$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft File: d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft (raw, json) Hash identifier: TAOrWqmir1FIbm+MlM26zPoMDbqL+cMPKNmorQ7kuRw= Subject key identifier: A9:82:F4:84:8D:26:90:EF:B9:59:3E:C5:C0:32:79:8D:78:B7:EB:5C Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05 Certificate issuer: /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40 Certificate serial: 010D0C9F43285849AAA83A0FAD3EC7D4E36DD280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft Manifest number: 010D0C9F432858468EB1DA1EAB9DB070710F8384 Signing time: Sun 27 Apr 2025 16:00:07 +0000 Manifest this update: Sun 27 Apr 2025 16:00:07 +0000 Manifest next update: Tue 29 Apr 2025 16:00:00 +0000 Files and hashes: 1: d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl (hash: xqPtqHej97vzUnOR/OIZ2ietcmrBTuqA/eKc8rN9fqU=) 2: e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (hash: ZxBZYrxeNX0B1cFZBbqQf+1iMqitDf+4RlWFNVbMP0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:a8:3a:0f:ad:3e:c7:d4:e3:6d:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40 Validity Not Before: Apr 27 16:00:07 2025 GMT Not After : Apr 29 16:00:00 2025 GMT Subject: CN=a892d9a3-57f6-4845-b1a7-8607056801a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:de:22:aa:7f:54:3c:ab:f3:d0:79:bb:84: b7:45:5a:a7:1f:d8:28:76:28:88:c0:fb:34:9f:ac: 39:1c:5a:5c:50:c9:52:19:06:d9:31:9f:9b:f2:68: f2:99:68:06:05:72:72:09:eb:4b:c4:4b:fa:3c:d4: 01:02:51:15:89:fe:1e:8e:9a:5c:e2:ee:f3:b3:71: c1:a0:98:c6:d8:70:e9:46:d4:da:93:ee:f0:4a:f1: 50:57:bf:ce:06:ef:cd:e3:c5:bb:a2:93:b3:b8:e2: 95:0c:ea:ab:e9:54:f6:db:e7:05:6e:4f:b8:c3:89: 02:37:14:84:19:1e:02:63:95:4b:01:d8:6a:b2:dd: 41:08:79:33:ca:19:fe:dd:39:c0:f5:99:e0:51:65: f4:4f:14:d3:fc:4f:0f:70:51:b4:53:3f:23:c4:66: c1:46:12:91:2d:1e:29:58:9d:61:27:19:57:82:86: 69:9e:0e:0e:58:30:f0:17:80:ee:58:54:c9:53:7a: d7:13:c5:da:bd:9b:93:36:72:ea:e0:31:60:50:b8: f5:6d:38:ab:df:9b:b6:b7:6a:ff:75:ed:db:40:f7: 89:af:68:92:a0:64:e6:ae:95:71:ed:fc:20:8b:90: 90:61:1e:94:ad:87:cc:f7:de:ff:1f:c2:3f:29:5a: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:82:F4:84:8D:26:90:EF:B9:59:3E:C5:C0:32:79:8D:78:B7:EB:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl X509v3 Authority Key Identifier: keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bd:8e:82:df:35:32:01:9a:9b:51:18:a4:2f:ad:0e:5d:ac: