$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: YVv+MFw13wX3PAD2+uDntVwt3ffP79oqEUEoPu/fR/E= Subject key identifier: 7C:FA:BA:8A:00:4E:42:35:C9:DC:40:15:C8:0B:3D:CD:06:46:35:66 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F43285849A9D7C39862927FC1C41D4E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF0223E0 Signing time: Sun 27 Apr 2025 09:00:07 +0000 Manifest this update: Sun 27 Apr 2025 09:00:07 +0000 Manifest next update: Wed 30 Apr 2025 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: aGjTZ2c+cBbLwNqdCF68pLulXLEichILESRVVSqiOH8=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: 8mI1mAFvRjR7sgTriloSwnt7WlUx2giXk2PQpU+WO7E=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:d7:c3:98:62:92:7f:c1:c4:1d:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Apr 27 09:00:07 2025 GMT Not After : Apr 30 09:00:00 2025 GMT Subject: CN=a0cd91a9-3b8f-40e9-aa5e-79b8b5378a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ab:b3:b1:0e:37:a6:45:68:c6:cd:2f:7b:af: aa:47:47:a1:43:fb:e9:7d:ef:ee:63:59:d7:c6:04: ec:9a:07:ec:f5:49:dc:21:72:c4:f7:4e:a6:0d:ed: 66:14:db:cd:d8:95:f9:74:b1:53:b5:25:28:ec:a7: 76:75:36:2b:74:e7:47:f1:42:34:21:55:42:1e:9e: 65:b3:75:72:d5:67:1e:fa:51:0e:4b:bc:7e:8f:eb: d5:2e:79:fa:66:05:94:a7:46:fe:ab:72:86:91:84: 48:17:41:ea:35:37:01:54:b2:8f:a3:35:8b:45:c3: 36:21:21:fb:4b:4a:0b:73:d7:e3:a8:e6:41:c3:c9: 6d:65:62:a7:08:e0:14:2d:a9:b1:78:dd:ac:f4:95: 98:cb:43:12:31:ef:37:30:ac:d6:8d:eb:62:12:e5: f5:1c:df:b5:cc:4f:44:a1:b2:96:d0:47:c0:a7:ee: 28:db:ca:1f:5a:6e:0c:e8:b2:14:c2:cd:81:4b:e8: c9:61:9f:da:27:e0:14:9a:cc:32:34:9d:06:98:67: ff:a7:41:58:bb:b4:02:11:1e:8f:e0:3e:c5:26:04: 4c:07:f6:bc:16:5d:ba:01:b9:c5:e4:b6:a0:aa:99: c8:3b:12:83:7a:35:07:fb:96:58:e6:e3:fd:51:6b: de:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FA:BA:8A:00:4E:42:35:C9:DC:40:15:C8:0B:3D:CD:06:46:35:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d0:ba:15:17:ce:63:da:ee:2d:b7:0a:69:8e:cf:88:60:ca: 73:4b:76:1d:9d:b3:0f:0b:8b:67:7d:ac:a5:82:36:99:be:bc: 0d:6e:c7:4b:46:08:92:b7:88:88:1f:0a:0b:66:61:b2:3c:91: a1:f6:ac:4a:ad:0d:a9:4c:96:41:08:f9:ad:c2:68:c8:53:15: 30:8b:9a:dd:59:7f:53:8e:a9:a6:3d:76:a8:f7:c1:8d:c8:fc: 5e:cf:2a:30:a6:4e:2b:a0:62:60:c5:11:44:8f:ea:89:a0:4d: 08:a2:52:c4:b3:7d:fd:dd:6f:ac:bc:c0:2e:b7:82:92:d6:d7: 7a:61:1d:24:f4:dc:0b:c4:af:01:93:82:60:fc:4a:e2:c2:51: 91:ad:cc:38:17:85:8a:85:74:e0:ab:c5:cc:6b:d5:5e:a3:1a: c5:ac:2d:cd:ac:40:70:b6:f1:22:55:fc:23:72:9d:0a:1b:0b: 80:fd:82:74:fe:2d:1a:b1:61:28:c1:63:98:97:b2:26:ba:cc: b1:36:80:48:56:94:b5:86:0f:ec:b2:15:e1:00:e3:38:81:29: c9:2a:8a:82:c5:d2:d0:ea:90:00:68:75:5d:35:31:0f:af:a0: 5d:d3:17:1d:51:a9:28:ff:d2:73:ee:dd:32:72:5f:62:33:43: 00:24:e6:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmp18OYYpJ/wcQdTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI1MDQyNzA5MDAwN1oXDTI1MDQzMDA5MDAwMFowLzEtMCsGA1UEAxMk YTBjZDkxYTktM2I4Zi00MGU5LWFhNWUtNzliOGI1Mzc4YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjauzsQ43pkVoxs0ve6+qR0ehQ/vpfe/uY1nX xgTsmgfs9UncIXLE906mDe1mFNvN2JX5dLFTtSUo7Kd2dTYrdOdH8UI0IVVCHp5l s3Vy1Wce+lEOS7x+j+vVLnn6ZgWUp0b+q3KGkYRIF0HqNTcBVLKPozWLRcM2ISH7 S0oLc9fjqOZBw8ltZWKnCOAULamxeN2s9JWYy0MSMe83MKzWjetiEuX1HN+1zE9E obKW0EfAp+4o28ofWm4M6LIUws2BS+jJYZ/aJ+AUmswyNJ0GmGf/p0FYu7QCER6P 4D7FJgRMB/a8Fl26AbnF5LagqpnIOxKDejUH+5ZY5uP9UWve7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHz6uooATkI1ydxAFcgLPc0GRjVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk0LoVF85j2u4ttwppjs+I YMpzS3YdnbMPC4tnfaylgjaZvrwNbsdLRgiSt4iIHwoLZmGyPJGh9qxKrQ2pTJZB CPmtwmjIUxUwi5rdWX9TjqmmPXao98GNyPxezyowpk4roGJgxRFEj+qJoE0IolLE s3393W+svMAut4KS1td6YR0k9NwLxK8Bk4Jg/EriwlGRrcw4F4WKhXTgq8XMa9Ve oxrFrC3NrEBwtvEiVfwjcp0KGwuA/YJ0/i0asWEowWOYl7ImusyxNoBIVpS1hg/s shXhAOM4gSnJKoqCxdLQ6pAAaHVdNTEPr6Bd0xcdUako/9Jz7t0ycl9iM0MAJOZa -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:40 2025 by rpki-client