$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft File: 66cf51f2-af3c-4c05-a781-3b923f753475.mft (raw, json) Hash identifier: dzJyqD7Wkdc57LAwSsd4HlAt7SXkqbDTrmdQ+NcKe1A= Subject key identifier: 93:5C:6F:00:B2:01:65:E4:41:2D:CD:3A:EC:25:B2:E9:B8:9E:E0:1E Authority key identifier: 2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 Certificate issuer: /CN=66cf51f2-af3c-4c05-a781-3b923f753475 Certificate serial: 010D0C9F43285849B05B60FE2F4CADD4B132D380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft Manifest number: 010D0C9F4328584073A81AB5C49D6BF3C2F657FD Signing time: Tue 29 Apr 2025 17:00:07 +0000 Manifest this update: Tue 29 Apr 2025 17:00:07 +0000 Manifest next update: Thu 01 May 2025 17:00:00 +0000 Files and hashes: 1: 66cf51f2-af3c-4c05-a781-3b923f753475.crl (hash: DpFkzP66/24buQ5PE8sOxbOykVMIhxkoN+OZBJSZ3YE=) 2: d2e9a628-bb73-378c-9508-2db3fb689656.roa (hash: hfrEWj0GTJSQOG6+Bp7suyL5A9owY/H08IdV4q6hIRg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:5b:60:fe:2f:4c:ad:d4:b1:32:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cf51f2-af3c-4c05-a781-3b923f753475 Validity Not Before: Apr 29 17:00:07 2025 GMT Not After : May 1 17:00:00 2025 GMT Subject: CN=86dd6fb2-7e8f-46c4-9037-78b05f9cea65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:cb:f3:e2:6b:8f:65:32:e7:aa:f7:fb:3d: cc:27:aa:99:b4:9f:a7:c2:fe:40:10:9b:3b:df:da: 1f:a0:40:e0:46:4a:d9:c3:b0:a7:8e:02:35:bc:f8: 4f:72:0e:c9:7b:ee:32:8c:9e:ee:cf:56:4a:14:a4: 30:ce:6c:9b:26:a8:5b:53:54:39:71:6a:e0:01:c3: 34:6f:e5:ea:01:6f:eb:15:2c:09:9e:4a:d1:b5:9f: 59:9a:4a:25:fc:8a:28:1a:f8:a7:b0:42:6d:c4:ea: ed:31:c2:b4:91:6f:d4:c7:2b:34:ba:5b:62:1b:ef: 65:2e:56:51:6a:60:ef:ac:39:8d:2b:f1:2d:a1:73: f3:30:a0:de:2b:dd:60:ee:86:89:05:6d:9b:ee:38: ed:48:54:5c:4b:57:35:33:00:72:d1:01:7c:f4:5f: 64:be:74:b6:01:76:5c:8e:08:f3:25:3b:0c:3f:75: 21:a3:08:34:39:75:d9:a5:35:44:f1:4a:6c:87:7c: 44:2f:63:7f:a9:ad:75:21:d8:e3:a8:a1:b9:1e:18: 44:34:f5:d8:d0:24:b1:d5:9e:73:73:b2:56:1c:bf: 1e:e6:cf:d6:0b:d2:31:fc:aa:4f:60:63:6a:46:60: 7f:65:29:85:e8:5b:50:15:76:a8:fd:8e:86:36:02: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:6F:00:B2:01:65:E4:41:2D:CD:3A:EC:25:B2:E9:B8:9E:E0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475/66cf51f2-af3c-4c05-a781-3b923f753475.crl X509v3 Authority Key Identifier: keyid:2D:B1:B7:27:82:F7:13:63:1E:4C:00:C0:63:9F:AB:19:28:48:B0:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/66cf51f2-af3c-4c05-a781-3b923f753475.