$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: ngBZSEB+R8LS4cTLW+Yt/OC/fMr4ISeDasb28kJO3MU= Subject key identifier: 2C:ED:48:72:97:B0:8E:9A:28:A7:BD:F7:CC:DB:7B:55:A2:2A:EC:B0 Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F43285849AEBA6C3F3E3D4CEDE98F41A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924A62 Signing time: Tue 29 Apr 2025 03:00:03 +0000 Manifest this update: Tue 29 Apr 2025 03:00:03 +0000 Manifest next update: Fri 02 May 2025 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: m9a4Kp9YLCVIeu16chp5tCcNvtaoQowxXg5Spcbd5Go=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: 1wURzl9o9lJTH8xSIgpOiRwHB8rjtXNXe2upUhoHqPQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:ba:6c:3f:3e:3d:4c:ed:e9:8f:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Apr 29 03:00:03 2025 GMT Not After : May 2 03:00:00 2025 GMT Subject: CN=fffa2e40-7148-465f-bfe0-73c4957d9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:98:d1:e1:3b:82:08:59:31:be:a8:68:8b: 47:f7:2e:2e:f5:83:c2:5e:14:b9:4d:bf:f9:c8:e2: 5b:3c:ce:5b:b7:c6:bc:e9:26:00:38:69:8e:0c:69: 47:f2:96:03:a0:25:d8:d5:2b:aa:87:13:ae:70:8b: 87:7a:2b:34:e5:5e:06:31:50:0c:af:8c:d6:88:80: 9b:f3:de:a4:97:38:8a:47:fa:a9:3d:9e:13:4b:d4: fa:fb:bd:b3:7d:a6:58:53:ca:91:bc:4e:e7:1c:e7: 0f:34:69:7b:ee:9b:18:00:b2:bf:02:f4:f5:0f:52: 50:ec:f2:2f:4d:8f:f7:0b:1b:42:6b:e8:3c:4c:1f: 2f:86:b5:52:73:56:9b:2e:33:9e:aa:96:d5:f4:8c: c9:40:4b:c4:c9:32:0e:bb:9e:58:31:46:87:48:76: c1:05:06:2e:03:34:3f:ea:5d:63:fe:53:82:42:3e: de:f3:48:d8:fd:f3:98:6b:cf:fe:99:8f:be:22:2b: 21:a8:2c:28:3f:26:7a:08:d7:93:69:13:4c:49:c2: f1:63:ae:dd:85:52:e9:a3:7c:dc:df:b8:8d:ac:5c: 06:28:ba:82:26:eb:6d:6b:66:c0:6c:a9:9e:32:e9: 9f:51:d3:d5:07:91:37:68:c6:46:ea:00:ad:5c:43: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:ED:48:72:97:B0:8E:9A:28:A7:BD:F7:CC:DB:7B:55:A2:2A:EC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2b:aa:b3:52:9b:d6:0b:fd:c3:21:ab:e5:1c:40:ba:ef:fb: 01:d7:93:7e:29:a9:15:30:ec:85:d8:13:43:cf:58:81:89:7b: 2e:a8:86:d3:7a:34:db:3f:be:51:5d:38:f7:66:80:90:fa:d9: 8d:bc:2e:4c:f5:42:04:ce:05:f9:4d:22:c8:aa:24:e2:de:a0: 48:ec:09:ab:12:e1:d7:83:8c:ae:c6:67:42:b8:ee:d9:0a:da: 5d:2f:53:4b:60:a5:f6:be:95:07:0b:11:2a:51:93:21:0e:6e: 60:cd:85:7f:d6:c0:b2:82:11:ae:b7:79:d1:e8:81:73:64:80: 7f:45:c1:ed:5f:32:02:15:3f:46:8e:7e:e1:de:81:17:2d:2f: b9:72:38:7f:52:49:aa:ee:7f:6f:0b:bd:31:95:2d:11:8c:6e: 92:cd:10:ff:07:d1:b6:7b:d1:32:e7:66:76:19:9c:06:8c:71: b3:45:d4:12:a2:33:18:07:95:05:cd:ee:88:48:b0:5c:ce:db: 4b:8a:59:f8:1b:60:31:f0:1a:97:72:c8:24:24:c0:39:2e:88: 2f:de:cf:cc:6a:70:c4:74:fb:43:84:66:fa:09:0e:53:9b:09: 99:22:20:1a:b9:b4:4a:cd:f6:31:f2:c6:94:35:d8:6b:bc:d4: ce:67:2f:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuumw/Pj1M7emPQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI1MDQyOTAzMDAwM1oXDTI1MDUwMjAzMDAwMFowLzEtMCsGA1UEAxMk ZmZmYTJlNDAtNzE0OC00NjVmLWJmZTAtNzNjNDk1N2Q5NTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUiY0eE7gghZMb6oaItH9y4u9YPCXhS5Tb/5 yOJbPM5bt8a86SYAOGmODGlH8pYDoCXY1SuqhxOucIuHeis05V4GMVAMr4zWiICb 896klziKR/qpPZ4TS9T6+72zfaZYU8qRvE7nHOcPNGl77psYALK/AvT1D1JQ7PIv TY/3CxtCa+g8TB8vhrVSc1abLjOeqpbV9IzJQEvEyTIOu55YMUaHSHbBBQYuAzQ/ 6l1j/lOCQj7e80jY/fOYa8/+mY++IishqCwoPyZ6CNeTaRNMScLxY67dhVLpo3zc 37iNrFwGKLqCJutta2bAbKmeMumfUdPVB5E3aMZG6gCtXEPGjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCztSHKXsI6aKKe998zbe1WiKuywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACK6qzUpvWC/3DIavlHEC6 7/sB15N+KakVMOyF2BNDz1iBiXsuqIbTejTbP75RXTj3ZoCQ+tmNvC5M9UIEzgX5 TSLIqiTi3qBI7AmrEuHXg4yuxmdCuO7ZCtpdL1NLYKX2vpUHCxEqUZMhDm5gzYV/ 1sCyghGut3nR6IFzZIB/RcHtXzICFT9Gjn7h3oEXLS+5cjh/Ukmq7n9vC70xlS0R jG6SzRD/B9G2e9Ey52Z2GZwGjHGzRdQSojMYB5UFze6ISLBczttLiln4G2Ax8BqX csgkJMA5Logv3s/ManDEdPtDhGb6CQ5TmwmZIiAaubRKzfYx8saUNdhrvNTOZy+2 -----END CERTIFICATE-----Generated at Wed Apr 30 00:05:43 2025 by rpki-client