$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft File: 250ff67c-5904-4655-8b50-832a485ad1b8.mft (raw, json) Hash identifier: cGUMXYjaoeMAFsN5bUayL6YgksAOf5jU5gLn3wwb2r4= Subject key identifier: 53:AC:CB:F3:53:D2:B4:2D:B8:CB:AB:95:97:94:8F:9A:7B:5C:D4:32 Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 Certificate issuer: /CN=250ff67c-5904-4655-8b50-832a485ad1b8 Certificate serial: 010D0C9F43285849AF31889B7EAE13EA884D0700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft Manifest number: 010D0C9F4328584073A84550DC18A073FE698521 Signing time: Tue 29 Apr 2025 07:00:03 +0000 Manifest this update: Tue 29 Apr 2025 07:00:03 +0000 Manifest next update: Fri 02 May 2025 07:00:00 +0000 Files and hashes: 1: 0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa (hash: YK5uUnDq9+uxkgIG+Eq2mnCv4yAhjyJOh0ONqTdF+to=) 2: 250ff67c-5904-4655-8b50-832a485ad1b8.crl (hash: 7g7shWfT+740T7sAotXYJJ6D0tPzisPx5FaShyYmrdM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:31:88:9b:7e:ae:13:ea:88:4d:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8 Validity Not Before: Apr 29 07:00:03 2025 GMT Not After : May 2 07:00:00 2025 GMT Subject: CN=40549410-78d4-4d29-ad84-d01ac1703840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a6:d9:a1:95:87:ca:ca:cb:57:1a:be:e0:f4: 44:2b:96:47:c0:24:65:62:e4:91:e5:b5:c1:d3:43: 7b:20:91:71:18:62:32:47:41:54:d3:93:af:24:55: c4:5b:91:bb:ec:a4:06:a0:2c:be:eb:2d:fa:ce:08: b1:3c:fe:ae:8e:29:10:bf:38:e9:ce:15:93:24:86: ba:10:ef:cf:4f:d5:bd:bc:76:c2:da:79:17:06:60: 9b:41:48:22:d6:6a:09:3c:f9:ae:cd:c7:a0:a0:8d: 5e:ab:d0:b0:2f:d4:5b:6a:33:66:75:58:44:c3:e4: 4c:18:43:92:39:00:79:9e:b0:16:9e:e2:97:c4:a5: 02:8d:1b:c1:8a:b6:8b:bd:4d:30:5f:0c:03:d5:68: 6e:61:42:9c:1b:2d:92:a9:b5:c4:1e:15:25:a2:9d: 96:00:9d:b1:ca:25:f8:49:17:7d:da:14:5c:11:90: 9c:97:8e:f0:57:50:1e:e7:15:7b:51:a0:58:71:f5: 00:81:af:30:a6:0f:52:c3:da:32:15:6e:e9:f0:f3: c1:e4:58:91:2b:db:ea:46:6a:db:e9:2c:5d:fb:d8: df:03:1d:76:3b:43:c4:0a:59:9b:2e:04:26:c5:a8: 48:43:0e:9a:39:59:c6:d8:16:23:a6:47:04:03:10: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AC:CB:F3:53:D2:B4:2D:B8:CB:AB:95:97:94:8F:9A:7B:5C:D4:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl X509v3 Authority Key Identifier: keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e3:51:f7:31:5a:3f:4a:e4:91:24:fd:eb:99:d8:92:f4:e4: 94:b4:f7:5b:f2:96:45:27:c4:f1:92:85:81:8f:c0:7d:88:7f: