$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft File: a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft (raw, json) Hash identifier: bKBdQOSi3dar101jG+c/aJkDZa48iRsyG4mTXjkRmUI= Subject key identifier: C6:CC:55:72:39:08:88:9D:49:01:3B:B2:6D:E9:E4:D4:11:38:5E:D4 Authority key identifier: 5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B Certificate issuer: /CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Certificate serial: 010D0C9F43285849AA135352D0D5119855BF4A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft Manifest number: 010D0C9F43285847A2E4EB6778299310D146143F Signing time: Sun 27 Apr 2025 11:00:07 +0000 Manifest this update: Sun 27 Apr 2025 11:00:07 +0000 Manifest next update: Wed 30 Apr 2025 11:00:00 +0000 Files and hashes: 1: 7ee28a40-8cc6-3784-ab6c-7741c7816572.roa (hash: 9opfqvdb9RBmq8i48HEtXDgtvVGcKZiJCqrLsc4OqcA=) 2: a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl (hash: xUGB1UXj0uGmGDViNx8gBQe5WsOxsYBv9ZUkayGn1Ok=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:13:53:52:d0:d5:11:98:55:bf:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f47e3e-2561-4b79-b332-ee8a11ea0619 Validity Not Before: Apr 27 11:00:07 2025 GMT Not After : Apr 30 11:00:00 2025 GMT Subject: CN=8c481e10-709d-4bae-8823-4d60bb534dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:a2:42:8c:ee:06:70:f4:bd:be:10:e4:3d: 3c:d5:c3:f8:14:9a:ec:db:a8:29:41:8a:92:95:01: 56:cd:03:f6:4f:5a:22:91:23:89:61:25:92:8c:51: 62:1d:d6:97:b9:26:0d:7f:ab:27:8f:85:05:7a:8a: 0e:7d:f9:f8:73:f6:95:01:85:ef:a4:cc:a3:f2:38: 46:5a:ba:7f:3e:bf:13:8d:b5:b0:65:0b:ba:0d:e3: 7a:94:20:63:3d:8d:79:29:13:80:41:d0:f0:86:31: e0:94:d9:ad:7a:7a:00:e6:d8:1d:02:ea:d9:b7:9f: 7a:1c:73:fd:5f:7e:9a:10:43:1b:24:17:9b:ab:6f: c8:03:79:ed:0f:5b:39:f4:8c:eb:de:b2:6c:27:2b: f4:1f:f6:a1:3a:fa:69:8c:c5:1c:c1:45:b8:62:d8: 2f:f4:e2:0a:ea:11:b9:51:27:9a:72:7f:5a:30:25: 16:c8:bc:ce:cb:d7:c5:71:57:80:01:06:8e:8b:97: b1:ff:04:9c:44:a8:67:42:21:d3:0c:64:48:01:74: 65:83:1f:2a:f0:ca:04:e9:d9:0e:05:dd:da:92:6e: 09:32:9d:7d:96:f2:c2:65:97:25:0b:51:b9:5f:4e: 03:bd:e3:bd:80:27:45:72:41:b8:d5:d3:4a:50:c0: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CC:55:72:39:08:88:9D:49:01:3B:B2:6D:E9:E4:D4:11:38:5E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619/a8f47e3e-2561-4b79-b332-ee8a11ea0619.crl X509v3 Authority Key Identifier: keyid:5B:16:04:C9:4C:53:8A:AD:AD:E1:DB:D5:C0:B9:C9:9F:7B:6C:AB:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a8f47e3e-2561-4b79-b332-ee8a11ea0619.