$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft File: 432c4e45-9934-4a21-b56f-b27d7aa21e49.mft (raw, json) Hash identifier: YLU51mfDFUjV9NosWqvD7l3+tnsOUcXslpW1KWIiZOg= Subject key identifier: 08:D6:3A:E6:34:0B:C3:92:CC:1D:83:AF:EB:CA:C9:3E:B9:4E:66:6C Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 Certificate issuer: /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Certificate serial: 010D0C9F43285849ABEFBE659728A8DEC894E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft Manifest number: 010D0C9F4328584528435719157927FE2C784B29 Signing time: Mon 28 Apr 2025 03:00:03 +0000 Manifest this update: Mon 28 Apr 2025 03:00:03 +0000 Manifest next update: Thu 01 May 2025 03:00:00 +0000 Files and hashes: 1: 432c4e45-9934-4a21-b56f-b27d7aa21e49.crl (hash: cB1AROZ2M8ZBzqB9Kdg4Q1zyD+6wkMBjvgTwlid6d5o=) 2: a64bf38f-925a-34bb-b213-9abac238d2a5.roa (hash: MJ0ljWH8xnksXoB9r7mm7iSbmwzWpNp7x/mjIbwD3VI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:ef:be:65:97:28:a8:de:c8:94:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49 Validity Not Before: Apr 28 03:00:03 2025 GMT Not After : May 1 03:00:00 2025 GMT Subject: CN=be3cbcac-540c-4f5b-abca-ff2ca00b98f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:b8:0e:68:8c:ff:78:fe:b7:a3:18:09:d1: 90:08:2e:de:b9:09:a1:7b:51:a0:f4:1d:2f:07:cf: 53:7b:de:6f:04:af:de:50:af:71:3d:00:3b:f2:c4: 0d:1e:c5:0a:4c:3a:c1:d0:bc:37:03:ad:8c:2a:63: 2a:74:52:b8:cd:9e:28:e4:d6:2b:cc:2d:7c:ab:e6: 58:e4:24:3d:07:ae:b6:4d:a6:f2:e7:60:31:91:3e: 0e:3c:0e:b9:4c:a2:1d:33:49:33:8b:52:66:16:50: 10:1a:6b:0f:f8:d0:3e:4a:ed:5d:08:c6:9f:cb:c8: 65:f6:d0:a1:e3:1d:2a:1a:c5:ed:91:46:02:38:c2: 46:00:0b:47:f0:82:f1:22:ff:f8:aa:7f:95:31:21: e6:05:71:fa:bb:20:77:e5:32:0c:34:e9:7f:06:d7: cf:32:99:b9:d2:dc:ae:76:b4:44:06:e2:36:52:56: 97:3e:30:a4:19:5d:95:46:4a:0f:3b:98:d3:e3:bf: 43:28:93:c9:74:b5:66:34:56:2c:c1:61:76:d7:50: 89:9a:c1:50:4d:82:11:6f:ff:e1:b9:ee:26:6e:e9: 9f:23:ee:7f:08:86:3c:54:74:93:3a:9e:d8:7f:04: 2f:4b:b4:5a:22:67:d0:a9:c5:a8:72:e6:2c:65:79: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:3A:E6:34:0B:C3:92:CC:1D:83:AF:EB:CA:C9:3E:B9:4E:66:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl X509v3 Authority Key Identifier: keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e9:0b:0a:d8:1b:10:62:09:2c:d3:73:e1:2c:94:2d:74:d5: 52:02:8e:d8:fe:16:a9:34:60:49:7f:16:8d:bb:c2:b3:84:ae: 