$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft (raw, json) Hash identifier: OWkdLqmd/tZ4MDtKpFZej1m+VBnfjbmcBt653v9NzmU= Subject key identifier: 88:59:96:31:30:80:F9:74:23:9A:CB:64:E5:19:F8:98:FB:F8:E9:7D Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F43285849AFE4446F014335830DC79580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft Manifest number: 010D0C9F432858467B3AE8B15C5CB25608060BCD Signing time: Tue 29 Apr 2025 13:00:10 +0000 Manifest this update: Tue 29 Apr 2025 13:00:10 +0000 Manifest next update: Fri 02 May 2025 13:00:00 +0000 Files and hashes: 1: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl (hash: c+as8vBhxZ9nIHQB9DO57F+6EhndgTpDxlsRgrQ2wwA=) 2: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (hash: YTbzs4VEY0j6DrAsLVF5yxKOw6DmGYVUyd/kzzpCMOQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:e4:44:6f:01:43:35:83:0d:c7:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Apr 29 13:00:10 2025 GMT Not After : May 2 13:00:00 2025 GMT Subject: CN=d588f290-d17f-43ad-aaca-aecbf3b62a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:52:a4:36:04:1c:b3:a8:cc:44:aa:43:b6: 39:e6:21:b7:70:79:40:e0:e1:32:8f:ec:70:14:4a: c8:0a:ab:0e:60:f9:ee:3f:ce:5b:c3:1d:b8:17:b3: 01:22:6a:b0:c3:ba:e0:6f:64:b2:d0:85:84:c1:0a: a4:40:b3:40:59:84:56:06:48:04:c4:c5:a3:d3:1c: 29:98:b3:e3:8e:55:ec:f9:1f:68:bf:07:ca:ab:c7: d9:83:24:cc:85:14:17:a7:93:95:58:71:79:07:21: 48:1f:60:4b:82:f3:49:b7:8a:2f:43:94:95:ca:e8: f1:56:68:72:46:8d:a7:11:28:3d:d8:52:2e:a1:d6: 1c:7e:ed:74:08:5e:b6:ac:72:09:0a:4b:4d:c3:f7: 22:94:d7:61:9c:50:08:11:9f:d8:f6:5b:d7:df:86: fb:53:4e:b1:60:38:06:6d:3b:fa:2a:71:25:96:5d: b1:33:99:5f:e8:e8:43:3f:0e:4a:1e:6f:18:2e:79: b0:16:d0:c3:34:f9:8a:d7:f9:29:76:c2:bd:0b:ec: 18:d2:f8:72:c7:9b:6a:4f:63:91:b3:13:66:22:6a: 91:94:7a:74:79:72:3d:3d:cb:93:b8:ed:3b:59:f4: 0a:01:88:7d:5d:8c:50:f5:f7:99:88:2f:48:7b:62: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:59:96:31:30:80:F9:74:23:9A:CB:64:E5:19:F8:98:FB:F8:E9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e0:cf:a1:a2:9a:d6:94:02:6a:1a:d3:53:54:e3:66:6c:22: b8:b1:01:70:da:26:e7:d1:bb:40:80:e6:b3:94:10:de:9f:36: d9:45:1e:b0:20:e0:34:70:70:95:3c:8a:e0:f8:bf:7c:59:9e: ac:33:00:25:ca:59:a1:bf:c8:41:6c:7d:33:84:13:83:68:3b: db:b4:9b:72:ca:62:67:c9:58:99:bd:cc:bc:7e:5d:ae:3a:32: d3:09:95:0b:c3:9b:41:63:86:aa:93:3e:81:0d:27:70:5c:2f: 54:cc:9f:97:33:48:52:bd:9b:83:b8:62:9f:7a:4e:a5:00:a0: b1:c0:14:92:4d:e1:d5:63:4d:f2:d0:38:40:a5:f2:95:9c:b2: aa:e8:4d:c3:6f:c1:b2:e6:a0:df:22:c0:c5:2d:ba:82:26:10: 0f:65:e3:63:f4:8e:2b:5f:f1:8e:65:a1:38:b1:0b:84:7a:67: 40:99:6d:f8:5d:3b:6f:c5:1f:de:97:0f:4c:bd:1a:7b:6b:64: 2a:ed:be:28:d3:3a:d9:93:e1:94:d2:bd:db:ca:48:55:db:25: 69:f0:55:c0:bb:c3:08:20:1e:c1:d9:11:89:64:2c:96:fb:ce: fb:a7:74:89:ee:0e:5d:50:47:8d:8f:79:4e:21:1f:bb:ac:4d: e3:ae:b7:9a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmv5ERvAUM1gw3HlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI1MDQyOTEzMDAxMFoXDTI1MDUwMjEzMDAwMFowLzEtMCsGA1UEAxMk ZDU4OGYyOTAtZDE3Zi00M2FkLWFhY2EtYWVjYmYzYjYyYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiJSpDYEHLOozESqQ7Y55iG3cHlA4OEyj+xw FErICqsOYPnuP85bwx24F7MBImqww7rgb2Sy0IWEwQqkQLNAWYRWBkgExMWj0xwp mLPjjlXs+R9ovwfKq8fZgyTMhRQXp5OVWHF5ByFIH2BLgvNJt4ovQ5SVyujxVmhy Ro2nESg92FIuodYcfu10CF62rHIJCktNw/cilNdhnFAIEZ/Y9lvX34b7U06xYDgG bTv6KnElll2xM5lf6OhDPw5KHm8YLnmwFtDDNPmK1/kpdsK9C+wY0vhyx5tqT2OR sxNmImqRlHp0eXI9PcuTuO07WfQKAYh9XYxQ9feZiC9Ie2KENwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIhZljEwgPl0I5rLZOUZ+Jj7+Ol9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvNGM4NWU0MmQtMjE3MS00 ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCi4M+hoprWlAJqGtNTVONm bCK4sQFw2ibn0btAgOazlBDenzbZRR6wIOA0cHCVPIrg+L98WZ6sMwAlylmhv8hB bH0zhBODaDvbtJtyymJnyViZvcy8fl2uOjLTCZULw5tBY4aqkz6BDSdwXC9UzJ+X M0hSvZuDuGKfek6lAKCxwBSSTeHVY03y0DhApfKVnLKq6E3Db8Gy5qDfIsDFLbqC JhAPZeNj9I4rX/GOZaE4sQuEemdAmW34XTtvxR/elw9MvRp7a2Qq7b4o0zrZk+GU 0r3bykhV2yVp8FXAu8MIIB7B2RGJZCyW+877p3SJ7g5dUEeNj3lOIR+7rE3jrrea -----END CERTIFICATE-----Generated at Tue Apr 29 23:30:34 2025 by rpki-client