$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft File: a202cda7-435d-4f90-a518-9afdbac20cab.mft (raw, json) Hash identifier: WLoH53x72ILe+3ZnUPt+FH16aOGpfX7Dv1bVSpwfSH0= Subject key identifier: 4F:46:DC:F6:19:55:66:27:88:57:41:D5:60:DC:2A:E9:7D:63:16:9A Authority key identifier: 55:8B:D5:19:57:B0:AC:92:95:64:00:D1:F4:57:E2:E5:AD:33:4A:02 Certificate issuer: /CN=a202cda7-435d-4f90-a518-9afdbac20cab Certificate serial: 010D0C9F43285849AA1351FA8DB5B7E5D1842140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft Manifest number: 010D0C9F4328584073A84EA783950F6AAC2F6D3D Signing time: Sun 27 Apr 2025 11:00:07 +0000 Manifest this update: Sun 27 Apr 2025 11:00:07 +0000 Manifest next update: Wed 30 Apr 2025 11:00:00 +0000 Files and hashes: 1: 1e55a371-cc42-38c4-96c5-492eca076568.roa (hash: 3t9M2adSJ/D2E9Xu0G1DkZZbdOxLs13I/E+Qo7VY7SA=) 2: a202cda7-435d-4f90-a518-9afdbac20cab.crl (hash: Gdq+4FRoEBp/izBj6fZWatF+HfFnR7nBGdyIZao7SxM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:13:51:fa:8d:b5:b7:e5:d1:84:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a202cda7-435d-4f90-a518-9afdbac20cab Validity Not Before: Apr 27 11:00:07 2025 GMT Not After : Apr 30 11:00:00 2025 GMT Subject: CN=cbf3edcc-a8ff-4b7b-820c-68a90a685e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:65:9d:3d:53:a2:a3:0e:5a:dc:05:a1:33:c9: 97:42:55:bd:54:71:5a:72:62:83:3d:17:c3:34:24: 0f:1a:95:8b:50:01:4d:ce:14:bb:40:8d:6c:b5:aa: ef:7e:bc:88:3b:eb:f9:48:59:c5:3d:b5:fa:45:7a: 3f:10:47:87:8a:4d:19:94:8d:87:48:65:46:52:4c: 96:78:7c:0f:a6:db:9b:65:c9:da:17:5a:0b:70:60: 4e:5d:00:99:3c:e7:dc:f3:bc:96:89:8d:d6:2d:73: aa:bc:95:3a:eb:8a:00:65:01:1e:60:bb:37:61:fe: 72:05:7a:14:82:6d:b6:72:31:4e:06:b3:1d:10:86: 00:8c:0e:3d:cf:f2:1e:8f:f3:26:f1:7c:07:71:81: f0:ec:09:50:95:d0:ab:f6:6a:cb:b4:3d:da:42:ef: ce:d7:37:0b:38:8d:93:ee:14:52:ab:43:2f:99:c1: 69:8d:c3:a3:ab:e9:73:27:48:ee:18:47:e9:b7:ff: 13:c3:10:7a:a1:c0:93:4c:d6:7d:af:0c:4e:1a:a9: bb:7b:00:fb:e9:32:3f:e8:50:ec:06:fc:11:51:0f: 40:9f:e5:57:41:50:19:fc:ed:0d:3c:eb:8f:d8:14: 01:e1:6b:b6:d9:94:02:a0:68:29:97:06:d0:8e:1d: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:DC:F6:19:55:66:27:88:57:41:D5:60:DC:2A:E9:7D:63:16:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab/a202cda7-435d-4f90-a518-9afdbac20cab.crl X509v3 Authority Key Identifier: keyid:55:8B:D5:19:57:B0:AC:92:95:64:00:D1:F4:57:E2:E5:AD:33:4A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a202cda7-435d-4f90-a518-9afdbac20cab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1f:1d:eb:83:21:25:bd:0a:a8:30:11:52:66:56:fd:08:d9: 