$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft File: d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft (raw, json) Hash identifier: vjYzD2jGW5JrsrfaM6KJ6CvgQGqu7eckh0EP7xYzE6I= Subject key identifier: FF:C1:F3:75:FF:DA:12:2D:4D:F7:F2:05:0B:FF:E9:F6:FD:F5:86:AC Authority key identifier: 4C:4A:FE:07:71:D0:B2:B0:2D:7A:98:C2:07:B0:E6:A7:22:D0:3B:62 Certificate issuer: /CN=d1e5121b-5846-4ada-9ae3-09da3dcf7b61 Certificate serial: 010D0C9F43285849AAC5F2719460462708B93080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft Manifest number: 010D0C9F432858478A6D841388783AB11DE60D83 Signing time: Sun 27 Apr 2025 17:00:03 +0000 Manifest this update: Sun 27 Apr 2025 17:00:03 +0000 Manifest next update: Tue 29 Apr 2025 17:00:00 +0000 Files and hashes: 1: d1e5121b-5846-4ada-9ae3-09da3dcf7b61.crl (hash: biJ8lXyUU26LDxQRpF6rnMjHB009WvrbzhPsdD8uAKo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:c5:f2:71:94:60:46:27:08:b9:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e5121b-5846-4ada-9ae3-09da3dcf7b61 Validity Not Before: Apr 27 17:00:03 2025 GMT Not After : Apr 29 17:00:00 2025 GMT Subject: CN=14f6eaa3-f7dd-44fa-8e5d-90fc2e8e8ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:48:87:94:64:31:6e:91:7c:2c:68:11:9f: 5e:a3:d0:09:c5:ef:4d:2d:45:b5:47:10:e9:53:c1: 79:e3:d1:dd:e6:9f:bd:65:aa:f9:68:3c:03:8b:70: 7a:72:8f:3b:47:0c:e6:d2:53:55:cf:46:f9:c4:74: e1:7a:53:f3:75:4b:ee:5c:2d:13:37:a5:32:56:36: a6:cb:92:4f:c8:3b:5c:a1:bd:1d:88:95:f9:5d:1a: cc:2e:c4:5e:79:a4:c5:7d:3c:44:28:47:d9:68:19: 3d:eb:b4:b8:b1:e1:15:0b:fd:9a:75:e6:1f:b6:7d: 30:94:b2:e0:6a:e7:94:ed:1e:be:2f:1a:0b:0d:a6: be:ee:49:66:98:c0:07:06:6a:5b:4b:64:3b:40:54: f7:38:9b:e1:5b:91:39:83:ab:e6:78:84:d2:e9:86: c5:a5:d4:35:71:50:21:77:3e:c8:21:b1:80:d8:99: 2d:75:3a:ee:85:8f:50:eb:d1:0a:64:73:d4:69:71: dd:d3:89:b7:d3:7f:0e:88:00:a6:5b:ab:f2:84:89: a2:f6:31:f9:71:03:87:18:25:09:87:aa:4d:f8:0b: 00:36:8a:31:58:ad:a2:e4:ca:8b:c8:fd:2e:33:86: d0:be:d4:f5:14:a1:65:ac:7d:51:00:50:6b:7b:3b: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:F3:75:FF:DA:12:2D:4D:F7:F2:05:0B:FF:E9:F6:FD:F5:86:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.crl X509v3 Authority Key Identifier: keyid:4C:4A:FE:07:71:D0:B2:B0:2D:7A:98:C2:07:B0:E6:A7:22:D0:3B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d1e5121b-5846-4ada-9ae3-09da3dcf7b61.