$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft File: fd61a214-d867-444e-b2f4-ca291d4c4419.mft (raw, json) Hash identifier: hjMW87MIdxgcjloy6BS5yquSqaPggnF/zXCdQl1Osr0= Subject key identifier: 1D:2F:7F:8D:F7:18:26:31:3B:E3:7F:AF:1F:29:44:D4:68:84:8E:78 Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Certificate serial: 010D0C9F43285849A8EA892F9119AFDFBA763350 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft Manifest number: 010D0C9F4328584073A828C80957C4AEF0069B56 Signing time: Sun 27 Apr 2025 01:02:07 +0000 Manifest this update: Sun 27 Apr 2025 01:02:07 +0000 Manifest next update: Tue 29 Apr 2025 21:00:00 +0000 Files and hashes: 1: 88824dc8-612f-344f-98c5-1b7608353512.roa (hash: lGJyyW/DydedaauDq6h9lvgLwe5EG6t3Iui0qnmPqC8=) 2: fd61a214-d867-444e-b2f4-ca291d4c4419.crl (hash: 5gc1/lZP6FHVwp2Y3/mXXlgw5HW6O2CNvSIG+aksY0g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:ea:89:2f:91:19:af:df:ba:76:33:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419 Validity Not Before: Apr 27 01:02:07 2025 GMT Not After : Apr 29 21:00:00 2025 GMT Subject: CN=a8ebaffb-488a-4c4c-9f46-23a5c16c78d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:66:f5:bc:0a:b5:18:2c:f0:2c:59:25:5a: 83:34:7a:f3:34:8e:44:39:40:b5:69:88:31:eb:23: 05:35:e7:4c:30:cc:b5:c6:5c:54:c6:9b:44:85:9b: f5:0b:dd:e1:0c:09:6c:1d:18:58:1d:db:ce:65:b7: 6b:bb:dc:93:cf:1f:75:8f:83:52:8d:6e:ed:51:eb: d3:cf:87:85:95:d5:7c:66:b6:07:1d:f4:3b:f5:01: ca:6b:d4:5b:22:bf:7d:81:b6:69:c0:63:df:9a:2d: 98:b9:56:a5:62:37:1b:f3:88:0a:d4:68:83:a4:ae: 6a:aa:17:c8:b6:6b:45:a2:46:65:64:e0:71:18:8d: 2d:a0:93:7a:44:c0:95:4f:b6:33:61:4b:46:bc:9d: 10:c5:34:1d:3f:b0:6f:6e:78:1f:73:08:78:f2:e2: 1f:a0:03:31:63:d0:29:20:83:f2:48:a0:d8:b1:3b: 1d:fb:0d:53:c1:5a:1c:ba:d4:37:8c:2b:04:68:af: 75:2c:b3:2e:cc:cc:8b:e6:de:52:81:bf:74:b7:93: 88:3e:21:22:f6:25:a6:c1:7b:c6:04:7c:d4:32:ae: 66:ce:2a:57:11:b6:9b:e9:03:a7:bf:d5:63:df:70: 63:b0:f0:a8:3f:44:af:31:da:f8:40:7a:9a:0e:7b: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:7F:8D:F7:18:26:31:3B:E3:7F:AF:1F:29:44:D4:68:84:8E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl X509v3 Authority Key Identifier: keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:aa:4b:a9:a6:09:50:23:5c:d3:91:f7:47:c0:5e:97:98:dc: af:dd:7a:49:dd:98:72:c9:53:84:77:05:33:63:eb:58:e5:ba: a9:57:da:23:7b:51:5d:e9:10:07:34:67:60:0c:45:9a:29:6f: b3:89:ca:41:4e:a0:10:55:03:20:4b:32:41:4c:15:ad:ff:3b: 60:1f:f0:1d:cc:6c:90:22:64:72:9a:c5:97:29:f1:c5:f7:d1: 2c:0c:e8:56:00:c4:b1:00:de:9d:65:81:ff:47:85:8a:c2:1a: b3:1a:ce:4b:8e:07:78:a1:04:81:46:15:a4:1b:3e:35:af:05: ce:9c:7c:18:a4:96:dd:e2:43:ae:30:e7:9a:15:27:66:17:1a: 3d:ff:b0:f0:39:d3:6a:2a:08:aa:0e:8e:53:a2:2e:a2:cb:02: 9b:2e:25:61:ce:b6:9c:f5:73:2f:2f:52:69:8e:50:ce:d4:9f: 26:21:7b:33:64:1b:36:6d:7d:fb:0e:58:06:a3:5e:03:f6:47: b7:56:87:f9:a6:f5:cd:00:73:4a:2f:bb:28:6e:33:87:35:6a: ef:95:fb:1c:4a:68:f0:36:8c:94:2c:53:0c:c0:18:33:1e:68: 06:b6:07:1a:83:a5:43:0e:08:38:c6:95:d4:8f:44:03:29:18: 60:d8:ea:84 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmo6okvkRmv37p2M1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2MWEyMTQtZDg2Ny00NDRlLWIyZjQtY2EyOTFkNGM0 NDE5MB4XDTI1MDQyNzAxMDIwN1oXDTI1MDQyOTIxMDAwMFowLzEtMCsGA1UEAxMk YThlYmFmZmItNDg4YS00YzRjLTlmNDYtMjNhNWMxNmM3OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgxm9bwKtRgs8CxZJVqDNHrzNI5EOUC1aYgx 6yMFNedMMMy1xlxUxptEhZv1C93hDAlsHRhYHdvOZbdru9yTzx91j4NSjW7tUevT z4eFldV8ZrYHHfQ79QHKa9RbIr99gbZpwGPfmi2YuValYjcb84gK1GiDpK5qqhfI tmtFokZlZOBxGI0toJN6RMCVT7YzYUtGvJ0QxTQdP7Bvbngfcwh48uIfoAMxY9Ap IIPySKDYsTsd+w1TwVocutQ3jCsEaK91LLMuzMyL5t5Sgb90t5OIPiEi9iWmwXvG BHzUMq5mzipXEbab6QOnv9Vj33BjsPCoP0SvMdr4QHqaDntaoQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB0vf433GCYxO+N/rx8pRNRohI54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYx YTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5MWQ0YzQ0MTkvZmQ2MWEyMTQtZDg2Ny00 NDRlLWIyZjQtY2EyOTFkNGM0NDE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmQ2MWEyMTQtZDg2Ny00NDRlLWIy ZjQtY2EyOTFkNGM0NDE5L2ZkNjFhMjE0LWQ4NjctNDQ0ZS1iMmY0LWNhMjkxZDRj NDQxOS5jcmwwHwYDVR0jBBgwFoAUksvOm7LOK/AGOs800+OjDwhvc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZDYxYTIxNC1kODY3LTQ0NGUtYjJmNC1jYTI5 MWQ0YzQ0MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtqkuppglQI1zTkfdHwF6X mNyv3XpJ3ZhyyVOEdwUzY+tY5bqpV9oje1Fd6RAHNGdgDEWaKW+zicpBTqAQVQMg SzJBTBWt/ztgH/AdzGyQImRymsWXKfHF99EsDOhWAMSxAN6dZYH/R4WKwhqzGs5L jgd4oQSBRhWkGz41rwXOnHwYpJbd4kOuMOeaFSdmFxo9/7DwOdNqKgiqDo5Toi6i ywKbLiVhzrac9XMvL1JpjlDO1J8mIXszZBs2bX37DlgGo14D9ke3Vof5pvXNAHNK L7sobjOHNWrvlfscSmjwNoyULFMMwBgzHmgGtgcag6VDDgg4xpXUj0QDKRhg2OqE -----END CERTIFICATE-----Generated at Sun Apr 27 10:35:53 2025 by rpki-client