$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft File: 2d64a9b2-da39-490b-a76e-0928cd57270b.mft (raw, json) Hash identifier: eM7W2mK+ENkrzcsiAMw8xTDPZpJ9jmE5t9fXAJFyB0c= Subject key identifier: 24:30:03:A2:C1:B5:B9:44:3B:C1:56:2D:22:B6:85:D4:0A:7C:45:F2 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F43285849BAD3629BF4104ED576897A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft Manifest number: 010D0C9F4328584073A84EEE88D6A99E0FAD9801 Signing time: Sat 03 May 2025 11:00:03 +0000 Manifest this update: Sat 03 May 2025 11:00:03 +0000 Manifest next update: Tue 06 May 2025 11:00:00 +0000 Files and hashes: 1: 2d64a9b2-da39-490b-a76e-0928cd57270b.crl (hash: a9GKSjZPBOihwc/KROa6C/ZJNcrVmnXImvvqSXyxRDQ=) 2: 43d9c709-1869-3602-ba60-82f81826def9.roa (hash: T1fZgOEq6kXZWXgAO9Yt8h9kVSL8dYrTviu0/825T9Q=) 3: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (hash: e7ptQY4UAunb3c54udp9lkvtaIb7AUgD1hUiNy1wmlI=) 4: f91d30f0-a8c4-3398-a80f-218b1255cf9a.roa (hash: JrbehBNod4AvtxNKuaD4rE3FzZaS39/6gcXs/XNe1oM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ba:d3:62:9b:f4:10:4e:d5:76:89:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: May 3 11:00:03 2025 GMT Not After : May 6 11:00:00 2025 GMT Subject: CN=4d5a17b0-2d1a-4702-b4c1-7c3855bf4174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6d:d3:9c:be:38:7b:3b:ec:be:76:6e:0b:bb: be:6f:0e:12:2d:25:fe:a2:8e:e6:16:85:cb:26:8d: 10:ed:87:ad:02:11:36:ad:0f:db:63:7c:a1:5f:34: 60:ea:d8:92:2f:b3:91:1f:87:2e:6b:2f:70:ab:c7: 29:6d:da:e1:a5:82:30:d5:86:92:a1:86:2e:96:ee: e6:08:40:4f:08:00:02:e7:a8:da:69:ff:2c:dd:34: 34:6a:a0:2d:bf:15:7a:5d:f4:cd:f2:f9:6e:15:9e: 7b:ff:08:82:9b:1e:2c:21:65:83:4b:86:ec:92:7c: 0f:81:4f:07:59:1d:b5:d7:5f:59:f3:ff:55:49:3b: 13:9d:1e:3f:b3:f2:0e:84:f1:32:9e:80:4b:76:56: 7a:18:9b:04:b5:83:39:0d:9a:81:bc:54:b1:f3:87: 1b:b8:df:58:e6:8e:eb:b8:0b:d7:c0:07:95:b4:d0: ec:cc:cc:3b:d1:99:b3:ee:84:ea:59:30:7a:cf:83: f2:b1:c3:b4:b6:af:c7:2a:a9:ee:da:e1:78:bb:61: 15:6f:d4:02:13:cc:2f:ad:bb:c8:ce:6c:c7:2a:6b: a6:e5:04:fe:79:d7:a2:c9:39:72:8b:ee:a0:50:04: 8b:2c:ae:cc:18:ec:fe:5f:8c:88:c5:e1:cb:51:37: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:30:03:A2:C1:B5:B9:44:3B:C1:56:2D:22:B6:85:D4:0A:7C:45:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c2:54:55:94:47:85:61:e9:2c:f6:26:57:d9:c6:b0:04:7c: 6e:5b:d7:ab:af:1d:36:ed:8e:98:cc:e2:cf:21:b7:35:35:0d: 3e:ae:f1:35:ee:52:65:eb:e8:3d:4a:df:a1:24:ab:94:57:45: 19:2f:10:ed:44:62:2d:70:6e:b4:0c:20:6d:76:ef:d1:b6:3d: 65:dd:95:bd:32:46:17:80:ec:53:cb:6e:b4:df:c3:f5:6b:2f: cb:de:04:70:d0:bc:bd:07:c5:d3:ae:12:6c:13:27:af:3d:1b: 00:58:05:a8:b7:4c:38:50:69:40:41:d6:ba:59:1e:e1:3e:de: 1e:11:51:a1:69:a3:75:45:f3:80:19:ed:82:0a:5f:ca:6e:8a: 38:33:65:43:1f:20:6d:70:f1:e7:8d:47:a0:d5:33:17:42:78: bb:16:e2:69:02:69:63:ae:ab:79:18:c7:a6:2f:1a:92:21:71: bf:15:24:b5:36:af:18:7b:9b:eb:47:2f:88:8c:2f:86:9e:91: 0c:d0:3d:50:10:f6:dd:5b:bf:49:0b:97:aa:65:3a:84:f6:f2: 59:be:bf:e4:8d:82:8c:69:ae:98:59:16:ed:1e:75:74:7a:e5: b3:ca:96:9a:9d:da:92:95:f6:99:ee:64:ec:e7:0f:e0:aa:fd: 68:dd:5d:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEm602Kb9BBO1XaJeiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI1MDUwMzExMDAwM1oXDTI1MDUwNjExMDAwMFowLzEtMCsGA1UEAxMk NGQ1YTE3YjAtMmQxYS00NzAyLWI0YzEtN2MzODU1YmY0MTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W3TnL44ezvsvnZuC7u+bw4SLSX+oo7mFoXL Jo0Q7YetAhE2rQ/bY3yhXzRg6tiSL7ORH4cuay9wq8cpbdrhpYIw1YaSoYYulu7m CEBPCAAC56jaaf8s3TQ0aqAtvxV6XfTN8vluFZ57/wiCmx4sIWWDS4bsknwPgU8H WR21119Z8/9VSTsTnR4/s/IOhPEynoBLdlZ6GJsEtYM5DZqBvFSx84cbuN9Y5o7r uAvXwAeVtNDszMw70Zmz7oTqWTB6z4PyscO0tq/HKqnu2uF4u2EVb9QCE8wvrbvI zmzHKmum5QT+edeiyTlyi+6gUASLLK7MGOz+X4yIxeHLUTc66QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCQwA6LBtblEO8FWLSK2hdQKfEXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvMmQ2NGE5YjItZGEzOS00 OTBiLWE3NmUtMDkyOGNkNTcyNzBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQwlRVlEeFYeks9iZX2caw BHxuW9errx027Y6YzOLPIbc1NQ0+rvE17lJl6+g9St+hJKuUV0UZLxDtRGItcG60 DCBtdu/Rtj1l3ZW9MkYXgOxTy26038P1ay/L3gRw0Ly9B8XTrhJsEyevPRsAWAWo t0w4UGlAQda6WR7hPt4eEVGhaaN1RfOAGe2CCl/Kboo4M2VDHyBtcPHnjUeg1TMX Qni7FuJpAmljrqt5GMemLxqSIXG/FSS1Nq8Ye5vrRy+IjC+GnpEM0D1QEPbdW79J C5eqZTqE9vJZvr/kjYKMaa6YWRbtHnV0euWzypaandqSlfaZ7mTs5w/gqv1o3V3a -----END CERTIFICATE-----Generated at Sun May 4 08:24:56 2025 by rpki-client