$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft File: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft (raw, json) Hash identifier: XXQO34V8MWlaNPetLfB0lahCd6ZRH/uOFFRMdEFi6VU= Subject key identifier: FB:21:F2:B5:C1:B0:2B:16:23:BF:04:FE:03:AB:F2:F4:E0:F2:96:B8 Authority key identifier: 92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 Certificate issuer: /CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Certificate serial: 010D0C9F43285849AA1352B1C365A45E8C9BDA60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft Manifest number: 010D0C9F4328584073A85062F6BEE4FE4576765F Signing time: Sun 27 Apr 2025 11:00:07 +0000 Manifest this update: Sun 27 Apr 2025 11:00:07 +0000 Manifest next update: Wed 30 Apr 2025 11:00:00 +0000 Files and hashes: 1: 3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl (hash: z9CmEtpASc2sDTORmWdq9jOok9qOYBdVBHDksWGdWxg=) 2: f5ad0dde-a733-3deb-81db-42293449a543.roa (hash: 0G1if/JcmlV5qa07cFlFNsNKw7fvoQ+JogBEnpCVZ7U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:13:52:b1:c3:65:a4:5e:8c:9b:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ccb9ed0-7870-4a4a-bf28-cb86bca49137 Validity Not Before: Apr 27 11:00:07 2025 GMT Not After : Apr 30 11:00:00 2025 GMT Subject: CN=dc0d60f6-1e7f-45af-ad97-9cea3949c581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:ab:bd:a2:07:d2:77:54:e2:20:66:91:01: 78:f0:15:45:13:02:7a:d0:a4:2a:a1:61:d4:e7:74: 46:53:13:c3:f3:db:ed:02:d8:26:35:9b:99:4a:8a: 18:9c:68:e5:ba:60:1f:dc:ae:9f:ed:69:95:6e:da: 88:bc:ec:e5:71:0a:95:ed:cc:0a:f5:42:cb:56:40: aa:5b:1d:6a:98:ef:93:2d:39:cf:e2:df:87:dc:84: ca:15:d6:70:24:47:93:6a:fb:d0:43:6a:55:a3:4f: 16:1c:c1:3b:9f:ba:5a:71:2c:77:f9:6a:df:4d:9c: 87:11:73:0c:a0:4c:2a:5d:47:3a:46:9d:ff:2f:e6: f3:ed:06:27:7c:cd:ac:09:2d:07:55:ec:dc:6e:69: 64:88:72:ff:36:48:fb:a8:c9:a9:12:e7:8a:57:c8: ae:28:62:b4:56:0b:e3:1f:9e:5a:d5:81:8c:17:89: 69:8f:01:96:6d:5e:ee:ae:d1:71:30:94:f0:4e:7e: e8:70:35:fe:52:b3:46:5c:e8:c6:3e:7b:4d:a7:c1: 03:32:5a:19:40:63:2b:a5:05:a0:5d:21:70:cf:a6: a2:0b:10:9f:ac:a8:e7:78:83:c2:c1:30:ce:d4:94: 7f:89:26:3f:0e:87:bf:f8:b2:f8:86:2c:58:39:af: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:21:F2:B5:C1:B0:2B:16:23:BF:04:FE:03:AB:F2:F4:E0:F2:96:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.crl X509v3 Authority Key Identifier: keyid:92:A8:7E:36:E1:2A:E3:B9:02:AD:CD:7B:CD:EA:42:EF:B1:8D:20:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ccb9ed0-7870-4a4a-bf28-cb86bca49137.