$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.mft (raw, json) Hash identifier: 1Df/NvUxnM6ZS8SVJK+/I+8GpejHtFF1krdO1BvhZSM= Subject key identifier: D9:89:07:D3:8A:B1:1D:FC:91:A5:4D:DE:B8:89:C1:94:D8:61:71:2C Authority key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Certificate issuer: /CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Certificate serial: 010D0C9F43285849AC84ADC26D9325E93716CBD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft Manifest number: 010D0C9F4328584073A8468DFCDC747631CA8D61 Signing time: Mon 28 Apr 2025 08:00:08 +0000 Manifest this update: Mon 28 Apr 2025 08:00:08 +0000 Manifest next update: Wed 30 Apr 2025 08:00:00 +0000 Files and hashes: 1: 604dd155-d846-413d-9d18-9c6d0f03ee8c.crl (hash: 4Gf8H8hwY3bSrgEqHv57w3X6ZYwDJH9FZebiCdRK6qc=) 2: 7e4e5dd3-74fb-3038-a179-39719feb837d.roa (hash: hPuoEKeDZlSX5Lzd9Bk3QF1arMK8e8m6fm/NKy5UFTM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:84:ad:c2:6d:93:25:e9:37:16:cb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Validity Not Before: Apr 28 08:00:08 2025 GMT Not After : Apr 30 08:00:00 2025 GMT Subject: CN=c5c72000-d15c-488e-86d2-0a31895cacab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:46:4d:2a:4f:2a:6d:c3:52:75:75:19:a4: ba:3d:84:7b:b7:cf:2a:ba:46:61:2e:ba:b0:8d:20: 6a:1d:14:10:a6:a0:3c:aa:fa:b6:8a:aa:dc:02:95: c2:50:ee:96:0a:85:83:7f:67:03:2b:d5:4a:d4:a3: b5:50:3a:e3:fb:60:7a:96:81:40:26:70:45:80:ca: 31:d8:d2:6a:33:82:f6:96:1d:a5:1a:ff:43:d4:3e: d9:43:4d:bb:16:3b:0c:f3:72:b9:c3:ef:1d:35:0b: e3:c9:42:a7:db:f7:82:d2:32:e3:56:6a:01:b5:e1: 39:55:5e:c6:5d:4e:90:03:9e:6d:7d:a2:e9:8d:c9: 83:bb:29:19:c1:03:c4:9c:b5:ae:94:ab:90:f5:cc: f6:3b:b9:c1:44:79:34:99:2b:f4:10:fe:2a:fe:0a: 1d:4d:d9:dd:e0:ca:c4:f0:38:19:9d:e2:a8:49:6e: 3d:00:b7:60:a2:c1:fc:c9:29:c4:ec:1d:0a:eb:e4: 77:ea:a4:cd:9a:a9:4f:f1:b4:c4:8b:81:38:4a:85: 2e:a1:6d:43:f1:18:12:9d:10:0e:20:f9:7d:4a:8c: a8:33:2b:57:76:df:b8:e6:d1:ca:67:dc:d4:a1:3f: d2:05:18:90:c7:15:ab:00:b1:88:01:23:a7:50:73: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:07:D3:8A:B1:1D:FC:91:A5:4D:DE:B8:89:C1:94:D8:61:71:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.crl X509v3 Authority Key Identifier: keyid:00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:03:b7:37:35:18:ce:a1:d4:d8:d8:c0:27:9c:a4:ab:55:f7: 86:fa:12:72:81:1f:6f:a1:2e:46:18:8b:79:ac:f0:c9:cf:39: 87:a0:64:2c:9c:a7:58:ff:6c:c3:e1:23:a5:c3:78:ce:ab:bb: 4d:4a:95:dc:24:ae:1d:a3:67:1a:b4:43:4c:8e:2e:7a:cf:2a: e2:e7:ef:db:ef:f2:a7:1d:76:0e:d5:20:02:c7:2c:29:7d:00: 7f:e6:96:70:8d:d4:34:78:99:b3:82:37:b3:fe:29:54:88:c0: 73:2f:b7:36:a9:2d:6f:b5:c8:d8:7e:66:fc:e0:c5:7b:90:ae: 3c:58:a0:31:16:19:f0:56:ca:53:35:68:12:c2:c0:c8:ee:93: 42:21:ec:de:0c:4b:e1:b9:7c:69:36:76:d9:b1:7f:de:a7:cf: da:12:d2:c6:49:41:ff:7e:0e:84:9c:76:a2:a3:f9:b6:a8:2e: 06:9b:95:7e:37:2e:6d:af:28:73:50:11:a1:cd:f3:06:4d:28: 24:11:bf:af:0b:f4:4c:58:7d:62:d0:03:15:c0:0b:e4:b9:2f: 7a:ef:f0:51:43:74:58:69:53:63:3b:8d:11:05:c3:63:59:bd: 9c:b2:f1:94:44:dd:4b:55:52:a7:87:01:8e:cd:f8:a3:78:6e: 9d:85:98:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmshK3CbZMl6TcWy9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNl ZThjMB4XDTI1MDQyODA4MDAwOFoXDTI1MDQzMDA4MDAwMFowLzEtMCsGA1UEAxMk YzVjNzIwMDAtZDE1Yy00ODhlLTg2ZDItMGEzMTg5NWNhY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk31GTSpPKm3DUnV1GaS6PYR7t88qukZhLrqw jSBqHRQQpqA8qvq2iqrcApXCUO6WCoWDf2cDK9VK1KO1UDrj+2B6loFAJnBFgMox 2NJqM4L2lh2lGv9D1D7ZQ027FjsM83K5w+8dNQvjyUKn2/eC0jLjVmoBteE5VV7G XU6QA55tfaLpjcmDuykZwQPEnLWulKuQ9cz2O7nBRHk0mSv0EP4q/godTdnd4MrE 8DgZneKoSW49ALdgosH8ySnE7B0K6+R36qTNmqlP8bTEi4E4SoUuoW1D8RgSnRAO IPl9SoyoMytXdt+45tHKZ9zUoT/SBRiQxxWrALGIASOnUHOpawIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNmJB9OKsR38kaVN3riJwZTYYXEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRk ZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvNjA0ZGQxNTUtZDg0Ni00 MTNkLTlkMTgtOWM2ZDBmMDNlZThjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0ZGQxNTUtZDg0Ni00MTNkLTlk MTgtOWM2ZDBmMDNlZThjLzYwNGRkMTU1LWQ4NDYtNDEzZC05ZDE4LTljNmQwZjAz ZWU4Yy5jcmwwHwYDVR0jBBgwFoAUAFFQ62QtzxQ4QmQkdfsYDg5DsdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZk MGYwM2VlOGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXA7c3NRjOodTY2MAnnKSr VfeG+hJygR9voS5GGIt5rPDJzzmHoGQsnKdY/2zD4SOlw3jOq7tNSpXcJK4do2ca tENMji56zyri5+/b7/KnHXYO1SACxywpfQB/5pZwjdQ0eJmzgjez/ilUiMBzL7c2 qS1vtcjYfmb84MV7kK48WKAxFhnwVspTNWgSwsDI7pNCIezeDEvhuXxpNnbZsX/e p8/aEtLGSUH/fg6EnHaio/m2qC4Gm5V+Ny5tryhzUBGhzfMGTSgkEb+vC/RMWH1i 0AMVwAvkuS967/BRQ3RYaVNjO40RBcNjWb2csvGURN1LVVKnhwGOzfijeG6dhZi2 -----END CERTIFICATE-----Generated at Mon Apr 28 17:35:32 2025 by rpki-client