$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.mft File: 00825d1b-b873-4e21-a614-f945938c5194.mft (raw, json) Hash identifier: OXmpnn0jpbVrhwoJioQDqxCOtQYMnGu2QnVMI7aXvjA= Subject key identifier: E3:E4:BD:9A:93:D2:C6:C3:4E:4E:7B:28:12:5A:39:A3:AD:6B:D8:5A Authority key identifier: 85:72:DF:E5:55:AC:90:E8:B6:69:54:94:21:8F:16:FA:38:DC:51:88 Certificate issuer: /CN=00825d1b-b873-4e21-a614-f945938c5194 Certificate serial: 010D0C9F43285849AF8AEA9AF843C8573B94A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.mft Manifest number: 010D0C9F4328584073A84D495D15C4C89CBD8363 Signing time: Tue 29 Apr 2025 10:00:07 +0000 Manifest this update: Tue 29 Apr 2025 10:00:07 +0000 Manifest next update: Fri 02 May 2025 10:00:00 +0000 Files and hashes: 1: 00825d1b-b873-4e21-a614-f945938c5194.crl (hash: XYgYY2ZXGpL5CDhUfbWVDlO0Y+I/VOVb62Om/4gOrhw=) 2: 07139b64-7ebd-38d0-9bf3-5174c7e14861.roa (hash: t3DCuhk9oh1tdO3W8/53EtgJOLhJNwfUgGrRi+LjnlQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:8a:ea:9a:f8:43:c8:57:3b:94:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00825d1b-b873-4e21-a614-f945938c5194 Validity Not Before: Apr 29 10:00:07 2025 GMT Not After : May 2 10:00:00 2025 GMT Subject: CN=9709446e-a7c0-4726-a520-883dbe713651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ae:cd:7d:4c:06:e1:e9:ab:0b:a5:ea:cb:89: 87:47:cd:f7:aa:3a:f8:c5:ca:5f:80:f8:f1:0f:5a: 18:2f:59:75:52:d5:11:98:30:c5:91:33:a2:36:c3: 9b:97:ab:63:f8:7b:a7:ed:ca:dc:e6:e4:64:53:92: 89:fc:bb:57:3b:3b:a4:6f:a0:d5:2f:71:aa:69:4b: 13:25:fd:97:10:d8:3e:49:00:15:80:f9:4d:26:88: 5a:3d:3d:11:cc:71:d2:46:3b:af:30:a1:24:42:4c: 61:57:45:51:05:e8:3e:cd:b0:73:97:a8:7e:62:7d: b6:63:82:54:a5:4c:f1:cf:4a:a8:fb:c7:2b:a5:a2: e6:eb:91:1d:41:07:5d:ea:6d:ac:20:ce:a0:13:9c: f2:a6:a1:0b:a8:b2:5b:58:1d:74:5c:c1:f2:b2:a2: 87:6a:78:ef:24:a1:9e:af:7d:60:4a:02:7b:5e:35: e1:60:9b:0d:c2:c2:1b:5a:14:c7:0d:38:27:13:4c: 8f:1a:9e:c0:c0:fb:80:9f:8f:4a:de:ef:c7:b5:1a: 3a:72:0f:ed:99:76:74:ed:ae:11:89:f4:38:61:c9: a0:15:12:b9:2b:32:81:4d:e8:68:db:94:3a:d8:0e: 02:94:e5:84:e4:13:08:1c:6c:2f:75:9d:df:10:13: 3a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:BD:9A:93:D2:C6:C3:4E:4E:7B:28:12:5A:39:A3:AD:6B:D8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194/00825d1b-b873-4e21-a614-f945938c5194.crl X509v3 Authority Key Identifier: keyid:85:72:DF:E5:55:AC:90:E8:B6:69:54:94:21:8F:16:FA:38:DC:51:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00825d1b-b873-4e21-a614-f945938c5194.