$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft File: 70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json) Hash identifier: hE2SCiEuxH0MYLCYUWXjw5Pj3WLJGcx0VYEdMatbi5s= Subject key identifier: 4B:4D:6B:75:40:9F:A8:A1:39:24:61:EF:DB:00:51:5A:92:C5:10:5F Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 Certificate issuer: /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Certificate serial: 010D0C9F43285849ACA2695E8324D78C4B434B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft Manifest number: 010D0C9F4328584073A849CF36D5F7E9DECAFDD7 Signing time: Mon 28 Apr 2025 09:00:03 +0000 Manifest this update: Mon 28 Apr 2025 09:00:03 +0000 Manifest next update: Wed 30 Apr 2025 09:00:00 +0000 Files and hashes: 1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: MmeMCbZwpq7fWgYNSsYkHEgxiYNaG10TfXAKlodT+4A=) 2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: 0Q9a4hWpx8zV6qTIF2Mzs/9a0PiYxjb3jxbtewJ7LFI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:a2:69:5e:83:24:d7:8c:4b:43:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a Validity Not Before: Apr 28 09:00:03 2025 GMT Not After : Apr 30 09:00:00 2025 GMT Subject: CN=8091643b-8d5a-42b1-8ca4-96ecf1a8369a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:1d:a3:57:10:71:a7:7b:66:79:6a:fb:e4: f6:32:e3:4e:fe:75:88:0f:01:b4:a1:b1:8a:5b:bd: db:5c:a0:18:8f:49:5c:29:f7:78:bb:36:21:bb:c5: 0d:0b:08:96:26:bd:4b:9a:c9:6f:6d:b2:e3:b0:24: e7:f8:e8:f4:1c:63:d1:40:e0:1a:78:4f:7c:90:8c: 35:62:20:5f:5f:6b:a5:e0:ef:5d:b8:f6:cb:e7:10: a4:21:92:c1:30:de:70:ab:dc:cf:c3:80:94:de:2b: 75:12:46:77:1b:e8:a9:52:30:d4:88:66:bc:fd:39: 25:9b:3a:70:21:2f:ad:1a:11:1f:2a:2b:f3:67:6a: db:e4:53:f8:9d:c1:28:da:f8:ee:9d:0d:be:4d:ab: 8e:1e:2b:c0:42:a0:cb:b7:4b:45:e3:af:a2:52:b7: 69:8e:06:d5:1d:a3:b0:c2:d5:20:8c:86:fc:f5:4f: db:2a:8c:9d:52:04:15:7a:e6:67:4f:31:36:fb:c9: e7:6c:a0:44:9d:ce:d6:a3:f6:8a:6c:81:27:32:ce: 59:9b:ac:5d:78:7f:50:5d:f9:fe:ca:2c:25:e4:a1: ac:d4:44:52:31:39:b7:e3:90:8d:f9:ab:bf:ac:45: 5c:c1:80:89:e9:93:ba:37:3a:15:2c:ca:52:c7:4b: b1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:6B:75:40:9F:A8:A1:39:24:61:EF:DB:00:51:5A:92:C5:10:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl X509v3 Authority Key Identifier: keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c3:83:9b:2e:76:52:16:4b:6e:9c:23:3f:aa:98:c9:02:7b: 24:7f:cb:66:a3:bd:92:40:40:55:7d:da:e7:99:2e:12:d9:92: ba:1b:c3:00:31:2a:18:d6:d6:11:38:36:da:4a:3d:76:68:61: 7d:13:a9:92:84:46:48:a1:c2:00:76:06:f1:ad:ae:e3:b0:82: 81:69:4e:6a:7f:f7:cf:80:92:c9:1d:e3:92:53:cd:2e:0a:d3: cd:23:04:a0:57:2a:7b:4f:04:a7:bc:38:0f:d1:f3:a0:a7:d1: 1a:cd:57:cf:ce:f2:5e:65:b5:0a:a2:1e:27:4e:40:0f:6b:6d: 10:ec:52:45:a0:17:b1:e7:7e:4a:66:79:c7:81:d2:d1:64:f4: 87:52:0c:b8:27:90:25:73:5b:de:96:66:26:6e:34:98:03:e1: 0a:a5:c6:3d:1a:8d:82:17:14:af:58:6e:32:06:43:79:bf:a4: 8d:3b:22:f1:cc:7b:1a:64:9b:93:2c:9a:02:da:8c:5e:8a:7c: 4f:d0:58:f0:75:67:d3:c8:d7:ca:ca:ff:60:4e:e9:26:60:4c: 36:d2:44:88:71:9d:ea:03:ad:9b:e0:4d:d4:e1:d8:ce:e1:32: 7f:12:10:67:d5:aa:b7:50:ea:d7:15:68:c6:6d:c2:15:d6:28: 62:b6:03:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmsomlegyTXjEtDS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh ZjVhMB4XDTI1MDQyODA5MDAwM1oXDTI1MDQzMDA5MDAwMFowLzEtMCsGA1UEAxMk ODA5MTY0M2ItOGQ1YS00MmIxLThjYTQtOTZlY2YxYTgzNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBMdo1cQcad7Znlq++T2MuNO/nWIDwG0obGK W73bXKAYj0lcKfd4uzYhu8UNCwiWJr1LmslvbbLjsCTn+Oj0HGPRQOAaeE98kIw1 YiBfX2ul4O9duPbL5xCkIZLBMN5wq9zPw4CU3it1EkZ3G+ipUjDUiGa8/Tklmzpw IS+tGhEfKivzZ2rb5FP4ncEo2vjunQ2+TauOHivAQqDLt0tF46+iUrdpjgbVHaOw wtUgjIb89U/bKoydUgQVeuZnTzE2+8nnbKBEnc7Wo/aKbIEnMs5Zm6xdeH9QXfn+ yiwl5KGs1ERSMTm345CN+au/rEVcwYCJ6ZO6NzoVLMpSx0ux3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEtNa3VAn6ihOSRh79sAUVqSxRBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0 MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNzBhNDI0ZDMtMzViZC00 M2RmLTgyNDUtM2ZiMDhlYTdhZjVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3 YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw OGVhN2FmNWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhw4ObLnZSFktunCM/qpjJ Anskf8tmo72SQEBVfdrnmS4S2ZK6G8MAMSoY1tYRODbaSj12aGF9E6mShEZIocIA dgbxra7jsIKBaU5qf/fPgJLJHeOSU80uCtPNIwSgVyp7TwSnvDgP0fOgp9EazVfP zvJeZbUKoh4nTkAPa20Q7FJFoBex535KZnnHgdLRZPSHUgy4J5Alc1velmYmbjSY A+EKpcY9Go2CFxSvWG4yBkN5v6SNOyLxzHsaZJuTLJoC2oxeinxP0FjwdWfTyNfK yv9gTukmYEw20kSIcZ3qA62b4E3U4djO4TJ/EhBn1aq3UOrXFWjGbcIV1ihitgNe -----END CERTIFICATE-----Generated at Tue Apr 29 07:12:23 2025 by rpki-client