$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft File: 207c40f4-33c4-478b-ae61-d3f51358881b.mft (raw, json) Hash identifier: DKo8+6MOFh3wpPbaxciNbubyFDNrxeaPidjTQ4V394Q= Subject key identifier: F9:1B:68:F0:C5:2D:43:2D:77:92:06:65:59:CD:BF:DC:48:D5:E4:84 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F43285849A8903358A037D9FCC4982CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft Manifest number: 010D0C9F4328584073A82D4189108E20C31E23DF Signing time: Sat 26 Apr 2025 22:00:07 +0000 Manifest this update: Sat 26 Apr 2025 22:00:07 +0000 Manifest next update: Tue 29 Apr 2025 22:00:00 +0000 Files and hashes: 1: 207c40f4-33c4-478b-ae61-d3f51358881b.crl (hash: l5FueMHSosBp3JKrSYHhqZyw48yMtyPKmkomh1tydnY=) 2: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (hash: p9joSs8ihTs1tPBNI5o4W6aJ7rEz9OqOlAxew1AuTXk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:90:33:58:a0:37:d9:fc:c4:98:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Apr 26 22:00:07 2025 GMT Not After : Apr 29 22:00:00 2025 GMT Subject: CN=a99b7111-a4e7-4aa4-9ffd-5df62c9caf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:8b:03:a1:7a:a5:12:f6:62:34:d5:59:65: 5f:53:56:1a:ab:aa:d7:ed:9d:95:5f:97:08:31:0d: 28:31:66:bf:75:6f:a5:7f:b6:f4:ee:8a:2e:fd:31: ca:f6:30:3b:13:0c:69:99:c2:0b:e6:cb:b8:8c:f2: c3:28:ab:53:61:4d:51:2b:29:48:d2:ce:5c:88:53: e4:12:75:ae:62:9c:7b:e6:51:7a:00:92:06:e4:d6: 3a:3d:85:15:73:ea:61:d2:4c:9b:aa:8c:1a:80:94: 3c:1e:91:ee:0e:9b:0e:e8:0b:af:3c:7d:73:5e:78: 3f:b3:fc:a2:47:fb:9e:1d:cf:99:f5:bc:16:e2:c0: 32:96:94:75:f1:12:f1:0e:ae:10:34:37:a3:dd:d5: 21:72:ac:1d:8f:f7:49:f0:ca:91:9a:41:56:b9:a7: 90:20:8b:d0:45:52:0e:c4:29:02:8a:ba:92:58:3c: e0:c3:53:f9:b7:09:43:69:83:2d:95:2a:0c:34:3d: 18:b0:ab:71:aa:28:b6:07:5e:a6:78:45:ec:0e:a6: 5e:fd:78:c3:37:27:15:e3:36:82:1d:05:7f:45:e0: 80:4f:3d:f9:95:5d:32:75:8a:67:48:46:ac:25:b9: 9a:da:ed:3f:1b:43:f5:c0:74:4e:d1:2f:0b:09:96: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:68:F0:C5:2D:43:2D:77:92:06:65:59:CD:BF:DC:48:D5:E4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:46:7a:c0:91:d2:ba:7e:a1:cd:d2:54:37:0d:70:43:da:8b: 36:2a:c1:14:cf:a3:17:e1:d5:da:66:cc:3d:81:e8:05:40:56: d5:a8:ab:90:d2:42:ca:67:0b:36:93:bd:46:a5:20:74:7c:05: a2:36:08:77:3e:b0:11:61:5d:e1:99:ac:66:9a:cc:ce:61:f4: 96:4b:c1:d8:8d:a1:cd:d5:73:36:9d:ff:7f:2c:a2:a4:0c:6e: 99:e8:82:14:14:47:bc:12:7c:7e:99:60:af:41:42:83:a2:65: 0b:93:85:90:98:f6:0d:43:1a:bc:6f:50:b6:83:dd:f1:ee:51: 52:a4:0b:29:ce:a0:b1:e2:6c:0e:52:da:a8:5c:e9:51:a4:48: e2:77:01:83:bc:db:d8:ba:93:9d:58:6f:2a:bf:9f:44:6d:7c: 74:34:5e:1c:fc:94:e8:f3:27:a0:9e:60:19:04:2b:a2:7a:88: 14:7d:34:36:ea:87:3b:ec:d2:c9:a4:9e:fe:5e:57:88:57:26: 5d:8b:90:9e:70:6f:66:39:b8:60:60:fb:c5:c5:dd:59:74:a0: 13:25:a0:af:5d:6e:93:49:6b:f9:93:03:89:39:b4:ee:c3:ee: 34:e1:6f:45:7f:74:18:db:29:65:d9:bd:0b:86:55:a6:a0:75: 17:b9:c3:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmokDNYoDfZ/MSYLOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI1MDQyNjIyMDAwN1oXDTI1MDQyOTIyMDAwMFowLzEtMCsGA1UEAxMk YTk5YjcxMTEtYTRlNy00YWE0LTlmZmQtNWRmNjJjOWNhZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkqLA6F6pRL2YjTVWWVfU1Yaq6rX7Z2VX5cI MQ0oMWa/dW+lf7b07oou/THK9jA7EwxpmcIL5su4jPLDKKtTYU1RKylI0s5ciFPk EnWuYpx75lF6AJIG5NY6PYUVc+ph0kybqowagJQ8HpHuDpsO6AuvPH1zXng/s/yi R/ueHc+Z9bwW4sAylpR18RLxDq4QNDej3dUhcqwdj/dJ8MqRmkFWuaeQIIvQRVIO xCkCirqSWDzgw1P5twlDaYMtlSoMND0YsKtxqii2B16meEXsDqZe/XjDNycV4zaC HQV/ReCATz35lV0ydYpnSEasJbma2u0/G0P1wHRO0S8LCZaNewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPkbaPDFLUMtd5IGZVnNv9xI1eSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMjA3YzQwZjQtMzNjNC00 NzhiLWFlNjEtZDNmNTEzNTg4ODFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSRnrAkdK6fqHN0lQ3DXBD 2os2KsEUz6MX4dXaZsw9gegFQFbVqKuQ0kLKZws2k71GpSB0fAWiNgh3PrARYV3h maxmmszOYfSWS8HYjaHN1XM2nf9/LKKkDG6Z6IIUFEe8Enx+mWCvQUKDomULk4WQ mPYNQxq8b1C2g93x7lFSpAspzqCx4mwOUtqoXOlRpEjidwGDvNvYupOdWG8qv59E bXx0NF4c/JTo8yegnmAZBCuieogUfTQ26oc77NLJpJ7+XleIVyZdi5CecG9mObhg YPvFxd1ZdKATJaCvXW6TSWv5kwOJObTuw+404W9Ff3QY2yll2b0LhlWmoHUXucOx -----END CERTIFICATE-----Generated at Sun Apr 27 20:31:48 2025 by rpki-client