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c9:91:7e:73:7c:41:6b:6d:0d:3c:cd:f2:a2:83:0f:22:8a: a4:8e:fd:15:32:77:c4:6f:98:62:72:11:99:78:56:e5:e3:ea: 0d:49:79:7b:b1:03:82:12:45:dd:c9:51:5f:7d:22:bf:e5:27: fd:59:41:79:2a:b0:af:12:a0:61:ff:64:ea:80:28:a9:b6:1e: d0:63:3d:d6:a0:36:c0:be:7c:d7:4b:c2:b6:3a:99:51:b6:c8: 05:fa:77:51:00:b7:de:3d:c4:a1:70:25:fe:e8:90:0f:97:fb: c4:ed:a8:6a:06:6d:d5:40:52:48:b8:25:8c:b5:31:09:a3:48: d0:88:86:17:57:4e:d7:9d:02:8a:04:fa:9a:99:fc:8c:b7:e7: 66:ca:1c:31:e1:e0:b9:57:37:e7:3f:fe:7e:14:0e:1b:11:5f: e7:ee:64:4e:9a:16:0a:8e:a8:23:a9:f1:07:a2:cd:14:d2:65: cd:ed:ac:44:b0:ec:14:c8:9f:40:e8:1c:e0:52:33:d0:52:ac: b6:d2:02:69:9f:4f:ce:a1:2b:62:d4:c8:e0:ac:5b:f2:da:1c: d2:44:20:80:df:c9:92:4f:d2:a7:7e:71:bb:c1:e0:a8:17:8a: e9:9f:e9:2c:21:f6:c8:e9:9f:be:1a:d8:6f:66:8f:f3:20:ae: ef:08:2b:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmwW2D+L0yt1LEy04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZjZjUxZjItYWYzYy00YzA1LWE3ODEtM2I5MjNmNzUz NDc1MB4XDTI1MDQyOTE3MDAwN1oXDTI1MDUwMTE3MDAwMFowLzEtMCsGA1UEAxMk ODZkZDZmYjItN2U4Zi00NmM0LTkwMzctNzhiMDVmOWNlYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1nL8+Jrj2Uy56r3+z3MJ6qZtJ+nwv5AEJs7 39ofoEDgRkrZw7CnjgI1vPhPcg7Je+4yjJ7uz1ZKFKQwzmybJqhbU1Q5cWrgAcM0 b+XqAW/rFSwJnkrRtZ9Zmkol/IooGvinsEJtxOrtMcK0kW/Uxys0ultiG+9lLlZR amDvrDmNK/EtoXPzMKDeK91g7oaJBW2b7jjtSFRcS1c1MwBy0QF89F9kvnS2AXZc jgjzJTsMP3Uhowg0OXXZpTVE8Upsh3xEL2N/qa11IdjjqKG5HhhENPXY0CSx1Z5z c7JWHL8e5s/WC9Ix/KpPYGNqRmB/ZSmF6FtQFXao/Y6GNgIZtQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJNcbwCyAWXkQS3NOuwlsum4nuAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NmNm NTFmMi1hZjNjLTRjMDUtYTc4MS0zYjkyM2Y3NTM0NzUvNjZjZjUxZjItYWYzYy00 YzA1LWE3ODEtM2I5MjNmNzUzNDc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjZjZjUxZjItYWYzYy00YzA1LWE3 ODEtM2I5MjNmNzUzNDc1LzY2Y2Y1MWYyLWFmM2MtNGMwNS1hNzgxLTNiOTIzZjc1 MzQ3NS5jcmwwHwYDVR0jBBgwFoAULbG3J4L3E2MeTADAY5+rGShIsDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NmNmNTFmMi1hZjNjLTRjMDUtYTc4MS0zYjky M2Y3NTM0NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYyZF+c3xBa20NPM3yooMP Ioqkjv0VMnfEb5hichGZeFbl4+oNSXl7sQOCEkXdyVFffSK/5Sf9WUF5KrCvEqBh /2TqgCipth7QYz3WoDbAvnzXS8K2OplRtsgF+ndRALfePcShcCX+6JAPl/vE7ahq Bm3VQFJIuCWMtTEJo0jQiIYXV07XnQKKBPqamfyMt+dmyhwx4eC5VzfnP/5+FA4b EV/n7mROmhYKjqgjqfEHos0U0mXN7axEsOwUyJ9A6BzgUjPQUqy20gJpn0/OoSti 1MjgrFvy2hzSRCCA38mST9KnfnG7weCoF4rpn+ksIfbI6Z++GthvZo/zIK7vCCtJ -----END CERTIFICATE-----Generated at Tue Apr 29 23:29:46 2025 by rpki-client