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:02:8e:bc:92:33:8e:ac:69:8e:9c:d2:c8:04:e1:ee:86:97: 5c:f4:f0:f1:e5:46:1c:39:49:da:47:52:e4:fe:21:7a:b5:24: f9:64:47:6c:f0:08:42:96:f4:d1:2f:03:33:07:3d:a2:f9:15: 47:b0:45:b7:ae:6b:c2:3c:a3:fb:34:29:f0:b4:73:4d:99:8a: b7:6d:d9:07:4e:da:1d:c9:2c:c1:bb:7a:5a:66:5a:38:03:4b: 1c:d6:3c:a4:82:f5:ad:e5:97:11:9e:12:0d:ab:70:3c:7d:34: 49:22:5e:3f:1f:ce:b2:40:89:77:16:7c:4e:81:b2:93:ca:7c: ae:9f:a4:ee:e5:dd:fa:fd:b0:c7:f0:56:13:02:31:4b:7b:9d: 6b:aa:e4:62:ed:4a:a3:6f:32:62:a9:94:28:1a:73:e5:46:b9: ec:6f:9b:08:9a:a9:30:c8:c7:de:3a:d3:dd:02:99:fd:87:66: 71:e7:15:4b:84:9c:11:9b:04:a6:7d:0a:59:cf:f4:78:71:6d: e9:3d:65:40:c6:52:f0:33:20:65:e7:38:f1:81:10:7e:11:dd: 32:b6:fb:96:1e:d6:11:cc:b3:5d:e6:cc:e7:aa:3d:1c:32:00: 77:66:aa:db:e6:9d:de:11:d3:30:13:4b:50:82:29:6c:0e:08: 2f:aa:61:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqE1NS0NURmFW/SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThmNDdlM2UtMjU2MS00Yjc5LWIzMzItZWU4YTExZWEw NjE5MB4XDTI1MDQyNzExMDAwN1oXDTI1MDQzMDExMDAwMFowLzEtMCsGA1UEAxMk OGM0ODFlMTAtNzA5ZC00YmFlLTg4MjMtNGQ2MGJiNTM0ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTiiQozuBnD0vb4Q5D081cP4FJrs26gpQYqS lQFWzQP2T1oikSOJYSWSjFFiHdaXuSYNf6snj4UFeooOffn4c/aVAYXvpMyj8jhG Wrp/Pr8TjbWwZQu6DeN6lCBjPY15KROAQdDwhjHglNmtenoA5tgdAurZt596HHP9 X36aEEMbJBebq2/IA3ntD1s59Izr3rJsJyv0H/ahOvppjMUcwUW4Ytgv9OIK6hG5 USeacn9aMCUWyLzOy9fFcVeAAQaOi5ex/wScRKhnQiHTDGRIAXRlgx8q8MoE6dkO Bd3akm4JMp19lvLCZZclC1G5X04DveO9gCdFckG41dNKUMBJYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMbMVXI5CIidSQE7sm3p5NQROF7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0 N2UzZS0yNTYxLTRiNzktYjMzMi1lZThhMTFlYTA2MTkvYThmNDdlM2UtMjU2MS00 Yjc5LWIzMzItZWU4YTExZWEwNjE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYThmNDdlM2UtMjU2MS00Yjc5LWIz MzItZWU4YTExZWEwNjE5L2E4ZjQ3ZTNlLTI1NjEtNGI3OS1iMzMyLWVlOGExMWVh MDYxOS5jcmwwHwYDVR0jBBgwFoAUWxYEyUxTiq2t4dvVwLnJn3tsqzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOGY0N2UzZS0yNTYxLTRiNzktYjMzMi1lZThh MTFlYTA2MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJAo68kjOOrGmOnNLIBOHu hpdc9PDx5UYcOUnaR1Lk/iF6tST5ZEds8AhClvTRLwMzBz2i+RVHsEW3rmvCPKP7 NCnwtHNNmYq3bdkHTtodySzBu3paZlo4A0sc1jykgvWt5ZcRnhINq3A8fTRJIl4/ H86yQIl3FnxOgbKTynyun6Tu5d36/bDH8FYTAjFLe51rquRi7UqjbzJiqZQoGnPl Rrnsb5sImqkwyMfeOtPdApn9h2Zx5xVLhJwRmwSmfQpZz/R4cW3pPWVAxlLwMyBl 5zjxgRB+Ed0ytvuWHtYRzLNd5sznqj0cMgB3Zqrb5p3eEdMwE0tQgilsDggvqmFy -----END CERTIFICATE-----Generated at Sun Apr 27 15:22:25 2025 by rpki-client