$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.mft File: e8e8f8c7-948e-4994-91f1-b8f02a360f65.mft (raw, json) Hash identifier: qqzzhhs1tEvCCNLo2k13DAg7X2bRo+TzWnlZlKXoAMs= Subject key identifier: E7:B5:41:90:9E:C8:52:86:4D:D0:D0:FA:A7:F5:93:D1:C7:B5:D6:37 Authority key identifier: 74:D3:07:A4:EC:9B:DB:A4:55:1D:1C:F8:C1:0C:D8:DD:35:7D:5B:9B Certificate issuer: /CN=e8e8f8c7-948e-4994-91f1-b8f02a360f65 Certificate serial: 010D0C9F43285849A90751C9BA340A675FF59490 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.mft Manifest number: 010D0C9F432858449F501D33764D4CCE9951391F Signing time: Sun 27 Apr 2025 02:00:07 +0000 Manifest this update: Sun 27 Apr 2025 02:00:07 +0000 Manifest next update: Wed 30 Apr 2025 02:00:00 +0000 Files and hashes: 1: 8c8f0ae8-411f-39d0-816d-662eca67424f.roa (hash: 4PgzOymV+4x37Cb+jneu4Zug8n/kMJZ+1uNXXmusfo0=) 2: e8e8f8c7-948e-4994-91f1-b8f02a360f65.crl (hash: 0n7bcXfsDfyja7k0ffPqGz2oDTEoYe2YuQIB/X/39RE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:07:51:c9:ba:34:0a:67:5f:f5:94:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8e8f8c7-948e-4994-91f1-b8f02a360f65 Validity Not Before: Apr 27 02:00:07 2025 GMT Not After : Apr 30 02:00:00 2025 GMT Subject: CN=8df7aa73-fb34-42c3-b986-648230d812e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:b1:a1:fb:e9:e1:a5:44:d8:a0:c0:7b:35: 4e:ec:72:8b:3d:7f:04:1e:6d:d3:a1:d5:2b:e8:5d: c9:02:3e:76:3a:cc:52:15:7d:d4:09:ab:86:43:55: 7a:1a:1a:06:73:0c:3b:ba:f0:2b:02:50:ef:52:23: 1d:84:59:b9:b1:b1:bd:d3:82:2b:4a:35:ae:3b:72: 9c:9c:86:25:62:e9:a2:c8:c2:4b:cd:f0:59:b4:2e: 09:66:48:28:24:8a:3b:63:6c:c4:00:d8:ae:e1:e2: c6:5d:0c:f6:e1:d3:4c:95:df:85:b2:af:9d:ce:a3: 50:d0:df:da:e1:43:71:a1:21:ce:c3:7a:17:38:72: 25:7a:a9:c8:ef:ac:1c:91:71:4b:04:90:bd:dd:ed: 04:02:bd:cd:8e:2a:d4:7f:98:8a:59:84:69:52:a6: b6:9a:73:c7:43:86:ef:1d:11:1a:bc:59:10:5f:57: 77:b9:e9:6c:23:e7:2e:07:93:eb:a4:90:33:fd:82: e7:02:4d:d0:bf:a6:c2:4f:95:d1:e8:98:58:9e:dc: f8:53:56:93:58:26:f7:08:9d:7d:16:47:a2:ec:f0: 72:d4:aa:bc:ba:45:c7:ce:8c:69:fe:27:bc:2e:1c: 06:62:9a:c7:74:fa:e6:b8:59:7a:78:97:6f:85:8c: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:41:90:9E:C8:52:86:4D:D0:D0:FA:A7:F5:93:D1:C7:B5:D6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65/e8e8f8c7-948e-4994-91f1-b8f02a360f65.crl X509v3 Authority Key Identifier: keyid:74:D3:07:A4:EC:9B:DB:A4:55:1D:1C:F8:C1:0C:D8:DD:35:7D:5B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8e8f8c7-948e-4994-91f1-b8f02a360f65.