$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.mft File: 4e393a43-f67b-4eae-87ba-065de2fc159d.mft (raw, json) Hash identifier: TPZ1y629rnedGh5UVxdUpN9XEduw4oKGnamkhW36DHM= Subject key identifier: 80:D5:98:39:4C:E5:C1:EC:1E:5A:3C:50:04:DC:3D:AF:4D:0C:A2:DE Authority key identifier: 15:95:98:E5:49:A3:D6:8F:5C:57:47:01:92:DD:BA:96:7C:1A:B7:00 Certificate issuer: /CN=4e393a43-f67b-4eae-87ba-065de2fc159d Certificate serial: 010D0C9F43285849AC4911889424570AB1981700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.mft Manifest number: 010D0C9F4328584073A8438984A58545BE060761 Signing time: Mon 28 Apr 2025 06:00:03 +0000 Manifest this update: Mon 28 Apr 2025 06:00:03 +0000 Manifest next update: Wed 30 Apr 2025 06:00:00 +0000 Files and hashes: 1: 4e393a43-f67b-4eae-87ba-065de2fc159d.crl (hash: ipmls30PIXXoQsvGl7AoJuCUln5I0kXOIS2erqUfJo0=) 2: dfd3d048-8bdd-310b-bb35-6af01226903d.roa (hash: xRwao02uV79ldIZ2zTzsAAGg4ndN1zpH8PBB/mwWgvk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:49:11:88:94:24:57:0a:b1:98:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e393a43-f67b-4eae-87ba-065de2fc159d Validity Not Before: Apr 28 06:00:03 2025 GMT Not After : Apr 30 06:00:00 2025 GMT Subject: CN=9beee5a6-20c8-4971-b178-b16b78e4353b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:39:80:8b:9d:b6:be:00:f8:4c:30:98:48: c7:e0:67:98:e9:f3:d1:8b:88:06:02:e9:02:f8:2e: f6:9f:f3:17:05:19:80:49:ae:08:03:6d:54:41:a7: 1f:60:ae:2e:9a:c8:d5:4e:25:de:bb:6b:65:fa:86: c9:4c:8f:9a:2e:c1:da:b9:1e:65:76:f9:78:07:9b: 75:86:6a:78:be:4e:a8:2b:52:ae:3a:c0:ca:55:c5: 3e:e0:3e:dd:9a:93:8d:63:4d:02:8c:dd:e9:cd:70: 0c:c2:e3:2b:75:a0:1a:57:9c:66:20:97:b2:d1:9d: c7:81:7d:ed:06:98:34:2f:72:e9:88:a6:39:02:7c: 4f:b3:57:e7:2c:d9:25:cb:9a:f7:52:83:35:ef:fd: 3f:ed:1c:9a:ee:fd:01:c8:a3:50:4a:8d:e5:35:ff: 07:9c:bb:78:c6:62:14:3e:9d:97:77:43:e3:97:e7: 94:9a:7d:55:76:16:f4:69:cc:cc:85:46:be:8a:c5: c8:93:d9:04:b3:ac:f0:24:51:4f:50:a8:e0:f4:c8: 95:70:5b:1f:94:a2:61:50:78:cc:dc:17:c8:f6:c4: f2:12:c2:88:dd:c1:1f:63:7a:ec:11:09:d8:1f:b4: f2:07:0e:3f:4b:6f:88:70:b3:d3:bd:97:05:b7:06: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D5:98:39:4C:E5:C1:EC:1E:5A:3C:50:04:DC:3D:AF:4D:0C:A2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d/4e393a43-f67b-4eae-87ba-065de2fc159d.crl X509v3 Authority Key Identifier: keyid:15:95:98:E5:49:A3:D6:8F:5C:57:47:01:92:DD:BA:96:7C:1A:B7:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e393a43-f67b-4eae-87ba-065de2fc159d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:74:ac:c3:3d:af:1a:67:87:b9:7f:44:9d:33:5b:b2:25:b9: ca:1c:ab:67:8a:d9:29:3d:a8:51:99:c3:e1:ca:d7:6a:e3:2a: af:0d:4a:5e:9a:c9:61:ca:61:a0:af:8b:ec:30:c9:bf:46:31: 5f:85:7d:5f:8d:c5:42:f2:f1:0a:c0:20:4c:4a:d0:1c:cd:dd: 10:51:d0:70:0f:3a:ae:a6:3b:c6:8f:bf:cc:47:3d:23:58:fc: a3:28:26:4c:93:af:36:84:3c:0c:fc:62:88:c5:b5:3d:62:9f: a0:39:f9:fa:a0:9b:b5:53:7a:9d:7e:ea:9e:62:80:29:f5:b9: 5f:45:b7:3e:5a:83:c9:2b:72:cd:ce:b1:da:6b:cd:da:82:1a: f8:33:e7:a5:0a:4a:c8:5a:51:73:a6:61:46:6f:fc:4d:f3:b6: 38:c6:fb:4b:ea:53:34:e9:cd:77:39:c8:51:73:bc:44:a7:7d: b0:e8:0c:9a:3b:8f:dc:ee:70:51:a1:7e:26:7f:e7:3e:a0:54: 4e:ca:cc:c0:81:94:a2:aa:4d:20:f0:c0:75:f0:09:9a:6e:f3: 6a:ca:e3:4d:e4:70:17:39:b4:70:68:d3:19:14:82:5b:2e:c8: 05:95:38:6f:37:89:5f:52:9d:48:00:c7:bd:92:29:b4:3b:29: 1d:d3:f0:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmsSRGIlCRXCrGYFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUzOTNhNDMtZjY3Yi00ZWFlLTg3YmEtMDY1ZGUyZmMx NTlkMB4XDTI1MDQyODA2MDAwM1oXDTI1MDQzMDA2MDAwMFowLzEtMCsGA1UEAxMk OWJlZWU1YTYtMjBjOC00OTcxLWIxNzgtYjE2Yjc4ZTQzNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimE5gIudtr4A+EwwmEjH4GeY6fPRi4gGAukC +C72n/MXBRmASa4IA21UQacfYK4umsjVTiXeu2tl+obJTI+aLsHauR5ldvl4B5t1 hmp4vk6oK1KuOsDKVcU+4D7dmpONY00CjN3pzXAMwuMrdaAaV5xmIJey0Z3HgX3t Bpg0L3LpiKY5AnxPs1fnLNkly5r3UoM17/0/7Rya7v0ByKNQSo3lNf8HnLt4xmIU Pp2Xd0Pjl+eUmn1Vdhb0aczMhUa+isXIk9kEs6zwJFFPUKjg9MiVcFsflKJhUHjM 3BfI9sTyEsKI3cEfY3rsEQnYH7TyBw4/S2+IcLPTvZcFtwbMAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIDVmDlM5cHsHlo8UATcPa9NDKLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTM5 M2E0My1mNjdiLTRlYWUtODdiYS0wNjVkZTJmYzE1OWQvNGUzOTNhNDMtZjY3Yi00 ZWFlLTg3YmEtMDY1ZGUyZmMxNTlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUzOTNhNDMtZjY3Yi00ZWFlLTg3 YmEtMDY1ZGUyZmMxNTlkLzRlMzkzYTQzLWY2N2ItNGVhZS04N2JhLTA2NWRlMmZj MTU5ZC5jcmwwHwYDVR0jBBgwFoAUFZWY5Umj1o9cV0cBkt26lnwatwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTM5M2E0My1mNjdiLTRlYWUtODdiYS0wNjVk ZTJmYzE1OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzdKzDPa8aZ4e5f0SdM1uy JbnKHKtnitkpPahRmcPhytdq4yqvDUpemslhymGgr4vsMMm/RjFfhX1fjcVC8vEK wCBMStAczd0QUdBwDzqupjvGj7/MRz0jWPyjKCZMk682hDwM/GKIxbU9Yp+gOfn6 oJu1U3qdfuqeYoAp9blfRbc+WoPJK3LNzrHaa83aghr4M+elCkrIWlFzpmFGb/xN 87Y4xvtL6lM06c13OchRc7xEp32w6AyaO4/c7nBRoX4mf+c+oFROyszAgZSiqk0g 8MB18AmabvNqyuNN5HAXObRwaNMZFIJbLsgFlThvN4lfUp1IAMe9kim0Oykd0/Cc -----END CERTIFICATE-----Generated at Mon Apr 28 16:31:29 2025 by rpki-client