$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft File: d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft (raw, json) Hash identifier: 9+JjD0DfnMv++MXb9udzh506n3evNM2OHaezGQy7GWo= Subject key identifier: CA:23:34:5F:B5:A6:CB:91:25:1D:7E:8A:DD:3E:4D:E6:20:26:61:50 Authority key identifier: 28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 Certificate issuer: /CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Certificate serial: 010D0C9F43285849AAE3BC2D6E4C7158A543CB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft Manifest number: 010D0C9F43285845245DC2C2FF212572DC4AD86A Signing time: Sun 27 Apr 2025 18:00:03 +0000 Manifest this update: Sun 27 Apr 2025 18:00:03 +0000 Manifest next update: Tue 29 Apr 2025 18:00:00 +0000 Files and hashes: 1: 87d71f1f-6031-3c07-a5be-87011997fac7.roa (hash: 9xRKQPJfx9E7a5Jrzr6xeXoN4nga2IzUjyzKeS4uZkY=) 2: d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl (hash: j3UIBkgd0dU79eZco5r5mio6d6Jd0FZa0r4sh7jMWCE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:e3:bc:2d:6e:4c:71:58:a5:43:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d20c4c38-abc3-4fac-8a76-61a9560a23a3 Validity Not Before: Apr 27 18:00:03 2025 GMT Not After : Apr 29 18:00:00 2025 GMT Subject: CN=2ab4c675-7920-481a-9f82-6a39f1fcb31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:6c:e4:4d:5d:5f:c3:39:35:ab:72:9c:73: 82:10:1e:15:80:82:36:f0:82:f5:3e:bf:1a:c1:ba: 78:fd:91:e6:cd:7e:1f:f0:67:34:a0:ef:6f:51:7b: 67:50:3c:bf:86:ed:a5:de:dd:8c:03:bf:9f:a9:e6: 2b:c9:13:60:07:68:ea:f7:21:8d:71:f2:30:22:8a: 79:b9:0f:d9:e0:26:5c:0d:9f:e7:12:f2:69:dd:6a: 98:28:96:64:2f:e5:2c:75:87:5e:35:b8:27:f9:01: 85:44:52:6a:2c:d0:1e:9d:a9:0d:9f:49:fb:d1:13: c1:fa:ea:f7:7e:5d:46:72:6e:67:ef:44:77:90:ab: 64:19:4f:5a:8f:97:c7:5a:f8:78:3c:2b:d7:98:ff: b9:b9:cf:fb:6c:06:fa:05:2f:47:97:c2:2f:ad:6c: bc:8c:dd:48:c9:86:63:64:f1:5d:f7:14:38:9a:e5: ad:fc:1a:6c:b9:e1:c4:06:6b:c2:de:59:97:e2:e8: 58:63:78:0b:1c:c5:f3:be:ce:c8:31:d0:71:8a:f3: 80:31:0a:9f:6e:9a:2c:5c:5d:aa:84:fa:77:3b:f6: db:5b:4d:5f:4d:d2:29:7e:62:22:ff:7b:7b:e7:3d: 69:ee:d0:b1:f0:e0:8b:00:be:17:bf:40:c4:4b:71: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:23:34:5F:B5:A6:CB:91:25:1D:7E:8A:DD:3E:4D:E6:20:26:61:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3/d20c4c38-abc3-4fac-8a76-61a9560a23a3.crl X509v3 Authority Key Identifier: keyid:28:09:40:63:2A:32:38:2E:BD:8C:66:D5:1A:D4:0C:5E:BE:71:14:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d20c4c38-abc3-4fac-8a76-61a9560a23a3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c4:d3:aa:3d:c8:a4:a1:af:10:87:be:e2:a2:4a:c3:30:5a: e5:ce:dd:0f:d2:3d:48:d6:95:11:32:e6:84:7b:cf:58:90:1f: 54:07:46:26:e8:c2:57:91:54:6c:1d:0e:60:b9:7a:05:f3:bf: c6:9d:55:3e:61:c2:82:ba:fa:b9:74:e2:33:2c:89:74:dd:27: f6:0c:94:ca:79:d7:b2:10:c2:a2:17:a5:1c:8e:45:24:c1:3b: 65:73:03:01:4e:51:a7:48:e5:08:65:5b:bf:54:2e:a1:56:3a: d7:36:ec:93:fe:5e:d5:72:4e:f0:17:39:9a:2a:03:70:2f:19: 86:8e:40:29:e8:eb:48:0a:85:d2:54:92:69:e1:e6:fa:c8:15: 4c:e2:0f:e1:3a:14:30:d3:e3:51:48:c6:37:c1:10:0e:bb:f6: bf:91:8f:c0:7c:3a:d7:84:6b:80:00:df:8f:20:9f:77:0a:ab: bb:05:25:78:4a:27:3a:88:de:37:7c:2b:95:2f:d9:c8:bb:aa: e9:10:de:b7:53:0d:3f:84:56:5f:c3:9d:10:81:11:9b:8b:37: e2:0c:a5:cb:74:9b:3e:ed:44:a3:52:42:6c:e2:e8:52:50:a8: 18:79:c2:64:b2:46:b7:7f:3a:e6:3e:06:03:1b:0c:c1:4b:16: 93:1a:23:df -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmq47wtbkxxWKVDywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIwYzRjMzgtYWJjMy00ZmFjLThhNzYtNjFhOTU2MGEy M2EzMB4XDTI1MDQyNzE4MDAwM1oXDTI1MDQyOTE4MDAwMFowLzEtMCsGA1UEAxMk MmFiNGM2NzUtNzkyMC00ODFhLTlmODItNmEzOWYxZmNiMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjERs5E1dX8M5NatynHOCEB4VgII28IL1Pr8a wbp4/ZHmzX4f8Gc0oO9vUXtnUDy/hu2l3t2MA7+fqeYryRNgB2jq9yGNcfIwIop5 uQ/Z4CZcDZ/nEvJp3WqYKJZkL+UsdYdeNbgn+QGFRFJqLNAenakNn0n70RPB+ur3 fl1Gcm5n70R3kKtkGU9aj5fHWvh4PCvXmP+5uc/7bAb6BS9Hl8IvrWy8jN1IyYZj ZPFd9xQ4muWt/BpsueHEBmvC3lmX4uhYY3gLHMXzvs7IMdBxivOAMQqfbposXF2q hPp3O/bbW01fTdIpfmIi/3t75z1p7tCx8OCLAL4Xv0DES3Gp+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMojNF+1psuRJR1+it0+TeYgJmFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjBj NGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5NTYwYTIzYTMvZDIwYzRjMzgtYWJjMy00 ZmFjLThhNzYtNjFhOTU2MGEyM2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDIwYzRjMzgtYWJjMy00ZmFjLThh NzYtNjFhOTU2MGEyM2EzL2QyMGM0YzM4LWFiYzMtNGZhYy04YTc2LTYxYTk1NjBh MjNhMy5jcmwwHwYDVR0jBBgwFoAUKAlAYyoyOC69jGbVGtQMXr5xFGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjBjNGMzOC1hYmMzLTRmYWMtOGE3Ni02MWE5 NTYwYTIzYTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBxNOqPcikoa8Qh77iokrD MFrlzt0P0j1I1pURMuaEe89YkB9UB0Ym6MJXkVRsHQ5guXoF87/GnVU+YcKCuvq5 dOIzLIl03Sf2DJTKedeyEMKiF6UcjkUkwTtlcwMBTlGnSOUIZVu/VC6hVjrXNuyT /l7Vck7wFzmaKgNwLxmGjkAp6OtICoXSVJJp4eb6yBVM4g/hOhQw0+NRSMY3wRAO u/a/kY/AfDrXhGuAAN+PIJ93Cqu7BSV4Sic6iN43fCuVL9nIu6rpEN63Uw0/hFZf w50QgRGbizfiDKXLdJs+7USjUkJs4uhSUKgYecJkska3fzrmPgYDGwzBSxaTGiPf -----END CERTIFICATE-----Generated at Mon Apr 28 14:56:20 2025 by rpki-client