$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.mft File: 4190a890-d7ce-4ea4-a558-53090be01bab.mft (raw, json) Hash identifier: pkqrXUbxbyLk6sOYpnOE50KzHIZ15No6nhZBc2WIaT4= Subject key identifier: 7B:A3:E3:4A:3A:DA:32:46:31:1B:47:82:A9:F7:AB:F4:1A:9C:1D:B5 Authority key identifier: AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB Certificate issuer: /CN=4190a890-d7ce-4ea4-a558-53090be01bab Certificate serial: 010D0C9F43285849AA8A6589D33FC7259CA1D280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.mft Manifest number: 010D0C9F43285844B9B4DBAA596DF0C488945A24 Signing time: Sun 27 Apr 2025 15:00:03 +0000 Manifest this update: Sun 27 Apr 2025 15:00:03 +0000 Manifest next update: Tue 29 Apr 2025 15:00:00 +0000 Files and hashes: 1: 4190a890-d7ce-4ea4-a558-53090be01bab.crl (hash: c3mY1Cff5sf7ng1yVKwrjUYTCaB7XrMhGCznr7bel4Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:8a:65:89:d3:3f:c7:25:9c:a1:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4190a890-d7ce-4ea4-a558-53090be01bab Validity Not Before: Apr 27 15:00:03 2025 GMT Not After : Apr 29 15:00:00 2025 GMT Subject: CN=2c25487b-823c-4633-8576-f9f4a5454891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:99:69:aa:5d:84:6d:84:9b:93:1e:34:c0: 06:70:d2:d6:e2:2b:e3:98:ae:59:0d:09:9b:04:f8: f9:d9:9e:b5:48:88:d6:09:00:2d:75:ee:ba:de:de: 4d:b8:8f:b9:33:f0:91:08:10:52:39:09:b6:24:3d: 67:ab:a0:7d:b0:8f:ee:24:43:c8:0e:fb:03:e2:c2: 30:6c:b9:21:e6:10:7d:ca:f0:7b:ba:c2:83:86:27: d0:f6:ef:e7:23:c0:60:c7:42:ad:b1:b9:6e:cf:54: 0d:7f:9f:b3:f6:41:8a:c3:6c:20:a2:d0:0c:fa:c0: 17:6c:db:31:57:01:1e:e6:34:87:4f:a3:65:89:b9: 4f:e8:60:3e:c6:51:2b:5d:9c:e5:78:a2:41:d7:af: d6:c5:83:e4:ed:0a:7c:77:20:e6:be:63:5d:bd:1b: a4:6a:2e:42:5a:19:f3:63:ea:86:bf:07:7f:d4:93: 48:14:02:5c:ca:1f:98:44:e5:3c:58:e6:06:ec:29: 5b:24:a0:66:92:8f:ba:09:22:30:2f:c9:49:f1:8d: 9f:b8:4c:bf:65:9d:d4:ee:f8:1c:93:83:23:1b:bc: cc:19:d6:de:0d:fe:da:37:3c:fc:dc:09:aa:c3:94: f7:e2:f7:cc:28:36:2e:be:16:35:a0:4e:82:2a:b7: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A3:E3:4A:3A:DA:32:46:31:1B:47:82:A9:F7:AB:F4:1A:9C:1D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab/4190a890-d7ce-4ea4-a558-53090be01bab.crl X509v3 Authority Key Identifier: keyid:AA:A8:98:B8:A7:9B:46:D4:9B:4E:1D:A2:5B:03:C8:B4:B1:21:E0:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4190a890-d7ce-4ea4-a558-53090be01bab.