$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft File: 9da2c17e-38b5-4574-b273-36a0f0b2956d.mft (raw, json) Hash identifier: yecPV+LSol+ERYw6WRoGm6Eb5ZVsC33COL9hRoo+RT4= Subject key identifier: 14:9B:DE:7A:08:21:95:19:71:DD:82:84:5B:9C:2F:7D:E8:3C:20:FA Authority key identifier: CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C Certificate issuer: /CN=9da2c17e-38b5-4574-b273-36a0f0b2956d Certificate serial: 010D0C9F43285849B01FD69E320D8A49375C06A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft Manifest number: 010D0C9F43285845D10FEBD17CD8FE0F72E298C7 Signing time: Tue 29 Apr 2025 15:00:10 +0000 Manifest this update: Tue 29 Apr 2025 15:00:10 +0000 Manifest next update: Thu 01 May 2025 15:00:00 +0000 Files and hashes: 1: 1463ecb6-79b9-31ab-a59a-a9374df47949.roa (hash: QZWAr+e1s1nAXoUnEtIpLpoGj/ozXYcUMBb32ZQhNV0=) 2: 9da2c17e-38b5-4574-b273-36a0f0b2956d.crl (hash: g+V8D2IS2tMy0f9hQ4+Jr8/sOeO3a5+h9jZ6t66xm6s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:1f:d6:9e:32:0d:8a:49:37:5c:06:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da2c17e-38b5-4574-b273-36a0f0b2956d Validity Not Before: Apr 29 15:00:10 2025 GMT Not After : May 1 15:00:00 2025 GMT Subject: CN=7e4ce3ed-bb9c-46c2-b768-a8134db54e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:2f:a6:76:49:09:e5:c6:9a:22:3f:ff:da: a3:16:33:16:8d:65:ae:62:a6:3b:ad:5c:f9:e7:10: 64:64:8c:67:65:30:85:03:1d:fe:1c:7a:19:04:7e: fc:cc:2b:53:e3:6c:51:6a:2b:77:bb:24:93:8a:11: 8d:42:25:d9:7d:5f:57:27:17:f6:f7:50:91:1e:c7: 35:6e:cb:7f:3b:64:44:ed:07:8f:65:de:b4:95:54: d5:24:1d:18:40:57:09:91:6a:ef:7e:ee:f8:86:23: 3a:ba:36:39:23:29:d9:5b:8e:18:80:1e:79:ab:33: d1:23:95:9d:98:9a:6a:09:7d:88:21:bb:f7:a6:26: f7:b4:ef:65:34:1f:cb:3c:0f:64:5b:23:99:66:06: d9:ba:d0:dc:cf:08:ae:92:a6:c9:b8:2d:69:04:ae: f2:73:be:64:76:44:03:9d:f4:d0:8f:fe:cf:01:52: 80:18:3f:4c:0f:96:d7:99:f1:e3:e1:70:6b:c5:87: 9a:e6:ee:79:e6:49:f4:fd:6a:4b:b9:96:44:08:67: 0a:04:32:e9:01:b7:03:a8:79:3a:c4:ae:57:22:3c: a6:5b:13:ed:3b:1a:9f:10:f6:16:cd:78:e0:07:55: f6:f9:7c:59:39:1d:d8:c0:92:af:4a:f8:8c:2a:98: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9B:DE:7A:08:21:95:19:71:DD:82:84:5B:9C:2F:7D:E8:3C:20:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d/9da2c17e-38b5-4574-b273-36a0f0b2956d.crl X509v3 Authority Key Identifier: keyid:CC:34:69:83:2B:B0:22:C7:B3:DF:70:02:47:E3:67:14:DE:34:F4:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9da2c17e-38b5-4574-b273-36a0f0b2956d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b4:79:85:e9:38:72:27:5b:d6:f1:e8:19:8c:86:45:4f:90: 