$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft File: 5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft (raw, json) Hash identifier: bqNuyW+fuL+WBk+P5CUDTGsPhY00/sKj/9cKjqVzvh4= Subject key identifier: 26:E7:94:FD:87:98:70:14:5E:38:83:C6:F4:84:5D:DE:23:FF:72:B3 Authority key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Certificate issuer: /CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Certificate serial: 010D0C9F43285849ABB43A6560456E4A541F0400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft Manifest number: 010D0C9F4328584073A8336B0186F154CD67D319 Signing time: Mon 28 Apr 2025 01:00:07 +0000 Manifest this update: Mon 28 Apr 2025 01:00:07 +0000 Manifest next update: Wed 30 Apr 2025 01:00:00 +0000 Files and hashes: 1: 40be57dc-7156-3f97-b77b-4e30e5469063.roa (hash: m93vPvMPIFh9HPDPVh4Ig55kuqy0BnL6C1G0HRQcfH0=) 2: 5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl (hash: SHfwBLSf5KI29Fpz9MqXFemFfkcg0aMbKrpoymiHCFM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:3a:65:60:45:6e:4a:54:1f:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Validity Not Before: Apr 28 01:00:07 2025 GMT Not After : Apr 30 01:00:00 2025 GMT Subject: CN=3cf034b7-4ef9-43d1-94cb-c4bdcad42a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:21:49:01:d1:ae:0f:35:f0:16:de:30:79: 61:b8:98:db:2b:e1:da:90:e2:f0:8e:5b:89:be:bf: 41:84:78:70:df:b2:55:7a:d1:92:fc:92:89:75:53: 89:87:5e:1b:fc:59:7d:f3:ff:14:da:6a:04:b2:e6: 96:26:9c:9f:30:39:09:3e:27:7d:ac:b5:bc:94:f1: 49:d8:48:5e:bb:4c:3b:d1:52:af:1f:d4:df:d9:13: 3e:c0:0f:34:e1:3b:57:a4:1e:c1:ef:6a:5b:5a:b1: 6a:fa:13:c4:06:b2:ff:ea:27:c2:24:7d:fb:b5:b6: b7:35:ef:4a:bf:50:a9:15:2b:24:bf:32:c8:d4:45: 12:22:37:8c:68:38:58:af:b5:47:e7:60:65:32:51: a9:3f:cd:35:33:98:40:3b:4c:ca:3e:43:f9:38:c7: 04:b4:12:7b:1f:99:e2:6f:95:f4:ce:b7:bc:94:51: 12:90:5e:d6:51:ad:88:2b:38:57:af:11:19:60:aa: e8:b6:00:f8:fa:68:6d:6b:a6:5b:64:ef:06:56:d3: 71:8a:0e:55:7c:98:67:61:0a:fa:67:ad:5b:78:42: a9:69:0a:e8:f3:c7:51:43:41:5d:4f:49:fa:2d:83: 73:c0:30:07:9f:df:a5:10:32:8b:3b:d2:68:c9:31: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E7:94:FD:87:98:70:14:5E:38:83:C6:F4:84:5D:DE:23:FF:72:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl X509v3 Authority Key Identifier: keyid:CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4c:43:e7:5d:9a:8a:73:49:27:27:91:99:67:3e:83:52:b6: e7:22:9d:59:c8:1e:ac:51:2c:b6:8f:7b:58:58:4f:12:79:cd: ff:c3:aa:31:d0:b0:3c:0a:8f:e1:ba:84:e5:1c:d0:91:57:b8: 00:1d:c2:fa:39:65:fa:4f:38:74:75:10:3d:a9:f3:a5:c6:4e: ae:74:3d:96:c8:24:8d:99:56:67:bc:e5:17:fa:44:c5:a8:f5: dd:7a:4f:79:68:1d:a6:08:69:ba:e2:54:17:19:ba:79:df:35: 41:e0:a8:10:73:70:91:02:9a:23:ca:86:15:14:54:52:a7:77: ee:f2:32:83:fe:07:b9:27:d4:71:9e:47:f2:38:fc:29:b2:89: e6:7c:e7:e1:b0:70:f3:d1:d9:80:fe:e8:4e:8d:ca:79:c3:33: f0:e3:b4:d8:f8:13:02:55:2d:4c:45:b8:69:58:71:cb:bf:df: c3:8b:80:55:60:91:d7:8a:c2:57:83:83:cd:51:51:fe:0d:c2: 86:a7:49:d9:97:b5:10:ad:c9:1b:08:22:fb:af:c2:bb:a3:c2: 1e:14:56:67:19:19:6d:c4:e1:92:d6:8e:4e:90:da:86:fc:e0: ec:8d:43:b8:a2:51:cb:dc:c1:62:86:59:cd:80:63:46:09:e0: 2e:28:58:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrtDplYEVuSlQfBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEz NGE5MB4XDTI1MDQyODAxMDAwN1oXDTI1MDQzMDAxMDAwMFowLzEtMCsGA1UEAxMk M2NmMDM0YjctNGVmOS00M2QxLTk0Y2ItYzRiZGNhZDQyYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1EhSQHRrg818BbeMHlhuJjbK+HakOLwjluJ vr9BhHhw37JVetGS/JKJdVOJh14b/Fl98/8U2moEsuaWJpyfMDkJPid9rLW8lPFJ 2Eheu0w70VKvH9Tf2RM+wA804TtXpB7B72pbWrFq+hPEBrL/6ifCJH37tba3Ne9K v1CpFSskvzLI1EUSIjeMaDhYr7VH52BlMlGpP801M5hAO0zKPkP5OMcEtBJ7H5ni b5X0zre8lFESkF7WUa2IKzhXrxEZYKrotgD4+mhta6ZbZO8GVtNxig5VfJhnYQr6 Z61beEKpaQro88dRQ0FdT0n6LYNzwDAHn9+lEDKLO9JoyTETpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCbnlP2HmHAUXjiDxvSEXd4j/3KzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4 OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvNWJiODlmOTEtYTlhMS00 ZDg4LWI5ZDAtZjc4ODJlYTEzNGE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWJiODlmOTEtYTlhMS00ZDg4LWI5 ZDAtZjc4ODJlYTEzNGE5LzViYjg5ZjkxLWE5YTEtNGQ4OC1iOWQwLWY3ODgyZWEx MzRhOS5jcmwwHwYDVR0jBBgwFoAUzjpqHXvNBHS7s9ZDcs+uIiPUqHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4 MmVhMTM0YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjTEPnXZqKc0knJ5GZZz6D UrbnIp1ZyB6sUSy2j3tYWE8Sec3/w6ox0LA8Co/huoTlHNCRV7gAHcL6OWX6Tzh0 dRA9qfOlxk6udD2WyCSNmVZnvOUX+kTFqPXdek95aB2mCGm64lQXGbp53zVB4KgQ c3CRApojyoYVFFRSp3fu8jKD/ge5J9RxnkfyOPwpsonmfOfhsHDz0dmA/uhOjcp5 wzPw47TY+BMCVS1MRbhpWHHLv9/Di4BVYJHXisJXg4PNUVH+DcKGp0nZl7UQrckb CCL7r8K7o8IeFFZnGRltxOGS1o5OkNqG/ODsjUO4olHL3MFihlnNgGNGCeAuKFjY -----END CERTIFICATE-----Generated at Mon Apr 28 13:40:33 2025 by rpki-client