$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft File: ce8a605a-778c-4076-ac87-8f698230a8e4.mft (raw, json) Hash identifier: +yH3WzeNJRxcALwO5qXyUPt5VgY8O1mri5o4rygYyyw= Subject key identifier: 3C:45:46:DD:9C:C6:A0:F9:E3:A8:D6:8B:F3:D6:E9:C0:8E:46:B0:38 Authority key identifier: 01:D9:CA:EF:4E:D5:37:19:0B:4A:C3:59:98:A6:BF:5D:39:AB:6A:0F Certificate issuer: /CN=ce8a605a-778c-4076-ac87-8f698230a8e4 Certificate serial: 010D0C9F43285849A8726A9FE570E72ED4A6ED40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft Manifest number: 010D0C9F432858478AE69C0D857A254350235746 Signing time: Sat 26 Apr 2025 21:00:07 +0000 Manifest this update: Sat 26 Apr 2025 21:00:07 +0000 Manifest next update: Tue 29 Apr 2025 21:00:00 +0000 Files and hashes: 1: ce8a605a-778c-4076-ac87-8f698230a8e4.crl (hash: +Bz7fneG+pXyKXsDtUkJzoLXL1dO6vs3AwCHArd35cA=) 2: fb86efe7-bd59-3648-97e8-ac622b3ed5bf.roa (hash: mw+yrIxNuZugXYVZZpHlzzsIjsGyRT193NL7aJmdBfY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:72:6a:9f:e5:70:e7:2e:d4:a6:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8a605a-778c-4076-ac87-8f698230a8e4 Validity Not Before: Apr 26 21:00:07 2025 GMT Not After : Apr 29 21:00:00 2025 GMT Subject: CN=1748746c-2027-408f-a638-f2e65a04e86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:2b:96:67:5c:fd:cb:06:ce:84:80:c8:19: f2:45:63:36:5b:7c:36:e5:68:2b:ba:6c:7e:f5:13: fe:bc:e0:eb:4b:a2:2d:63:94:c1:26:b7:d9:1e:4f: c6:08:26:1e:4b:e2:b8:7a:cf:94:96:f5:2f:84:be: 8a:07:6c:41:0c:d0:bd:f0:d3:84:21:c4:4c:39:da: 32:65:b3:78:2d:39:a7:2f:c0:30:9f:a7:9a:1d:d7: 1d:1b:43:b2:11:08:68:c8:0f:a0:0a:ed:54:b6:fc: f2:b4:21:03:4c:09:21:b2:93:ae:5f:92:98:9b:4c: df:79:e7:1b:64:5d:0d:33:d0:d7:13:4b:5b:3a:b1: c5:65:70:14:a0:0e:9c:f9:81:ab:83:87:68:3a:0e: 16:7a:d0:23:33:e4:d1:21:4b:49:cc:22:55:7b:13: 9a:7d:60:1f:21:53:3d:79:c4:c9:cc:10:f3:8b:52: 4d:3e:57:d3:06:19:ea:3f:fd:7e:44:56:87:9d:5e: bb:d7:1f:45:0e:cd:34:00:87:db:20:7c:ea:3d:ee: 4b:73:d6:cb:89:8b:f1:5c:9b:bb:60:37:72:3e:6a: 91:77:ec:41:7b:15:cb:d5:e4:bf:8d:75:d8:65:fd: 00:fb:98:92:49:1e:36:72:15:ce:88:1a:6c:fd:3f: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:45:46:DD:9C:C6:A0:F9:E3:A8:D6:8B:F3:D6:E9:C0:8E:46:B0:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4/ce8a605a-778c-4076-ac87-8f698230a8e4.crl X509v3 Authority Key Identifier: keyid:01:D9:CA:EF:4E:D5:37:19:0B:4A:C3:59:98:A6:BF:5D:39:AB:6A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ce8a605a-778c-4076-ac87-8f698230a8e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a9:eb:de:be:2a:ad:aa:fe:4b:7d:bf:04:a6:36:15:7c:61: 