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:46:f3:74:3c:62:47:c4:39:92:53:93:dd:f6:1a:54:c5:00: 07:81:b8:38:3c:71:3c:4a:31:49:80:dc:e7:fb:cf:2b:90:e3: 06:e2:45:c1:85:6e:f8:7f:da:90:4d:4c:d2:27:5b:95:92:01: 23:4f:dd:44:14:d6:f0:a5:b4:47:5c:69:6a:33:92:79:6b:91: ee:a8:58:94:18:60:fb:fe:12:6c:d8:48:b8:bd:26:11:a7:61: cb:39:21:9e:ef:e3:04:71:66:c6:d0:72:2d:99:d1:33:2f:1f: 5d:03:d5:fa:e7:9f:c1:cb:bb:d2:1c:ae:4b:8f:a3:31:bf:aa: af:08:0d:21:ff:46:e2:ba:6b:7b:29:50:44:dd:f3:3c:83:5d: da:6c:93:82:4e:c3:a5:c5:fc:f2:78:e6:cd:af:dd:a4:f7:24: ed:df:f3:e9:75:6f:f1:54:6b:e9:91:e2:15:1b:87:cb:29:68: 7c:3c:1b:22:e9:45:05:e5:e3:e5:6e:c1:70:fc:09:7b:81:97: 70:ee:97:b0:c1:bd:2b:c4:0a:15:10:55:8f:fb:b4:2e:9e:96: ac:35:8d:35:81:99:20:77:65:a6:ea:67:08:23:ce:49:09:8e: 9e:9c:f2:1f:2c:a5:5d:08:a9:e5:93:f4:89:ac:2f:c3:fc:b3: be:e8:ed:9b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqE1Kxw2WkXoyb2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NjYjllZDAtNzg3MC00YTRhLWJmMjgtY2I4NmJjYTQ5 MTM3MB4XDTI1MDQyNzExMDAwN1oXDTI1MDQzMDExMDAwMFowLzEtMCsGA1UEAxMk ZGMwZDYwZjYtMWU3Zi00NWFmLWFkOTctOWNlYTM5NDljNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDirvaIH0ndU4iBmkQF48BVFEwJ60KQqoWHU 53RGUxPD89vtAtgmNZuZSooYnGjlumAf3K6f7WmVbtqIvOzlcQqV7cwK9ULLVkCq Wx1qmO+TLTnP4t+H3ITKFdZwJEeTavvQQ2pVo08WHME7n7pacSx3+WrfTZyHEXMM oEwqXUc6Rp3/L+bz7QYnfM2sCS0HVezcbmlkiHL/Nkj7qMmpEueKV8iuKGK0Vgvj H55a1YGMF4lpjwGWbV7urtFxMJTwTn7ocDX+UrNGXOjGPntNp8EDMloZQGMrpQWg XSFwz6aiCxCfrKjneIPCwTDO1JR/iSY/Doe/+LL4hixYOa9Z4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPsh8rXBsCsWI78E/gOr8vTg8pa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zY2Ni OWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2YmNhNDkxMzcvM2NjYjllZDAtNzg3MC00 YTRhLWJmMjgtY2I4NmJjYTQ5MTM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2NjYjllZDAtNzg3MC00YTRhLWJm MjgtY2I4NmJjYTQ5MTM3LzNjY2I5ZWQwLTc4NzAtNGE0YS1iZjI4LWNiODZiY2E0 OTEzNy5jcmwwHwYDVR0jBBgwFoAUkqh+NuEq47kCrc17zepC77GNICIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zY2NiOWVkMC03ODcwLTRhNGEtYmYyOC1jYjg2 YmNhNDkxMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3RvN0PGJHxDmSU5Pd9hpU xQAHgbg4PHE8SjFJgNzn+88rkOMG4kXBhW74f9qQTUzSJ1uVkgEjT91EFNbwpbRH XGlqM5J5a5HuqFiUGGD7/hJs2Ei4vSYRp2HLOSGe7+MEcWbG0HItmdEzLx9dA9X6 55/By7vSHK5Lj6Mxv6qvCA0h/0biumt7KVBE3fM8g13abJOCTsOlxfzyeObNr92k 9yTt3/PpdW/xVGvpkeIVG4fLKWh8PBsi6UUF5ePlbsFw/Al7gZdw7pewwb0rxAoV EFWP+7QunpasNY01gZkgd2Wm6mcII85JCY6enPIfLKVdCKnlk/SJrC/D/LO+6O2b -----END CERTIFICATE-----Generated at Mon Apr 28 01:21:42 2025 by rpki-client