$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft File: 7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft (raw, json) Hash identifier: aJiNzLJbq0CZcFk5yQ9Ew+uDV6Mli+6C4xK2IzjBxMo= Subject key identifier: C2:13:EE:2A:F4:83:99:55:2A:78:DF:F7:4F:2A:51:E2:74:59:1B:81 Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Certificate issuer: /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Certificate serial: 010D0C9F43285849A7FB4437EB1E1A9996A8EF92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft Manifest number: 010D0C9F4328584073A81F14B636ABD17050EB60 Signing time: Sat 26 Apr 2025 17:00:03 +0000 Manifest this update: Sat 26 Apr 2025 17:00:03 +0000 Manifest next update: Tue 29 Apr 2025 17:00:00 +0000 Files and hashes: 1: 539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (hash: UxQDoHS9cEQuLJskFDzCfeog1RbVoofzmUq6B8258II=) 2: 7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl (hash: GEhT2/qKmyfc2bs8kqdb3puHyyCUazXZE33mUnW+0zc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:fb:44:37:eb:1e:1a:99:96:a8:ef:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Validity Not Before: Apr 26 17:00:03 2025 GMT Not After : Apr 29 17:00:00 2025 GMT Subject: CN=8e541da2-b6c6-45a1-a0a9-3ded6237b03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:6b:06:33:80:07:ad:4c:5b:fe:34:d7:73: bb:bf:13:4a:c1:27:86:57:b7:69:48:60:1a:4d:ea: 30:e1:de:12:99:bb:d0:f9:16:57:70:9f:69:76:6f: 95:dc:99:20:a4:ee:8b:b8:fd:52:ca:fc:20:d9:8d: ee:fd:94:c4:4c:69:be:f2:a5:79:12:6f:a5:93:a6: 67:97:72:64:9e:b3:61:d0:3a:a2:21:61:65:27:e3: 49:15:dd:d0:bb:e2:1d:6f:de:17:fd:96:32:db:7e: 96:dd:25:33:31:a0:e8:ba:99:71:34:9b:4d:d5:b2: 9c:cf:6b:ad:61:08:18:1f:d5:ea:02:0f:7e:f0:b7: 1e:7c:91:29:95:3b:e9:61:3f:47:bf:49:48:9b:a2: e1:fd:d9:54:dc:31:e4:d4:ff:c4:f9:bb:20:68:e0: f2:12:d9:53:4e:b8:09:a9:2b:13:c7:35:5f:eb:6e: 28:8a:c2:82:17:4a:33:49:42:c9:68:2c:ed:0d:de: 68:96:ff:9e:bf:01:74:f0:52:b8:e6:c6:57:f0:9d: a3:ad:e0:83:13:fd:99:8d:c5:b3:e4:1c:8d:ca:56: 97:78:ce:41:0e:b5:98:4f:d1:0a:8f:e8:05:a3:f1: 05:75:a9:b0:cf:27:dd:7e:96:61:64:17:bb:b4:12: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:13:EE:2A:F4:83:99:55:2A:78:DF:F7:4F:2A:51:E2:74:59:1B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl X509v3 Authority Key Identifier: keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:52:6b:dc:39:f9:04:f5:cf:1a:f4:f5:72:5a:b4:1d:67:14: 2d:14:b0:e2:6f:f7:8b:39:32:c5:5b:ab:a5:b6:93:aa:b0:e9: 9b:7a:c1:af:60:02:a1:18:4e:c4:dd:ee:01:4d:c2:e6:3c:51: 38:0f:bc:2a:a3:b7:4d:38:9e:1b:f1:38:21:94:fd:99:b2:ff: 96:a4:4e:6c:f6:51:1e:11:31:a3:1b:58:67:9a:84:3e:c9:6c: 2a:3e:55:4e:4e:28:8e:78:67:25:12:47:96:46:ef:0d:0a:b0: 91:51:ce:4a:54:40:d5:66:1e:a0:21:15:39:44:79:96:e8:ab: a7:ed:7b:05:8b:07:68:c0:db:39:95:a0:cc:dd:d2:d6:69:95: 52:10:d3:89:68:53:54:4d:cd:7d:34:72:eb:69:b7:8c:37:21: d3:80:49:14:22:20:95:00:62:6a:16:b0:06:82:77:6a:e3:33: 0c:d3:86:c5:d7:b1:f6:0b:e8:d4:68:4e:aa:41:f4:43:c5:a3: 68:a1:49:6c:79:3c:8a:46:06:de:3d:cd:f9:7b:d5:d3:c3:e1: ba:49:e3:45:50:a6:59:42:60:97:10:9e:21:fd:33:18:bd:ae: 4c:fe:0f:f2:87:78:1f:41:ae:66:ce:08:4d:89:d6:f9:78:c5: e3:f4:29:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmn+0Q36x4amZao75IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUx ZGJmMB4XDTI1MDQyNjE3MDAwM1oXDTI1MDQyOTE3MDAwMFowLzEtMCsGA1UEAxMk OGU1NDFkYTItYjZjNi00NWExLWEwYTktM2RlZDYyMzdiMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonNrBjOAB61MW/4013O7vxNKwSeGV7dpSGAa Teow4d4SmbvQ+RZXcJ9pdm+V3JkgpO6LuP1Syvwg2Y3u/ZTETGm+8qV5Em+lk6Zn l3JknrNh0DqiIWFlJ+NJFd3Qu+Idb94X/ZYy236W3SUzMaDouplxNJtN1bKcz2ut YQgYH9XqAg9+8LcefJEplTvpYT9Hv0lIm6Lh/dlU3DHk1P/E+bsgaODyEtlTTrgJ qSsTxzVf624oisKCF0ozSULJaCztDd5olv+evwF08FK45sZX8J2jreCDE/2ZjcWz 5ByNylaXeM5BDrWYT9EKj+gFo/EFdamwzyfdfpZhZBe7tBJeoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMIT7ir0g5lVKnjf908qUeJ0WRuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAx NGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvN2UwMTRjZGQtNGE3Ni00 ZWVmLTg2ZjctNmI2YTgzNmUxZGJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2UwMTRjZGQtNGE3Ni00ZWVmLTg2 ZjctNmI2YTgzNmUxZGJmLzdlMDE0Y2RkLTRhNzYtNGVlZi04NmY3LTZiNmE4MzZl MWRiZi5jcmwwHwYDVR0jBBgwFoAU+BgfycggLXhZ1LDvTEuljcfck+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZh ODM2ZTFkYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+UmvcOfkE9c8a9PVyWrQd ZxQtFLDib/eLOTLFW6ultpOqsOmbesGvYAKhGE7E3e4BTcLmPFE4D7wqo7dNOJ4b 8TghlP2Zsv+WpE5s9lEeETGjG1hnmoQ+yWwqPlVOTiiOeGclEkeWRu8NCrCRUc5K VEDVZh6gIRU5RHmW6Kun7XsFiwdowNs5laDM3dLWaZVSENOJaFNUTc19NHLrabeM NyHTgEkUIiCVAGJqFrAGgndq4zMM04bF17H2C+jUaE6qQfRDxaNooUlseTyKRgbe Pc35e9XTw+G6SeNFUKZZQmCXEJ4h/TMYva5M/g/yh3gfQa5mzghNidb5eMXj9CmY -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:27 2025 by rpki-client