$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.mft File: 37a572e9-4783-4234-bb28-e490155ccaf4.mft (raw, json) Hash identifier: ixn9qjRCkAewymhMXyQkl7DZHtN/ySGOKROlvbtWyGk= Subject key identifier: 34:58:56:8E:15:4E:CB:C3:F1:A4:81:AC:2F:46:EC:AA:88:2E:99:C0 Authority key identifier: 67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68 Certificate issuer: /CN=37a572e9-4783-4234-bb28-e490155ccaf4 Certificate serial: 010D0C9F43285849AD72DE75F5EBC394E92F5280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.mft Manifest number: 010D0C9F43285843493F756ABA128AC0E7175319 Signing time: Mon 28 Apr 2025 16:00:03 +0000 Manifest this update: Mon 28 Apr 2025 16:00:03 +0000 Manifest next update: Thu 01 May 2025 16:00:00 +0000 Files and hashes: 1: 37a572e9-4783-4234-bb28-e490155ccaf4.crl (hash: 3vkOVocQpUJcPit4aIglWIX0OB7W3+J6SqgHAdqqOK0=) 2: fcb80d6b-b948-3c12-9a8f-59561151ac02.roa (hash: L8umGd2KPTa+OxmmPOMrlWumnhubz1tQpEb84kgUV2M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:72:de:75:f5:eb:c3:94:e9:2f:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a572e9-4783-4234-bb28-e490155ccaf4 Validity Not Before: Apr 28 16:00:03 2025 GMT Not After : May 1 16:00:00 2025 GMT Subject: CN=9e11d28d-ed48-4696-9c1e-ff9228793862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0a:5c:b7:14:d6:5b:f6:a9:ee:fa:9e:0a:a2: e2:92:03:47:a6:12:be:ad:7e:79:e8:3d:61:7a:68: d0:4e:96:b3:f9:c9:ca:64:3d:64:35:a4:c4:15:74: 3e:25:8e:4d:b4:73:b4:d9:39:34:28:23:57:96:d7: af:74:c0:81:c8:a2:ab:b2:d0:ce:4e:6e:9d:87:02: 35:20:76:c0:2b:46:4f:ce:91:ad:93:a7:91:8b:4c: bf:c8:a2:97:e9:89:10:64:df:5a:c2:ee:c6:3c:38: 77:1a:bc:fd:db:b3:e8:8d:0e:51:1b:d5:0e:93:d6: 0a:5d:d3:c8:f2:10:77:c7:7d:07:5a:1a:45:54:84: b7:fc:83:79:4e:b5:8f:79:b1:4a:b1:67:15:f9:18: 26:cf:15:ec:98:7c:8c:21:0a:22:f1:fe:00:0d:04: 94:26:e1:98:f2:52:b7:03:cb:ee:74:43:43:a0:84: e3:c8:56:c4:00:3e:2c:35:3c:8d:1f:7d:35:95:0d: 0c:26:86:09:37:8b:ff:a4:b7:90:e2:be:5a:2c:6d: 02:c5:74:52:12:41:e2:f3:3d:f2:d7:1f:2d:ae:b3: d6:b2:0a:80:bc:0c:19:43:21:e2:89:22:8d:0a:b7: 19:56:1e:42:70:40:fd:fb:e2:3c:c1:15:51:18:da: 0e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:58:56:8E:15:4E:CB:C3:F1:A4:81:AC:2F:46:EC:AA:88:2E:99:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4/37a572e9-4783-4234-bb28-e490155ccaf4.crl X509v3 Authority Key Identifier: keyid:67:A1:74:65:BB:4D:0B:AF:AA:CA:22:5B:F3:64:0B:AE:1C:86:08:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/37a572e9-4783-4234-bb28-e490155ccaf4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0c:44:f2:be:0e:a9:c3:7f:ae:33:ec:76:a8:df:db:a1:f6: 