$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft (raw, json) Hash identifier: Yv5Wj1//V8CYL57Oiv2Iqj49XimqePo4J8awpgmRQ5c= Subject key identifier: 45:94:68:64:00:DE:21:22:FA:A2:6B:47:CD:DB:D8:63:4B:C4:82:04 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F43285849A8903535AB1DF5968C6C4980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft Manifest number: 010D0C9F43285842C17DF555B8C50D6E9612E708 Signing time: Sat 26 Apr 2025 22:00:07 +0000 Manifest this update: Sat 26 Apr 2025 22:00:07 +0000 Manifest next update: Mon 28 Apr 2025 22:00:00 +0000 Files and hashes: 1: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (hash: wiavP+k/NGXGAsAQDbeaPQDub6Ey2koOEdiq2v3Ilac=) 2: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl (hash: E/NIQi5avbn7w38DjVKCVYBe8uAgIdlMVAif/D2qrBc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:90:35:35:ab:1d:f5:96:8c:6c:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Apr 26 22:00:07 2025 GMT Not After : Apr 28 22:00:00 2025 GMT Subject: CN=120c959e-f2f8-4826-9025-5882e9e3c29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:49:de:f5:c7:70:9e:ad:fb:4d:33:f4:51: 41:8d:30:99:9a:d2:94:65:0a:06:71:a1:18:c5:a2: 96:f8:ee:ea:73:65:4a:61:c2:7f:22:ff:33:e3:75: c7:ae:42:47:f8:a4:25:e9:b5:49:d0:10:6b:5c:81: 3a:77:c3:31:cf:0a:74:d0:fe:f1:9f:f9:95:da:84: bc:5b:90:54:22:c3:78:1d:b3:d5:be:96:9d:65:fb: 44:3f:14:87:cc:8c:1c:f9:39:a0:52:ec:89:0b:29: f7:b3:e3:58:33:6d:a8:b0:9a:b9:ad:f8:bd:e1:59: 3c:2c:12:49:49:96:0c:71:70:2b:bb:d1:cf:25:8c: 7a:f6:2d:c8:5c:1e:ce:fb:45:80:de:8e:50:61:ea: d6:0a:37:72:74:6e:32:7d:f2:24:6d:f6:e5:4d:da: fe:f7:5b:d8:bb:c2:01:3b:93:63:de:05:c7:2d:b1: ff:93:70:ac:c0:dd:41:a7:7c:66:dc:4f:27:48:86: b1:8e:36:32:bc:41:38:79:4e:83:d9:9c:d9:d9:8b: c0:c1:e5:48:4b:d0:c2:68:2a:a6:e2:46:71:1d:76: d2:0c:f4:7f:fe:fe:93:8b:fb:aa:c4:f0:b3:f3:66: a7:d9:ac:00:7c:8e:47:a4:7c:4c:b2:cf:ee:53:20: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:68:64:00:DE:21:22:FA:A2:6B:47:CD:DB:D8:63:4B:C4:82:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5e:e5:a7:26:f7:67:28:75:59:75:e8:36:04:67:e9:65:cf: 36:00:7b:52:a3:af:50:f4:de:5b:9a:77:05:04:65:24:a5:30: b9:04:01:e4:04:56:b4:a2:af:38:97:25:7e:69:c1:8c:c4:8a: da:53:77:a6:40:f9:ef:e4:37:21:38:32:c5:e1:b7:fe:d3:d6: 38:ca:97:fb:a4:0f:6e:c0:03:58:e2:b2:10:a2:cb:59:03:6b: 66:f3:4d:ae:5c:3f:ea:99:89:72:0a:ee:a2:d3:fc:ac:1e:e2: d5:74:87:3a:a5:e8:b7:c4:1c:62:2d:34:1e:44:6f:fa:74:fc: 82:fa:1c:d1:d5:0e:d7:8d:2c:56:e9:73:ef:92:35:92:a8:ce: 8f:df:93:7a:8c:1f:eb:21:c1:09:12:37:84:d4:9c:1d:b7:ee: ec:20:d0:70:f7:24:ab:4d:71:3d:0d:be:9e:37:fd:fa:5d:55: 77:a1:71:f6:dd:13:6f:6c:16:42:aa:51:2d:17:f2:eb:1d:d9: a9:47:28:4b:e8:87:eb:5f:87:9c:63:3e:e9:35:03:ac:74:dd: 35:a7:c9:bd:e6:1a:e9:78:8c:0f:9a:e6:8c:83:54:49:94:0d: 0c:6e:32:cd:ce:30:c6:74:d9:f9:96:8e:bd:e1:2d:1e:79:9a: 32:2a:6b:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmokDU1qx31loxsSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MDQyNjIyMDAwN1oXDTI1MDQyODIyMDAwMFowLzEtMCsGA1UEAxMk MTIwYzk1OWUtZjJmOC00ODI2LTkwMjUtNTg4MmU5ZTNjMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmpJ3vXHcJ6t+00z9FFBjTCZmtKUZQoGcaEY xaKW+O7qc2VKYcJ/Iv8z43XHrkJH+KQl6bVJ0BBrXIE6d8Mxzwp00P7xn/mV2oS8 W5BUIsN4HbPVvpadZftEPxSHzIwc+TmgUuyJCyn3s+NYM22osJq5rfi94Vk8LBJJ SZYMcXAru9HPJYx69i3IXB7O+0WA3o5QYerWCjdydG4yffIkbfblTdr+91vYu8IB O5Nj3gXHLbH/k3CswN1Bp3xm3E8nSIaxjjYyvEE4eU6D2ZzZ2YvAweVIS9DCaCqm 4kZxHXbSDPR//v6Ti/uqxPCz82an2awAfI5HpHxMss/uUyC4QwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEWUaGQA3iEi+qJrR83b2GNLxIIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMmE1Mzg0OWMtNmY3Ny00 ZTY5LThiMzktYmNiODVkYTkwZjRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdXuWnJvdnKHVZdeg2BGfp Zc82AHtSo69Q9N5bmncFBGUkpTC5BAHkBFa0oq84lyV+acGMxIraU3emQPnv5Dch ODLF4bf+09Y4ypf7pA9uwANY4rIQostZA2tm802uXD/qmYlyCu6i0/ysHuLVdIc6 pei3xBxiLTQeRG/6dPyC+hzR1Q7XjSxW6XPvkjWSqM6P35N6jB/rIcEJEjeE1Jwd t+7sINBw9ySrTXE9Db6eN/36XVV3oXH23RNvbBZCqlEtF/LrHdmpRyhL6IfrX4ec Yz7pNQOsdN01p8m95hrpeIwPmuaMg1RJlA0MbjLNzjDGdNn5lo694S0eeZoyKmtE -----END CERTIFICATE-----Generated at Sun Apr 27 17:09:01 2025 by rpki-client