$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft File: 1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft (raw, json) Hash identifier: CyZd1X5HbC5LRPJXsJqNXUZSNXGPQ8jfw3NKN5lRLWU= Subject key identifier: 54:0D:BF:E2:D6:35:EB:78:0C:87:03:CC:EB:26:E6:C3:19:82:F5:4E Authority key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Certificate issuer: /CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Certificate serial: 010D0C9F43285849ABD2FC5340440D567915C440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft Manifest number: 010D0C9F4328584073A835F83D41213838127221 Signing time: Mon 28 Apr 2025 02:02:07 +0000 Manifest this update: Mon 28 Apr 2025 02:02:07 +0000 Manifest next update: Wed 30 Apr 2025 02:00:00 +0000 Files and hashes: 1: 1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl (hash: v4HrAAIrvIYZdzYJzh0HoUGDzY9p9FhAgO2zZK1urbY=) 2: 356bd502-68bb-3607-a737-1dd0380dea93.roa (hash: 6nHCeKPT4cs4nbaR7oySMPiFJYED8t6VNUCn3k8hBjc=) 3: 826c9b32-80a3-3d5e-b64c-775640089e22.roa (hash: MFU6dmyLf2MBzw2bTBUU+JBT33HAP787e6S2s+2boV0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:d2:fc:53:40:44:0d:56:79:15:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Validity Not Before: Apr 28 02:02:07 2025 GMT Not After : Apr 30 02:00:00 2025 GMT Subject: CN=985dc4ce-8334-4478-9ee4-ddd0256290d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:e0:a0:f0:59:11:90:d9:7a:71:e9:90:c2: eb:89:02:0f:94:e3:3c:a2:07:90:73:6b:73:b8:9d: 7e:1e:5c:67:60:bf:cc:30:32:67:ed:ce:57:e9:3e: b3:33:40:99:a8:ac:ee:5e:1a:c1:61:90:e1:10:d3: 14:5c:72:b3:3f:12:2d:28:f0:f5:60:fc:42:42:82: ab:73:fb:94:fc:2d:6a:b8:9f:20:a2:a7:d8:77:ee: cd:29:e8:bc:a3:d2:35:87:3e:6a:a9:f5:01:9a:1c: 7f:a2:ab:02:67:b9:f6:e7:31:1d:8e:87:b4:b0:09: 8a:10:0d:12:4d:83:55:b3:34:35:11:c1:e2:18:71: 2f:fa:be:55:b0:2c:05:54:20:76:94:cb:84:5b:0d: 94:15:b5:7c:e2:ad:48:f6:af:d5:80:5e:28:61:ea: 61:13:86:a2:59:2c:f5:15:9f:f8:99:2b:7c:4e:61: d1:1a:2b:b1:69:f9:81:76:7b:99:4b:54:e6:ad:c2: 78:07:b6:1e:18:c9:48:3c:f2:19:e6:91:59:ba:81: 6b:20:85:5d:8a:f2:f0:43:fe:b4:fe:40:a9:c7:b8: 49:34:37:7d:bf:54:3b:97:65:4b:47:d1:13:43:06: be:51:ba:28:36:ad:7b:6e:ae:68:8c:8d:8b:5d:f2: 36:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:BF:E2:D6:35:EB:78:0C:87:03:CC:EB:26:E6:C3:19:82:F5:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl X509v3 Authority Key Identifier: keyid:2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:76:df:89:d8:52:2b:3b:ee:d7:19:5b:3f:0f:8c:f6:2e:77: f2:53:7a:0f:0d:10:09:cb:22:f2:3f:58:be:09:d1:88:eb:7a: 93:ed:59:28:df:3c:e7:86:28:fb:f2:7a:94:fb:59:ea:11:49: 87:43:9e:cd:c0:bb:a4:19:2e:d6:06:a3:b4:30:ec:73:c3:37: 22:e5:e2:fd:95:1c:c6:a7:3e:da:ef:a0:7c:29:25:e1:29:3b: 96:8a:19:89:b7:be:33:7e:cf:1d:df:3b:7b:41:db:72:e9:ad: 5d:b6:12:55:9a:cd:0e:28:4a:7c:3d:74:a6:05:2d:44:c2:f7: 41:51:cf:5d:f8:94:b6:e3:29:50:32:0f:e0:b4:7a:9d:8b:ea: e6:bf:41:d2:c0:77:a0:c9:69:19:74:10:c1:ae:96:fe:b1:db: 86:11:15:dd:c4:02:8b:90:d6:1e:e4:ee:b1:58:27:de:1d:59: 09:96:d4:3d:cf:73:d6:a8:94:ed:e0:af:0e:b2:7d:33:d2:e6: 73:2d:7b:28:1e:90:14:67:c3:80:5d:ce:9d:c0:79:13:69:54: 77:82:92:fb:5c:74:f2:24:ba:98:49:24:c7:5e:d5:d7:20:b5: 7b:d5:d9:5e:6d:c1:24:13:e1:5c:b1:b7:26:9c:3a:24:8a:ff: fa:d0:79:eb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmr0vxTQEQNVnkVxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2 YjFiMB4XDTI1MDQyODAyMDIwN1oXDTI1MDQzMDAyMDAwMFowLzEtMCsGA1UEAxMk OTg1ZGM0Y2UtODMzNC00NDc4LTllZTQtZGRkMDI1NjI5MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujjgoPBZEZDZenHpkMLriQIPlOM8ogeQc2tz uJ1+HlxnYL/MMDJn7c5X6T6zM0CZqKzuXhrBYZDhENMUXHKzPxItKPD1YPxCQoKr c/uU/C1quJ8goqfYd+7NKei8o9I1hz5qqfUBmhx/oqsCZ7n25zEdjoe0sAmKEA0S TYNVszQ1EcHiGHEv+r5VsCwFVCB2lMuEWw2UFbV84q1I9q/VgF4oYephE4aiWSz1 FZ/4mSt8TmHRGiuxafmBdnuZS1TmrcJ4B7YeGMlIPPIZ5pFZuoFrIIVdivLwQ/60 /kCpx7hJNDd9v1Q7l2VLR9ETQwa+UbooNq17bq5ojI2LXfI2lQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFQNv+LWNet4DIcDzOsm5sMZgvVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4 NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvMWE3ODQxMTItM2JiZi00 MWM4LTljMzItYmRiODVhZTc2YjFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE3ODQxMTItM2JiZi00MWM4LTlj MzItYmRiODVhZTc2YjFiLzFhNzg0MTEyLTNiYmYtNDFjOC05YzMyLWJkYjg1YWU3 NmIxYi5jcmwwHwYDVR0jBBgwFoAULF2EmYFdLcMooozsBRSfKeS2FzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4 NWFlNzZiMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAodt+J2FIrO+7XGVs/D4z2 LnfyU3oPDRAJyyLyP1i+CdGI63qT7Vko3zznhij78nqU+1nqEUmHQ57NwLukGS7W BqO0MOxzwzci5eL9lRzGpz7a76B8KSXhKTuWihmJt74zfs8d3zt7Qdty6a1dthJV ms0OKEp8PXSmBS1EwvdBUc9d+JS24ylQMg/gtHqdi+rmv0HSwHegyWkZdBDBrpb+ sduGERXdxAKLkNYe5O6xWCfeHVkJltQ9z3PWqJTt4K8Osn0z0uZzLXsoHpAUZ8OA Xc6dwHkTaVR3gpL7XHTyJLqYSSTHXtXXILV71dlebcEkE+FcsbcmnDokiv/60Hnr -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:43 2025 by rpki-client