$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft File: 7e70a287-ad97-4c1e-9564-9ca069f57b17.mft (raw, json) Hash identifier: rFv4ryjDNuzak6kf1ElmXT8EIkbIRUUtnS/cKxkj/bM= Subject key identifier: C6:C8:6D:C0:B5:4B:0F:92:42:20:2D:F8:2F:77:C8:39:55:04:77:DE Authority key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Certificate issuer: /CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Certificate serial: 010D0C9F43285849ACA268BA3B9F521F00631B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft Manifest number: 010D0C9F4328584073A84A2792840918C6A14D60 Signing time: Mon 28 Apr 2025 09:00:03 +0000 Manifest this update: Mon 28 Apr 2025 09:00:03 +0000 Manifest next update: Wed 30 Apr 2025 09:00:00 +0000 Files and hashes: 1: 5e00859f-bf20-388d-a400-94e4c09e3154.roa (hash: GQySP7mJ9WZeb+2a6UUNHhFEat4mJjl5KRninAnWQc0=) 2: 7e70a287-ad97-4c1e-9564-9ca069f57b17.crl (hash: t5HBbrZwKi34rd66HTa5wBlzCncemef4sQIAXR4KzFg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:a2:68:ba:3b:9f:52:1f:00:63:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Validity Not Before: Apr 28 09:00:03 2025 GMT Not After : Apr 30 09:00:00 2025 GMT Subject: CN=d13b7afd-37dd-4bce-b4b6-aab4cf4d80da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:10:e1:03:53:db:50:3f:19:4c:d3:71:63: fd:61:0e:29:a2:09:f5:55:fb:c9:94:74:3d:89:95: 13:19:9a:7c:9e:37:ca:f2:10:42:92:2a:f7:89:69: cf:21:60:d7:bb:b9:b8:ec:c2:75:ab:3c:b3:1c:a5: ac:2c:b0:7d:d9:8d:af:90:86:a9:fc:ab:bd:3f:fd: f9:48:71:e8:90:db:b5:b1:41:de:91:d2:ae:34:26: cb:3c:e7:ef:59:c9:a1:3a:4c:e0:b1:65:53:b7:bc: 98:6a:75:a7:cd:1f:f9:48:82:5d:21:53:49:c6:91: 7e:ee:20:6c:6e:fa:12:a2:6c:d7:5d:82:f5:b6:f6: ef:28:2b:84:dc:19:ac:32:27:bd:68:6f:61:26:09: f5:0d:61:bf:9c:3b:d2:b4:0f:25:77:36:b1:f7:48: 87:f3:59:cf:19:be:e9:d9:39:4b:39:b2:6f:f2:7c: 7c:83:83:f4:60:2f:82:0a:9a:fc:75:65:6d:d3:00: 55:2e:c6:8e:31:d7:43:d5:98:65:ed:cd:97:05:6f: ea:a6:82:a3:7b:92:87:a7:b6:7b:8d:59:25:fe:bf: cc:60:9e:21:e5:f0:6d:20:9d:fe:44:33:12:58:ed: 94:1c:97:b4:64:83:6f:8a:92:79:33:20:bf:84:7a: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:6D:C0:B5:4B:0F:92:42:20:2D:F8:2F:77:C8:39:55:04:77:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.crl X509v3 Authority Key Identifier: keyid:21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:18:2d:42:a3:9a:e4:54:3d:12:22:2a:ec:cb:f1:b7:93:47: 4c:12:86:8f:a6:4f:b8:61:0b:20:a3:3d:75:ed:b4:10:83:fd: 5e:18:c4:b7:20:6d:e3:26:0c:db:02:0a:12:18:1b:e4:45:27: 1d:6b:d2:d3:76:26:8f:69:ce:12:b4:92:41:2e:65:f5:82:6a: 29:b2:a4:34:a2:a7:d6:c0:14:38:b0:d3:98:32:32:83:0c:aa: 33:9e:28:bb:eb:30:65:50:a1:fc:8b:a8:8b:56:00:b5:a8:97: e5:a1:af:24:0b:c1:7a:3d:0d:9d:97:9b:b1:81:d8:b4:2a:da: 42:e4:f0:93:da:d7:6d:31:f1:7c:40:f5:f6:35:a0:24:46:28: 0e:30:b9:91:77:7f:23:a6:d3:03:c3:98:f4:3c:9a:34:43:4a: ec:e9:20:b4:71:d1:c3:15:b5:93:ab:13:2e:de:08:0f:66:b9: 52:d3:b9:50:13:a6:1a:51:a3:0a:5f:37:68:d3:87:47:9a:58: cb:7a:24:ef:cb:7d:c1:b2:89:6c:8b:65:d1:d6:44:e2:27:67: fe:92:3b:f1:54:52:f5:1b:16:68:28:e4:cd:e5:f9:4f:c0:b3: 3e:a0:7b:c2:99:d1:63:2f:77:58:3b:a0:ca:32:50:e3:18:c8: 3d:9c:10:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmsomi6O59SHwBjG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3 YjE3MB4XDTI1MDQyODA5MDAwM1oXDTI1MDQzMDA5MDAwMFowLzEtMCsGA1UEAxMk ZDEzYjdhZmQtMzdkZC00YmNlLWI0YjYtYWFiNGNmNGQ4MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2wQ4QNT21A/GUzTcWP9YQ4pogn1VfvJlHQ9 iZUTGZp8njfK8hBCkir3iWnPIWDXu7m47MJ1qzyzHKWsLLB92Y2vkIap/Ku9P/35 SHHokNu1sUHekdKuNCbLPOfvWcmhOkzgsWVTt7yYanWnzR/5SIJdIVNJxpF+7iBs bvoSomzXXYL1tvbvKCuE3BmsMie9aG9hJgn1DWG/nDvStA8ldzax90iH81nPGb7p 2TlLObJv8nx8g4P0YC+CCpr8dWVt0wBVLsaOMddD1Zhl7c2XBW/qpoKje5KHp7Z7 jVkl/r/MYJ4h5fBtIJ3+RDMSWO2UHJe0ZINvipJ5MyC/hHpH1QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMbIbcC1Sw+SQiAt+C93yDlVBHfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcw YTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvN2U3MGEyODctYWQ5Ny00 YzFlLTk1NjQtOWNhMDY5ZjU3YjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U3MGEyODctYWQ5Ny00YzFlLTk1 NjQtOWNhMDY5ZjU3YjE3LzdlNzBhMjg3LWFkOTctNGMxZS05NTY0LTljYTA2OWY1 N2IxNy5jcmwwHwYDVR0jBBgwFoAUIRirvVv0Lhj3Bj0fRT81E1Sa+WAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2Ew NjlmNTdiMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpGC1Co5rkVD0SIirsy/G3 k0dMEoaPpk+4YQsgoz117bQQg/1eGMS3IG3jJgzbAgoSGBvkRScda9LTdiaPac4S tJJBLmX1gmopsqQ0oqfWwBQ4sNOYMjKDDKoznii76zBlUKH8i6iLVgC1qJfloa8k C8F6PQ2dl5uxgdi0KtpC5PCT2tdtMfF8QPX2NaAkRigOMLmRd38jptMDw5j0PJo0 Q0rs6SC0cdHDFbWTqxMu3ggPZrlS07lQE6YaUaMKXzdo04dHmljLeiTvy33Bsols i2XR1kTiJ2f+kjvxVFL1GxZoKOTN5flPwLM+oHvCmdFjL3dYO6DKMlDjGMg9nBCs -----END CERTIFICATE-----Generated at Mon Apr 28 23:39:04 2025 by rpki-client