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:59:7c:d5:bd:61:52:dd:86:95:ad:91:0b:44:ef:85:7c:c1: f5:56:10:84:a7:fd:2c:a8:3c:49:22:14:eb:c8:9a:7d:a5:29: c0:8c:77:9a:5f:a2:43:ca:f2:49:f6:48:ac:71:dc:34:6f:61: 3e:9f:44:bf:c0:24:00:ec:e6:63:24:6e:10:64:2f:a0:8f:28: ef:3a:c8:40:5c:7b:60:23:cc:4f:33:c0:4b:ce:b1:a9:57:2b: d3:e9:9a:ad:6f:99:57:10:8c:c3:e6:36:57:42:62:e9:3a:be: ac:a9:ca:88:79:c6:b1:9d:fe:28:66:ec:09:51:a9:54:2e:20: bc:36:4f:4f:2a:b8:00:87:89:d5:d8:c5:c9:1b:fd:bd:8d:28: 2b:5c:d1:46:7e:6c:84:bc:83:f3:d5:a7:36:4d:eb:c7:f2:31: b2:5c:86:cf:86:8f:e3:fe:05:dc:36:f6:18:67:d5:b6:82:45: ce:59:c7:af:4a:2b:c4:61:59:74:4e:92:d1:23:01:9e:bc:d1: 03:fe:aa:99:d9:db:32:16:5e:45:e9:a5:58:94:b1:f6:1d:34: 68:cc:a0:e3:ec:fe:3d:24:38:3f:49:72:36:0a:cd:e2:6f:59: 71:55:a4:50:07:48:9e:11:f0:5b:af:bf:ca:de:ec:54:36:55: dd:12:a4:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqxfJxlGBGJwi5MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFlNTEyMWItNTg0Ni00YWRhLTlhZTMtMDlkYTNkY2Y3 YjYxMB4XDTI1MDQyNzE3MDAwM1oXDTI1MDQyOTE3MDAwMFowLzEtMCsGA1UEAxMk MTRmNmVhYTMtZjdkZC00NGZhLThlNWQtOTBmYzJlOGU4ZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ZIh5RkMW6RfCxoEZ9eo9AJxe9NLUW1RxDp U8F549Hd5p+9Zar5aDwDi3B6co87Rwzm0lNVz0b5xHThelPzdUvuXC0TN6UyVjam y5JPyDtcob0diJX5XRrMLsReeaTFfTxEKEfZaBk967S4seEVC/2adeYftn0wlLLg aueU7R6+LxoLDaa+7klmmMAHBmpbS2Q7QFT3OJvhW5E5g6vmeITS6YbFpdQ1cVAh dz7IIbGA2JktdTruhY9Q69EKZHPUaXHd04m3038OiACmW6vyhImi9jH5cQOHGCUJ h6pN+AsANooxWK2i5MqLyP0uM4bQvtT1FKFlrH1RAFBrezvZswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP/B83X/2hItTffyBQv/6fb99YasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMWU1 MTIxYi01ODQ2LTRhZGEtOWFlMy0wOWRhM2RjZjdiNjEvZDFlNTEyMWItNTg0Ni00 YWRhLTlhZTMtMDlkYTNkY2Y3YjYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDFlNTEyMWItNTg0Ni00YWRhLTlh ZTMtMDlkYTNkY2Y3YjYxL2QxZTUxMjFiLTU4NDYtNGFkYS05YWUzLTA5ZGEzZGNm N2I2MS5jcmwwHwYDVR0jBBgwFoAUTEr+B3HQsrAtepjCB7DmpyLQO2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMWU1MTIxYi01ODQ2LTRhZGEtOWFlMy0wOWRh M2RjZjdiNjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIWXzVvWFS3YaVrZELRO+F fMH1VhCEp/0sqDxJIhTryJp9pSnAjHeaX6JDyvJJ9kiscdw0b2E+n0S/wCQA7OZj JG4QZC+gjyjvOshAXHtgI8xPM8BLzrGpVyvT6Zqtb5lXEIzD5jZXQmLpOr6sqcqI ecaxnf4oZuwJUalULiC8Nk9PKrgAh4nV2MXJG/29jSgrXNFGfmyEvIPz1ac2TevH 8jGyXIbPho/j/gXcNvYYZ9W2gkXOWcevSivEYVl0TpLRIwGevNED/qqZ2dsyFl5F 6aVYlLH2HTRozKDj7P49JDg/SXI2Cs3ib1lxVaRQB0ieEfBbr7/K3uxUNlXdEqQW -----END CERTIFICATE-----Generated at Mon Apr 28 00:58:03 2025 by rpki-client