$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71/5ea1ed04-5e36-4494-9aed-11203d1a2d71.mft File: 5ea1ed04-5e36-4494-9aed-11203d1a2d71.mft (raw, json) Hash identifier: TqcnA167JmFstcqxCTVuJTbiV3XzFxEJ6liNFmldkss= Subject key identifier: 9C:CF:80:83:32:8C:BD:18:D1:D8:71:5A:08:92:2E:AF:81:0B:B9:8B Authority key identifier: 7B:68:E5:13:4C:FA:8F:00:70:32:50:26:70:BD:50:84:8E:18:9E:69 Certificate issuer: /CN=5ea1ed04-5e36-4494-9aed-11203d1a2d71 Certificate serial: 010D0C9F43285849B001FAA1738980943F998B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71/5ea1ed04-5e36-4494-9aed-11203d1a2d71.mft Manifest number: 010D0C9F4328584073A85801F8EAFCF19FBCD55E Signing time: Tue 29 Apr 2025 14:00:03 +0000 Manifest this update: Tue 29 Apr 2025 14:00:03 +0000 Manifest next update: Fri 02 May 2025 14:00:00 +0000 Files and hashes: 1: 5ea1ed04-5e36-4494-9aed-11203d1a2d71.crl (hash: iKojmiXWMnU7rtaggokctwZn6AWjQLIojfbm5rwjN8g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71/5ea1ed04-5e36-4494-9aed-11203d1a2d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71/5ea1ed04-5e36-4494-9aed-11203d1a2d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:01:fa:a1:73:89:80:94:3f:99:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea1ed04-5e36-4494-9aed-11203d1a2d71 Validity Not Before: Apr 29 14:00:03 2025 GMT Not After : May 2 14:00:00 2025 GMT Subject: CN=f4297a32-ed91-4d9b-82c3-051c2fe5da2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:6a:49:b0:7e:e4:1e:78:dc:c0:ef:53:08: d5:65:0a:da:19:9e:9c:b4:87:09:63:dd:c6:0b:a3: 91:67:c9:bf:09:ff:49:e5:db:71:23:ff:62:08:06: 6b:5f:e4:15:54:7f:18:a7:7f:01:52:d6:27:ec:d7: f3:e6:06:2a:62:e5:1d:29:fb:0f:ab:0e:23:d2:37: c6:43:5b:4e:57:55:1c:c3:1b:21:64:49:19:e7:98: 4e:ff:90:42:f3:e3:2e:e2:c6:44:a0:31:31:ea:d4: 40:d4:5d:dd:be:12:b9:76:80:9a:d6:2d:0f:49:29: 6b:30:42:ac:cb:be:d7:24:e4:e3:cb:fd:04:ea:0f: af:5b:fb:5b:1b:9e:d3:c0:be:71:f6:e7:06:ee:e2: 87:04:06:11:f4:ce:3e:9b:03:4f:51:08:8b:db:c0: 81:86:91:b7:83:53:1b:af:32:fa:06:e1:b9:03:5e: 3e:3f:13:67:8f:96:53:f8:14:74:0b:b6:b9:43:4a: 45:f5:0f:72:1c:a0:12:df:59:6c:7a:ca:16:8a:7e: 6e:b5:cb:71:9c:a4:03:79:eb:1a:c2:0a:54:19:54: bf:e0:3e:52:7d:34:2f:e5:d7:40:73:9d:e1:52:49: ec:e6:a7:5d:f0:ed:d9:af:c2:2d:cb:51:41:af:8a: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CF:80:83:32:8C:BD:18:D1:D8:71:5A:08:92:2E:AF:81:0B:B9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71/5ea1ed04-5e36-4494-9aed-11203d1a2d71.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71/5ea1ed04-5e36-4494-9aed-11203d1a2d71.crl X509v3 Authority Key Identifier: keyid:7B:68:E5:13:4C:FA:8F:00:70:32:50:26:70:BD:50:84:8E:18:9E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ea1ed04-5e36-4494-9aed-11203d1a2d71.