$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft File: 67b004e8-3b23-4f9d-9325-beac85825fe1.mft (raw, json) Hash identifier: 5KtYdK1xewbvDWa1HxTz720Bc5jtKEneCnEHnuddKo0= Subject key identifier: 6B:29:F6:2B:A0:B1:A2:A2:66:DD:60:F8:57:D0:77:2C:1B:3E:03:25 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F43285849ADAE69318131924ECDE8CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft Manifest number: 010D0C9F4328584073A8217092B11F7DC63DAFA2 Signing time: Mon 28 Apr 2025 18:00:03 +0000 Manifest this update: Mon 28 Apr 2025 18:00:03 +0000 Manifest next update: Thu 01 May 2025 18:00:00 +0000 Files and hashes: 1: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (hash: 0EizLzAirqYXM/bhOXx/dFETkTvbgaNEj6+NGPezibw=) 2: 67b004e8-3b23-4f9d-9325-beac85825fe1.crl (hash: HAyRM3xPPbAr4FuMD7uo2cgWg5096+m295iC52H/zRE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:ae:69:31:81:31:92:4e:cd:e8:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Apr 28 18:00:03 2025 GMT Not After : May 1 18:00:00 2025 GMT Subject: CN=2e951020-9a97-441e-9b83-d4a1da66be7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:05:77:d8:90:ef:ec:a9:6b:2e:b3:59:09: fe:60:10:00:f8:92:73:b4:bf:99:36:0e:2b:ef:23: 8d:1c:7e:59:76:bc:9d:e4:57:65:73:d3:f3:85:0c: ae:32:e7:86:6c:9b:0a:76:41:f9:cc:e9:c5:6e:6a: ea:8c:db:7a:b3:3e:9f:85:38:e9:2b:e1:33:d2:20: 90:4a:7d:c7:68:2f:ce:4b:6c:15:2e:87:96:bd:c8: 61:2d:02:04:0b:1a:63:af:6d:a4:89:f3:ce:a8:7c: c0:05:5d:8b:17:00:73:2c:5f:e2:ca:ab:3e:ca:81: 2e:47:32:fc:2f:ed:65:b7:8a:c5:d2:a4:85:1f:94: 3e:83:22:8a:cf:b2:9e:57:f9:1b:ec:81:bd:72:b2: 01:3f:d0:bd:85:cc:b3:a3:2b:59:15:e2:7d:86:ac: 97:7f:34:7d:e7:45:18:a8:cb:4d:a5:3d:8b:3b:f2: 39:c1:60:e4:57:e0:06:bb:90:0b:79:f2:3b:cc:a6: cd:3f:5c:3c:9e:0c:5c:28:2d:89:83:69:5d:c2:86: 51:3f:42:e3:0a:a4:9c:6e:0d:22:17:05:dd:4f:d0: f9:93:2b:e1:94:2f:06:b8:40:8a:3c:f9:df:52:ea: eb:38:9d:28:29:e4:52:6d:51:6d:b6:7f:16:73:f5: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:29:F6:2B:A0:B1:A2:A2:66:DD:60:F8:57:D0:77:2C:1B:3E:03:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f2:8f:c2:7b:7f:22:41:c8:11:f7:b9:fe:40:be:ee:ce:91: e5:8e:c7:2e:ac:e1:a3:30:b7:16:68:da:17:07:1b:bc:66:d9: 64:91:4a:ee:99:2b:c8:3b:9b:7a:10:ba:53:2e:c0:ee:2a:a7: 75:2f:09:74:7e:d7:d4:de:13:e1:24:47:d9:42:e5:5b:cd:75: 6e:1e:e4:04:f4:6d:5f:21:4b:38:f4:14:47:b6:97:3e:1d:38: 9d:f7:60:cc:50:62:73:f9:cc:00:7d:0f:41:1f:b6:6d:44:f3: 8f:bd:d9:00:ff:03:8a:46:4a:64:7e:ab:9f:0d:62:fb:f8:8c: fc:bb:ef:87:21:f8:52:7e:2d:e9:9e:41:56:dc:e1:e8:bd:b3: 92:48:b1:28:01:c6:aa:9f:6b:23:db:22:4d:34:0d:7e:1b:98: d7:8c:4d:da:5f:e5:74:31:3b:9a:37:94:94:f6:c8:c8:29:27: b4:fa:8f:6d:3f:58:3b:31:dc:50:1f:e1:f6:b2:85:2d:3b:a2: c9:76:dc:8d:78:d8:e9:c2:e8:03:42:f4:4c:68:26:a9:e6:8d: c1:b6:fe:aa:5d:94:49:5e:8f:40:31:5a:7f:52:cb:ea:0b:8e: 98:a0:25:be:30:2c:5d:1c:16:2d:d6:f2:92:86:95:c3:45:fa: c8:d5:cf:d0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtrmkxgTGSTs3ozYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI1MDQyODE4MDAwM1oXDTI1MDUwMTE4MDAwMFowLzEtMCsGA1UEAxMk MmU5NTEwMjAtOWE5Ny00NDFlLTliODMtZDRhMWRhNjZiZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TYFd9iQ7+ypay6zWQn+YBAA+JJztL+ZNg4r 7yONHH5Zdryd5Fdlc9PzhQyuMueGbJsKdkH5zOnFbmrqjNt6sz6fhTjpK+Ez0iCQ Sn3HaC/OS2wVLoeWvchhLQIECxpjr22kifPOqHzABV2LFwBzLF/iyqs+yoEuRzL8 L+1lt4rF0qSFH5Q+gyKKz7KeV/kb7IG9crIBP9C9hcyzoytZFeJ9hqyXfzR950UY qMtNpT2LO/I5wWDkV+AGu5ALefI7zKbNP1w8ngxcKC2Jg2ldwoZRP0LjCqScbg0i FwXdT9D5kyvhlC8GuECKPPnfUurrOJ0oKeRSbVFttn8Wc/WGWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGsp9iugsaKiZt1g+FfQdywbPgMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvNjdiMDA0ZTgtM2IyMy00 ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg8o/Ce38iQcgR97n+QL7u zpHljscurOGjMLcWaNoXBxu8ZtlkkUrumSvIO5t6ELpTLsDuKqd1Lwl0ftfU3hPh JEfZQuVbzXVuHuQE9G1fIUs49BRHtpc+HTid92DMUGJz+cwAfQ9BH7ZtRPOPvdkA /wOKRkpkfqufDWL7+Iz8u++HIfhSfi3pnkFW3OHovbOSSLEoAcaqn2sj2yJNNA1+ G5jXjE3aX+V0MTuaN5SU9sjIKSe0+o9tP1g7MdxQH+H2soUtO6LJdtyNeNjpwugD QvRMaCap5o3Btv6qXZRJXo9AMVp/UsvqC46YoCW+MCxdHBYt1vKShpXDRfrI1c/Q -----END CERTIFICATE-----Generated at Tue Apr 29 07:09:16 2025 by rpki-client