$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft File: b520faac-792a-4f70-8f4c-be06a5992ae1.mft (raw, json) Hash identifier: MKhBP0wf05mYOhb2a+eq1RV4R2UuPVSW27e24e0Wt3A= Subject key identifier: 70:B7:28:13:70:6D:84:07:7D:AB:90:ED:B2:F5:77:12:65:2A:CB:30 Authority key identifier: 19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 Certificate issuer: /CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Certificate serial: 010D0C9F43285849A7BFB5D0EE2A809219002F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft Manifest number: 010D0C9F432858454B120EB453C95356C481C599 Signing time: Sat 26 Apr 2025 15:00:03 +0000 Manifest this update: Sat 26 Apr 2025 15:00:03 +0000 Manifest next update: Tue 29 Apr 2025 15:00:00 +0000 Files and hashes: 1: 26b53dee-927f-3932-9072-92163ff78f26.roa (hash: P2y7c/l+t17Yj2vVakkhz/A00Jfst+0LphFN2sPkUUI=) 2: b520faac-792a-4f70-8f4c-be06a5992ae1.crl (hash: GTqVXWxHP/N9oEE1ezlhqLLiDemq5at1idW9uBfw4QU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:bf:b5:d0:ee:2a:80:92:19:00:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b520faac-792a-4f70-8f4c-be06a5992ae1 Validity Not Before: Apr 26 15:00:03 2025 GMT Not After : Apr 29 15:00:00 2025 GMT Subject: CN=cf5a5772-d2aa-4e76-8cc0-3b4b3474aa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:f4:e5:22:ce:0b:38:5e:4a:20:89:91:8e: 52:09:2c:40:af:18:4a:c8:f9:a5:fa:17:50:eb:cb: b6:f9:11:a5:ed:8c:ad:9d:a0:02:b9:9a:00:d9:7b: 05:79:69:ea:af:14:86:63:23:f6:0e:df:52:32:e9: c7:d5:b7:4f:2e:e0:17:46:d9:06:bd:52:c2:e7:70: 5d:21:c9:4a:df:60:cd:b6:42:27:95:f0:d2:b9:b4: 36:22:20:5e:7e:25:9e:95:55:d0:95:ae:0b:0b:80: 4c:0c:94:73:6e:62:b3:1b:a2:9b:92:df:06:e8:70: 19:af:57:ba:cb:3d:13:4a:37:7b:fa:0c:b6:86:38: c2:21:e3:0c:7f:c1:75:34:d5:00:f4:94:04:97:07: 59:c9:c2:d7:94:97:e8:2f:3d:50:48:4b:59:f8:b8: f1:92:ed:94:d5:e8:c7:1f:33:5a:34:4c:aa:d1:fe: e5:f5:df:75:a5:e4:be:bd:88:b7:8f:25:7e:a0:54: 2b:60:a6:e2:6e:6e:d8:0b:e2:6b:e3:b9:7e:fa:28: 9b:fb:fa:91:54:ad:88:0e:ee:7b:ed:4e:bd:e7:5a: 41:f4:54:2c:52:56:87:1e:48:55:fd:0c:fb:40:57: c5:a1:53:5f:aa:4d:43:98:15:47:28:bb:b0:a6:25: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B7:28:13:70:6D:84:07:7D:AB:90:ED:B2:F5:77:12:65:2A:CB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1/b520faac-792a-4f70-8f4c-be06a5992ae1.crl X509v3 Authority Key Identifier: keyid:19:64:64:90:D5:34:4F:B1:82:2F:59:21:B8:D4:67:4D:10:F7:63:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b520faac-792a-4f70-8f4c-be06a5992ae1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e1:55:1f:57:9c:f2:6b:eb:c0:cd:5a:6f:a5:12:6e:8a:33: 