$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft (raw, json) Hash identifier: ooXsXcS6OvJDqZRGv6GPfqe5Fnz2m44xqtyl4qsoQQ4= Subject key identifier: 8D:C7:41:A6:3B:63:49:E4:49:99:AF:DC:BF:0E:78:30:46:72:01:B0 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F43285849B0D27C9CA6F966AA83057980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft Manifest number: 010D0C9F43285847EC999102C00F9169FD079945 Signing time: Tue 29 Apr 2025 21:00:07 +0000 Manifest this update: Tue 29 Apr 2025 21:00:07 +0000 Manifest next update: Fri 02 May 2025 21:00:00 +0000 Files and hashes: 1: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl (hash: RqQVTMRJHLwdJm0LIaWyy2caGwmdX4I7wUy+Cir/eFE=) 2: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (hash: vqyvObdwacG0BvBmuICe1MB7sTmdrlCEsmSJKA96FSA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:d2:7c:9c:a6:f9:66:aa:83:05:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Apr 29 21:00:07 2025 GMT Not After : May 2 21:00:00 2025 GMT Subject: CN=31e82628-7d42-4af1-9a3c-1c84a8f19b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:a3:f5:cd:21:2f:ce:6b:b6:65:d7:56:ac: 5d:39:17:9f:84:d1:58:fb:34:ad:b0:4e:ce:47:d8: 51:b1:b6:ac:e9:aa:fe:b5:e1:9d:05:fa:08:e5:cc: c5:16:59:e1:e7:57:47:ad:80:82:69:71:9c:86:80: e2:24:f5:2a:d6:4e:fc:0a:58:1c:6f:48:c2:db:89: 5c:5f:d4:17:db:c7:3f:87:70:93:17:4c:89:ce:3d: bc:5c:3c:f5:44:87:a4:e7:2c:f8:32:93:b5:ab:a6: 90:e3:6d:cf:3e:b3:fa:f8:19:b8:47:16:1d:49:e3: 32:ed:a4:61:3f:ee:0a:8d:7f:9f:e1:20:97:0f:da: c2:0a:c3:d4:61:9e:e0:0e:f5:50:67:b7:d5:20:4b: bb:c1:87:31:ce:fa:d2:cb:6d:bd:ec:37:68:ab:44: 0f:01:67:c4:4f:4f:b0:90:6f:7c:1a:45:11:c0:94: e8:f8:3b:29:5e:62:5d:7a:c1:b1:ab:e4:20:a0:12: e8:d3:f7:d5:b3:e5:06:67:89:3f:a1:e9:3e:93:7d: 2a:de:38:de:e3:78:df:40:04:f8:95:9e:d9:26:c9: 86:36:35:ee:18:22:d2:e1:b8:ef:ce:39:15:2b:5b: f7:74:68:c7:79:4f:18:77:58:0d:1f:88:cf:f4:ac: 4d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C7:41:A6:3B:63:49:E4:49:99:AF:DC:BF:0E:78:30:46:72:01:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:8f:27:73:3f:06:79:43:ce:1c:b0:3f:f5:17:fa:b0:0f:15: 8f:bb:2b:0b:ec:65:6c:01:a9:9a:b8:86:f9:4e:ea:83:7c:eb: 7e:e4:8f:ac:b7:19:5d:c8:d5:62:7f:a1:79:0a:52:80:b0:7c: 0b:f6:0c:01:71:f5:51:36:7e:80:03:77:3d:60:9e:d4:ae:ee: 85:6f:79:a8:b9:3f:74:22:0e:76:9c:fc:8e:63:d7:92:69:1e: a0:31:ca:1d:76:76:5a:a6:9d:23:36:7e:a5:8f:2a:52:75:c2: 60:38:d9:40:1e:e6:4c:12:79:52:4e:24:35:4c:80:98:f4:b2: e6:06:2d:9c:eb:5d:a9:09:84:14:51:cc:59:76:7a:8b:8f:25: 0f:26:6e:54:f8:71:82:bb:bf:88:51:0b:d8:00:df:3f:31:34: e0:24:3d:19:fa:d5:21:73:49:21:8a:aa:67:ca:e9:d4:1e:95: fc:ce:ee:fa:7e:d1:2b:76:1c:ed:37:37:0a:c9:d1:f5:30:3b: ac:04:b5:a9:d4:50:78:fa:5b:51:0c:4a:3e:80:6d:8e:3d:5a: 34:52:c1:28:25:bb:16:11:c5:63:e1:99:ef:84:00:09:ff:2a: 74:2b:62:16:36:57:9c:7e:75:1f:66:02:5a:94:d9:0a:bb:2a: b2:52:bc:7f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmw0nycpvlmqoMFeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MDQyOTIxMDAwN1oXDTI1MDUwMjIxMDAwMFowLzEtMCsGA1UEAxMk MzFlODI2MjgtN2Q0Mi00YWYxLTlhM2MtMWM4NGE4ZjE5YjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9mj9c0hL85rtmXXVqxdORefhNFY+zStsE7O R9hRsbas6ar+teGdBfoI5czFFlnh51dHrYCCaXGchoDiJPUq1k78Clgcb0jC24lc X9QX28c/h3CTF0yJzj28XDz1RIek5yz4MpO1q6aQ423PPrP6+Bm4RxYdSeMy7aRh P+4KjX+f4SCXD9rCCsPUYZ7gDvVQZ7fVIEu7wYcxzvrSy2297Ddoq0QPAWfET0+w kG98GkURwJTo+DspXmJdesGxq+QgoBLo0/fVs+UGZ4k/oek+k30q3jje43jfQAT4 lZ7ZJsmGNjXuGCLS4bjvzjkVK1v3dGjHeU8Yd1gNH4jP9KxN1wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI3HQaY7Y0nkSZmv3L8OeDBGcgGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMzI0YjdlMWItMWMyOS00 MzMxLWIwZjUtY2E5ZTIyMGZkNzRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBejydzPwZ5Q84csD/1F/qw DxWPuysL7GVsAamauIb5TuqDfOt+5I+stxldyNVif6F5ClKAsHwL9gwBcfVRNn6A A3c9YJ7Uru6Fb3mouT90Ig52nPyOY9eSaR6gMcoddnZapp0jNn6ljypSdcJgONlA HuZMEnlSTiQ1TICY9LLmBi2c612pCYQUUcxZdnqLjyUPJm5U+HGCu7+IUQvYAN8/ MTTgJD0Z+tUhc0khiqpnyunUHpX8zu76ftErdhztNzcKydH1MDusBLWp1FB4+ltR DEo+gG2OPVo0UsEoJbsWEcVj4ZnvhAAJ/yp0K2IWNlecfnUfZgJalNkKuyqyUrx/ -----END CERTIFICATE-----Generated at Wed Apr 30 00:17:42 2025 by rpki-client