$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: bv2c87O3KxDUlyTL1kPP9WA0V7r0eRt7E5dHK3aR1kE= Subject key identifier: 78:B6:38:B9:0A:2D:B0:41:DA:49:B5:7E:82:30:6C:D3:E4:68:12:6D Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F43285849A942E0796CD18BB3C2496600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF56431F Signing time: Sun 27 Apr 2025 04:00:07 +0000 Manifest this update: Sun 27 Apr 2025 04:00:07 +0000 Manifest next update: Wed 30 Apr 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: 3ks0MROC7gTrM3tEdwEYSUD2hgGJ8DiIOrRwCqkCX04=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: JsLxjJVBXSUGoeXuukShxGlfw5AjD8VCYzxptI+2ECA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a9:42:e0:79:6c:d1:8b:b3:c2:49:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Apr 27 04:00:07 2025 GMT Not After : Apr 30 04:00:00 2025 GMT Subject: CN=21df29b8-92d0-4158-8e42-7c7fb71ad65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e9:98:04:0f:98:62:59:54:d0:36:bb:0f:e3: 35:ac:15:34:50:cc:97:ec:75:13:e6:0b:4d:64:65: ff:ae:64:4c:17:4b:68:86:0f:e1:f3:a7:26:ff:7c: 34:b5:a2:fa:c7:a6:ba:61:cd:36:b9:8a:0a:b0:b1: 64:8b:df:d0:69:ca:4f:a4:3b:44:8d:8e:02:f9:8b: 28:d4:d9:d2:00:dc:5b:46:e1:8f:7c:bb:0a:3f:be: ac:1b:59:e2:f0:7c:12:42:00:bd:c7:7e:14:d1:53: 80:45:83:e0:f9:4e:ce:f9:dd:00:41:91:91:83:65: b2:21:be:74:d4:12:ae:ef:7a:15:19:53:91:61:8d: 3a:2c:e3:91:e2:c8:f0:06:33:e0:4f:27:0b:8d:af: 5f:5b:d8:c0:f2:b5:46:1d:63:0f:09:7f:b2:b5:fa: 3b:88:c8:3f:0c:38:6d:b6:7d:47:43:fe:7d:d4:e4: fe:9a:f4:71:64:f1:a5:24:63:7f:3d:cd:c6:81:65: 7d:cb:73:07:3f:b7:1f:6e:68:da:b7:1f:2f:98:c2: 29:d6:06:28:3e:0e:f3:72:4c:b7:29:2a:34:c0:da: db:a3:cf:b2:1b:d2:eb:83:ee:5f:a2:c1:11:cd:d3: 37:11:b4:52:f6:75:01:e1:0c:ee:cb:ad:fe:94:fa: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B6:38:B9:0A:2D:B0:41:DA:49:B5:7E:82:30:6C:D3:E4:68:12:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b5:a1:e6:12:e3:a6:77:30:fa:5b:84:b9:61:54:80:02:1a: e6:10:c8:00:d4:4f:96:2c:fa:8d:40:7c:ae:06:0e:5f:6b:ea: 16:a9:8c:8f:ff:ee:d0:20:67:0e:9e:7d:55:4a:d1:a9:7b:a7: 90:45:8d:33:56:2a:54:ba:f0:68:bb:19:71:e9:ec:7f:6c:a5: cf:fd:0b:b2:17:f0:cf:77:05:67:6b:7d:b7:8e:8a:6a:c7:b7: 17:f8:da:4e:55:27:f6:95:8a:0c:94:2b:7f:04:1b:e1:7f:48: 0c:fa:4e:16:dc:b4:57:4d:f7:b7:bd:87:d6:53:8b:8f:f7:b7: 4a:ae:5d:af:87:80:39:4b:e2:ee:2f:4b:1a:02:01:74:f9:4f: cc:09:95:bf:b4:b2:e8:6e:8f:75:92:ff:ef:62:8f:48:61:8b: a6:ff:3f:db:3e:12:53:8c:0d:4e:b4:87:a4:c5:4d:8b:e9:50: 70:97:b0:5e:ff:8d:52:78:d4:b0:73:31:97:40:ef:f1:57:f5: b1:09:0d:bc:eb:58:80:0e:d7:84:7b:f6:48:47:e5:8c:cf:6b: 56:0d:6e:6c:ef:d1:ee:2e:04:13:68:89:61:77:24:ad:b0:3d: ed:4c:62:2a:d6:16:31:c1:82:ed:d6:72:80:12:7b:84:04:65: 49:aa:2c:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmpQuB5bNGLs8JJZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MDQyNzA0MDAwN1oXDTI1MDQzMDA0MDAwMFowLzEtMCsGA1UEAxMk MjFkZjI5YjgtOTJkMC00MTU4LThlNDItN2M3ZmI3MWFkNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkemYBA+YYllU0Da7D+M1rBU0UMyX7HUT5gtN ZGX/rmRMF0tohg/h86cm/3w0taL6x6a6Yc02uYoKsLFki9/QacpPpDtEjY4C+Yso 1NnSANxbRuGPfLsKP76sG1ni8HwSQgC9x34U0VOARYPg+U7O+d0AQZGRg2WyIb50 1BKu73oVGVORYY06LOOR4sjwBjPgTycLja9fW9jA8rVGHWMPCX+ytfo7iMg/DDht tn1HQ/591OT+mvRxZPGlJGN/Pc3GgWV9y3MHP7cfbmjatx8vmMIp1gYoPg7zcky3 KSo0wNrbo8+yG9Lrg+5fosERzdM3EbRS9nUB4Qzuy63+lPrvYQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHi2OLkKLbBB2km1foIwbNPkaBJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYtaHmEuOmdzD6W4S5YVSA AhrmEMgA1E+WLPqNQHyuBg5fa+oWqYyP/+7QIGcOnn1VStGpe6eQRY0zVipUuvBo uxlx6ex/bKXP/QuyF/DPdwVna323jopqx7cX+NpOVSf2lYoMlCt/BBvhf0gM+k4W 3LRXTfe3vYfWU4uP97dKrl2vh4A5S+LuL0saAgF0+U/MCZW/tLLobo91kv/vYo9I YYum/z/bPhJTjA1OtIekxU2L6VBwl7Be/41SeNSwczGXQO/xV/WxCQ2861iADteE e/ZIR+WMz2tWDW5s79HuLgQTaIlhdyStsD3tTGIq1hYxwYLt1nKAEnuEBGVJqiy0 -----END CERTIFICATE-----Generated at Sun Apr 27 12:10:55 2025 by rpki-client