$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft File: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft (raw, json) Hash identifier: 5APENGv22lbiBvUMc3wl0SqPwIsk0pwxQsYIB9pWMRo= Subject key identifier: AE:35:97:7B:CC:49:73:03:FC:C0:83:7F:F0:3B:98:72:3B:B4:E4:88 Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 Certificate issuer: /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Certificate serial: 010D0C9F43285849AB1F4C27CD1AD1DF3609B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft Manifest number: 010D0C9F432858454085274C375F806199848D5E Signing time: Sun 27 Apr 2025 20:00:03 +0000 Manifest this update: Sun 27 Apr 2025 20:00:03 +0000 Manifest next update: Tue 29 Apr 2025 20:00:00 +0000 Files and hashes: 1: 51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (hash: 8XLSdiAY8V18Fef5b9nxiaxLRq19EouIKNRVzde7P5Y=) 2: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl (hash: LoliNACiNWOqPRKpDFAUPHBHpKTbGVDi+AhgX2j9Mno=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:1f:4c:27:cd:1a:d1:df:36:09:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f Validity Not Before: Apr 27 20:00:03 2025 GMT Not After : Apr 29 20:00:00 2025 GMT Subject: CN=bc36cb7a-05e4-4b25-b261-cff66afc6395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:8a:e0:12:28:26:c8:1b:c2:65:66:1f:e6: 37:e1:27:e9:a9:b2:15:86:76:35:74:cf:d0:28:1d: a1:80:ac:71:4e:5f:7f:d0:99:d3:75:ec:9e:00:cd: 58:24:c1:c9:2f:0d:e9:f2:b1:41:3b:bc:f0:89:a3: 28:ba:e9:7f:12:82:94:ca:5b:37:ae:ad:af:5e:05: 36:9f:f2:93:2f:b0:fc:ca:ad:82:83:2d:66:9c:a7: e8:7a:84:fd:55:de:37:e6:1d:00:f6:12:3d:33:b9: 3b:1b:88:9d:6f:72:af:c8:06:66:da:6c:5a:2d:b8: f3:b7:d7:3a:9b:b4:13:ae:90:fe:b4:78:6e:fe:b5: 4b:ba:fc:95:36:2b:5f:d9:da:d5:41:1b:88:89:62: e2:6c:d3:20:d8:1c:8d:ba:d3:fd:ed:69:4a:a3:5e: 3f:ca:f6:a9:78:8e:48:91:53:71:4d:57:b3:c2:44: 85:bc:2e:3d:0d:bb:a0:db:21:ec:6d:22:10:98:f8: 5a:b6:9f:5d:0f:84:2e:95:29:17:4a:fc:70:0a:a3: 1c:ce:48:90:ed:c1:11:ac:b2:b7:06:27:1f:a7:58: 32:45:86:e3:23:a6:05:8f:e8:d1:79:bb:ed:ab:46: 8d:a9:c8:7e:3c:db:1a:ea:61:5d:7f:3e:0f:55:ef: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:35:97:7B:CC:49:73:03:FC:C0:83:7F:F0:3B:98:72:3B:B4:E4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl X509v3 Authority Key Identifier: keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6e:7b:72:8c:0b:a5:d1:ce:3e:40:d6:f5:33:c7:b6:cc:14: 68:6e:36:83:7d:a6:9f:80:0c:74:6b:98:fc:05:4c:f7:97:ff: f9:3f:a5:22:f2:48:e1:bf:44:d6:4b:fd:ad:a4:3f:8c:d1:cc: f2:91:b5:ef:a0:9c:ad:0f:96:c0:9c:3c:09:ec:25:a8:3a:a7: bb:e1:f7:c8:7b:64:cc:59:00:b5:5c:6c:44:95:fd:5b:f8:19: c2:82:30:58:0e:42:1e:75:a1:ac:8b:ef:e6:ae:2c:d4:f5:5f: 19:59:4a:67:d2:b9:69:f2:45:32:2c:e4:7b:98:0c:6b:5b:b7: 1b:b0:20:81:7a:39:a1:9e:f7:00:49:4f:cb:5a:f6:8c:bb:44: 19:9f:2f:3b:b3:1c:21:b5:0a:d4:cd:6a:f4:9b:26:70:2e:ab: 25:2e:7b:66:2e:fb:86:bd:91:67:78:c6:21:85:86:d0:4d:61: 28:b2:0f:cc:7c:60:9b:e0:aa:4a:aa:b3:c1:3d:29:fc:36:25: e2:a2:cb:0d:1d:26:ec:7b:6f:11:1c:39:24:bb:2d:f0:6f:8c: f7:d3:27:09:b7:4e:3b:6d:f1:d1:3d:ed:38:57:98:50:a4:6c: 45:19:8b:b3:0b:c8:e1:c4:38:33:af:55:23:01:12:63:ba:ce: 84:bf:be:b7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrH0wnzRrR3zYJtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJi ZDBmMB4XDTI1MDQyNzIwMDAwM1oXDTI1MDQyOTIwMDAwMFowLzEtMCsGA1UEAxMk YmMzNmNiN2EtMDVlNC00YjI1LWIyNjEtY2ZmNjZhZmM2Mzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEiK4BIoJsgbwmVmH+Y34SfpqbIVhnY1dM/Q KB2hgKxxTl9/0JnTdeyeAM1YJMHJLw3p8rFBO7zwiaMouul/EoKUyls3rq2vXgU2 n/KTL7D8yq2Cgy1mnKfoeoT9Vd435h0A9hI9M7k7G4idb3KvyAZm2mxaLbjzt9c6 m7QTrpD+tHhu/rVLuvyVNitf2drVQRuIiWLibNMg2ByNutP97WlKo14/yvapeI5I kVNxTVezwkSFvC49Dbug2yHsbSIQmPhatp9dD4QulSkXSvxwCqMczkiQ7cERrLK3 Bicfp1gyRYbjI6YFj+jRebvtq0aNqch+PNsa6mFdfz4PVe/LDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK41l3vMSXMD/MCDf/A7mHI7tOSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGMx YmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvNzBjMWJmNjgtOWRjOS00 ZDBmLWExN2ItM2QwZjg0NWJiZDBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBjMWJmNjgtOWRjOS00ZDBmLWEx N2ItM2QwZjg0NWJiZDBmLzcwYzFiZjY4LTlkYzktNGQwZi1hMTdiLTNkMGY4NDVi YmQwZi5jcmwwHwYDVR0jBBgwFoAUM7wGYFV++Ssa/p8C4ub26K0mMeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBm ODQ1YmJkMGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCqbntyjAul0c4+QNb1M8e2 zBRobjaDfaafgAx0a5j8BUz3l//5P6Ui8kjhv0TWS/2tpD+M0czykbXvoJytD5bA nDwJ7CWoOqe74ffIe2TMWQC1XGxElf1b+BnCgjBYDkIedaGsi+/mrizU9V8ZWUpn 0rlp8kUyLOR7mAxrW7cbsCCBejmhnvcASU/LWvaMu0QZny87sxwhtQrUzWr0myZw LqslLntmLvuGvZFneMYhhYbQTWEosg/MfGCb4KpKqrPBPSn8NiXiossNHSbse28R HDkkuy3wb4z30ycJt047bfHRPe04V5hQpGxFGYuzC8jhxDgzr1UjARJjus6Ev763 -----END CERTIFICATE-----Generated at Mon Apr 28 09:52:22 2025 by rpki-client