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:17:8e:f0:ab:c0:96:c3:65:8a:5a:bc:c3:81:c8:9a:b3:dd: 04:4e:8f:38:20:f0:d4:73:d7:b0:04:06:f5:c6:7a:68:b5:33: 01:5b:e8:8d:16:d1:60:53:5c:4a:30:85:8c:cb:de:9a:b6:e8: 48:7c:85:0a:30:d2:19:a1:ab:b1:c4:dd:41:3c:29:99:a1:97: 0b:40:41:88:0e:37:f0:9a:cd:99:56:b6:26:6e:b3:25:6c:8a: 38:df:6d:39:ba:69:b0:e3:90:6a:cd:cd:36:84:f6:3b:b2:e6: 0a:24:3d:0f:41:98:da:8f:2c:70:5b:24:2e:95:0b:2a:4f:5b: 47:b9:f0:44:35:05:6b:a1:1e:d1:96:74:79:89:b0:cf:ec:6c: fd:f4:5c:08:f2:fd:0d:a2:b9:df:7b:ce:56:bc:4d:47:b9:91: 47:5d:f9:51:3c:5b:6f:7a:95:03:2a:94:d5:42:b3:7c:15:11: 52:ce:c0:91:63:f1:88:b8:cb:f7:1d:7e:94:29:c5:bd:25:11: 3d:8f:73:0c:8e:d4:a7:3f:ac:e0:22:02:5b:75:74:a0:87:3c: f5:1a:6d:8e:d7:80:54:7f:eb:6b:87:cf:8c:80:ed:76:62:29: 39:89:ee:76:6d:ca:18:42:05:c6:54:54:15:c9:88:98:ae:42: 74:13:ea:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmviuqa+EPIVzuUqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4MjVkMWItYjg3My00ZTIxLWE2MTQtZjk0NTkzOGM1 MTk0MB4XDTI1MDQyOTEwMDAwN1oXDTI1MDUwMjEwMDAwMFowLzEtMCsGA1UEAxMk OTcwOTQ0NmUtYTdjMC00NzI2LWE1MjAtODgzZGJlNzEzNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga7NfUwG4emrC6Xqy4mHR833qjr4xcpfgPjx D1oYL1l1UtURmDDFkTOiNsObl6tj+Hun7crc5uRkU5KJ/LtXOzukb6DVL3GqaUsT Jf2XENg+SQAVgPlNJohaPT0RzHHSRjuvMKEkQkxhV0VRBeg+zbBzl6h+Yn22Y4JU pUzxz0qo+8crpaLm65EdQQdd6m2sIM6gE5zypqELqLJbWB10XMHysqKHanjvJKGe r31gSgJ7XjXhYJsNwsIbWhTHDTgnE0yPGp7AwPuAn49K3u/HtRo6cg/tmXZ07a4R ifQ4YcmgFRK5KzKBTeho25Q62A4ClOWE5BMIHGwvdZ3fEBM6pQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOPkvZqT0sbDTk57KBJaOaOta9haMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDgy NWQxYi1iODczLTRlMjEtYTYxNC1mOTQ1OTM4YzUxOTQvMDA4MjVkMWItYjg3My00 ZTIxLWE2MTQtZjk0NTkzOGM1MTk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4MjVkMWItYjg3My00ZTIxLWE2 MTQtZjk0NTkzOGM1MTk0LzAwODI1ZDFiLWI4NzMtNGUyMS1hNjE0LWY5NDU5Mzhj NTE5NC5jcmwwHwYDVR0jBBgwFoAUhXLf5VWskOi2aVSUIY8W+jjcUYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDgyNWQxYi1iODczLTRlMjEtYTYxNC1mOTQ1 OTM4YzUxOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYF47wq8CWw2WKWrzDgcia s90ETo84IPDUc9ewBAb1xnpotTMBW+iNFtFgU1xKMIWMy96atuhIfIUKMNIZoaux xN1BPCmZoZcLQEGIDjfwms2ZVrYmbrMlbIo43205ummw45Bqzc02hPY7suYKJD0P QZjajyxwWyQulQsqT1tHufBENQVroR7RlnR5ibDP7Gz99FwI8v0Nornfe85WvE1H uZFHXflRPFtvepUDKpTVQrN8FRFSzsCRY/GIuMv3HX6UKcW9JRE9j3MMjtSnP6zg IgJbdXSghzz1Gm2O14BUf+trh8+MgO12Yik5ie52bcoYQgXGVFQVyYiYrkJ0E+rs -----END CERTIFICATE-----Generated at Tue Apr 29 23:45:02 2025 by rpki-client