$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft File: 4b2ad884-5960-46cd-bf60-910c222c8cfc.mft (raw, json) Hash identifier: AJLGFn5FyMRPA/zo0Lg3cYakv8PyixJ1W6gpHpBqsyk= Subject key identifier: 2B:3C:A1:21:9B:D2:EA:03:F6:0A:E8:83:41:90:FF:B3:4C:D4:95:0A Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Certificate serial: 010D0C9F43285849B60E7B518BC6BE12612F0E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft Manifest number: 010D0C9F43285843229417832873A3606DB2BE4A Signing time: Thu 01 May 2025 18:00:03 +0000 Manifest this update: Thu 01 May 2025 18:00:03 +0000 Manifest next update: Sat 03 May 2025 18:00:00 +0000 Files and hashes: 1: 4b2ad884-5960-46cd-bf60-910c222c8cfc.crl (hash: TutjNwqYFqXerwCWDe1imSh6EvUkx3rSIrWzyBCBkQs=) 2: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (hash: 4cxW94+6Cg7APiM+WMrAkLK+dVSDVkviL/vkUkW7a7Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:0e:7b:51:8b:c6:be:12:61:2f:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Validity Not Before: May 1 18:00:03 2025 GMT Not After : May 3 18:00:00 2025 GMT Subject: CN=e1f6bd8d-9877-4f47-bbf8-88416b207f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:a3:26:5f:24:b8:a6:a7:db:c1:c3:9d:ba: d6:90:09:f2:36:90:23:35:18:5c:bb:2f:cd:c4:29: 2b:b7:b3:e8:0e:14:51:93:82:aa:1f:22:d0:81:bd: b1:ee:cc:08:81:6c:f4:81:35:8d:5e:51:e0:49:f0: 89:95:40:e2:e3:71:11:f2:8b:4e:cf:19:ce:76:e2: e7:a1:0f:17:b6:62:4e:a2:f0:51:48:13:bc:96:d5: 18:80:3c:62:9d:56:f4:04:95:b2:c7:7c:18:d4:ba: b5:75:44:85:eb:2f:9c:93:c7:17:47:61:2a:e2:c6: 17:83:76:e6:74:52:09:03:72:3d:11:6a:89:4f:05: 61:75:4e:35:df:62:2f:42:4f:31:7b:fe:82:af:0a: 12:2f:7b:8f:68:45:ff:b3:3f:dd:e8:99:c0:a7:ce: 94:73:26:2f:91:80:71:b4:cb:2a:1e:e7:80:ef:50: 0f:d8:c0:e7:a2:ee:4f:b2:a3:5c:fb:6c:6e:c7:2d: 67:62:ef:d7:6d:70:63:d6:05:12:09:37:b8:2c:6d: 20:d3:96:c7:43:97:45:5f:29:19:6c:66:f5:94:50: d6:c0:a3:54:8e:1f:35:24:ed:30:5b:44:89:34:07: fe:b8:75:40:82:f5:b7:f9:a5:38:2e:b7:9d:c9:cd: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3C:A1:21:9B:D2:EA:03:F6:0A:E8:83:41:90:FF:B3:4C:D4:95:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl X509v3 Authority Key Identifier: keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:02:00:04:00:a9:e3:6e:a0:fe:80:ec:77:a2:40:08:cb:85: 54:bd:f4:ef:1c:f8:3b:4f:0b:6a:3f:42:89:39:78:c4:03:b7: 50:75:1d:3d:fb:b6:f8:3b:8c:c6:52:11:a4:82:8f:e3:72:ee: 2f:ec:9c:e9:c2:f7:47:6c:a5:7e:5b:79:f6:63:47:b6:f3:c8: b4:17:fd:ba:e5:7e:93:a9:69:60:a9:4a:80:9d:1e:59:df:a1: d5:b1:81:8b:0b:1b:3c:86:02:bf:22:79:fe:29:0d:68:46:56: 6d:d7:1b:05:b5:c3:77:62:ea:06:ab:37:3f:7b:b3:f1:2d:e5: 37:bf:dd:ed:78:0b:df:4a:e5:c3:6d:1c:3b:59:e6:cd:4b:55: 76:88:c2:49:36:6b:48:03:f3:5b:a6:e4:e4:fe:2e:45:bb:35: 07:a3:6d:6b:84:4f:12:2a:7d:3f:97:a1:24:8a:10:67:4a:62: c9:44:0f:b4:40:3e:a2:ae:7c:53:c8:d6:02:7a:1c:03:c6:7f: 1d:05:70:42:2f:e3:5a:12:62:15:c1:03:de:9b:51:b1:3c:e5: 67:fa:82:5e:af:6b:5e:f6:64:0e:11:8b:89:d8:bf:e7:9e:83: bf:67:f6:c9:6a:d8:65:62:b9:67:f8:42:f8:7a:18:46:7a:2d: d9:03:22:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm2DntRi8a+EmEvDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4 Y2ZjMB4XDTI1MDUwMTE4MDAwM1oXDTI1MDUwMzE4MDAwMFowLzEtMCsGA1UEAxMk ZTFmNmJkOGQtOTg3Ny00ZjQ3LWJiZjgtODg0MTZiMjA3ZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ijJl8kuKan28HDnbrWkAnyNpAjNRhcuy/N xCkrt7PoDhRRk4KqHyLQgb2x7swIgWz0gTWNXlHgSfCJlUDi43ER8otOzxnOduLn oQ8XtmJOovBRSBO8ltUYgDxinVb0BJWyx3wY1Lq1dUSF6y+ck8cXR2Eq4sYXg3bm dFIJA3I9EWqJTwVhdU4132IvQk8xe/6CrwoSL3uPaEX/sz/d6JnAp86UcyYvkYBx tMsqHueA71AP2MDnou5PsqNc+2xuxy1nYu/XbXBj1gUSCTe4LG0g05bHQ5dFXykZ bGb1lFDWwKNUjh81JO0wW0SJNAf+uHVAgvW3+aU4Lredyc2fpQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCs8oSGb0uoD9grog0GQ/7NM1JUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvNGIyYWQ4ODQtNTk2MC00 NmNkLWJmNjAtOTEwYzIyMmM4Y2ZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj MjIyYzhjZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6AgAEAKnjbqD+gOx3okAI y4VUvfTvHPg7TwtqP0KJOXjEA7dQdR09+7b4O4zGUhGkgo/jcu4v7JzpwvdHbKV+ W3n2Y0e288i0F/265X6TqWlgqUqAnR5Z36HVsYGLCxs8hgK/Inn+KQ1oRlZt1xsF tcN3YuoGqzc/e7PxLeU3v93teAvfSuXDbRw7WebNS1V2iMJJNmtIA/NbpuTk/i5F uzUHo21rhE8SKn0/l6EkihBnSmLJRA+0QD6irnxTyNYCehwDxn8dBXBCL+NaEmIV wQPem1GxPOVn+oJer2te9mQOEYuJ2L/nnoO/Z/bJathlYrln+EL4ehhGei3ZAyJz -----END CERTIFICATE-----Generated at Fri May 2 18:32:01 2025 by rpki-client