$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft File: da6a16ad-9697-4d95-a04c-86394f7b78c8.mft (raw, json) Hash identifier: wWYkiaUMCUVIqlDUPwJ1jycw2EjqmknfdreRBzuOTOI= Subject key identifier: AD:FB:97:B4:90:3D:C6:F5:E8:1B:8F:EB:6D:1F:99:16:C5:19:16:B9 Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Certificate serial: 010D0C9F43285849A70D14AD8406403004281D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft Manifest number: 010D0C9F4328584073A84A55A5D662893377B060 Signing time: Sat 26 Apr 2025 09:00:07 +0000 Manifest this update: Sat 26 Apr 2025 09:00:07 +0000 Manifest next update: Mon 28 Apr 2025 09:00:00 +0000 Files and hashes: 1: 6b27ba0c-1e51-37cd-818b-94800ea3d331.roa (hash: gu5n8c+aOYgOGxTSiv9BJ1sCZ2v6dx4JeRahL+LWwsY=) 2: cd834625-5e03-3003-a219-1f2ecf641d36.roa (hash: Tyvjj5tLZdVyR7W8Hk1gFko7eQmBXlpzPS8H4kTPbho=) 3: da6a16ad-9697-4d95-a04c-86394f7b78c8.crl (hash: Jq+rYu12aeB0T0rdx7qEPgUujDXn5aoV3e/eXGTBZxU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:0d:14:ad:84:06:40:30:04:28:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Validity Not Before: Apr 26 09:00:07 2025 GMT Not After : Apr 28 09:00:00 2025 GMT Subject: CN=1d48b6d4-e2d1-4df7-b5c9-9307e8b1411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:6d:2e:d8:7c:a3:7a:64:92:66:e3:51:dc: c0:c7:25:d5:cc:7c:cf:cc:b0:d8:cd:32:83:7e:da: 58:53:0b:44:24:6b:0a:19:8c:46:bd:ba:dd:8b:30: a9:56:0d:8e:f2:7a:ec:cf:4b:0e:0c:26:da:f9:66: 65:e8:4e:e2:cf:2a:d9:92:b8:ef:2f:a7:dc:18:1e: 35:3f:32:4f:bc:91:ad:3d:75:47:a7:4a:f1:04:20: 7a:aa:c5:e2:c7:9f:e2:6a:57:43:c6:4c:74:d5:40: 7b:b5:9b:6c:d7:e1:6e:cc:90:10:f9:88:7e:a8:a3: 8b:92:fe:68:78:24:7f:7f:5f:cb:65:ae:67:ff:b3: 6c:b7:6a:17:5a:3b:c2:41:8b:d4:9d:0e:40:43:72: 76:46:1d:99:59:49:c7:d6:ca:d4:96:e1:34:43:e1: 69:6b:57:36:f7:71:01:cc:f3:7c:25:f9:23:52:db: 16:34:5c:aa:22:86:16:b2:41:dc:82:5b:88:d8:07: cb:81:89:ec:89:6a:cb:89:6c:b4:a4:60:cb:7f:d3: f6:bb:b1:ac:94:d4:7b:b6:43:26:da:23:9d:dd:f1: d2:97:b1:a1:86:8b:7f:88:72:4d:47:4a:c4:be:e3: 88:59:9b:04:f1:c2:b1:00:84:08:7a:06:ad:fe:91: 19:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:97:B4:90:3D:C6:F5:E8:1B:8F:EB:6D:1F:99:16:C5:19:16:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl X509v3 Authority Key Identifier: keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:0c:f2:93:e3:4f:e2:98:7a:69:95:48:db:63:2a:70:69:3c: 9f:7a:1b:d7:52:d6:6b:c2:e9:ab:2c:6d:f3:a2:43:f3:d4:84: d6:d8:6d:0f:10:e8:71:ec:c3:b7:2b:e4:3e:24:76:14:dd:2b: 81:43:f6:d7:46:1b:b7:99:ae:85:ce:a9:e6:4c:2a:61:b3:dd: 85:a4:cc:19:59:8a:fa:a9:c1:40:2c:ef:ed:b2:d9:99:c9:c8: 0c:b6:5d:c6:55:41:48:95:10:30:80:91:b2:2f:62:83:7b:77: e2:c7:fa:9b:71:5a:09:09:82:59:01:2d:9c:65:94:fc:91:c0: 45:e3:ac:09:fc:87:2d:8a:55:12:35:d7:30:e4:fd:ac:14:13: 83:1f:e0:b1:f3:48:bf:9e:c1:e1:99:16:56:b0:a2:aa:c9:c0: ba:97:7b:df:cf:2e:8e:31:c3:54:ba:96:c1:f7:d5:6f:17:2d: fe:e2:48:6a:0b:ab:72:eb:e9:91:6a:53:6b:0d:35:10:94:2c: 42:cb:a5:f1:1a:d4:8b:bb:63:21:40:97:62:11:d4:c4:34:b1: a9:27:7e:88:13:9e:19:26:ab:ba:74:83:57:63:b5:b7:85:07: c9:c0:b6:38:96:cf:46:98:f3:64:d2:b2:9d:6d:8e:0f:25:e6: 7c:b1:2b:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnDRSthAZAMAQoHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YTE2YWQtOTY5Ny00ZDk1LWEwNGMtODYzOTRmN2I3 OGM4MB4XDTI1MDQyNjA5MDAwN1oXDTI1MDQyODA5MDAwMFowLzEtMCsGA1UEAxMk MWQ0OGI2ZDQtZTJkMS00ZGY3LWI1YzktOTMwN2U4YjE0MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC1tLth8o3pkkmbjUdzAxyXVzHzPzLDYzTKD ftpYUwtEJGsKGYxGvbrdizCpVg2O8nrsz0sODCba+WZl6E7izyrZkrjvL6fcGB41 PzJPvJGtPXVHp0rxBCB6qsXix5/ialdDxkx01UB7tZts1+FuzJAQ+Yh+qKOLkv5o eCR/f1/LZa5n/7Nst2oXWjvCQYvUnQ5AQ3J2Rh2ZWUnH1srUluE0Q+Fpa1c293EB zPN8JfkjUtsWNFyqIoYWskHcgluI2AfLgYnsiWrLiWy0pGDLf9P2u7GslNR7tkMm 2iOd3fHSl7Ghhot/iHJNR0rEvuOIWZsE8cKxAIQIegat/pEZlwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK37l7SQPcb16BuP620fmRbFGRa5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZh MTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5NGY3Yjc4YzgvZGE2YTE2YWQtOTY5Ny00 ZDk1LWEwNGMtODYzOTRmN2I3OGM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGE2YTE2YWQtOTY5Ny00ZDk1LWEw NGMtODYzOTRmN2I3OGM4L2RhNmExNmFkLTk2OTctNGQ5NS1hMDRjLTg2Mzk0Zjdi NzhjOC5jcmwwHwYDVR0jBBgwFoAU9GfqmmCwnE5urS68W5wIlLqmBFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZhMTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5 NGY3Yjc4YzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC9DPKT40/imHpplUjbYypw aTyfehvXUtZrwumrLG3zokPz1ITW2G0PEOhx7MO3K+Q+JHYU3SuBQ/bXRhu3ma6F zqnmTCphs92FpMwZWYr6qcFALO/tstmZycgMtl3GVUFIlRAwgJGyL2KDe3fix/qb cVoJCYJZAS2cZZT8kcBF46wJ/IctilUSNdcw5P2sFBODH+Cx80i/nsHhmRZWsKKq ycC6l3vfzy6OMcNUupbB99VvFy3+4khqC6ty6+mRalNrDTUQlCxCy6XxGtSLu2Mh QJdiEdTENLGpJ36IE54ZJqu6dINXY7W3hQfJwLY4ls9GmPNk0rKdbY4PJeZ8sSuI -----END CERTIFICATE-----Generated at Sat Apr 26 18:09:12 2025 by rpki-client