76:1a:f4:0f:0d:f9:03:72:84:78:6c:6c:41:64:ed:f3:c0:4f: 92:b3:62:b6:77:11:3d:ee:d9:6e:7b:47:4b:0d:75:55:54:f6: 48:d1:ad:48:49:ff:e6:d6:49:80:8c:57:0e:78:38:09:fc:52: d6:f7:3e:f0:da:5e:5d:29:12:14:6c:c1:61:04:cb:30:00:4e: 53:58:da:ed:5c:f1:91:65:46:fc:60:a9:a9:a3:be:14:b4:59: 30:89:f4:c4:f7:ac:d5:2e:79:d0:cf:78:b5:89:82:89:76:bb: 60:3d:c3:7e:97:df:db:b1:93:71:05:f5:7c:6d:bf:40:d3:b2: 81:52:b4:25:b0:6b:47:ab:53:26:9a:a2:c3:16:ab:09:05:15: e5:c4:07:3f:99:59:9e:50:e5:73:d5:8a:1a:cf:50:00:62:03: 10:13:20:61:f8:1b:83:ab:d8:97:a8:a5:49:06:3a:bb:0a:7b: 95:ed:b4:5f:cd:31:ae:07:d2:03:cb:19:da:b4:78:be:b0:26: ca:53:bd:db:83:8d:77:05:76:5b:4a:49:dc:9d:57:f4:4a:c0: e9:6e:86:03:10:19:61:2c:82:3c:62:10:63:f7:af:8d:de:d3: 03:25:83:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqE1H6jbW35dGEIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMmNkYTctNDM1ZC00ZjkwLWE1MTgtOWFmZGJhYzIw Y2FiMB4XDTI1MDQyNzExMDAwN1oXDTI1MDQzMDExMDAwMFowLzEtMCsGA1UEAxMk Y2JmM2VkY2MtYThmZi00YjdiLTgyMGMtNjhhOTBhNjg1ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92WdPVOiow5a3AWhM8mXQlW9VHFacmKDPRfD NCQPGpWLUAFNzhS7QI1starvfryIO+v5SFnFPbX6RXo/EEeHik0ZlI2HSGVGUkyW eHwPptubZcnaF1oLcGBOXQCZPOfc87yWiY3WLXOqvJU664oAZQEeYLs3Yf5yBXoU gm22cjFOBrMdEIYAjA49z/Iej/Mm8XwHcYHw7AlQldCr9mrLtD3aQu/O1zcLOI2T 7hRSq0MvmcFpjcOjq+lzJ0juGEfpt/8TwxB6ocCTTNZ9rwxOGqm7ewD76TI/6FDs BvwRUQ9An+VXQVAZ/O0NPOuP2BQB4Wu22ZQCoGgplwbQjh2yYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE9G3PYZVWYniFdB1WDcKul9YxaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAy Y2RhNy00MzVkLTRmOTAtYTUxOC05YWZkYmFjMjBjYWIvYTIwMmNkYTctNDM1ZC00 ZjkwLWE1MTgtOWFmZGJhYzIwY2FiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMmNkYTctNDM1ZC00ZjkwLWE1 MTgtOWFmZGJhYzIwY2FiL2EyMDJjZGE3LTQzNWQtNGY5MC1hNTE4LTlhZmRiYWMy MGNhYi5jcmwwHwYDVR0jBBgwFoAUVYvVGVewrJKVZADR9Ffi5a0zSgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAyY2RhNy00MzVkLTRmOTAtYTUxOC05YWZk YmFjMjBjYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfHx3rgyElvQqoMBFSZlb9 CNl2GvQPDfkDcoR4bGxBZO3zwE+Ss2K2dxE97tlue0dLDXVVVPZI0a1ISf/m1kmA jFcOeDgJ/FLW9z7w2l5dKRIUbMFhBMswAE5TWNrtXPGRZUb8YKmpo74UtFkwifTE 96zVLnnQz3i1iYKJdrtgPcN+l9/bsZNxBfV8bb9A07KBUrQlsGtHq1MmmqLDFqsJ BRXlxAc/mVmeUOVz1Yoaz1AAYgMQEyBh+BuDq9iXqKVJBjq7CnuV7bRfzTGuB9ID yxnatHi+sCbKU73bg413BXZbSkncnVf0SsDpboYDEBlhLII8YhBj96+N3tMDJYNE -----END CERTIFICATE-----Generated at Mon Apr 28 08:33:09 2025 by rpki-client