$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft File: bfc0b168-b834-4192-acf1-30565a4b3e0c.mft (raw, json) Hash identifier: wg5JjsAdvamT/IFtdXdy+oSuoK5cQqyHwZ5M9zCXMjc= Subject key identifier: 57:91:9A:40:BC:96:E2:AA:85:D5:9A:82:69:82:D0:B4:E8:59:72:EC Authority key identifier: 0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 Certificate issuer: /CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Certificate serial: 010D0C9F43285849ADAE6E27248644F63DC61080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft Manifest number: 010D0C9F4328584073A822049B70DB112D5CE24E Signing time: Mon 28 Apr 2025 18:00:03 +0000 Manifest this update: Mon 28 Apr 2025 18:00:03 +0000 Manifest next update: Thu 01 May 2025 18:00:00 +0000 Files and hashes: 1: bfc0b168-b834-4192-acf1-30565a4b3e0c.crl (hash: QXMJ4HFq76S4SoxbAl1qwxDG0rCvtctjrWo1VURtv6U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:ae:6e:27:24:86:44:f6:3d:c6:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc0b168-b834-4192-acf1-30565a4b3e0c Validity Not Before: Apr 28 18:00:03 2025 GMT Not After : May 1 18:00:00 2025 GMT Subject: CN=40c6f09b-b41f-4d8d-9fba-b3619e6049b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e0:63:d1:cd:c1:c2:90:e6:94:12:1e:f9:5c: 78:75:70:42:8b:56:af:3e:52:3e:94:e0:09:0c:93: 81:d6:18:60:2d:56:16:21:32:0f:bf:a0:44:31:d3: dd:ed:b8:93:5b:5a:2d:db:c0:8f:16:53:7c:32:e2: 05:0e:9c:78:80:94:8b:5d:8c:ef:1d:60:2c:b7:e9: 11:20:8a:58:8f:c7:54:b7:d9:4c:59:59:3f:40:f2: 16:4f:8a:37:cc:3e:50:ef:84:aa:ae:c0:9e:e0:73: 2b:61:1d:08:b5:64:01:df:5d:1b:af:96:04:95:61: 9a:61:9e:e7:97:e5:45:ca:f3:99:9e:0e:a2:a8:5d: f0:ee:fd:f9:1f:af:2c:60:79:b1:3c:e7:4e:47:05: fd:c9:5e:27:5e:d9:1e:c8:b1:d8:2e:a6:27:bd:1f: 1f:a7:ab:4d:54:d9:07:8d:a3:f7:e1:3f:06:b9:ae: 54:b8:5d:b6:99:df:20:8f:4a:e8:db:36:4e:f0:f2: 2c:f2:a2:da:1d:37:17:d1:c4:50:a0:f5:57:24:bd: ba:b9:40:be:b8:7c:c0:7a:5f:a9:80:fd:3e:ca:0a: 6b:3c:42:8a:f8:8d:c9:31:43:45:42:85:ad:67:2e: 9f:18:1b:82:60:8e:23:26:6c:d1:9e:1e:ca:6d:0a: 6c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:91:9A:40:BC:96:E2:AA:85:D5:9A:82:69:82:D0:B4:E8:59:72:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c/bfc0b168-b834-4192-acf1-30565a4b3e0c.crl X509v3 Authority Key Identifier: keyid:0B:5F:68:42:78:8A:DF:A3:B0:1A:AB:9A:E1:3D:C6:B9:1E:0F:D1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bfc0b168-b834-4192-acf1-30565a4b3e0c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:02:39:c5:ee:15:ac:5e:9c:60:28:93:6f:98:9b:0c:78:b9: e4:be:a2:f6:1e:ea:86:7e:7b:00:a6:78:40:3f:7d:b6:cb:f4: 79:fa:20:88:1a:0c:66:46:ef:0b:4a:20:e1:59:e2:1e:06:0a: ea:7a:18:5f:ed:80:c1:64:b7:39:bd:15:7c:0e:3a:aa:da:43: 63:31:10:62:27:62:91:d8:0b:f3:41:84:c1:45:4a:23:a4:69: 4a:f3:a6:a4:f9:7b:26:09:ab:72:10:b2:93:a8:82:d1:c2:de: aa:c3:1d:79:7d:c1:07:6a:1e:19:40:bc:0c:20:5e:67:f0:35: f6:58:95:70:01:bc:6a:b2:d9:6e:ed:cb:9f:84:6b:e6:ee:f9: 30:18:7a:41:0b:3c:f0:68:31:e5:65:95:6c:8a:98:3c:ff:73: f7:2e:9f:bc:de:03:59:86:d2:b4:e9:59:09:03:8c:73:3c:81: c4:1d:ea:f7:9d:3e:4b:1c:44:f7:7d:5e:2e:3c:61:96:24:42: 94:5e:a0:df:89:44:e4:a7:a4:77:d1:1c:02:d4:07:a7:37:b0: df:78:48:f8:38:90:8c:ce:aa:10:75:b9:94:cb:70:85:67:67: e6:a8:43:d1:2d:5b:45:57:a7:23:13:94:4f:04:96:1b:bd:a2: 0b:8b:33:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtrm4nJIZE9j3GEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjMGIxNjgtYjgzNC00MTkyLWFjZjEtMzA1NjVhNGIz ZTBjMB4XDTI1MDQyODE4MDAwM1oXDTI1MDUwMTE4MDAwMFowLzEtMCsGA1UEAxMk NDBjNmYwOWItYjQxZi00ZDhkLTlmYmEtYjM2MTllNjA0OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuBj0c3BwpDmlBIe+Vx4dXBCi1avPlI+lOAJ DJOB1hhgLVYWITIPv6BEMdPd7biTW1ot28CPFlN8MuIFDpx4gJSLXYzvHWAst+kR IIpYj8dUt9lMWVk/QPIWT4o3zD5Q74SqrsCe4HMrYR0ItWQB310br5YElWGaYZ7n l+VFyvOZng6iqF3w7v35H68sYHmxPOdORwX9yV4nXtkeyLHYLqYnvR8fp6tNVNkH jaP34T8Gua5UuF22md8gj0ro2zZO8PIs8qLaHTcX0cRQoPVXJL26uUC+uHzAel+p gP0+ygprPEKK+I3JMUNFQoWtZy6fGBuCYI4jJmzRnh7KbQpszwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFeRmkC8luKqhdWagmmC0LToWXLsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMw YjE2OC1iODM0LTQxOTItYWNmMS0zMDU2NWE0YjNlMGMvYmZjMGIxNjgtYjgzNC00 MTkyLWFjZjEtMzA1NjVhNGIzZTBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmZjMGIxNjgtYjgzNC00MTkyLWFj ZjEtMzA1NjVhNGIzZTBjL2JmYzBiMTY4LWI4MzQtNDE5Mi1hY2YxLTMwNTY1YTRi M2UwYy5jcmwwHwYDVR0jBBgwFoAUC19oQniK36OwGqua4T3GuR4P0aEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZmMwYjE2OC1iODM0LTQxOTItYWNmMS0zMDU2 NWE0YjNlMGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChAjnF7hWsXpxgKJNvmJsM eLnkvqL2HuqGfnsApnhAP322y/R5+iCIGgxmRu8LSiDhWeIeBgrqehhf7YDBZLc5 vRV8Djqq2kNjMRBiJ2KR2AvzQYTBRUojpGlK86ak+XsmCatyELKTqILRwt6qwx15 fcEHah4ZQLwMIF5n8DX2WJVwAbxqstlu7cufhGvm7vkwGHpBCzzwaDHlZZVsipg8 /3P3Lp+83gNZhtK06VkJA4xzPIHEHer3nT5LHET3fV4uPGGWJEKUXqDfiUTkp6R3 0RwC1AenN7DfeEj4OJCMzqoQdbmUy3CFZ2fmqEPRLVtFV6cjE5RPBJYbvaILizPa -----END CERTIFICATE-----Generated at Tue Apr 29 07:05:54 2025 by rpki-client