$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft File: 896f0624-c28d-44c0-93cf-3f879f877518.mft (raw, json) Hash identifier: NDhhH5V7HoQgUFFWvWcdzPflN1yV68+ouw+IrL2aQuo= Subject key identifier: 91:A4:9F:01:99:FF:29:92:55:0D:19:02:5B:E8:95:1E:F7:31:18:23 Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518 Certificate serial: 010D0C9F43285849AE2590325E67171BC2F4E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft Manifest number: 010D0C9F4328584073A82C2A4EB03B1388B63139 Signing time: Mon 28 Apr 2025 22:00:07 +0000 Manifest this update: Mon 28 Apr 2025 22:00:07 +0000 Manifest next update: Thu 01 May 2025 22:00:00 +0000 Files and hashes: 1: 896f0624-c28d-44c0-93cf-3f879f877518.crl (hash: rsb05QGiaj2al/nOWdqzESuEsy6/9yY75xjqCRY24XM=) 2: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (hash: iBJA8oUXGsUOQ/fxUm9hvCKfTlJjlTAkd8p2AIENdVE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:25:90:32:5e:67:17:1b:c2:f4:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518 Validity Not Before: Apr 28 22:00:07 2025 GMT Not After : May 1 22:00:00 2025 GMT Subject: CN=e8077163-4be9-4332-a447-465b73373f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:79:3e:cb:7b:d2:c5:59:d7:a5:0c:27:5f: 20:98:ce:26:39:e0:81:a9:57:24:5d:be:ae:e7:3c: 93:b0:21:72:a1:31:f3:27:51:0c:0e:60:50:0e:fd: 16:29:fd:a6:29:66:25:fd:03:3f:42:e1:de:1b:51: 93:83:d2:e0:94:a3:e7:78:6e:5f:23:44:2f:fd:0f: 7e:29:44:2a:df:32:c3:bf:e1:d6:fc:5d:64:99:2d: f6:71:ba:24:8a:4d:bb:c6:36:65:78:68:ee:72:69: e4:c7:3d:e3:9d:54:e2:53:fe:f0:7a:cf:5c:40:a3: 63:9e:e2:cb:a3:eb:fa:e4:f7:8c:a1:93:c3:8a:0b: 15:14:51:9f:fc:d8:7e:d9:fe:cb:96:bf:a5:58:14: ad:8e:9c:e0:84:85:b1:71:24:4e:fc:ce:c9:d1:69: 48:72:6d:a2:50:f7:0a:61:9e:52:da:ac:33:b5:39: 8c:25:58:97:8f:97:fe:33:5d:42:d0:ad:6c:c1:5e: a2:dd:b0:87:02:c1:07:0f:55:97:37:21:1d:1f:75: 51:c9:48:40:8f:17:a4:30:6a:36:66:dc:6b:b6:25: 10:07:41:58:6d:e6:70:98:b3:54:7a:7d:87:74:ea: 23:0c:33:3b:38:98:bb:b1:e8:2b:d5:c4:29:cd:d8: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:9F:01:99:FF:29:92:55:0D:19:02:5B:E8:95:1E:F7:31:18:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl X509v3 Authority Key Identifier: keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:75:ed:c1:d4:a3:30:a8:5c:70:32:06:88:64:9c:5c:6a:93: 78:00:5a:1b:d8:b2:84:fe:78:a3:12:c4:05:37:e0:e6:78:93: d5:cd:5a:d6:29:8e:a8:52:48:5f:4a:70:48:d5:5e:05:db:28: 4c:71:03:86:95:83:26:f1:7e:35:f1:85:a3:ee:ff:82:db:b9: 23:e4:fd:0a:3a:12:7e:11:78:f3:9b:22:9c:1b:9f:1b:9c:b6: af:64:74:44:a2:35:3c:8e:a3:0d:6c:a9:6b:c4:2a:f2:b6:bc: f7:83:83:c7:a7:43:8b:31:de:07:86:45:af:a1:77:66:28:8b: 6b:d1:cd:38:49:03:7d:33:d1:6f:49:78:41:19:99:f1:ba:60: 10:70:17:d1:8e:ca:1b:e4:2c:e4:00:b9:82:66:63:4c:c4:b1: 38:e2:40:d2:52:a1:35:c7:f4:3f:f2:48:42:4f:fb:7c:66:ee: b9:78:96:a2:e2:23:b8:5f:cc:71:a0:c2:13:44:b8:91:f2:cf: af:e5:24:89:62:f7:97:90:e2:64:2a:56:b0:dd:1f:bc:6b:b6: 18:0d:ad:b4:2b:b1:56:56:3f:3c:53:b2:41:10:68:bf:74:e4: 11:69:1c:f0:fd:99:3b:f5:c1:1b:04:23:25:b3:b1:23:e9:c7: 21:bf:06:a6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmuJZAyXmcXG8L06QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3 NTE4MB4XDTI1MDQyODIyMDAwN1oXDTI1MDUwMTIyMDAwMFowLzEtMCsGA1UEAxMk ZTgwNzcxNjMtNGJlOS00MzMyLWE0NDctNDY1YjczMzczZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3515Pst70sVZ16UMJ18gmM4mOeCBqVckXb6u 5zyTsCFyoTHzJ1EMDmBQDv0WKf2mKWYl/QM/QuHeG1GTg9LglKPneG5fI0Qv/Q9+ KUQq3zLDv+HW/F1kmS32cbokik27xjZleGjucmnkxz3jnVTiU/7wes9cQKNjnuLL o+v65PeMoZPDigsVFFGf/Nh+2f7Llr+lWBStjpzghIWxcSRO/M7J0WlIcm2iUPcK YZ5S2qwztTmMJViXj5f+M11C0K1swV6i3bCHAsEHD1WXNyEdH3VRyUhAjxekMGo2 ZtxrtiUQB0FYbeZwmLNUen2HdOojDDM7OJi7segr1cQpzdhzaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJGknwGZ/ymSVQ0ZAlvolR73MRgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvODk2ZjA2MjQtYzI4ZC00 NGMwLTkzY2YtM2Y4NzlmODc3NTE4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3 NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3 OWY4Nzc1MTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGde3B1KMwqFxwMgaIZJxc apN4AFob2LKE/nijEsQFN+DmeJPVzVrWKY6oUkhfSnBI1V4F2yhMcQOGlYMm8X41 8YWj7v+C27kj5P0KOhJ+EXjzmyKcG58bnLavZHREojU8jqMNbKlrxCrytrz3g4PH p0OLMd4HhkWvoXdmKItr0c04SQN9M9FvSXhBGZnxumAQcBfRjsob5CzkALmCZmNM xLE44kDSUqE1x/Q/8khCT/t8Zu65eJai4iO4X8xxoMITRLiR8s+v5SSJYveXkOJk Klaw3R+8a7YYDa20K7FWVj88U7JBEGi/dOQRaRzw/Zk79cEbBCMls7Ej6cchvwam -----END CERTIFICATE-----Generated at Tue Apr 29 18:35:20 2025 by rpki-client