3Eh7fVRLsiZZ8tuKYrX6hRV3UvSdVpTwRBBpIX1FqKvIOegbU0bIJ eEgLyI9G0AURWtB/AwrnOrGy0JUpFR7otTRS0S0eqbaJqpHnE9n0AoGjCXYLEV3R l8IOgvNfGQc1Ukl4UE+PNr+MmP3vX6xrUjpVXPiAMmNAhkWP0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJiZ5XCWkbBJK+Krxq9BVtfyDWy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUz N2QxNy0yNjY0LTRjODUtOWJlNC1hMzViYWYwZmQyYjMvMGRlMzdkMTctMjY2NC00 Yzg1LTliZTQtYTM1YmFmMGZkMmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGRlMzdkMTctMjY2NC00Yzg1LTli ZTQtYTM1YmFmMGZkMmIzLzBkZTM3ZDE3LTI2NjQtNGM4NS05YmU0LWEzNWJhZjBm ZDJiMy5jcmwwHwYDVR0jBBgwFoAUTXOciO9LF1iQCUMJdowOO/hl608wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wZGUzN2QxNy0yNjY0LTRjODUtOWJlNC1hMzVi YWYwZmQyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMyukLkBWuBzNOgD2zDO4T FezeVsCJSZyhEwiS+gJw01JMWG7b2mxTGoY4Q++VP3a3GrsOlSdazeMs7zSNPDFu QzYjWPmnRSTt1NCHSzwjFcQ3c9v3LmWhKbE7fnDbSYHz0cOyJjuwZHgi41alp690 Bwg0n3F6pISg3DN7xDTP3gg+jop51ucT2PtkHRnUrjg61FIVBKKoIqlht5dZtkxM voSAnsWAEScs2+DdYuxrryfj6WmErkamzRUr9r7No3T6j1kbgDwfKaCDaEGgUkVF DUvbkNNwRKKudWn9MJgIy5se4RiYjCpCxlG48pQvYhQjyxg8iD12zMELvruGBBPr -----END CERTIFICATE-----Generated at Sun Apr 27 14:15:44 2025 by rpki-client