$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft File: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft (raw, json) Hash identifier: vNlS03S7eCMNXgtu2O3FCoi8Dv8GFDHQ/coVKFYjF4g= Subject key identifier: F4:00:E2:80:A6:7F:49:12:40:FA:9B:2D:66:12:E9:EA:02:37:76:F6 Authority key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Certificate issuer: /CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Certificate serial: 010D0C9F43285849A7A1EF1CC4970D5D7B81F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft Manifest number: 010D0C9F4328584765C25479079DAD41A91784D4 Signing time: Sat 26 Apr 2025 14:00:03 +0000 Manifest this update: Sat 26 Apr 2025 14:00:03 +0000 Manifest next update: Mon 28 Apr 2025 14:00:00 +0000 Files and hashes: 1: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl (hash: sGlx62DM+W1Cnubin2vcoqanmeqJnqsyPkAnsOEqYYM=) 2: 680ad6f3-7f36-3bb9-93b7-046bdf1ee048.roa (hash: J0cB8KQRZDLH0Mj3VrvEgyvS30e7vjGOxnasRZWueR4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:a1:ef:1c:c4:97:0d:5d:7b:81:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Validity Not Before: Apr 26 14:00:03 2025 GMT Not After : Apr 28 14:00:00 2025 GMT Subject: CN=391daba9-cbdf-434b-94e3-60c56fb23a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e6:d3:6e:7d:e6:1a:71:51:60:64:e6:3c:60: 65:f4:62:cc:05:fd:ad:c7:27:d7:b4:97:00:08:07: a4:da:ee:f6:d4:e9:bc:9a:aa:ae:0f:36:67:64:32: 08:7f:ee:62:d6:3c:44:73:2d:8b:a6:d0:7c:87:56: f6:99:d8:16:a1:06:27:55:28:b8:92:28:8b:77:ff: c5:68:7b:75:6f:94:0b:c6:f4:12:87:e2:99:09:2f: 5b:82:47:d5:70:7f:29:86:f9:3b:ac:57:c5:9a:dd: 58:71:74:10:56:25:d7:54:79:61:00:cf:cf:c4:bd: 16:da:32:3c:c8:21:0e:45:73:a9:ad:3e:18:bf:fa: c9:93:67:f2:46:9e:3e:5c:44:fb:11:d4:2a:83:a4: 81:90:76:b7:a7:56:3b:70:1f:c2:c4:ee:f3:fb:da: 5b:8d:be:19:16:90:b5:a0:6d:ec:42:ba:73:e8:b0: 28:08:46:76:14:90:55:ea:55:42:aa:07:f7:98:f5: e0:f1:25:e1:f9:1e:b1:cb:ba:8f:33:7c:01:ad:a2: 17:f1:f0:f6:f9:f3:9d:86:22:22:0d:26:b5:02:d1: f8:9b:35:3c:91:a4:92:a7:79:b5:2c:ee:ed:e5:56: ba:7c:36:d0:fc:be:d3:12:2a:12:3b:58:fb:54:26: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:00:E2:80:A6:7F:49:12:40:FA:9B:2D:66:12:E9:EA:02:37:76:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.crl X509v3 Authority Key Identifier: keyid:18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dd:70:35:50:e0:ae:32:cf:fc:c2:66:f7:ce:ba:51:5b:66: 16:45:97:64:a0:db:4a:b3:72:21:17:89:40:27:8a:7e:7b:fb: c6:45:68:a1:78:bf:2e:18:56:f4:e0:d2:86:94:6f:b7:9c:a9: 33:49:8d:da:34:aa:b1:49:e4:1d:2f:e9:c6:61:27:9b:97:73: 94:f8:4c:e5:93:de:7b:7c:b1:cd:17:b1:11:8b:9a:e0:7d:e1: 13:c9:96:3a:df:c2:cb:20:1e:1a:21:56:62:5d:03:d5:73:e5: 72:87:0c:d4:9c:d3:05:ce:49:dd:77:13:2f:01:cd:75:2a:56: 63:d7:39:24:3c:9d:ae:dc:6a:cc:d6:76:b4:12:a9:b0:61:16: 64:ef:80:de:fc:01:75:1e:58:e1:23:2f:f1:51:96:ae:ab:28: 49:93:f0:4e:9f:67:e3:7e:5a:4a:70:dc:63:d0:f1:95:94:0a: 62:19:2a:36:d1:9a:b0:84:eb:ec:2c:2b:13:70:c7:8e:58:09: 4d:42:62:97:9c:e3:32:89:8f:05:72:8e:59:04:92:a4:7c:44: c9:aa:e9:94:c7:a2:58:68:99:2e:fc:d6:79:10:e6:33:57:c1: ab:6c:31:b4:2d:aa:c9:07:8f:42:a1:a3:5a:27:ec:79:16:96: c0:e9:3d:38 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmnoe8cxJcNXXuB9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhMzdiN2QtMDc2NS00ZTE1LTk1NTgtYzViMzgwMGNh N2NlMB4XDTI1MDQyNjE0MDAwM1oXDTI1MDQyODE0MDAwMFowLzEtMCsGA1UEAxMk MzkxZGFiYTktY2JkZi00MzRiLTk0ZTMtNjBjNTZmYjIzYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+bTbn3mGnFRYGTmPGBl9GLMBf2txyfXtJcA CAek2u721Om8mqquDzZnZDIIf+5i1jxEcy2LptB8h1b2mdgWoQYnVSi4kiiLd//F aHt1b5QLxvQSh+KZCS9bgkfVcH8phvk7rFfFmt1YcXQQViXXVHlhAM/PxL0W2jI8 yCEORXOprT4Yv/rJk2fyRp4+XET7EdQqg6SBkHa3p1Y7cB/CxO7z+9pbjb4ZFpC1 oG3sQrpz6LAoCEZ2FJBV6lVCqgf3mPXg8SXh+R6xy7qPM3wBraIX8fD2+fOdhiIi DSa1AtH4mzU8kaSSp3m1LO7t5Va6fDbQ/L7TEioSO1j7VCYycwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPQA4oCmf0kSQPqbLWYS6eoCN3b2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEz N2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAwY2E3Y2UvMjhhMzdiN2QtMDc2NS00 ZTE1LTk1NTgtYzViMzgwMGNhN2NlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjhhMzdiN2QtMDc2NS00ZTE1LTk1 NTgtYzViMzgwMGNhN2NlLzI4YTM3YjdkLTA3NjUtNGUxNS05NTU4LWM1YjM4MDBj YTdjZS5jcmwwHwYDVR0jBBgwFoAUGGLEvhIC8MouVlYY/vkUCpEAX08wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yOGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIz ODAwY2E3Y2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL3XA1UOCuMs/8wmb3zrpR W2YWRZdkoNtKs3IhF4lAJ4p+e/vGRWiheL8uGFb04NKGlG+3nKkzSY3aNKqxSeQd L+nGYSebl3OU+Ezlk957fLHNF7ERi5rgfeETyZY638LLIB4aIVZiXQPVc+VyhwzU nNMFzknddxMvAc11KlZj1zkkPJ2u3GrM1na0EqmwYRZk74De/AF1HljhIy/xUZau qyhJk/BOn2fjflpKcNxj0PGVlApiGSo20ZqwhOvsLCsTcMeOWAlNQmKXnOMyiY8F co5ZBJKkfETJqumUx6JYaJku/NZ5EOYzV8GrbDG0LarJB49CoaNaJ+x5FpbA6T04 -----END CERTIFICATE-----Generated at Sun Apr 27 12:47:22 2025 by rpki-client