$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.mft File: 79f0b59e-adb9-491e-9362-7f64268c02be.mft (raw, json) Hash identifier: qfk2Ht7kU1fjU1VZDfrPDA6A0JXgmhAPIiOwLTisdLA= Subject key identifier: E2:BB:F3:26:D8:CA:0B:0D:3C:8A:B9:3F:64:67:E6:D0:A6:11:52:71 Authority key identifier: 3C:9F:73:A4:01:5A:9F:AA:DA:BC:75:F5:D0:E0:63:0A:9B:08:68:42 Certificate issuer: /CN=79f0b59e-adb9-491e-9362-7f64268c02be Certificate serial: 010D0C9F43285849AB5AE47FFD44A674DC68FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.mft Manifest number: 010D0C9F43285844E1B7AC343E459D93361E0B42 Signing time: Sun 27 Apr 2025 22:00:07 +0000 Manifest this update: Sun 27 Apr 2025 22:00:07 +0000 Manifest next update: Tue 29 Apr 2025 22:00:00 +0000 Files and hashes: 1: 250b9a99-ea52-37eb-9585-49aeb904d3d7.roa (hash: hMCkUTbd/qsHrBAVvP8spYu2eQGSrVOEpNxPkF0zlnY=) 2: 79f0b59e-adb9-491e-9362-7f64268c02be.crl (hash: SQ4seoW0b3khykCx+4cTBsfpZZU9FFitEKpWBXRD1hU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:5a:e4:7f:fd:44:a6:74:dc:68:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79f0b59e-adb9-491e-9362-7f64268c02be Validity Not Before: Apr 27 22:00:07 2025 GMT Not After : Apr 29 22:00:00 2025 GMT Subject: CN=9d92b9d7-ef7f-4d58-8fc3-1dafbc82a18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:3b:d2:10:94:eb:81:bf:ab:46:f3:8d:c1: 7f:6c:38:5d:c8:bd:9c:00:d7:26:19:4b:b3:47:05: 3c:d8:b2:1c:6f:db:41:76:58:ac:a4:2a:ea:ba:4f: 94:93:86:62:5f:86:50:78:ce:a9:7e:4b:2e:a0:61: 2a:24:78:94:cf:45:88:9c:44:56:0a:79:a9:72:6c: 96:c4:23:f0:ab:db:fa:e6:33:e3:fc:4c:e8:6a:dc: 86:e3:7e:52:4f:46:d4:5e:46:d7:3f:e0:1b:12:39: 44:5d:9e:e2:d3:2f:cc:11:a6:cf:c6:74:25:e1:80: 57:9d:13:a0:25:90:70:99:ee:95:c9:84:41:96:f6: 72:72:34:b1:84:77:3f:b6:c3:57:5d:dc:79:85:40: 9e:82:7b:1b:4d:f9:43:43:05:3a:00:91:dc:d4:6c: e0:ca:28:e3:26:c1:03:84:43:90:07:ff:ca:80:df: 4a:56:98:c4:6b:d4:81:c5:6a:27:fc:8d:42:d4:27: 07:d1:07:05:87:52:d2:3a:45:fa:0b:da:18:05:7e: 74:07:67:44:24:c9:6b:83:33:8f:b2:23:75:fb:1d: 31:bd:c3:44:ee:ea:81:d5:8b:62:0e:0a:bb:bb:61: 02:fa:9c:2c:b8:c8:ed:aa:8e:ad:92:39:e8:c9:6c: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BB:F3:26:D8:CA:0B:0D:3C:8A:B9:3F:64:67:E6:D0:A6:11:52:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.crl X509v3 Authority Key Identifier: keyid:3C:9F:73:A4:01:5A:9F:AA:DA:BC:75:F5:D0:E0:63:0A:9B:08:68:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:64:ce:57:61:03:f8:da:99:8d:66:03:5c:ac:ef:42:16:b1: 