$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft File: 804e20e1-66d3-4b19-8356-82071ce2a249.mft (raw, json) Hash identifier: kqfN7wlzm3AtXCDgylCCnz1hwHH6/f4UWJdDy2GUEs0= Subject key identifier: 99:42:FE:24:17:95:3C:0D:72:53:BC:FB:30:68:78:8C:5C:7C:3B:96 Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249 Certificate serial: 010D0C9F43285849AE258F679F13DE07C798D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft Manifest number: 010D0C9F4328584073A82BE94AF06297D1D97B62 Signing time: Mon 28 Apr 2025 22:00:07 +0000 Manifest this update: Mon 28 Apr 2025 22:00:07 +0000 Manifest next update: Thu 01 May 2025 22:00:00 +0000 Files and hashes: 1: 804e20e1-66d3-4b19-8356-82071ce2a249.crl (hash: X8cu9DhNZB+cpNail4FQ1JYrrEqR28Hld2NFxXVLS8Y=) 2: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (hash: wvQYkhOlIQI9jJLoFAB94GOgEUhfaRDLnuic+mgivQY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:25:8f:67:9f:13:de:07:c7:98:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249 Validity Not Before: Apr 28 22:00:07 2025 GMT Not After : May 1 22:00:00 2025 GMT Subject: CN=04a28016-aa07-4188-ae94-efed39dad3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:5a:79:9a:79:62:2f:c5:bc:24:a8:6a:3f: e8:4b:a5:8c:dc:89:7d:9d:c8:3a:e1:3d:77:33:94: 94:b8:57:7c:ce:2c:fd:98:77:0d:bf:81:5e:73:90: e4:0f:db:c5:46:60:94:d2:0f:9c:fd:78:74:ef:61: 57:e7:47:2c:db:bc:17:fc:40:7d:c0:c1:7f:59:7e: ae:dc:92:75:36:ca:32:df:6b:76:99:40:c8:77:92: db:c5:33:01:24:82:6e:4f:db:5b:27:3b:90:0a:38: 42:e0:a8:1e:cb:17:32:71:de:21:b2:80:e0:90:b1: 07:75:b9:b6:46:7e:0a:89:7f:c0:12:e2:b9:13:1c: 8a:84:58:b7:c0:6a:55:80:5f:5a:8c:b8:5d:6d:ef: d0:8c:d2:61:07:d0:c0:f5:5a:64:10:e3:7c:f1:57: 87:79:3c:b3:88:e6:95:39:7a:e9:ad:05:2c:e7:37: 3b:08:8a:bb:62:3d:af:23:11:70:d7:04:87:a1:21: 0b:77:54:1e:03:3c:c7:50:e1:49:66:d5:89:9c:03: 09:44:47:84:85:5d:52:1e:11:15:68:61:6d:4d:85: c6:e2:78:40:eb:5b:01:29:ae:a9:d3:5f:de:20:50: e4:7a:e2:10:9e:c8:80:48:1c:e8:c6:f8:e0:86:3f: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:42:FE:24:17:95:3C:0D:72:53:BC:FB:30:68:78:8C:5C:7C:3B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl X509v3 Authority Key Identifier: keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:22:1c:43:91:47:f7:1f:d4:3d:0c:47:b3:17:dd:a4:d1:89: 95:c1:33:d4:f9:a1:2d:a7:76:5e:0f:3a:c5:8b:e5:d0:c3:13: db:fd:6c:52:d9:f6:10:45:2f:34:02:be:0d:53:21:a1:a8:cb: 71:b5:3e:7b:52:d6:b8:e7:fe:48:1f:c4:4f:ea:4c:75:6a:29: af:65:ba:e4:e6:16:4c:95:50:87:c7:4a:f9:95:a2:c7:04:88: 16:eb:94:27:ed:9f:6b:7f:36:12:ae:80:60:1c:99:d9:c0:18: 0d:90:83:15:76:48:89:84:6f:ed:a3:82:ed:1e:f9:c6:0b:10: 83:7d:53:f0:4e:79:61:46:b7:68:18:61:1c:4f:c5:e1:d4:72: 27:bf:f2:ce:15:04:ad:0d:35:39:5e:2f:3d:fb:82:ee:3a:96: 93:60:20:d3:36:aa:02:5a:6a:0b:35:44:a9:21:07:21:b0:5b: 51:d1:ed:90:a2:63:9d:cb:3d:69:c6:25:a1:af:39:e6:d1:fb: fc:44:70:ac:eb:02:22:3c:71:48:16:a8:29:63:81:52:8e:43: 25:28:31:64:e4:39:03:c7:ae:ac:13:c4:08:5d:d5:e9:20:9d: 99:3f:dc:6d:05:ad:a3:2e:27:1e:fe:75:94:75:96:3b:85:3d: 25:cc:3b:ac -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuJY9nnxPeB8eY1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0ZTIwZTEtNjZkMy00YjE5LTgzNTYtODIwNzFjZTJh MjQ5MB4XDTI1MDQyODIyMDAwN1oXDTI1MDUwMTIyMDAwMFowLzEtMCsGA1UEAxMk MDRhMjgwMTYtYWEwNy00MTg4LWFlOTQtZWZlZDM5ZGFkM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBVaeZp5Yi/FvCSoaj/oS6WM3Il9ncg64T13 M5SUuFd8ziz9mHcNv4Fec5DkD9vFRmCU0g+c/Xh072FX50cs27wX/EB9wMF/WX6u 3JJ1Nsoy32t2mUDId5LbxTMBJIJuT9tbJzuQCjhC4Kgeyxcycd4hsoDgkLEHdbm2 Rn4KiX/AEuK5ExyKhFi3wGpVgF9ajLhdbe/QjNJhB9DA9VpkEON88VeHeTyziOaV OXrprQUs5zc7CIq7Yj2vIxFw1wSHoSELd1QeAzzHUOFJZtWJnAMJREeEhV1SHhEV aGFtTYXG4nhA61sBKa6p01/eIFDkeuIQnsiASBzoxvjghj/VPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJlC/iQXlTwNclO8+zBoeIxcfDuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRl MjBlMS02NmQzLTRiMTktODM1Ni04MjA3MWNlMmEyNDkvODA0ZTIwZTEtNjZkMy00 YjE5LTgzNTYtODIwNzFjZTJhMjQ5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0ZTIwZTEtNjZkMy00YjE5LTgz NTYtODIwNzFjZTJhMjQ5LzgwNGUyMGUxLTY2ZDMtNGIxOS04MzU2LTgyMDcxY2Uy YTI0OS5jcmwwHwYDVR0jBBgwFoAU9yC8R4jA8DfAcvbh44l89YA+Mx0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRlMjBlMS02NmQzLTRiMTktODM1Ni04MjA3 MWNlMmEyNDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDIhxDkUf3H9Q9DEezF92k 0YmVwTPU+aEtp3ZeDzrFi+XQwxPb/WxS2fYQRS80Ar4NUyGhqMtxtT57Uta45/5I H8RP6kx1aimvZbrk5hZMlVCHx0r5laLHBIgW65Qn7Z9rfzYSroBgHJnZwBgNkIMV dkiJhG/to4LtHvnGCxCDfVPwTnlhRrdoGGEcT8Xh1HInv/LOFQStDTU5Xi89+4Lu OpaTYCDTNqoCWmoLNUSpIQchsFtR0e2QomOdyz1pxiWhrznm0fv8RHCs6wIiPHFI FqgpY4FSjkMlKDFk5DkDx66sE8QIXdXpIJ2ZP9xtBa2jLice/nWUdZY7hT0lzDus -----END CERTIFICATE-----Generated at Tue Apr 29 16:54:52 2025 by rpki-client