$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft (raw, json) Hash identifier: 2b+jJ3AAxmd4lW6Cjebh/JfQHNUoEnk3lFCz4ue4O7Y= Subject key identifier: E5:71:28:DD:6D:7B:B3:38:4A:47:D0:D4:1E:D3:B4:CA:62:3F:42:88 Authority key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Certificate issuer: /CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Certificate serial: 010D0C9F43285849ABD2FF69139AAA4348C83E68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft Manifest number: 010D0C9F4328584073A83645CACD5CF3732BE8E1 Signing time: Mon 28 Apr 2025 02:02:07 +0000 Manifest this update: Mon 28 Apr 2025 02:02:07 +0000 Manifest next update: Wed 30 Apr 2025 02:00:00 +0000 Files and hashes: 1: 0df970dd-1000-33b2-94cf-be4c8681560d.roa (hash: pDUbbWdeol/etsC/BFFPZiMwC4HNz5bob7chRP4Pfug=) 2: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl (hash: LqLGc1uCtFO9qkLGh9W59JKu5OOT8BXBo/imgt/mx+0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:d2:ff:69:13:9a:aa:43:48:c8:3e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Validity Not Before: Apr 28 02:02:07 2025 GMT Not After : Apr 30 02:00:00 2025 GMT Subject: CN=d79ba991-a1bf-4a1f-9a9e-7b58f3125ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:52:8f:08:e9:f6:82:01:32:e8:92:7b:c7: 74:54:b7:16:aa:01:2e:48:91:f8:b4:e9:72:27:fa: e0:95:23:2a:40:b1:5e:39:83:32:4b:0a:79:b3:1c: 81:a1:fd:96:db:27:18:34:16:6d:70:7e:08:a0:fc: 43:ad:f3:23:77:ea:56:41:41:98:c6:dc:05:3d:c4: 4e:2b:77:79:1c:6b:b4:bc:0e:1c:a0:a1:d7:19:eb: 19:c4:6f:df:1a:31:dc:e7:20:31:4b:c6:13:42:4a: 24:b8:9a:ac:77:6f:09:17:3a:e9:7f:94:d1:e1:b1: 98:74:5d:bf:b8:9a:db:17:7b:3f:4c:63:8b:f8:e4: 32:9d:5c:a6:68:48:b0:14:62:d8:19:5a:c9:5e:de: 23:3d:0a:1b:10:a2:35:5a:61:4c:90:a7:f3:97:ee: 73:de:e0:86:d8:9d:d4:ec:57:11:39:76:24:f2:77: 98:8d:3a:d2:90:d2:66:05:7e:e1:6e:a8:b0:85:c9: 4d:3d:84:a1:71:31:27:25:ec:e9:ba:f7:29:d6:d3: 45:40:03:eb:de:2a:25:e3:f8:a5:ba:62:e3:90:e9: e7:cc:35:96:65:82:05:6a:01:ed:99:bf:f4:40:1a: e2:23:23:10:41:50:8e:50:fb:28:96:41:6e:e5:f6: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:28:DD:6D:7B:B3:38:4A:47:D0:D4:1E:D3:B4:CA:62:3F:42:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.crl X509v3 Authority Key Identifier: keyid:31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ef:69:83:a7:fd:e9:d4:94:5f:73:86:ca:f2:14:4f:f1:f8: da:2b:06:df:97:0f:92:ac:85:6b:7e:b1:5e:55:46:ff:ee:37: c2:11:64:79:49:2c:89:f7:9c:52:82:6e:5e:4d:9c:80:81:82: d7:fa:c5:3d:7b:62:dd:f8:b8:ba:0e:0d:0d:5b:c1:73:aa:0d: db:f2:fa:79:e2:a8:80:19:de:2b:ee:0b:0d:97:4c:19:75:fc: 5e:a2:28:05:84:d5:3a:8a:a2:44:f7:70:65:f0:6e:9c:f0:e9: dc:36:7d:f6:5f:38:e5:71:83:b3:29:81:87:88:e8:a4:6a:55: 27:da:e6:ae:be:37:17:32:ea:ce:5a:6b:52:89:28:50:04:d0: e9:bb:2b:6b:4c:4e:2f:e0:76:fc:21:b1:61:7f:ec:4a:5e:90: eb:85:dc:ab:8e:00:aa:50:98:14:90:2e:4a:d4:b7:55:8b:5d: 86:5d:90:28:04:ca:24:bb:9e:0f:d0:24:77:69:7b:a0:54:15: b0:5d:29:4e:86:d8:f4:99:32:26:4a:4f:d7:42:4f:80:71:13: dd:05:12:78:09:eb:a2:f2:7f:90:a8:d6:72:bc:8b:00:06:4e: d8:f4:5a:69:6f:8b:64:0a:18:d8:55:85:24:e9:b0:d2:4b:91: d7:37:9a:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmr0v9pE5qqQ0jIPmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZh N2IxMB4XDTI1MDQyODAyMDIwN1oXDTI1MDQzMDAyMDAwMFowLzEtMCsGA1UEAxMk ZDc5YmE5OTEtYTFiZi00YTFmLTlhOWUtN2I1OGYzMTI1YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZhSjwjp9oIBMuiSe8d0VLcWqgEuSJH4tOly J/rglSMqQLFeOYMySwp5sxyBof2W2ycYNBZtcH4IoPxDrfMjd+pWQUGYxtwFPcRO K3d5HGu0vA4coKHXGesZxG/fGjHc5yAxS8YTQkokuJqsd28JFzrpf5TR4bGYdF2/ uJrbF3s/TGOL+OQynVymaEiwFGLYGVrJXt4jPQobEKI1WmFMkKfzl+5z3uCG2J3U 7FcROXYk8neYjTrSkNJmBX7hbqiwhclNPYShcTEnJezpuvcp1tNFQAPr3iol4/il umLjkOnnzDWWZYIFagHtmb/0QBriIyMQQVCOUPsolkFu5fYugwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOVxKN1te7M4SkfQ1B7TtMpiP0KIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNm M2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvYmFjZjNlM2QtZDJkYy00 ZDFmLTllMDItZTQwN2Q5ZjZhN2IxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFjZjNlM2QtZDJkYy00ZDFmLTll MDItZTQwN2Q5ZjZhN2IxL2JhY2YzZTNkLWQyZGMtNGQxZi05ZTAyLWU0MDdkOWY2 YTdiMS5jcmwwHwYDVR0jBBgwFoAUMZH/v4mUBy3tLa+asZZgXRcOQ9EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3 ZDlmNmE3YjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ72mDp/3p1JRfc4bK8hRP 8fjaKwbflw+SrIVrfrFeVUb/7jfCEWR5SSyJ95xSgm5eTZyAgYLX+sU9e2Ld+Li6 Dg0NW8Fzqg3b8vp54qiAGd4r7gsNl0wZdfxeoigFhNU6iqJE93Bl8G6c8OncNn32 XzjlcYOzKYGHiOikalUn2uauvjcXMurOWmtSiShQBNDpuytrTE4v4Hb8IbFhf+xK XpDrhdyrjgCqUJgUkC5K1LdVi12GXZAoBMoku54P0CR3aXugVBWwXSlOhtj0mTIm Sk/XQk+AcRPdBRJ4Ceui8n+QqNZyvIsABk7Y9Fppb4tkChjYVYUk6bDSS5HXN5ou -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:31 2025 by rpki-client