$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft File: cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft (raw, json) Hash identifier: FHpIzBJZuy0pFsCh9QrENLMvkub8rfXFSinoJ2hP8uQ= Subject key identifier: CC:4A:90:01:D6:79:0D:B4:42:93:34:B5:07:05:BF:A3:E5:F7:8D:A1 Authority key identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 Certificate issuer: /CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef Certificate serial: 010D0C9F43285849AAA8380ED7886B7E33E390C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft Manifest number: 010D0C9F4328584073A81A706B18454F6000BD61 Signing time: Sun 27 Apr 2025 16:00:07 +0000 Manifest this update: Sun 27 Apr 2025 16:00:07 +0000 Manifest next update: Tue 29 Apr 2025 16:00:00 +0000 Files and hashes: 1: 69d41eb5-ba8e-3a7d-8c7c-019c2a156f54.roa (hash: Bc+8vMBAbh4DAEb2UibuyvJyqtt4F7+xd8PHeCiKRM0=) 2: cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl (hash: U08OGiLyqhU8o0xDtOTS3pkvFKkxaJG9AIyMF8Eu0Kg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:a8:38:0e:d7:88:6b:7e:33:e3:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef Validity Not Before: Apr 27 16:00:07 2025 GMT Not After : Apr 29 16:00:00 2025 GMT Subject: CN=a45ceeb3-4f15-4ad9-8cad-e40fe859baaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:d3:da:35:a0:8f:ca:3b:45:1f:59:fa:76: 87:37:18:5a:9a:6c:20:b3:ba:76:1d:55:bb:18:cc: e1:1d:f9:55:7f:4a:df:69:f3:7b:d5:96:03:b1:0f: 36:aa:37:56:34:2a:5a:0a:16:fb:4a:e9:21:7b:98: 47:af:90:dc:74:ad:bd:b1:b8:ac:01:19:30:33:55: ac:33:ba:5b:e5:c6:ee:5c:55:63:02:1a:63:1f:0e: 1d:24:53:27:3a:01:3d:21:2e:62:9d:66:58:34:d0: 49:68:dc:77:a7:12:5f:8f:4c:ea:2f:08:2f:7d:2c: 51:f0:76:f8:15:c9:77:b8:71:80:f9:09:bc:20:07: b3:54:2b:69:55:3c:9e:56:3d:1a:18:cf:40:b9:53: 86:d5:40:8b:15:7b:3f:51:8e:fe:5c:68:16:42:5e: aa:81:16:0e:c1:cd:38:d9:93:cd:6e:49:c5:f4:17: d2:4c:99:c0:4f:1c:27:9c:83:9f:e9:92:63:ae:6f: 85:80:87:ad:20:66:85:4d:a0:66:5b:43:3c:25:0c: ac:07:33:86:72:47:60:14:c4:f8:06:24:97:94:ec: f8:84:a9:af:0e:23:1f:c8:b5:b9:03:a0:6f:dc:82: be:c9:50:80:80:f9:70:ed:c1:64:15:17:66:dd:e0: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4A:90:01:D6:79:0D:B4:42:93:34:B5:07:05:BF:A3:E5:F7:8D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.crl X509v3 Authority Key Identifier: keyid:A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a4:a8:66:06:0a:af:bb:f8:64:72:31:c2:52:c7:17:23:58: f5:e0:d2:00:be:88:6b:df:39:a6:3b:73:b5:66:4c:40:d9:26: 5a:2c:08:bb:3c:be:00:72:6c:d0:13:29:1a:aa:f9:0d:b0:70: 94:b8:6b:34:2d:3e:ae:be:cc:86:66:17:14:59:e9:c5:b6:53: 1a:21:ec:f1:6e:db:0c:db:f1:a7:aa:fd:80:3f:7b:08:59:dd: 33:9b:e2:58:3c:86:6e:ff:e5:da:9c:72:f6:c4:94:f6:9c:f7: 2a:54:a4:28:f5:55:e9:d8:98:b9:80:c5:23:d0:cb:c7:48:78: 50:3e:9b:61:f2:d6:b0:68:d3:0a:79:32:b5:d7:43:be:ae:0e: 62:6e:12:71:dd:67:14:49:82:cd:39:1a:e1:4a:cc:6b:a2:f9: 78:a8:0c:89:4d:9e:3c:d9:7a:29:c2:2c:12:b7:90:ec:61:50: 43:7c:a7:13:69:48:66:e3:d6:6d:cf:3d:d3:10:d7:9e:54:6c: 74:da:24:7e:69:5b:27:83:06:63:e6:3e:61:ee:f3:88:b4:76: 9f:27:95:34:bf:89:ce:d8:b3:2f:69:8f:c9:4d:a8:66:11:d5: df:a3:38:2f:36:9b:78:34:46:17:9f:47:ec:44:c6:8b:ee:56: 0b:48:89:45 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqqDgO14hrfjPjkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JkN2QyOWItMmM4NS00YWJmLWE0ZDYtNjc5NzhkN2Fl N2VmMB4XDTI1MDQyNzE2MDAwN1oXDTI1MDQyOTE2MDAwMFowLzEtMCsGA1UEAxMk YTQ1Y2VlYjMtNGYxNS00YWQ5LThjYWQtZTQwZmU4NTliYWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvrT2jWgj8o7RR9Z+naHNxhammwgs7p2HVW7 GMzhHflVf0rfafN71ZYDsQ82qjdWNCpaChb7Sukhe5hHr5DcdK29sbisARkwM1Ws M7pb5cbuXFVjAhpjHw4dJFMnOgE9IS5inWZYNNBJaNx3pxJfj0zqLwgvfSxR8Hb4 Fcl3uHGA+Qm8IAezVCtpVTyeVj0aGM9AuVOG1UCLFXs/UY7+XGgWQl6qgRYOwc04 2ZPNbknF9BfSTJnATxwnnIOf6ZJjrm+FgIetIGaFTaBmW0M8JQysBzOGckdgFMT4 BiSXlOz4hKmvDiMfyLW5A6Bv3IK+yVCAgPlw7cFkFRdm3eBuVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMxKkAHWeQ20QpM0tQcFv6Pl942hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYmQ3 ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3OGQ3YWU3ZWYvY2JkN2QyOWItMmM4NS00 YWJmLWE0ZDYtNjc5NzhkN2FlN2VmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2JkN2QyOWItMmM4NS00YWJmLWE0 ZDYtNjc5NzhkN2FlN2VmL2NiZDdkMjliLTJjODUtNGFiZi1hNGQ2LTY3OTc4ZDdh ZTdlZi5jcmwwHwYDVR0jBBgwFoAUoofnutw7Os0hMd1MOdSNzf6mOqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYmQ3ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3 OGQ3YWU3ZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVpKhmBgqvu/hkcjHCUscX I1j14NIAvohr3zmmO3O1ZkxA2SZaLAi7PL4AcmzQEykaqvkNsHCUuGs0LT6uvsyG ZhcUWenFtlMaIezxbtsM2/Gnqv2AP3sIWd0zm+JYPIZu/+XanHL2xJT2nPcqVKQo 9VXp2Ji5gMUj0MvHSHhQPpth8tawaNMKeTK110O+rg5ibhJx3WcUSYLNORrhSsxr ovl4qAyJTZ482XopwiwSt5DsYVBDfKcTaUhm49Ztzz3TENeeVGx02iR+aVsngwZj 5j5h7vOItHafJ5U0v4nO2LMvaY/JTahmEdXfozgvNpt4NEYXn0fsRMaL7lYLSIlF -----END CERTIFICATE-----Generated at Mon Apr 28 00:58:35 2025 by rpki-client