45:e5:bb:6e:b6:3c:01:59:29:26:67:18:1d:f2:ae:54:ef:de: 10:c9:4f:2a:a4:f0:ed:50:5a:3b:4c:4d:05:92:23:0c:53:c0: f7:6e:e7:0b:53:f4:d3:6f:e9:5a:cc:4f:18:05:07:71:ad:6f: 99:eb:d5:e8:67:8e:18:f1:a0:9e:fa:7d:50:13:59:d3:d2:c9: b2:ce:a0:f5:c2:00:95:de:01:30:b9:28:07:8a:89:f0:7c:c1: 2a:6f:87:c6:5a:e4:40:80:29:2f:dc:f1:e2:9d:97:ac:88:e4: ce:94:72:31:b2:37:a5:5a:c6:0a:c3:44:6a:ec:ca:94:6d:dd: 94:ee:2c:03:fd:88:de:03:fa:fe:78:8c:99:76:89:23:53:c7: 42:f8:86:5e:07:ed:79:0f:95:f8:07:60:25:2a:f5:e3:d4:f6: d4:04:36:be:2e:d3:3a:0f:f8:71:52:3f:2e:82:9f:db:d2:bd: 13:60:99:53:6a:1f:da:f7:fb:53:6c:19:5e:b9:17:6a:69:04: 79:ae:10:79:ef:6b:32:20:be:61:86:55:e9:f9:b0:c5:56:92: 31:b9:97:ef:4b:c8:13:07:dd:f2:a5:46:29:35:f5:82:8d:e9: 76:ab:79:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmwH9aeMg2KSTdcBqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRhMmMxN2UtMzhiNS00NTc0LWIyNzMtMzZhMGYwYjI5 NTZkMB4XDTI1MDQyOTE1MDAxMFoXDTI1MDUwMTE1MDAwMFowLzEtMCsGA1UEAxMk N2U0Y2UzZWQtYmI5Yy00NmMyLWI3NjgtYTgxMzRkYjU0ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqMvpnZJCeXGmiI//9qjFjMWjWWuYqY7rVz5 5xBkZIxnZTCFAx3+HHoZBH78zCtT42xRait3uySTihGNQiXZfV9XJxf291CRHsc1 bst/O2RE7QePZd60lVTVJB0YQFcJkWrvfu74hiM6ujY5IynZW44YgB55qzPRI5Wd mJpqCX2IIbv3pib3tO9lNB/LPA9kWyOZZgbZutDczwiukqbJuC1pBK7yc75kdkQD nfTQj/7PAVKAGD9MD5bXmfHj4XBrxYea5u555kn0/WpLuZZECGcKBDLpAbcDqHk6 xK5XIjymWxPtOxqfEPYWzXjgB1X2+XxZOR3YwJKvSviMKpi/WwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBSb3noIIZUZcd2ChFucL33oPCD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85ZGEy YzE3ZS0zOGI1LTQ1NzQtYjI3My0zNmEwZjBiMjk1NmQvOWRhMmMxN2UtMzhiNS00 NTc0LWIyNzMtMzZhMGYwYjI5NTZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWRhMmMxN2UtMzhiNS00NTc0LWIy NzMtMzZhMGYwYjI5NTZkLzlkYTJjMTdlLTM4YjUtNDU3NC1iMjczLTM2YTBmMGIy OTU2ZC5jcmwwHwYDVR0jBBgwFoAUzDRpgyuwIsez33ACR+NnFN409AwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85ZGEyYzE3ZS0zOGI1LTQ1NzQtYjI3My0zNmEw ZjBiMjk1NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZtHmF6ThyJ1vW8egZjIZF T5BF5btutjwBWSkmZxgd8q5U794QyU8qpPDtUFo7TE0FkiMMU8D3bucLU/TTb+la zE8YBQdxrW+Z69XoZ44Y8aCe+n1QE1nT0smyzqD1wgCV3gEwuSgHionwfMEqb4fG WuRAgCkv3PHinZesiOTOlHIxsjelWsYKw0Rq7MqUbd2U7iwD/YjeA/r+eIyZdokj U8dC+IZeB+15D5X4B2AlKvXj1PbUBDa+LtM6D/hxUj8ugp/b0r0TYJlTah/a9/tT bBleuRdqaQR5rhB572syIL5hhlXp+bDFVpIxuZfvS8gTB93ypUYpNfWCjel2q3ni -----END CERTIFICATE-----Generated at Tue Apr 29 22:13:06 2025 by rpki-client