14:93:6a:78:f3:f6:2e:a5:70:f1:01:56:b0:f6:58:7a:89:96: ae:6b:bc:cf:2e:41:c6:ca:82:e4:71:e9:65:bf:80:ed:4a:75: 39:c1:f5:5f:7e:b3:32:d1:11:75:cb:85:e4:d9:50:60:96:a3: a9:60:81:04:aa:62:23:c0:dd:88:0f:83:14:e8:67:d8:c3:9c: ff:69:c1:2e:97:67:be:6d:4e:a8:c5:40:92:4d:92:4d:26:94: e2:27:27:60:05:bd:50:49:00:4e:24:99:10:c7:b6:8e:9a:e9: b3:bc:4e:01:76:d0:58:86:14:40:1a:f8:f2:18:c1:e7:85:a2: 9b:57:02:31:69:68:fc:db:9c:3d:ff:4b:15:72:40:5d:5f:e4: 65:dc:1d:8a:2b:80:69:97:dc:b3:b5:2a:cf:e9:24:7c:14:4f: 06:2f:56:ef:d2:44:29:5f:2e:b5:71:16:34:23:d5:22:25:eb: 41:aa:5d:f0:63:93:76:40:b0:3b:84:73:9d:c1:71:a4:62:a4: 2c:9d:6f:ac:41:4e:48:52:ac:98:6a:07:1e:73:7f:18:e7:b5: 09:41:4c:df:75:24:8b:df:7a:60:2e:61:31:1a:ac:2e:f4:28: ff:8a:72:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrWuR//USmdNxo/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzlmMGI1OWUtYWRiOS00OTFlLTkzNjItN2Y2NDI2OGMw MmJlMB4XDTI1MDQyNzIyMDAwN1oXDTI1MDQyOTIyMDAwMFowLzEtMCsGA1UEAxMk OWQ5MmI5ZDctZWY3Zi00ZDU4LThmYzMtMWRhZmJjODJhMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/g70hCU64G/q0bzjcF/bDhdyL2cANcmGUuz RwU82LIcb9tBdlispCrquk+Uk4ZiX4ZQeM6pfksuoGEqJHiUz0WInERWCnmpcmyW xCPwq9v65jPj/EzoatyG435ST0bUXkbXP+AbEjlEXZ7i0y/MEabPxnQl4YBXnROg JZBwme6VyYRBlvZycjSxhHc/tsNXXdx5hUCegnsbTflDQwU6AJHc1GzgyijjJsED hEOQB//KgN9KVpjEa9SBxWon/I1C1CcH0QcFh1LSOkX6C9oYBX50B2dEJMlrgzOP siN1+x0xvcNE7uqB1YtiDgq7u2EC+pwsuMjtqo6tkjnoyWw6pwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOK78ybYygsNPIq5P2Rn5tCmEVJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83OWYw YjU5ZS1hZGI5LTQ5MWUtOTM2Mi03ZjY0MjY4YzAyYmUvNzlmMGI1OWUtYWRiOS00 OTFlLTkzNjItN2Y2NDI2OGMwMmJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzlmMGI1OWUtYWRiOS00OTFlLTkz NjItN2Y2NDI2OGMwMmJlLzc5ZjBiNTllLWFkYjktNDkxZS05MzYyLTdmNjQyNjhj MDJiZS5jcmwwHwYDVR0jBBgwFoAUPJ9zpAFan6ravHX10OBjCpsIaEIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83OWYwYjU5ZS1hZGI5LTQ5MWUtOTM2Mi03ZjY0 MjY4YzAyYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMZM5XYQP42pmNZgNcrO9C FrEUk2p48/YupXDxAVaw9lh6iZaua7zPLkHGyoLkcellv4DtSnU5wfVffrMy0RF1 y4Xk2VBglqOpYIEEqmIjwN2ID4MU6GfYw5z/acEul2e+bU6oxUCSTZJNJpTiJydg Bb1QSQBOJJkQx7aOmumzvE4BdtBYhhRAGvjyGMHnhaKbVwIxaWj825w9/0sVckBd X+Rl3B2KK4Bpl9yztSrP6SR8FE8GL1bv0kQpXy61cRY0I9UiJetBql3wY5N2QLA7 hHOdwXGkYqQsnW+sQU5IUqyYagcec38Y57UJQUzfdSSL33pgLmExGqwu9Cj/inJG -----END CERTIFICATE-----Generated at Mon Apr 28 23:27:32 2025 by rpki-client