$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft File: f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft (raw, json) Hash identifier: m1sQ6KoluX+E1yAvMkXheOBcNWltSh/xAzglhMF7T7I= Subject key identifier: 83:FC:3F:DC:F2:1B:8D:D9:21:E8:16:7F:D2:7F:5B:92:13:57:55:53 Authority key identifier: E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8 Certificate issuer: /CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3 Certificate serial: 010D0C9F43285849ADCC3CA971D450AD63474600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft Manifest number: 010D0C9F4328584073A823A1B11B28018100F162 Signing time: Mon 28 Apr 2025 19:00:07 +0000 Manifest this update: Mon 28 Apr 2025 19:00:07 +0000 Manifest next update: Thu 01 May 2025 19:00:00 +0000 Files and hashes: 1: ab0417bd-e109-3009-93c0-f235c176e944.roa (hash: VIP7TvI8CGZnT4nV8IkM/F8d6iPvOveSGKJE6V42Llc=) 2: f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl (hash: J+58lmXbayzE+JEvfkbI2TfrupNee6+lKx3qTu1rXWM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:cc:3c:a9:71:d4:50:ad:63:47:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3 Validity Not Before: Apr 28 19:00:07 2025 GMT Not After : May 1 19:00:00 2025 GMT Subject: CN=ac3ba7c8-4f89-4742-a425-e3d44b26be6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:f1:b8:f7:a7:16:69:c1:31:40:8d:6c:fc: c1:ca:c4:55:83:7a:23:04:3e:0e:cc:c7:5a:21:e1: 50:fc:25:b2:a9:d6:74:c2:c6:f0:1a:10:0c:5a:3a: bd:8e:a5:3b:33:8a:30:10:16:40:66:50:84:e3:c9: 63:2c:25:09:b5:0e:1c:0e:0b:73:6a:0e:5a:a6:68: f6:82:d5:49:c2:0e:71:9c:6b:30:7e:a6:84:6c:c6: 1e:0f:d1:e1:21:63:9d:0a:6a:59:d9:fb:fc:24:b5: 2e:2b:70:5e:43:b4:07:60:57:5b:d4:13:5c:1a:40: e1:21:8c:82:97:fa:58:d1:a2:5c:b4:98:89:2e:18: 84:84:67:16:b1:9c:7d:de:5a:b3:be:77:88:51:a1: 10:7d:a0:9f:7b:de:08:e7:71:f1:9f:79:24:8f:f2: cf:48:5e:89:08:47:61:eb:18:76:20:ec:7b:b0:97: 61:2e:ad:a4:55:43:e1:47:7b:5a:4d:71:cf:f5:a1: 03:c2:01:c0:3f:bd:52:1f:4f:b8:3d:42:cb:92:2f: 45:d1:50:bb:7a:9e:cd:84:78:84:5f:8b:46:8e:3d: 17:5f:76:4e:dd:ed:c1:26:21:14:d4:4c:da:40:fc: dc:e9:c9:25:1b:e5:7a:e3:5b:03:5d:9c:2b:df:4b: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:3F:DC:F2:1B:8D:D9:21:E8:16:7F:D2:7F:5B:92:13:57:55:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl X509v3 Authority Key Identifier: keyid:E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:01:a8:c2:81:e1:16:fd:4c:89:99:72:f7:6f:68:cb:3d:27: 