63:28:59:27:bb:4b:da:45:99:4a:54:50:84:51:5c:17:f6:54: 04:98:91:7c:18:7d:7b:47:45:43:46:1a:c7:3f:91:f0:cf:7d: 83:5f:6f:03:c9:53:c3:7c:27:65:cb:a3:78:44:56:67:b4:75: 68:7e:ca:2e:69:a5:4c:6a:e7:ba:17:1d:82:f6:01:d7:88:8b: 2b:2e:0c:95:3e:b2:27:0c:85:42:42:74:21:4e:13:a7:fb:a3: b7:79:c1:e0:d3:24:5c:f6:2b:8a:c5:42:f6:99:8d:f8:57:7a: 02:b2:b5:01:29:de:6e:0e:07:a0:44:ad:c2:8a:16:17:cb:f9: 29:3e:c1:1c:cd:b1:cb:36:f7:f9:70:14:c9:0c:a4:ed:75:aa: 35:2f:ab:c1:ee:92:24:23:08:af:91:06:49:cb:42:42:98:08: 4d:57:cb:3f:95:df:9f:fd:7b:d6:a3:32:0c:73:d9:3b:a2:90: 26:bd:59:b6:1c:ca:8c:d3:57:62:3d:f8:01:ef:d9:4b:8e:48: 88:81:b2:a4:98:da:46:29:62:9b:a4:4f:fe:c4:42:35:c1:24: 74:f7:91:71:df:cc:ef:ac:ba:60:db:cf:e6:13:d8:c6:7d:30: 06:21:02:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmocmqf5XDnLtSm7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U4YTYwNWEtNzc4Yy00MDc2LWFjODctOGY2OTgyMzBh OGU0MB4XDTI1MDQyNjIxMDAwN1oXDTI1MDQyOTIxMDAwMFowLzEtMCsGA1UEAxMk MTc0ODc0NmMtMjAyNy00MDhmLWE2MzgtZjJlNjVhMDRlODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYwrlmdc/csGzoSAyBnyRWM2W3w25Wgrumx+ 9RP+vODrS6ItY5TBJrfZHk/GCCYeS+K4es+UlvUvhL6KB2xBDNC98NOEIcRMOdoy ZbN4LTmnL8Awn6eaHdcdG0OyEQhoyA+gCu1UtvzytCEDTAkhspOuX5KYm0zfeecb ZF0NM9DXE0tbOrHFZXAUoA6c+YGrg4doOg4WetAjM+TRIUtJzCJVexOafWAfIVM9 ecTJzBDzi1JNPlfTBhnqP/1+RFaHnV671x9FDs00AIfbIHzqPe5Lc9bLiYvxXJu7 YDdyPmqRd+xBexXL1eS/jXXYZf0A+5iSSR42chXOiBps/T+dIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDxFRt2cxqD546jWi/PW6cCORrA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZThh NjA1YS03NzhjLTQwNzYtYWM4Ny04ZjY5ODIzMGE4ZTQvY2U4YTYwNWEtNzc4Yy00 MDc2LWFjODctOGY2OTgyMzBhOGU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2U4YTYwNWEtNzc4Yy00MDc2LWFj ODctOGY2OTgyMzBhOGU0L2NlOGE2MDVhLTc3OGMtNDA3Ni1hYzg3LThmNjk4MjMw YThlNC5jcmwwHwYDVR0jBBgwFoAUAdnK707VNxkLSsNZmKa/XTmrag8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZThhNjA1YS03NzhjLTQwNzYtYWM4Ny04ZjY5 ODIzMGE4ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCoqeveviqtqv5Lfb8EpjYV fGFjKFknu0vaRZlKVFCEUVwX9lQEmJF8GH17R0VDRhrHP5Hwz32DX28DyVPDfCdl y6N4RFZntHVofsouaaVMaue6Fx2C9gHXiIsrLgyVPrInDIVCQnQhThOn+6O3ecHg 0yRc9iuKxUL2mY34V3oCsrUBKd5uDgegRK3CihYXy/kpPsEczbHLNvf5cBTJDKTt dao1L6vB7pIkIwivkQZJy0JCmAhNV8s/ld+f/XvWozIMc9k7opAmvVm2HMqM01di PfgB79lLjkiIgbKkmNpGKWKbpE/+xEI1wSR095Fx38zvrLpg28/mE9jGfTAGIQIe -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:13 2025 by rpki-client