cd:e2:31:5d:74:71:20:c8:19:70:ea:a3:f8:23:cf:d3:bf:36: ca:fb:cc:5a:1e:cd:fc:68:2f:e8:e4:ec:99:84:2f:47:30:cc: de:61:2e:38:52:b6:63:72:69:0a:f2:51:03:9f:fd:bb:ae:92: c6:b9:b1:45:95:cf:65:ff:98:b2:86:d9:e2:dd:e6:ba:1d:e7: a9:6a:cf:4c:ac:34:fd:b9:ad:2b:89:e9:58:0d:be:5e:d6:1c: 69:d3:72:75:71:72:dd:d1:d8:10:c8:f4:82:5c:5a:6a:9f:d0: 1b:bb:d5:5d:b8:cb:26:7f:c7:cc:7b:88:f7:41:76:25:69:00: 5d:6c:61:b4:f9:20:f2:0b:67:61:42:65:82:b5:d5:68:e1:7f: 8a:a3:2e:53:9a:b4:db:30:35:99:fe:0c:84:01:19:fb:e5:94: e8:fe:61:fa:ca:0a:a6:c2:d1:25:f2:71:b1:e7:d7:eb:31:29: 4b:9b:60:71:5e:00:8e:72:c9:69:49:db:1a:1c:53:d0:5e:72: 2d:ef:52:47:9d:aa:65:97:0a:50:42:43:ea:d7:03:85:1e:1e: 90:12:eb:2d:55:5a:69:93:c8:4f:d8:d0:bd:fd:e0:51:05:32: bf:e1:8a:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqqDoPrT7H1ONt0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc2YWFhYzEtYjcyNC00ZGUyLTljMWEtNzBkY2U3YTEw ZTQwMB4XDTI1MDQyNzE2MDAwN1oXDTI1MDQyOTE2MDAwMFowLzEtMCsGA1UEAxMk YTg5MmQ5YTMtNTdmNi00ODQ1LWIxYTctODYwNzA1NjgwMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2LeIqp/VDyr89B5u4S3RVqnH9godiiIwPs0 n6w5HFpcUMlSGQbZMZ+b8mjymWgGBXJyCetLxEv6PNQBAlEVif4ejppc4u7zs3HB oJjG2HDpRtTak+7wSvFQV7/OBu/N48W7opOzuOKVDOqr6VT22+cFbk+4w4kCNxSE GR4CY5VLAdhqst1BCHkzyhn+3TnA9ZngUWX0TxTT/E8PcFG0Uz8jxGbBRhKRLR4p WJ1hJxlXgoZpng4OWDDwF4DuWFTJU3rXE8XavZuTNnLq4DFgULj1bTir35u2t2r/ de3bQPeJr2iSoGTmrpVx7fwgi5CQYR6UrYfM997/H8I/KVoEHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKmC9ISNJpDvuVk+xcAyeY14t+tcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNzZh YWFjMS1iNzI0LTRkZTItOWMxYS03MGRjZTdhMTBlNDAvZDc2YWFhYzEtYjcyNC00 ZGUyLTljMWEtNzBkY2U3YTEwZTQwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDc2YWFhYzEtYjcyNC00ZGUyLTlj MWEtNzBkY2U3YTEwZTQwL2Q3NmFhYWMxLWI3MjQtNGRlMi05YzFhLTcwZGNlN2Ex MGU0MC5jcmwwHwYDVR0jBBgwFoAUZt9T8pFSA93pgv8v7kbfiQsxYgUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNzZhYWFjMS1iNzI0LTRkZTItOWMxYS03MGRj ZTdhMTBlNDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUvY6C3zUyAZqbURikL60O XazN4jFddHEgyBlw6qP4I8/TvzbK+8xaHs38aC/o5OyZhC9HMMzeYS44UrZjcmkK 8lEDn/27rpLGubFFlc9l/5iyhtni3ea6Heepas9MrDT9ua0rielYDb5e1hxp03J1 cXLd0dgQyPSCXFpqn9Abu9VduMsmf8fMe4j3QXYlaQBdbGG0+SDyC2dhQmWCtdVo 4X+Koy5TmrTbMDWZ/gyEARn75ZTo/mH6ygqmwtEl8nGx59frMSlLm2BxXgCOcslp SdsaHFPQXnIt71JHnapllwpQQkPq1wOFHh6QEustVVppk8hP2NC9/eBRBTK/4Ypd -----END CERTIFICATE-----Generated at Sun Apr 27 21:49:28 2025 by rpki-client