02:ae:7d:c5:f5:7e:a7:79:4a:d8:02:bf:97:7d:9f:d8:c6:41: 0d:5c:c1:72:d0:32:5e:18:2e:99:db:e4:d2:26:c7:28:91:9b: 56:38:ff:be:3a:eb:69:31:cb:af:9b:fe:93:ea:fd:c5:bb:ef: 37:87:6a:8f:18:ca:da:3f:c2:10:d7:bf:f5:b1:c8:30:0f:75: b7:14:ff:7f:71:c9:4b:e9:7a:b1:61:6b:06:f2:75:79:3f:c1: 02:be:aa:ac:ee:32:f2:9b:f6:52:fb:11:bb:19:47:2c:ed:c2: 2e:72:2f:7a:90:fa:85:b5:a4:fa:d3:06:48:d8:1f:6d:65:80: e2:ce:36:98:dc:8d:57:85:94:f6:6a:af:eb:3e:d8:3a:8a:49: 77:b2:8b:f3:42:46:be:5d:23:44:9b:30:8e:39:34:ca:b3:e1: af:80:f0:9f:96:51:63:5a:4a:7a:cf:96:86:27:01:13:8c:89: 69:50:1c:e5:c1:1d:56:45:5b:ab:6e:96:6a:c4:19:ef:0c:b1: 45:08:cd:e6:a4:07:16:62:59:84:ce:7c:b3:00:0d:83:a4:2b: a8:79:11:dd:60:98:b0:c3:ec:cd:bd:4e:9b:e8:2b:d5:6f:0f: a7:f9:e3:74 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtzDypcdRQrWNHRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODM3YjQtMGEzNi00ODk2LTlmZGYtY2E0MWUzYzg0 OGYzMB4XDTI1MDQyODE5MDAwN1oXDTI1MDUwMTE5MDAwMFowLzEtMCsGA1UEAxMk YWMzYmE3YzgtNGY4OS00NzQyLWE0MjUtZTNkNDRiMjZiZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AfxuPenFmnBMUCNbPzBysRVg3ojBD4OzMda IeFQ/CWyqdZ0wsbwGhAMWjq9jqU7M4owEBZAZlCE48ljLCUJtQ4cDgtzag5apmj2 gtVJwg5xnGswfqaEbMYeD9HhIWOdCmpZ2fv8JLUuK3BeQ7QHYFdb1BNcGkDhIYyC l/pY0aJctJiJLhiEhGcWsZx93lqzvneIUaEQfaCfe94I53Hxn3kkj/LPSF6JCEdh 6xh2IOx7sJdhLq2kVUPhR3taTXHP9aEDwgHAP71SH0+4PULLki9F0VC7ep7NhHiE X4tGjj0XX3ZO3e3BJiEU1EzaQPzc6cklG+V641sDXZwr30vGbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIP8P9zyG43ZIegWf9J/W5ITV1VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI4 MzdiNC0wYTM2LTQ4OTYtOWZkZi1jYTQxZTNjODQ4ZjMvZjMyODM3YjQtMGEzNi00 ODk2LTlmZGYtY2E0MWUzYzg0OGYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjMyODM3YjQtMGEzNi00ODk2LTlm ZGYtY2E0MWUzYzg0OGYzL2YzMjgzN2I0LTBhMzYtNDg5Ni05ZmRmLWNhNDFlM2M4 NDhmMy5jcmwwHwYDVR0jBBgwFoAU5PVEJeqICzg61XA0fN7IgT9NQNgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI4MzdiNC0wYTM2LTQ4OTYtOWZkZi1jYTQx ZTNjODQ4ZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbAajCgeEW/UyJmXL3b2jL PScCrn3F9X6neUrYAr+XfZ/YxkENXMFy0DJeGC6Z2+TSJscokZtWOP++OutpMcuv m/6T6v3Fu+83h2qPGMraP8IQ17/1scgwD3W3FP9/cclL6XqxYWsG8nV5P8ECvqqs 7jLym/ZS+xG7GUcs7cIuci96kPqFtaT60wZI2B9tZYDizjaY3I1XhZT2aq/rPtg6 ikl3sovzQka+XSNEmzCOOTTKs+GvgPCfllFjWkp6z5aGJwETjIlpUBzlwR1WRVur bpZqxBnvDLFFCM3mpAcWYlmEznyzAA2DpCuoeRHdYJiww+zNvU6b6CvVbw+n+eN0 -----END CERTIFICATE-----Generated at Tue Apr 29 00:37:23 2025 by rpki-client