64:80:8d:83:d4:95:d6:32:30:30:71:8b:4f:68:c5:9b:1b:64: c0:b7:7a:87:2c:3b:01:70:19:9f:d4:8b:8c:df:ff:ac:df:e4: 7c:43:c3:eb:cd:59:fe:60:37:6c:84:0e:0c:66:c1:81:4f:2b: bb:5b:93:00:5a:92:5b:3d:2a:70:d3:69:6c:e9:60:52:5c:2a: 9a:3c:65:24:b3:fe:73:9c:16:eb:52:5b:f6:51:86:36:39:3a: a7:07:3a:eb:21:47:46:52:da:b3:82:d2:aa:df:ea:1c:ef:e7: 27:fc:e7:fd:15:76:14:f8:bd:6c:d5:91:c2:cd:81:27:d6:6a: 48:c1:b7:92:ad:7b:20:a1:85:31:e3:7d:21:78:b4:bb:d2:50: db:81:21:2e:8b:16:a3:5c:a2:a2:bb:82:1d:62:2e:81:19:38: 31:9d:22:e2:06:7f:f8:56:6c:eb:b4:ae:79:6f:c9:ce:c6:db: f3:7b:84:c6:27:e7:1d:b4:91:33:49:b7:d1:5c:d7:0b:e5:6e: 78:84:7b:05:62:20:0e:67:34:ee:d3:39:44:09:54:11:14:24: 3d:b8:8c:53:4c:8e:d6:66:ef:a4:0a:8f:1b:eb:49:05:f7:53: 1a:3a:79:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnv7XQ7iqAkhkALwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMGZhYWMtNzkyYS00ZjcwLThmNGMtYmUwNmE1OTky YWUxMB4XDTI1MDQyNjE1MDAwM1oXDTI1MDQyOTE1MDAwMFowLzEtMCsGA1UEAxMk Y2Y1YTU3NzItZDJhYS00ZTc2LThjYzAtM2I0YjM0NzRhYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofr05SLOCzheSiCJkY5SCSxArxhKyPml+hdQ 68u2+RGl7YytnaACuZoA2XsFeWnqrxSGYyP2Dt9SMunH1bdPLuAXRtkGvVLC53Bd IclK32DNtkInlfDSubQ2IiBefiWelVXQla4LC4BMDJRzbmKzG6Kbkt8G6HAZr1e6 yz0TSjd7+gy2hjjCIeMMf8F1NNUA9JQElwdZycLXlJfoLz1QSEtZ+Ljxku2U1ejH HzNaNEyq0f7l9d91peS+vYi3jyV+oFQrYKbibm7YC+Jr47l++iib+/qRVK2IDu57 7U6951pB9FQsUlaHHkhV/Qz7QFfFoVNfqk1DmBVHKLuwpiX8kwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHC3KBNwbYQHfauQ7bL1dxJlKsswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNTIw ZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2YTU5OTJhZTEvYjUyMGZhYWMtNzkyYS00 ZjcwLThmNGMtYmUwNmE1OTkyYWUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjUyMGZhYWMtNzkyYS00ZjcwLThm NGMtYmUwNmE1OTkyYWUxL2I1MjBmYWFjLTc5MmEtNGY3MC04ZjRjLWJlMDZhNTk5 MmFlMS5jcmwwHwYDVR0jBBgwFoAUGWRkkNU0T7GCL1khuNRnTRD3YxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNTIwZmFhYy03OTJhLTRmNzAtOGY0Yy1iZTA2 YTU5OTJhZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBv4VUfV5zya+vAzVpvpRJu ijNkgI2D1JXWMjAwcYtPaMWbG2TAt3qHLDsBcBmf1IuM3/+s3+R8Q8PrzVn+YDds hA4MZsGBTyu7W5MAWpJbPSpw02ls6WBSXCqaPGUks/5znBbrUlv2UYY2OTqnBzrr IUdGUtqzgtKq3+oc7+cn/Of9FXYU+L1s1ZHCzYEn1mpIwbeSrXsgoYUx430heLS7 0lDbgSEuixajXKKiu4IdYi6BGTgxnSLiBn/4VmzrtK55b8nOxtvze4TGJ+cdtJEz SbfRXNcL5W54hHsFYiAOZzTu0zlECVQRFCQ9uIxTTI7WZu+kCo8b60kF91MaOnn3 -----END CERTIFICATE-----Generated at Sun Apr 27 07:13:20 2025 by rpki-client