51:70:20:17:aa:0d:75:fe:a9:e6:d4:ff:21:c2:fd:e7:ff:f5: 69:32:91:e6:cd:07:e5:f2:24:8d:97:e8:2f:5b:61:a5:94:21: 7c:9d:9c:1c:e1:6f:54:56:c4:22:c1:8b:55:8d:15:cc:d4:dc: 5b:3c:ab:74:a6:64:16:6f:6a:4a:5e:3b:c8:92:c4:84:e5:49: db:bf:e9:ce:d4:7c:71:cd:52:7c:d9:a9:44:a6:65:67:94:75: 0c:0c:fe:6d:5b:5c:37:cc:2a:bc:41:ff:f2:e8:44:fa:e4:35: ae:31:1d:f9:c8:fc:82:db:06:dc:b8:44:d7:da:e2:a3:c8:5f: a2:f0:d9:fc:7e:59:86:26:1a:09:da:e8:09:87:f0:21:ba:ac: 44:c1:66:b3:01:26:a9:07:75:cb:bf:7c:bd:9a:d9:7b:ff:0c: 6b:ed:ee:2c:24:06:01:47:d8:63:b2:3e:0b:2f:34:8d:d8:36: f9:da:54:2c:56:bf:2a:c8:8d:2d:d7:6f:26:2e:4d:28:f7:6f: 8f:45:19:d1:de:23:d5:71:cd:76:0f:b3:a3:c3:64:7f:c8:68: 3c:89:ef:07 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmr775llyio3siU44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyYzRlNDUtOTkzNC00YTIxLWI1NmYtYjI3ZDdhYTIx ZTQ5MB4XDTI1MDQyODAzMDAwM1oXDTI1MDUwMTAzMDAwMFowLzEtMCsGA1UEAxMk YmUzY2JjYWMtNTQwYy00ZjViLWFiY2EtZmYyY2EwMGI5OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur24DmiM/3j+t6MYCdGQCC7euQmhe1Gg9B0v B89Te95vBK/eUK9xPQA78sQNHsUKTDrB0Lw3A62MKmMqdFK4zZ4o5NYrzC18q+ZY 5CQ9B662Taby52AxkT4OPA65TKIdM0kzi1JmFlAQGmsP+NA+Su1dCMafy8hl9tCh 4x0qGsXtkUYCOMJGAAtH8ILxIv/4qn+VMSHmBXH6uyB35TIMNOl/BtfPMpm50tyu drREBuI2UlaXPjCkGV2VRkoPO5jT479DKJPJdLVmNFYswWF211CJmsFQTYIRb//h ue4mbumfI+5/CIY8VHSTOp7YfwQvS7RaImfQqcWocuYsZXmEPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAjWOuY0C8OSzB2Dr+vKyT65TmZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MzJj NGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdkN2FhMjFlNDkvNDMyYzRlNDUtOTkzNC00 YTIxLWI1NmYtYjI3ZDdhYTIxZTQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDMyYzRlNDUtOTkzNC00YTIxLWI1 NmYtYjI3ZDdhYTIxZTQ5LzQzMmM0ZTQ1LTk5MzQtNGEyMS1iNTZmLWIyN2Q3YWEy MWU0OS5jcmwwHwYDVR0jBBgwFoAU5D1EU3ic1/UjEfIVQzaBqBnlY/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MzJjNGU0NS05OTM0LTRhMjEtYjU2Zi1iMjdk N2FhMjFlNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz6QsK2BsQYgks03PhLJQt dNVSAo7Y/hapNGBJfxaNu8KzhK5RcCAXqg11/qnm1P8hwv3n//VpMpHmzQfl8iSN l+gvW2GllCF8nZwc4W9UVsQiwYtVjRXM1NxbPKt0pmQWb2pKXjvIksSE5Unbv+nO 1HxxzVJ82alEpmVnlHUMDP5tW1w3zCq8Qf/y6ET65DWuMR35yPyC2wbcuETX2uKj yF+i8Nn8flmGJhoJ2ugJh/AhuqxEwWazASapB3XLv3y9mtl7/wxr7e4sJAYBR9hj sj4LLzSN2Db52lQsVr8qyI0t128mLk0o92+PRRnR3iPVcc12D7Ojw2R/yGg8ie8H -----END CERTIFICATE-----Generated at Mon Apr 28 15:43:17 2025 by rpki-client