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fd:f8:32:a3:b2:da:ba:84:3b:c5:ff:72:04:01:90:5e:6e: cd:3b:39:22:3e:18:fc:2d:6e:5e:15:4f:e3:5b:77:7f:4c:f7: ff:6a:4f:cb:7f:3f:8d:6c:2c:ca:09:33:1f:93:f2:a7:4e:30: 87:c2:13:2d:40:8b:82:dc:4f:87:3d:45:b4:47:18:da:33:04: e1:02:19:3b:d2:76:42:5e:8b:b7:09:0a:03:e4:76:b0:44:4a: c0:f1:46:6f:a4:ca:cc:5a:88:06:aa:1e:97:87:dc:b1:62:19: c7:29:1d:ae:ef:20:ac:4e:d3:48:c8:e8:32:0a:68:3a:b9:16: 7c:a5:6c:d9:d3:69:69:71:fa:f1:72:9e:97:57:c7:6c:10:33: 51:ac:c5:64:b9:96:f0:ab:2d:a2:75:41:e9:80:c4:55:2c:33: dd:38:61:38:d4:29:83:7c:5e:d0:f7:96:19:a7:91:2e:9b:c5: e5:6a:62:e0:44:03:4b:63:a8:52:af:47:ea:50:75:2b:7a:cf: 1e:7c:52:6b:99:ed:c3:1d:47:6f:18:db:10:89:6d:c5:2b:27: 92:ee:8e:fb:c4:01:1f:e0:48:b8:2d:7c:f7:b1:35:ed:d0:99: 6d:bb:32:01:b9:f5:44:e2:25:b8:ac:f3:85:34:48:a6:0a:76: e4:c2:f4:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmwAfqhc4mAlD+ZiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVhMWVkMDQtNWUzNi00NDk0LTlhZWQtMTEyMDNkMWEy ZDcxMB4XDTI1MDQyOTE0MDAwM1oXDTI1MDUwMjE0MDAwMFowLzEtMCsGA1UEAxMk ZjQyOTdhMzItZWQ5MS00ZDliLTgyYzMtMDUxYzJmZTVkYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHRqSbB+5B543MDvUwjVZQraGZ6ctIcJY93G C6ORZ8m/Cf9J5dtxI/9iCAZrX+QVVH8Yp38BUtYn7Nfz5gYqYuUdKfsPqw4j0jfG Q1tOV1UcwxshZEkZ55hO/5BC8+Mu4sZEoDEx6tRA1F3dvhK5doCa1i0PSSlrMEKs y77XJOTjy/0E6g+vW/tbG57TwL5x9ucG7uKHBAYR9M4+mwNPUQiL28CBhpG3g1Mb rzL6BuG5A14+PxNnj5ZT+BR0C7a5Q0pF9Q9yHKAS31lsesoWin5utctxnKQDeesa wgpUGVS/4D5SfTQv5ddAc53hUkns5qdd8O3Zr8Ity1FBr4r0cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJzPgIMyjL0Y0dhxWgiSLq+BC7mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZWEx ZWQwNC01ZTM2LTQ0OTQtOWFlZC0xMTIwM2QxYTJkNzEvNWVhMWVkMDQtNWUzNi00 NDk0LTlhZWQtMTEyMDNkMWEyZDcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWVhMWVkMDQtNWUzNi00NDk0LTlh ZWQtMTEyMDNkMWEyZDcxLzVlYTFlZDA0LTVlMzYtNDQ5NC05YWVkLTExMjAzZDFh MmQ3MS5jcmwwHwYDVR0jBBgwFoAUe2jlE0z6jwBwMlAmcL1QhI4YnmkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZWExZWQwNC01ZTM2LTQ0OTQtOWFlZC0xMTIw M2QxYTJkNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCS/fgyo7LauoQ7xf9yBAGQ Xm7NOzkiPhj8LW5eFU/jW3d/TPf/ak/Lfz+NbCzKCTMfk/KnTjCHwhMtQIuC3E+H PUW0RxjaMwThAhk70nZCXou3CQoD5HawRErA8UZvpMrMWogGqh6Xh9yxYhnHKR2u 7yCsTtNIyOgyCmg6uRZ8pWzZ02lpcfrxcp6XV8dsEDNRrMVkuZbwqy2idUHpgMRV LDPdOGE41CmDfF7Q95YZp5Eum8XlamLgRANLY6hSr0fqUHUres8efFJrme3DHUdv GNsQiW3FKyeS7o77xAEf4Ei4LXz3sTXt0JltuzIBufVE4iW4rPOFNEimCnbkwvQU -----END CERTIFICATE-----Generated at Wed Apr 30 11:11:51 2025 by rpki-client