$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf/82520277-7939-4b99-9d8a-c05bdbf9e3cf.mft File: 82520277-7939-4b99-9d8a-c05bdbf9e3cf.mft (raw, json) Hash identifier: l2ltxxzmNeVT719j8BQ3lieB8lmk1HOsEz36lCEW29Q= Subject key identifier: 5B:64:04:98:C4:F0:9D:A2:03:35:2B:9B:EF:33:C7:72:DE:19:1E:B5 Authority key identifier: 00:57:F6:57:8D:E1:2D:9A:A0:F3:BE:E5:65:DA:F4:62:6E:A5:62:24 Certificate issuer: /CN=82520277-7939-4b99-9d8a-c05bdbf9e3cf Certificate serial: 010D0C9F43285849B44FCA4DF0AF199357143520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf/82520277-7939-4b99-9d8a-c05bdbf9e3cf.mft Manifest number: 010D0C9F4328584073A838F40FCC9044D38ADA64 Signing time: Thu 01 May 2025 03:00:03 +0000 Manifest this update: Thu 01 May 2025 03:00:03 +0000 Manifest next update: Sun 04 May 2025 03:00:00 +0000 Files and hashes: 1: 82520277-7939-4b99-9d8a-c05bdbf9e3cf.crl (hash: SwkHeplRlyy91ji7PAmgj6XoexioD5Ek4/o/wHjiDq0=) 2: b040dac6-a82f-31ac-bf94-6beac2a32372.roa (hash: CPEDfmTBEJFQyWXxes5dFgBa4puS80E6pVD2k7AYKpY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf/82520277-7939-4b99-9d8a-c05bdbf9e3cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf/82520277-7939-4b99-9d8a-c05bdbf9e3cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:4f:ca:4d:f0:af:19:93:57:14:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82520277-7939-4b99-9d8a-c05bdbf9e3cf Validity Not Before: May 1 03:00:03 2025 GMT Not After : May 4 03:00:00 2025 GMT Subject: CN=9e4d3524-2d5e-411a-a832-bd86ed6912a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:3b:d3:a9:c1:5a:6a:5f:85:33:d2:bd:a3: 38:4a:1e:78:86:e4:0b:86:7a:cf:cd:04:a2:bd:94: 78:5b:9b:81:37:6a:5f:bf:99:a2:e2:53:f1:16:9d: 8a:41:53:43:68:9a:43:71:8a:77:a7:f1:dc:7e:71: f8:ae:72:7b:f6:cc:b8:a8:6e:54:f8:e8:db:b9:ae: 68:48:ba:9c:4b:48:36:5b:a0:b4:9a:74:e7:90:4c: 97:a9:df:eb:7e:11:f5:92:db:6c:5d:e1:64:b5:fd: 3e:e1:da:4e:c8:e5:9d:16:7f:f7:56:24:dd:5c:92: c6:10:a2:34:4a:0a:d5:d9:ee:5e:b7:19:93:dc:c8: 3d:17:09:fa:7c:0d:10:0d:b8:02:32:ac:1f:f3:3d: 2c:60:70:3e:de:f7:27:46:c9:64:55:78:1a:a3:16: 53:e4:8a:07:10:ec:e0:4e:2f:58:b2:fc:45:24:02: 53:ef:0f:25:47:16:11:3d:47:c1:44:ef:12:88:67: 43:a5:3a:81:83:c1:a3:ed:83:75:3f:dc:63:9c:55: 42:e3:91:f5:e6:7c:7a:e0:cb:69:84:aa:58:24:64: e2:02:44:6b:35:34:d4:d0:ae:87:20:59:b3:9a:38: 95:35:ee:57:dd:46:64:86:9b:70:18:c6:58:94:c7: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:64:04:98:C4:F0:9D:A2:03:35:2B:9B:EF:33:C7:72:DE:19:1E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf/82520277-7939-4b99-9d8a-c05bdbf9e3cf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf/82520277-7939-4b99-9d8a-c05bdbf9e3cf.crl X509v3 Authority Key Identifier: keyid:00:57:F6:57:8D:E1:2D:9A:A0:F3:BE:E5:65:DA:F4:62:6E:A5:62:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/82520277-7939-4b99-9d8a-c05bdbf9e3cf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6c:a8:2d:ad:ca:1f:9e:f0:67:65:2b:ef:58:a8:7f:f2:a6: bd:f4:7a:78:92:e3:ec:40:0c:0e:c0:92:5f:ae:ef:4c:40:9f: 8d:dd:3e:fb:9a:35:b2:06:c3:38:84:77:2f:ae:db:54:40:be: f5:c6:f9:cf:33:16:39:58:03:61:c8:65:e7:e7:4e:3a:be:9c: 5e:24:42:79:6e:dc:86:3c:6f:22:4d:c8:02:aa:3e:74:29:cf: a0:57:5e:f7:1b:2d:e5:cb:09:35:f9:ea:4a:b7:3d:af:66:7f: 27:6d:58:ff:2b:92:01:dc:f6:24:e4:f6:53:38:62:d8:66:44: 9b:9a:17:4e:88:f0:a9:d5:a7:66:78:db:35:44:b4:40:f1:7f: 3c:b9:55:7f:da:66:a3:6e:d2:d7:e2:a9:35:47:57:1d:03:6c: 14:c8:02:b0:9a:97:14:fb:d7:48:2c:a7:50:27:37:49:fb:cd: b3:25:4f:6b:fe:e5:f6:5e:d7:e5:b2:99:e9:15:15:3b:c1:ab: 2c:00:bb:37:a3:6d:5f:8d:64:3c:75:88:ac:98:4d:2a:ae:83: 11:49:75:de:fa:29:2b:69:d7:83:c7:fc:c3:3e:bb:4c:03:7e: 3f:3d:33:e3:db:d9:91:05:e8:1a:03:7c:d6:f0:38:43:5a:ae: 86:15:ce:f3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm0T8pN8K8Zk1cUNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MjAyNzctNzkzOS00Yjk5LTlkOGEtYzA1YmRiZjll M2NmMB4XDTI1MDUwMTAzMDAwM1oXDTI1MDUwNDAzMDAwMFowLzEtMCsGA1UEAxMk OWU0ZDM1MjQtMmQ1ZS00MTFhLWE4MzItYmQ4NmVkNjkxMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBQ706nBWmpfhTPSvaM4Sh54huQLhnrPzQSi vZR4W5uBN2pfv5mi4lPxFp2KQVNDaJpDcYp3p/HcfnH4rnJ79sy4qG5U+Ojbua5o SLqcS0g2W6C0mnTnkEyXqd/rfhH1kttsXeFktf0+4dpOyOWdFn/3ViTdXJLGEKI0 SgrV2e5etxmT3Mg9Fwn6fA0QDbgCMqwf8z0sYHA+3vcnRslkVXgaoxZT5IoHEOzg Ti9YsvxFJAJT7w8lRxYRPUfBRO8SiGdDpTqBg8Gj7YN1P9xjnFVC45H15nx64Mtp hKpYJGTiAkRrNTTU0K6HIFmzmjiVNe5X3UZkhptwGMZYlMfQHQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFtkBJjE8J2iAzUrm+8zx3LeGR61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjUy MDI3Ny03OTM5LTRiOTktOWQ4YS1jMDViZGJmOWUzY2YvODI1MjAyNzctNzkzOS00 Yjk5LTlkOGEtYzA1YmRiZjllM2NmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODI1MjAyNzctNzkzOS00Yjk5LTlk OGEtYzA1YmRiZjllM2NmLzgyNTIwMjc3LTc5MzktNGI5OS05ZDhhLWMwNWJkYmY5 ZTNjZi5jcmwwHwYDVR0jBBgwFoAUAFf2V43hLZqg877lZdr0Ym6lYiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjUyMDI3Ny03OTM5LTRiOTktOWQ4YS1jMDVi ZGJmOWUzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhbKgtrcofnvBnZSvvWKh/ 8qa99Hp4kuPsQAwOwJJfru9MQJ+N3T77mjWyBsM4hHcvrttUQL71xvnPMxY5WANh yGXn5046vpxeJEJ5btyGPG8iTcgCqj50Kc+gV173Gy3lywk1+epKtz2vZn8nbVj/ K5IB3PYk5PZTOGLYZkSbmhdOiPCp1admeNs1RLRA8X88uVV/2majbtLX4qk1R1cd A2wUyAKwmpcU+9dILKdQJzdJ+82zJU9r/uX2XtflspnpFRU7wassALs3o21fjWQ8 dYismE0qroMRSXXe+ikradeDx/zDPrtMA34/PTPj29mRBegaA3zW8DhDWq6GFc7z -----END CERTIFICATE-----Generated at Thu May 1 23:31:45 2025 by rpki-client