$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: 6CjZtX+6fJJbi1cRYp4E9Dd5Z/1z0CgnKfpKqEnHhMw= Subject key identifier: 81:C4:29:C1:03:0B:5E:A9:5D:CA:63:37:9E:7A:B6:43:39:4B:8D:BA Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F43285849AC84ACDC973831BB67788900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D731 Signing time: Mon 28 Apr 2025 08:00:08 +0000 Manifest this update: Mon 28 Apr 2025 08:00:08 +0000 Manifest next update: Wed 30 Apr 2025 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: vEk5sE1OZpBPjGmS2PpEP7w4AVmAqTojmgRyAX3bEFQ=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: lAteC2hc3/SjnRw3MwaJJcysC38Yh0BCydJ26/n8Su0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:84:ac:dc:97:38:31:bb:67:78:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: Apr 28 08:00:08 2025 GMT Not After : Apr 30 08:00:00 2025 GMT Subject: CN=4ed28098-a9d1-4cad-9992-646650d40a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:01:ff:83:8d:8b:bf:1a:f5:f1:e7:ca:4c: 03:37:70:79:92:25:74:76:90:e5:98:e5:1e:08:a5: 1d:5c:c5:1f:61:f0:44:3b:8f:74:53:f4:cf:b5:8d: cb:a4:a5:52:dd:81:5b:36:fe:a7:a0:72:0e:bb:72: ba:7e:97:b6:c0:42:c2:2d:96:fa:81:36:9a:42:dd: 7d:a8:6b:12:fe:17:c6:0f:d4:66:d0:56:61:51:78: 76:e1:ec:70:93:8a:fa:0a:9a:73:a8:72:cf:9f:dc: a5:d9:d0:ca:47:d6:9c:62:dd:ef:94:ee:2d:0d:b2: 98:61:07:2e:b0:89:40:10:84:9e:4a:d5:04:58:fd: 50:98:3b:70:b2:e1:54:14:f6:fc:04:ee:22:1c:ee: c6:b8:07:54:c4:51:b3:a7:44:86:27:b3:62:38:18: 69:16:20:58:b9:09:49:08:69:fe:19:55:ad:ee:27: 83:aa:16:ab:94:b8:18:da:f2:36:ac:95:1d:18:46: 0a:c4:6d:2c:4e:a2:e3:5b:85:83:4c:24:53:17:35: 6f:56:cd:d8:09:0a:af:6b:54:8b:bc:8d:61:e6:3d: 08:a8:a2:6b:39:a5:42:15:32:39:91:54:be:81:9a: 82:70:fa:40:63:24:20:6b:cd:d0:f4:ef:05:7d:83: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C4:29:C1:03:0B:5E:A9:5D:CA:63:37:9E:7A:B6:43:39:4B:8D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:98:f4:8c:c0:80:84:0b:22:cc:4b:60:ad:91:13:f7:d3:78: f6:56:e7:38:93:51:7a:a2:ff:2d:90:b0:a0:da:12:02:37:49: 08:4d:1a:dc:31:39:35:d1:31:16:98:9b:32:4c:bd:62:ec:c6: c7:48:da:35:2e:50:0b:de:90:17:60:3a:d3:a0:3e:4d:c6:11: f6:5f:51:b0:74:a9:28:93:be:ce:38:20:3c:71:2c:d0:f1:31: 35:5f:29:09:b8:6e:51:9e:45:a5:e9:99:b2:07:ae:b4:c4:8e: c3:ea:f2:e2:1b:fb:68:25:c5:a7:ab:b9:31:04:c3:35:94:2b: c9:af:42:ed:b8:01:4a:af:46:c8:ce:60:ad:82:17:3a:4a:ef: 3e:6e:19:d6:9b:2e:26:e9:5e:1b:c6:23:df:29:a3:2f:4a:16: 10:1c:f7:8c:01:22:ca:99:7c:4d:63:f9:82:79:75:61:9e:a4: d5:52:8a:38:f8:cc:7e:43:e6:6f:e2:05:fe:2e:6a:aa:d9:b5: 4d:f5:c6:6e:9e:6f:1a:76:62:6a:40:48:c2:a8:17:a7:7d:9c: 22:12:59:61:dd:60:89:34:60:09:57:5e:94:7d:f1:5c:e6:04: 7a:99:e3:b5:d3:84:8c:53:7f:7d:c6:e0:d9:42:d6:d3:53:a4: ff:a4:9c:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmshKzclzgxu2d4iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI1MDQyODA4MDAwOFoXDTI1MDQzMDA4MDAwMFowLzEtMCsGA1UEAxMk NGVkMjgwOTgtYTlkMS00Y2FkLTk5OTItNjQ2NjUwZDQwYTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BIB/4ONi78a9fHnykwDN3B5kiV0dpDlmOUe CKUdXMUfYfBEO490U/TPtY3LpKVS3YFbNv6noHIOu3K6fpe2wELCLZb6gTaaQt19 qGsS/hfGD9Rm0FZhUXh24exwk4r6CppzqHLPn9yl2dDKR9acYt3vlO4tDbKYYQcu sIlAEISeStUEWP1QmDtwsuFUFPb8BO4iHO7GuAdUxFGzp0SGJ7NiOBhpFiBYuQlJ CGn+GVWt7ieDqharlLgY2vI2rJUdGEYKxG0sTqLjW4WDTCRTFzVvVs3YCQqva1SL vI1h5j0IqKJrOaVCFTI5kVS+gZqCcPpAYyQga83Q9O8FfYOSwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIHEKcEDC16pXcpjN556tkM5S426MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjmPSMwICECyLMS2CtkRP3 03j2Vuc4k1F6ov8tkLCg2hICN0kITRrcMTk10TEWmJsyTL1i7MbHSNo1LlAL3pAX YDrToD5NxhH2X1GwdKkok77OOCA8cSzQ8TE1XykJuG5RnkWl6ZmyB660xI7D6vLi G/toJcWnq7kxBMM1lCvJr0LtuAFKr0bIzmCtghc6Su8+bhnWmy4m6V4bxiPfKaMv ShYQHPeMASLKmXxNY/mCeXVhnqTVUoo4+Mx+Q+Zv4gX+Lmqq2bVN9cZunm8admJq QEjCqBenfZwiEllh3WCJNGAJV16UffFc5gR6meO104SMU399xuDZQtbTU6T/pJzL -----END CERTIFICATE-----Generated at Tue Apr 29 00:54:19 2025 by rpki-client