$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft File: 65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft (raw, json) Hash identifier: wHMHcUdNUZL5OG+uVIktcCNM/bF9yMOqll5KRftj+FY= Subject key identifier: F3:13:BB:71:B5:EF:41:E6:83:E5:8B:73:BA:32:3C:E1:A0:2E:7B:CA Authority key identifier: C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87 Certificate issuer: /CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f Certificate serial: 010D0C9F43285849A8726C285B0CFA24F62914F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft Manifest number: 010D0C9F43285844F54B65B05CB04CA1726A8C79 Signing time: Sat 26 Apr 2025 21:00:07 +0000 Manifest this update: Sat 26 Apr 2025 21:00:07 +0000 Manifest next update: Mon 28 Apr 2025 21:00:00 +0000 Files and hashes: 1: 65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl (hash: 0Uw6XIekxiLpgEunsgSJKnJMgg8MWvXH/qg8NXPLBpI=) 2: a27e26db-c05d-3eea-a6d8-73b657f3d5ab.roa (hash: FZR5JZr7JbJ+KvuiBE29qGo3Z0Y5v7GztIeiotY7vg4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:72:6c:28:5b:0c:fa:24:f6:29:14:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f Validity Not Before: Apr 26 21:00:07 2025 GMT Not After : Apr 28 21:00:00 2025 GMT Subject: CN=a4797126-0dc5-42bb-9de4-e6742edf1d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:8e:69:fe:a0:5e:3a:47:d1:45:e7:65:5f: 76:a4:b0:7e:59:1e:ab:f2:9d:d1:b8:f1:16:5f:49: 3d:a5:12:ad:8e:15:3f:ca:64:14:79:3a:a4:66:b7: f0:1d:37:19:94:04:c7:f4:2f:da:4d:23:67:1d:ab: 8f:58:bd:83:01:b0:f9:3e:ed:70:7b:36:c7:f0:a2: 0c:4b:01:b5:8f:22:9f:4b:ee:b5:36:a2:32:08:aa: be:e4:79:9a:a0:42:3e:0f:22:81:60:ee:d0:e2:dc: 45:7b:71:03:32:c3:c9:53:c5:d2:31:a0:de:e5:cf: 95:17:5c:52:7e:d6:38:d6:a4:72:ce:ab:32:9f:0e: 50:a0:8c:ec:fc:b4:91:3d:c5:97:14:47:dd:51:da: be:59:c7:64:1a:f7:80:15:55:3a:fb:2e:1b:50:28: c5:33:66:82:67:56:f0:d8:15:b7:34:64:a3:a9:23: 9e:9d:51:15:33:bd:62:7b:30:0a:73:71:c6:84:96: 61:99:05:b9:dd:83:18:fb:0d:ef:c4:74:37:46:b7: 09:8b:73:a1:92:e5:00:66:6f:e8:26:ac:0b:9b:76: af:76:99:9a:93:92:2b:57:77:56:53:63:b1:e9:e5: 8d:99:14:53:dd:10:c0:4c:ad:2e:d5:f9:99:b6:60: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:13:BB:71:B5:EF:41:E6:83:E5:8B:73:BA:32:3C:E1:A0:2E:7B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl X509v3 Authority Key Identifier: keyid:C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:10:7b:03:b6:c0:fc:8c:4c:c0:05:e8:b0:ed:e9:35:95:eb: 