$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft File: c76d0de5-b885-4437-8fa9-b267f0f3d228.mft (raw, json) Hash identifier: YxOTKjD4xakHSkX5p9PFSm/M4dsqp3XX7hjgVEU1f0Y= Subject key identifier: 3B:57:27:AA:D7:59:7A:CD:AD:24:01:A4:0E:56:86:09:15:34:29:C7 Authority key identifier: F1:28:C8:B4:1E:09:A0:30:FE:D8:18:EE:7C:B4:85:C1:A9:88:73:6F Certificate issuer: /CN=c76d0de5-b885-4437-8fa9-b267f0f3d228 Certificate serial: 010D0C9F43285849A8190C26827E9C964AB0CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft Manifest number: 010D0C9F4328584073A81EBF9692F9371DAE8FCC Signing time: Sat 26 Apr 2025 18:00:03 +0000 Manifest this update: Sat 26 Apr 2025 18:00:03 +0000 Manifest next update: Tue 29 Apr 2025 18:00:00 +0000 Files and hashes: 1: c76d0de5-b885-4437-8fa9-b267f0f3d228.crl (hash: StYkhfqOy+oSw+/79KqtWf7YF4CJraaCHe1HkZ2CiBM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:19:0c:26:82:7e:9c:96:4a:b0:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76d0de5-b885-4437-8fa9-b267f0f3d228 Validity Not Before: Apr 26 18:00:03 2025 GMT Not After : Apr 29 18:00:00 2025 GMT Subject: CN=3c67b97e-3625-4e2a-856c-ac0017744704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:72:8c:ca:6f:9f:4d:e3:89:a0:96:22:7a: 57:f8:ae:50:2f:e5:bb:ed:1a:a9:de:ac:46:40:ad: c5:15:08:c9:47:cf:a4:3a:8f:ad:e3:dd:c9:8c:cd: ee:7f:0b:19:71:e1:2c:ec:ae:14:0c:c9:41:29:ff: 31:1e:83:33:15:30:4d:a2:c3:20:8a:d5:00:32:b9: d4:c8:60:d5:39:27:8e:14:bd:8b:90:28:2c:2d:b1: 57:bb:be:9b:1b:33:86:80:07:1e:d5:7b:b1:99:b2: 88:b9:2b:be:14:56:57:4e:3a:12:71:3d:37:a1:58: 0c:b5:2e:38:6e:16:a3:38:77:95:c8:8d:9a:94:7e: 33:33:d3:dd:28:41:56:0d:54:15:46:e1:f6:7b:0f: 34:bd:2c:17:36:b7:aa:56:82:ac:4f:8d:ed:d2:56: d9:f9:5b:8d:6e:8e:dd:9f:f3:98:d6:ba:97:e1:96: 83:ed:fc:b5:14:24:12:53:72:8a:f7:2e:c9:47:29: e8:57:45:5e:2e:61:b7:2f:7c:69:e2:fa:4f:5c:9c: 38:75:00:e4:b4:a0:6e:ec:c8:75:08:8d:b2:b6:9d: 28:8d:77:d3:c6:cb:d6:85:c9:92:79:87:73:b4:b8: 6f:18:6d:28:19:37:c3:41:bd:e6:f2:a5:d2:21:57: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:57:27:AA:D7:59:7A:CD:AD:24:01:A4:0E:56:86:09:15:34:29:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228/c76d0de5-b885-4437-8fa9-b267f0f3d228.crl X509v3 Authority Key Identifier: keyid:F1:28:C8:B4:1E:09:A0:30:FE:D8:18:EE:7C:B4:85:C1:A9:88:73:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c76d0de5-b885-4437-8fa9-b267f0f3d228.