$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft File: 40e46360-7ddb-4bec-b73a-9620baea4da1.mft (raw, json) Hash identifier: epJCjJBiQEyXq62YSXQrS0PISFx1Z8UmannU2AGorPI= Subject key identifier: 1E:24:E5:B3:0A:D4:F7:D2:55:5E:55:8C:10:C2:E4:B9:EA:B8:91:C5 Authority key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Certificate issuer: /CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Certificate serial: 010D0C9F43285849A8ADFCC1066D6ADABA217600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft Manifest number: 010D0C9F4328584073A82E66D03332414A64845F Signing time: Sat 26 Apr 2025 23:00:07 +0000 Manifest this update: Sat 26 Apr 2025 23:00:07 +0000 Manifest next update: Tue 29 Apr 2025 23:00:00 +0000 Files and hashes: 1: 40e46360-7ddb-4bec-b73a-9620baea4da1.crl (hash: W0BqU0zAVwq8rik9TjWyu2vqk2GiJ+BEwUOPZD1g+/k=) 2: cc7d18d8-833d-3191-afa1-bdc08dfa3be1.roa (hash: cXJhsqEJdDIsdBf1QslyhsZVXQKdfanxnmRvB/76cUQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:ad:fc:c1:06:6d:6a:da:ba:21:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Validity Not Before: Apr 26 23:00:07 2025 GMT Not After : Apr 29 23:00:00 2025 GMT Subject: CN=3c3bbb00-82e2-4fcf-a443-684ba16ed6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:7f:cc:1b:5d:1c:41:22:b8:4b:cb:33:ef: d0:21:78:ba:05:93:d4:5d:7f:5f:05:3e:c3:86:eb: d6:16:ac:ff:e0:73:b5:42:aa:0d:b0:fb:7e:0b:3c: ad:96:e8:da:eb:5a:39:7c:58:33:4c:d9:0b:8b:f5: a4:7f:9b:fc:17:8c:da:76:f7:2e:7e:72:5d:80:08: 0b:98:16:c2:b8:78:d4:86:77:b2:49:94:8d:30:ef: b0:50:98:48:b8:08:29:1e:1f:f9:47:50:1e:a3:88: c2:df:de:76:47:89:e4:5c:f5:16:67:f9:7b:7c:f3: 58:2c:a5:8d:37:06:55:8f:e5:8e:8b:26:ae:78:7d: 64:0e:01:69:65:3d:1e:6a:60:54:dc:bb:43:1a:cc: 4f:03:03:6e:e4:64:46:e0:ed:bb:0a:be:a5:6b:7c: 4f:7c:d7:87:b0:97:e0:82:f6:bd:ac:1c:90:ce:3d: 8a:58:ed:d7:e2:56:9c:76:13:09:86:80:f5:fc:ed: 1c:08:13:8f:1a:a6:79:16:cf:4a:32:06:a1:1b:74: 8d:af:9e:dc:4f:a2:2f:98:92:b1:d6:0f:c8:35:da: 6f:a7:d7:26:1b:54:1c:2e:73:f2:ca:f6:9f:73:98: 95:5a:81:bc:80:bc:95:9e:b4:bc:3b:66:b7:d9:04: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:24:E5:B3:0A:D4:F7:D2:55:5E:55:8C:10:C2:E4:B9:EA:B8:91:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.crl X509v3 Authority Key Identifier: keyid:46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f0:06:30:d9:71:7a:3b:b5:eb:42:1c:d6:bd:c0:e9:02:0a: 9c:8e:76:cd:68:d2:b5:ad:e6:44:88:48:13:d8:6e:b5:4a:e7: 09:a4:96:1a:78:00:97:06:f4:46:ca:3f:f4:41:b3:bb:71:6f: 94:02:99:49:ea:b1:7f:b9:21:bf:c3:4a:01:4b:e2:b0:03:11: c4:91:4d:96:4c:01:88:99:52:ae:02:4a:3d:e9:78:21:03:de: da:cb:85:6b:ec:33:12:df:64:c0:d0:82:7f:60:27:28:02:bb: d4:70:da:c2:20:a7:6d:9a:f4:1b:04:01:e0:3f:5d:c5:b8:5a: 73:03:e2:67:1d:73:b8:98:0c:07:e3:e0:7c:1b:9c:46:32:0c: 6c:0f:a8:84:9b:d9:ea:cf:82:99:39:b9:aa:fa:16:ee:36:c6: c4:ca:2e:30:b1:13:83:e0:0e:fa:42:04:17:1d:30:38:48:e8: 2f:ae:d0:bd:c0:f3:b8:ef:62:b3:27:64:35:8f:a5:b3:9d:f7: 62:bc:e0:72:3e:69:c0:e3:58:cf:3c:71:0c:22:45:48:d6:ee: aa:81:15:2b:36:dd:a3:77:5f:74:39:c6:a0:11:be:82:af:ca: eb:a6:93:be:07:d2:88:16:23:8a:0d:eb:79:0d:b6:0b:f5:84: fd:f5:d0:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmorfzBBm1q2rohdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0 ZGExMB4XDTI1MDQyNjIzMDAwN1oXDTI1MDQyOTIzMDAwMFowLzEtMCsGA1UEAxMk M2MzYmJiMDAtODJlMi00ZmNmLWE0NDMtNjg0YmExNmVkNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjh/zBtdHEEiuEvLM+/QIXi6BZPUXX9fBT7D huvWFqz/4HO1QqoNsPt+Czytluja61o5fFgzTNkLi/Wkf5v8F4zadvcufnJdgAgL mBbCuHjUhneySZSNMO+wUJhIuAgpHh/5R1Aeo4jC3952R4nkXPUWZ/l7fPNYLKWN NwZVj+WOiyaueH1kDgFpZT0eamBU3LtDGsxPAwNu5GRG4O27Cr6la3xPfNeHsJfg gva9rByQzj2KWO3X4lacdhMJhoD1/O0cCBOPGqZ5Fs9KMgahG3SNr57cT6IvmJKx 1g/INdpvp9cmG1QcLnPyyvafc5iVWoG8gLyVnrS8O2a32QTMLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB4k5bMK1PfSVV5VjBDC5LnquJHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0 NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvNDBlNDYzNjAtN2RkYi00 YmVjLWI3M2EtOTYyMGJhZWE0ZGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBlNDYzNjAtN2RkYi00YmVjLWI3 M2EtOTYyMGJhZWE0ZGExLzQwZTQ2MzYwLTdkZGItNGJlYy1iNzNhLTk2MjBiYWVh NGRhMS5jcmwwHwYDVR0jBBgwFoAURo5sR7ptMKLQojxtaC3Dd8RwGeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIw YmFlYTRkYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBz8AYw2XF6O7XrQhzWvcDp AgqcjnbNaNK1reZEiEgT2G61SucJpJYaeACXBvRGyj/0QbO7cW+UAplJ6rF/uSG/ w0oBS+KwAxHEkU2WTAGImVKuAko96XghA97ay4Vr7DMS32TA0IJ/YCcoArvUcNrC IKdtmvQbBAHgP13FuFpzA+JnHXO4mAwH4+B8G5xGMgxsD6iEm9nqz4KZObmq+hbu NsbEyi4wsROD4A76QgQXHTA4SOgvrtC9wPO472KzJ2Q1j6WznfdivOByPmnA41jP PHEMIkVI1u6qgRUrNt2jd190OcagEb6Cr8rrppO+B9KIFiOKDet5DbYL9YT99dAU -----END CERTIFICATE-----Generated at Sun Apr 27 14:24:05 2025 by rpki-client