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:99:8c:2b:9f:54:05:16:6b:25:3c:77:ee:78:70:a1:a2:d5: 39:55:3b:fe:0d:97:c7:f9:9e:06:e9:38:51:2c:d3:d5:4f:14: 73:05:0f:16:5a:9d:84:3a:fc:7a:ef:dd:a5:ce:5d:93:ab:2f: 01:d0:29:85:56:62:08:25:cc:6b:e6:00:69:7d:a5:ce:42:f4: 8a:03:fb:4f:af:c7:4c:ba:7b:75:cf:0a:31:9a:7b:47:67:e5: 27:88:2a:d8:0e:7d:87:36:b1:fd:84:3a:a7:f8:97:01:25:12: db:51:f7:92:e5:08:74:f9:97:18:6a:58:47:e8:53:ab:5c:61: 0d:28:cc:7b:64:d4:4f:56:01:3c:29:04:fc:f9:2b:e7:fe:f8: e3:cc:26:08:f1:ef:7e:d0:9e:49:89:70:a4:55:60:38:03:43: 83:82:b5:31:f4:09:0d:90:5f:80:b8:b6:3b:08:cf:26:8b:29: 1f:df:54:b8:a6:d5:fc:2f:4d:03:a3:08:b7:1e:9a:ae:97:c0: 1c:3c:6b:a2:38:a8:ab:59:8f:52:98:06:1d:d4:6c:d5:e8:27: 51:b7:b1:92:0b:5a:5a:77:bc:e0:27:3b:5e:ef:ba:2f:42:e4: c1:99:7b:7f:97:20:f7:0e:b0:c3:58:c4:0a:f2:d9:01:8a:93: fe:8e:a8:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqimWJ0z/HJZyh0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE5MGE4OTAtZDdjZS00ZWE0LWE1NTgtNTMwOTBiZTAx YmFiMB4XDTI1MDQyNzE1MDAwM1oXDTI1MDQyOTE1MDAwMFowLzEtMCsGA1UEAxMk MmMyNTQ4N2ItODIzYy00NjMzLTg1NzYtZjlmNGE1NDU0ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwCZaapdhG2Em5MeNMAGcNLW4ivjmK5ZDQmb BPj52Z61SIjWCQAtde663t5NuI+5M/CRCBBSOQm2JD1nq6B9sI/uJEPIDvsD4sIw bLkh5hB9yvB7usKDhifQ9u/nI8Bgx0Ktsbluz1QNf5+z9kGKw2wgotAM+sAXbNsx VwEe5jSHT6NliblP6GA+xlErXZzleKJB16/WxYPk7Qp8dyDmvmNdvRukai5CWhnz Y+qGvwd/1JNIFAJcyh+YROU8WOYG7ClbJKBmko+6CSIwL8lJ8Y2fuEy/ZZ3U7vgc k4MjG7zMGdbeDf7aNzz83Amqw5T34vfMKDYuvhY1oE6CKrczFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHuj40o62jJGMRtHgqn3q/QanB21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTkw YTg5MC1kN2NlLTRlYTQtYTU1OC01MzA5MGJlMDFiYWIvNDE5MGE4OTAtZDdjZS00 ZWE0LWE1NTgtNTMwOTBiZTAxYmFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE5MGE4OTAtZDdjZS00ZWE0LWE1 NTgtNTMwOTBiZTAxYmFiLzQxOTBhODkwLWQ3Y2UtNGVhNC1hNTU4LTUzMDkwYmUw MWJhYi5jcmwwHwYDVR0jBBgwFoAUqqiYuKebRtSbTh2iWwPItLEh4KswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MTkwYTg5MC1kN2NlLTRlYTQtYTU1OC01MzA5 MGJlMDFiYWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkmYwrn1QFFmslPHfueHCh otU5VTv+DZfH+Z4G6ThRLNPVTxRzBQ8WWp2EOvx6792lzl2Tqy8B0CmFVmIIJcxr 5gBpfaXOQvSKA/tPr8dMunt1zwoxmntHZ+UniCrYDn2HNrH9hDqn+JcBJRLbUfeS 5Qh0+ZcYalhH6FOrXGENKMx7ZNRPVgE8KQT8+Svn/vjjzCYI8e9+0J5JiXCkVWA4 A0ODgrUx9AkNkF+AuLY7CM8miykf31S4ptX8L00Dowi3Hpqul8AcPGuiOKirWY9S mAYd1GzV6CdRt7GSC1pad7zgJzte77ovQuTBmXt/lyD3DrDDWMQK8tkBipP+jqg7 -----END CERTIFICATE-----Generated at Sun Apr 27 18:29:59 2025 by rpki-client