b2:c3:90:02:9b:47:f6:05:ba:1f:a0:9f:96:66:8e:a0:7a:82: c6:96:8a:26:19:61:5c:46:93:3d:ea:d6:93:d9:67:d1:ba:c3: 25:38:b8:f2:b6:b4:3f:e6:75:b4:41:c5:a3:dd:86:9b:38:27: 50:4f:74:a3:cc:33:7e:42:3b:03:d0:80:1a:ef:f5:cd:01:e0: 15:42:9c:73:7a:52:55:d3:7b:06:a5:9b:23:50:e2:52:24:3f: 50:00:0d:c7:03:d6:15:cc:36:49:3b:cb:2b:43:63:8b:d8:a3: 64:aa:af:8f:7d:3b:4a:c5:cd:18:4c:08:0e:e6:82:99:d2:3f: 00:97:ed:c2:c7:4a:3b:2e:c2:fe:cd:3c:3f:39:71:cd:20:a0: dd:bf:43:59:0d:8d:d3:41:92:db:d6:a2:a7:4f:42:f0:fb:20: 69:63:e9:76:b0:3a:71:a4:9c:af:f9:74:03:67:f4:90:da:13: 76:bb:82:6d:be:9c:f5:54:fe:e7:7b:2e:ca:47:8b:2f:67:77: b7:ca:dc:96:9e:ed:ae:06:59:f8:ff:1f:17:7d:54:84:8b:09: 3b:d2:09:db -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmvMYibfq4T6ohNBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUwZmY2N2MtNTkwNC00NjU1LThiNTAtODMyYTQ4NWFk MWI4MB4XDTI1MDQyOTA3MDAwM1oXDTI1MDUwMjA3MDAwMFowLzEtMCsGA1UEAxMk NDA1NDk0MTAtNzhkNC00ZDI5LWFkODQtZDAxYWMxNzAzODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6bZoZWHysrLVxq+4PREK5ZHwCRlYuSR5bXB 00N7IJFxGGIyR0FU05OvJFXEW5G77KQGoCy+6y36zgixPP6ujikQvzjpzhWTJIa6 EO/PT9W9vHbC2nkXBmCbQUgi1moJPPmuzcegoI1eq9CwL9RbajNmdVhEw+RMGEOS OQB5nrAWnuKXxKUCjRvBiraLvU0wXwwD1WhuYUKcGy2SqbXEHhUlop2WAJ2xyiX4 SRd92hRcEZCcl47wV1Ae5xV7UaBYcfUAga8wpg9Sw9oyFW7p8PPB5FiRK9vqRmrb 6Sxd+9jfAx12O0PEClmbLgQmxahIQw6aOVnG2BYjpkcEAxAurQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFOsy/NT0rQtuMurlZeUj5p7XNQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBm ZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJhNDg1YWQxYjgvMjUwZmY2N2MtNTkwNC00 NjU1LThiNTAtODMyYTQ4NWFkMWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUwZmY2N2MtNTkwNC00NjU1LThi NTAtODMyYTQ4NWFkMWI4LzI1MGZmNjdjLTU5MDQtNDY1NS04YjUwLTgzMmE0ODVh ZDFiOC5jcmwwHwYDVR0jBBgwFoAU2WxV3mS4zLuq8SxpN5dSmXVVazkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTBmZjY3Yy01OTA0LTQ2NTUtOGI1MC04MzJh NDg1YWQxYjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAd41H3MVo/SuSRJP3rmdiS 9OSUtPdb8pZFJ8TxkoWBj8B9iH+yw5ACm0f2BbofoJ+WZo6geoLGloomGWFcRpM9 6taT2WfRusMlOLjytrQ/5nW0QcWj3YabOCdQT3SjzDN+QjsD0IAa7/XNAeAVQpxz elJV03sGpZsjUOJSJD9QAA3HA9YVzDZJO8srQ2OL2KNkqq+PfTtKxc0YTAgO5oKZ 0j8Al+3Cx0o7LsL+zTw/OXHNIKDdv0NZDY3TQZLb1qKnT0Lw+yBpY+l2sDpxpJyv +XQDZ/SQ2hN2u4Jtvpz1VP7ney7KR4svZ3e3ytyWnu2uBln4/x8XfVSEiwk70gnb -----END CERTIFICATE-----Generated at Tue Apr 29 19:19:46 2025 by rpki-client