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cf:54:8d:fa:69:70:0f:4a:89:89:ef:ed:8d:57:ed:b7:8b: 70:11:28:3c:9d:a6:e4:f3:ca:8e:aa:49:ec:b4:25:2d:00:61: b5:56:19:da:e8:89:e3:fe:63:51:cb:bd:02:42:cd:48:08:0b: 69:7e:0c:a2:ce:a7:b8:5e:19:a5:49:15:e3:65:91:cd:a4:e0: d5:a3:67:d9:3b:8f:ae:7a:d6:05:27:15:3a:a8:0d:16:82:b4: 0f:af:01:7d:97:48:98:94:5f:06:7d:73:75:f8:39:6e:00:46: 29:cc:e5:f1:76:37:fe:5e:9f:98:1e:b6:29:0c:ff:ff:30:c8: c9:63:2b:f3:f6:ee:a3:de:dd:52:2a:63:b7:fc:0a:64:d0:14: 8f:d8:8f:cc:3a:f4:ac:cb:92:3b:6d:0b:6c:c8:1d:57:97:0b: 2c:30:11:33:67:4a:88:9c:f5:37:a8:e2:02:89:ea:3e:f3:49: cc:17:11:f2:45:9b:41:d2:f7:c9:04:e1:ee:88:c6:e3:38:28: 9d:50:2d:05:0c:8b:a4:67:08:55:f8:01:38:94:48:37:1d:f1: 0e:2f:fc:21:28:a4:96:41:fa:d7:e9:e1:61:47:5c:bf:02:ae: 0e:b0:2b:59:1b:71:a3:87:46:37:ae:36:7b:fc:18:14:66:d1: a6:ea:82:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmpB1HJujQKZ1/1lJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThlOGY4YzctOTQ4ZS00OTk0LTkxZjEtYjhmMDJhMzYw ZjY1MB4XDTI1MDQyNzAyMDAwN1oXDTI1MDQzMDAyMDAwMFowLzEtMCsGA1UEAxMk OGRmN2FhNzMtZmIzNC00MmMzLWI5ODYtNjQ4MjMwZDgxMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWixofvp4aVE2KDAezVO7HKLPX8EHm3TodUr 6F3JAj52OsxSFX3UCauGQ1V6GhoGcww7uvArAlDvUiMdhFm5sbG904IrSjWuO3Kc nIYlYumiyMJLzfBZtC4JZkgoJIo7Y2zEANiu4eLGXQz24dNMld+Fsq+dzqNQ0N/a 4UNxoSHOw3oXOHIleqnI76wckXFLBJC93e0EAr3NjirUf5iKWYRpUqa2mnPHQ4bv HREavFkQX1d3uelsI+cuB5PrpJAz/YLnAk3Qv6bCT5XR6JhYntz4U1aTWCb3CJ19 Fkei7PBy1Kq8ukXHzoxp/ie8LhwGYprHdPrmuFl6eJdvhYyEPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOe1QZCeyFKGTdDQ+qf1k9HHtdY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lOGU4 ZjhjNy05NDhlLTQ5OTQtOTFmMS1iOGYwMmEzNjBmNjUvZThlOGY4YzctOTQ4ZS00 OTk0LTkxZjEtYjhmMDJhMzYwZjY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZThlOGY4YzctOTQ4ZS00OTk0LTkx ZjEtYjhmMDJhMzYwZjY1L2U4ZThmOGM3LTk0OGUtNDk5NC05MWYxLWI4ZjAyYTM2 MGY2NS5jcmwwHwYDVR0jBBgwFoAUdNMHpOyb26RVHRz4wQzY3TV9W5swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lOGU4ZjhjNy05NDhlLTQ5OTQtOTFmMS1iOGYw MmEzNjBmNjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHz1SN+mlwD0qJie/tjVft t4twESg8nabk88qOqknstCUtAGG1Vhna6Inj/mNRy70CQs1ICAtpfgyizqe4Xhml SRXjZZHNpODVo2fZO4+uetYFJxU6qA0WgrQPrwF9l0iYlF8GfXN1+DluAEYpzOXx djf+Xp+YHrYpDP//MMjJYyvz9u6j3t1SKmO3/Apk0BSP2I/MOvSsy5I7bQtsyB1X lwssMBEzZ0qInPU3qOICieo+80nMFxHyRZtB0vfJBOHuiMbjOCidUC0FDIukZwhV +AE4lEg3HfEOL/whKKSWQfrX6eFhR1y/Aq4OsCtZG3Gjh0Y3rjZ7/BgUZtGm6oIx -----END CERTIFICATE-----Generated at Sun Apr 27 22:20:21 2025 by rpki-client