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:39:ae:52:54:05:cc:62:c8:01:56:44:16:98:47:46:af:58: 17:91:42:23:2f:ec:40:ba:d1:65:e8:2d:9a:48:d7:e0:0e:86: 86:9f:77:a9:97:b5:f5:10:56:67:69:04:39:75:f8:6e:38:b3: 75:86:3b:c0:58:42:53:09:34:a4:8c:39:26:bc:2f:51:c6:62: b6:90:0f:31:1d:5f:f4:27:71:49:51:ae:8e:1d:f4:66:ef:01: 3f:28:e1:e8:90:a6:f4:63:23:bb:8d:13:01:fa:7b:a0:11:93: d3:3b:48:00:a0:97:aa:51:7a:2e:53:45:e4:8e:cb:ff:e3:c3: 97:94:19:70:02:40:7d:01:a1:16:c0:5d:1a:37:28:b8:7f:ae: ad:b0:84:15:c7:55:9f:80:a0:69:21:e2:66:1e:56:5b:1d:26: 24:89:52:cc:88:7e:ad:1b:95:25:56:fc:a5:ab:f1:76:6e:c9: 22:0c:52:c1:22:3a:d9:aa:81:60:ee:ce:8a:9b:c1:a5:a5:3d: 81:2d:f1:52:ee:90:a8:ee:ae:d3:a4:3a:bb:63:20:cc:43:38: ea:ae:6c:c9:ce:73:bf:01:34:9c:1a:c5:c6:91:ce:61:a5:0f: da:98:3f:83:d6:5c:9b:8f:ad:c5:97:ce:80:92:76:05:61:db: 38:8d:44:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmoGQwmgn6clkqwzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc2ZDBkZTUtYjg4NS00NDM3LThmYTktYjI2N2YwZjNk MjI4MB4XDTI1MDQyNjE4MDAwM1oXDTI1MDQyOTE4MDAwMFowLzEtMCsGA1UEAxMk M2M2N2I5N2UtMzYyNS00ZTJhLTg1NmMtYWMwMDE3NzQ0NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIZyjMpvn03jiaCWInpX+K5QL+W77Rqp3qxG QK3FFQjJR8+kOo+t493JjM3ufwsZceEs7K4UDMlBKf8xHoMzFTBNosMgitUAMrnU yGDVOSeOFL2LkCgsLbFXu76bGzOGgAce1XuxmbKIuSu+FFZXTjoScT03oVgMtS44 bhajOHeVyI2alH4zM9PdKEFWDVQVRuH2ew80vSwXNreqVoKsT43t0lbZ+VuNbo7d n/OY1rqX4ZaD7fy1FCQSU3KK9y7JRynoV0VeLmG3L3xp4vpPXJw4dQDktKBu7Mh1 CI2ytp0ojXfTxsvWhcmSeYdztLhvGG0oGTfDQb3m8qXSIVepLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDtXJ6rXWXrNrSQBpA5WhgkVNCnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNzZk MGRlNS1iODg1LTQ0MzctOGZhOS1iMjY3ZjBmM2QyMjgvYzc2ZDBkZTUtYjg4NS00 NDM3LThmYTktYjI2N2YwZjNkMjI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzc2ZDBkZTUtYjg4NS00NDM3LThm YTktYjI2N2YwZjNkMjI4L2M3NmQwZGU1LWI4ODUtNDQzNy04ZmE5LWIyNjdmMGYz ZDIyOC5jcmwwHwYDVR0jBBgwFoAU8SjItB4JoDD+2BjufLSFwamIc28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNzZkMGRlNS1iODg1LTQ0MzctOGZhOS1iMjY3 ZjBmM2QyMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTOa5SVAXMYsgBVkQWmEdG r1gXkUIjL+xAutFl6C2aSNfgDoaGn3epl7X1EFZnaQQ5dfhuOLN1hjvAWEJTCTSk jDkmvC9RxmK2kA8xHV/0J3FJUa6OHfRm7wE/KOHokKb0YyO7jRMB+nugEZPTO0gA oJeqUXouU0Xkjsv/48OXlBlwAkB9AaEWwF0aNyi4f66tsIQVx1WfgKBpIeJmHlZb HSYkiVLMiH6tG5UlVvylq/F2bskiDFLBIjrZqoFg7s6Km8GlpT2BLfFS7pCo7q7T pDq7YyDMQzjqrmzJznO/ATScGsXGkc5hpQ/amD+D1lybj63Fl86AknYFYds4jUTn -----END CERTIFICATE-----Generated at Sun Apr 27 11:45:43 2025 by rpki-client