6d:0c:e6:a1:f4:ef:78:36:cb:2c:6a:cc:7b:73:e0:d8:f6:23: 51:df:d4:e3:c8:2d:f2:95:d1:a1:2f:fc:bb:4f:a2:2b:60:75: 9b:de:80:46:b9:a0:de:65:a9:6a:0b:27:cd:f6:89:a0:02:0f: d9:6d:f5:f7:18:cd:b1:f6:7d:5c:82:48:57:d2:94:b3:e5:b5: f5:ad:a3:98:1f:f8:c5:92:c4:42:3b:3b:3e:1d:8b:59:96:c2: a9:a7:a1:b9:7f:dc:08:65:13:97:61:58:21:63:4d:54:b3:8e: 96:4d:39:d2:b4:3d:7f:ec:65:d5:10:dc:b2:8e:2e:0f:1f:76: 4d:c0:3f:6e:d5:51:56:e7:fb:59:20:51:6c:e7:07:41:72:9f: 47:09:3b:d3:c7:ff:5b:79:c1:c4:98:35:f6:63:cf:af:e0:38: 74:ae:aa:97:4f:a0:16:77:cb:97:82:29:b3:14:32:b0:32:86: 0d:6c:ac:df:ba:d9:18:12:36:c1:1b:3f:2d:90:9c:ba:2c:a0: d8:5c:54:c9:87:ec:92:3b:54:3c:e6:de:e6:ec:5e:a9:db:45: 5d:78:3c:c7:7c:51:72:ba:58:91:3a:d3:22:57:ec:fc:b3:00: f5:59:29:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtct519evDlOkvUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdhNTcyZTktNDc4My00MjM0LWJiMjgtZTQ5MDE1NWNj YWY0MB4XDTI1MDQyODE2MDAwM1oXDTI1MDUwMTE2MDAwMFowLzEtMCsGA1UEAxMk OWUxMWQyOGQtZWQ0OC00Njk2LTljMWUtZmY5MjI4NzkzODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQpctxTWW/ap7vqeCqLikgNHphK+rX556D1h emjQTpaz+cnKZD1kNaTEFXQ+JY5NtHO02Tk0KCNXltevdMCByKKrstDOTm6dhwI1 IHbAK0ZPzpGtk6eRi0y/yKKX6YkQZN9awu7GPDh3Grz927PojQ5RG9UOk9YKXdPI 8hB3x30HWhpFVIS3/IN5TrWPebFKsWcV+RgmzxXsmHyMIQoi8f4ADQSUJuGY8lK3 A8vudENDoITjyFbEAD4sNTyNH301lQ0MJoYJN4v/pLeQ4r5aLG0CxXRSEkHi8z3y 1x8trrPWsgqAvAwZQyHiiSKNCrcZVh5CcED9++I8wRVRGNoO6wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDRYVo4VTsvD8aSBrC9G7KqILpnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1 NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkwMTU1Y2NhZjQvMzdhNTcyZTktNDc4My00 MjM0LWJiMjgtZTQ5MDE1NWNjYWY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzdhNTcyZTktNDc4My00MjM0LWJi MjgtZTQ5MDE1NWNjYWY0LzM3YTU3MmU5LTQ3ODMtNDIzNC1iYjI4LWU0OTAxNTVj Y2FmNC5jcmwwHwYDVR0jBBgwFoAUZ6F0ZbtNC6+qyiJb82QLrhyGCGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zN2E1NzJlOS00NzgzLTQyMzQtYmIyOC1lNDkw MTU1Y2NhZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAODETyvg6pw3+uM+x2qN/b ofZtDOah9O94Nsssasx7c+DY9iNR39TjyC3yldGhL/y7T6IrYHWb3oBGuaDeZalq CyfN9omgAg/ZbfX3GM2x9n1cgkhX0pSz5bX1raOYH/jFksRCOzs+HYtZlsKpp6G5 f9wIZROXYVghY01Us46WTTnStD1/7GXVENyyji4PH3ZNwD9u1VFW5/tZIFFs5wdB cp9HCTvTx/9becHEmDX2Y8+v4Dh0rqqXT6AWd8uXgimzFDKwMoYNbKzfutkYEjbB Gz8tkJy6LKDYXFTJh+ySO1Q85t7m7F6p20VdeDzHfFFyuliROtMiV+z8swD1WSmL -----END CERTIFICATE-----Generated at Tue Apr 29 11:31:36 2025 by rpki-client