28:af:43:9d:9c:1d:0b:1a:7d:dd:41:44:db:40:34:f1:82:1a: 75:8b:20:b0:3e:a4:bf:2e:6f:59:46:7e:15:23:eb:48:b7:ce: fe:5d:7c:86:b7:ec:3f:f4:18:99:bd:b1:fa:c4:40:ca:c9:35: 0a:ce:fc:d3:28:71:ff:63:fb:80:22:0a:cf:8d:c6:0a:fc:a8: aa:42:bf:4e:a2:24:ba:81:01:e4:c1:d1:9a:95:20:6a:ed:77: d4:1f:c9:46:89:55:78:de:2b:cf:25:11:10:6a:d4:44:e0:8b: e3:31:09:24:04:af:3e:37:6c:61:85:86:49:56:e0:7a:c4:a4: 4f:11:fa:4c:61:f5:43:3f:71:06:f6:9f:49:22:f3:f5:b2:48: 3b:98:89:74:95:ba:cf:4d:c8:37:bf:3d:1a:9f:83:97:64:e8: d1:66:be:fd:7b:da:9a:73:54:2f:84:96:46:8f:6f:fc:e4:26: 83:02:3a:c2:a9:a3:e8:ca:79:a9:c5:6c:3d:b5:b0:05:f6:c1: cc:e9:7b:11:bd:35:51:9b:74:95:16:8c:85:0b:4d:71:92:62: b5:b9:8f:d8:aa:b2:d7:98:e2:f9:60:55:16:56:19:b0:a0:a3: af:55:37:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmocmwoWwz6JPYpFPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmNjU5OWUtZjBjYy00NjQxLWI3Y2QtOWUwYTJlYjJi YzlmMB4XDTI1MDQyNjIxMDAwN1oXDTI1MDQyODIxMDAwMFowLzEtMCsGA1UEAxMk YTQ3OTcxMjYtMGRjNS00MmJiLTlkZTQtZTY3NDJlZGYxZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyASOaf6gXjpH0UXnZV92pLB+WR6r8p3RuPEW X0k9pRKtjhU/ymQUeTqkZrfwHTcZlATH9C/aTSNnHauPWL2DAbD5Pu1wezbH8KIM SwG1jyKfS+61NqIyCKq+5HmaoEI+DyKBYO7Q4txFe3EDMsPJU8XSMaDe5c+VF1xS ftY41qRyzqsynw5QoIzs/LSRPcWXFEfdUdq+WcdkGveAFVU6+y4bUCjFM2aCZ1bw 2BW3NGSjqSOenVEVM71iezAKc3HGhJZhmQW53YMY+w3vxHQ3RrcJi3OhkuUAZm/o JqwLm3avdpmak5IrV3dWU2Ox6eWNmRRT3RDATK0u1fmZtmDKEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPMTu3G170Hmg+WLc7oyPOGgLnvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NWY2 NTk5ZS1mMGNjLTQ2NDEtYjdjZC05ZTBhMmViMmJjOWYvNjVmNjU5OWUtZjBjYy00 NjQxLWI3Y2QtOWUwYTJlYjJiYzlmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjVmNjU5OWUtZjBjYy00NjQxLWI3 Y2QtOWUwYTJlYjJiYzlmLzY1ZjY1OTllLWYwY2MtNDY0MS1iN2NkLTllMGEyZWIy YmM5Zi5jcmwwHwYDVR0jBBgwFoAUyZfHIW30wJm7rF2ZVBqesprJSIcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NWY2NTk5ZS1mMGNjLTQ2NDEtYjdjZC05ZTBh MmViMmJjOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGEHsDtsD8jEzABeiw7ek1 lesor0OdnB0LGn3dQUTbQDTxghp1iyCwPqS/Lm9ZRn4VI+tIt87+XXyGt+w/9BiZ vbH6xEDKyTUKzvzTKHH/Y/uAIgrPjcYK/KiqQr9OoiS6gQHkwdGalSBq7XfUH8lG iVV43ivPJREQatRE4IvjMQkkBK8+N2xhhYZJVuB6xKRPEfpMYfVDP3EG9p9JIvP1 skg7mIl0lbrPTcg3vz0an4OXZOjRZr79e9qac1QvhJZGj2/85CaDAjrCqaPoynmp xWw9tbAF9sHM6XsRvTVRm3SVFoyFC01xkmK1uY/YqrLXmOL5YFUWVhmwoKOvVTdT -----END CERTIFICATE-----Generated at Sun Apr 27 12:10:19 2025 by rpki-client