$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft File: b0217be3-0b99-45d9-9156-e23551753455.mft (raw, json) Hash identifier: r5kY4oXM2cv69Zg0EuT/Zknc5NJBz4KYOCJvqGBEI10= Subject key identifier: 87:84:01:B4:24:D4:61:34:74:BF:87:F4:6B:B9:36:E1:1F:25:85:FA Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F43285849AFE4471A096A1C55EEB97400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft Manifest number: 010D0C9F4328584073A855A9EA20DD384E9A71E2 Signing time: Tue 29 Apr 2025 13:00:10 +0000 Manifest this update: Tue 29 Apr 2025 13:00:10 +0000 Manifest next update: Fri 02 May 2025 13:00:00 +0000 Files and hashes: 1: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (hash: mOfvQhF9TsEDERaZJsv3ngH+k/3Gx3tR5v9VcMDnA34=) 2: b0217be3-0b99-45d9-9156-e23551753455.crl (hash: RooE78+qB/TLFKs6zWM6kYuZl+jiTygJe4siZLw6JEI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:e4:47:1a:09:6a:1c:55:ee:b9:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Apr 29 13:00:10 2025 GMT Not After : May 2 13:00:00 2025 GMT Subject: CN=27159693-052c-47d2-90b1-215022b1dc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:db:91:5b:46:ce:76:63:84:3f:d6:d9:29: 34:2c:ec:ef:28:16:f0:51:de:ff:09:63:db:6e:72: b6:4c:03:b5:3a:b3:db:0f:67:85:3e:bb:43:7a:fa: 5a:8e:bd:b6:db:37:b2:6e:71:81:3d:aa:f0:fc:8c: 97:c6:6b:03:b5:d2:ba:02:57:a1:8b:b9:92:5e:4b: b9:b1:b8:ea:02:94:f0:ec:4f:f6:77:64:8b:99:fb: 0d:2f:64:3d:d3:fd:95:4f:13:5c:99:01:40:1d:19: 91:be:1d:ae:35:ea:36:c2:45:6f:a1:de:f6:39:2c: f9:79:92:e3:21:ee:83:55:50:33:d3:3d:31:c2:0f: 3e:f2:b4:75:bb:4d:c3:84:4b:8e:5c:52:3d:05:dd: e9:00:64:94:19:56:47:e9:d3:00:9f:ee:64:d7:66: 01:db:b1:05:41:8e:5e:62:d1:8f:16:02:84:ab:75: c3:b1:22:9c:0e:4f:78:1b:c4:b3:eb:42:12:58:10: 41:13:e3:3f:98:72:60:66:a6:58:45:30:b2:1f:a6: e7:3a:bf:f6:2c:a4:ff:bd:8b:a5:fc:12:f9:e1:33: 2f:e7:9e:f4:c7:05:0e:5b:8d:cb:43:04:84:1d:54: 47:ff:29:12:ba:e4:7b:fb:8e:31:71:7a:5f:5a:28: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:84:01:B4:24:D4:61:34:74:BF:87:F4:6B:B9:36:E1:1F:25:85:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:40:a0:5b:2c:67:0f:cb:50:a5:2e:54:bd:9a:31:2e:1c:4a: 95:a2:1a:46:e1:7c:08:c4:2f:94:ce:3f:07:db:cf:b9:cc:8c: 7f:a7:93:9a:19:cb:5f:36:7e:c9:48:5e:1f:cc:e3:db:73:5a: 82:c3:f1:87:9c:a4:22:89:a1:eb:92:bc:d2:17:c6:71:da:16: 76:57:fa:cd:ee:27:6b:13:eb:bf:30:83:c7:c8:23:a3:be:4d: bd:26:ec:31:7a:64:70:ed:19:5e:97:b4:71:d1:22:80:66:b9: bd:de:cd:a6:80:c7:b5:98:de:95:5d:ae:1f:42:76:f0:94:43: 27:23:6c:4b:b9:20:0e:93:16:14:d9:e3:25:81:70:8d:f1:f3: c4:d3:c5:51:8a:e2:e3:e4:04:3d:d5:29:9b:2e:e1:7f:7c:b1: df:c0:dd:01:3e:87:be:f3:fb:62:f3:00:f0:57:2e:38:73:6f: da:f0:be:a2:aa:59:79:20:5a:01:8b:a2:1d:48:d3:d6:6b:38: 4b:64:40:cc:e7:9d:c4:5d:52:0b:22:35:dc:10:73:d0:6f:58: b6:ee:67:99:09:b1:ed:d0:a2:6e:d1:a9:27:83:c1:5a:7f:7c: 91:19:15:84:ee:52:d3:7d:f8:c1:3f:5c:12:c8:49:5b:be:8f: e1:97:4e:dd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmv5EcaCWocVe65dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI1MDQyOTEzMDAxMFoXDTI1MDUwMjEzMDAwMFowLzEtMCsGA1UEAxMk MjcxNTk2OTMtMDUyYy00N2QyLTkwYjEtMjE1MDIyYjFkYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03TbkVtGznZjhD/W2Sk0LOzvKBbwUd7/CWPb bnK2TAO1OrPbD2eFPrtDevpajr222zeybnGBParw/IyXxmsDtdK6Alehi7mSXku5 sbjqApTw7E/2d2SLmfsNL2Q90/2VTxNcmQFAHRmRvh2uNeo2wkVvod72OSz5eZLj Ie6DVVAz0z0xwg8+8rR1u03DhEuOXFI9Bd3pAGSUGVZH6dMAn+5k12YB27EFQY5e YtGPFgKEq3XDsSKcDk94G8Sz60ISWBBBE+M/mHJgZqZYRTCyH6bnOr/2LKT/vYul /BL54TMv5570xwUOW43LQwSEHVRH/ykSuuR7+44xcXpfWiiPsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIeEAbQk1GE0dL+H9Gu5NuEfJYX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvYjAyMTdiZTMtMGI5OS00 NWQ5LTkxNTYtZTIzNTUxNzUzNDU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIQKBbLGcPy1ClLlS9mjEu HEqVohpG4XwIxC+Uzj8H28+5zIx/p5OaGctfNn7JSF4fzOPbc1qCw/GHnKQiiaHr krzSF8Zx2hZ2V/rN7idrE+u/MIPHyCOjvk29JuwxemRw7Rlel7Rx0SKAZrm93s2m gMe1mN6VXa4fQnbwlEMnI2xLuSAOkxYU2eMlgXCN8fPE08VRiuLj5AQ91SmbLuF/ fLHfwN0BPoe+8/ti8wDwVy44c2/a8L6iqll5IFoBi6IdSNPWazhLZEDM553EXVIL IjXcEHPQb1i27meZCbHt0KJu0akng8Faf3yRGRWE7lLTffjBP1wSyElbvo/hl07d -----END CERTIFICATE-----Generated at Wed Apr 30 13:20:42 2025 by rpki-client