$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft File: 03f68bb7-1e42-452b-a9a1-99c7586beba0.mft (raw, json) Hash identifier: EHg6/CCcgDUK8r05HYdBVzcrWEbERYxKxIJZMCgdivQ= Subject key identifier: B5:2D:34:2D:8B:29:76:5D:45:11:FA:BC:6D:72:1D:65:44:ED:56:D7 Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59 Certificate issuer: /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0 Certificate serial: 010D0C9F43285849AAA83A07054CDBE7431DFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft Manifest number: 010D0C9F4328584391CA53DB29CE3E3E8F375992 Signing time: Sun 27 Apr 2025 16:00:07 +0000 Manifest this update: Sun 27 Apr 2025 16:00:07 +0000 Manifest next update: Tue 29 Apr 2025 16:00:00 +0000 Files and hashes: 1: 03f68bb7-1e42-452b-a9a1-99c7586beba0.crl (hash: WghHVgTujub561wbmpfmLyOmZqD5UibqNtZalSBc8x0=) 2: 4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa (hash: le+/IUeERN7n51K0exdb5CpHMs3sVRLl7uALyzM2Ero=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:a8:3a:07:05:4c:db:e7:43:1d:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0 Validity Not Before: Apr 27 16:00:07 2025 GMT Not After : Apr 29 16:00:00 2025 GMT Subject: CN=418ad2fc-22a9-4526-a97b-0857acc6d231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:da:58:c6:1b:30:60:0d:4b:dc:f9:80:7d: 1b:46:2f:98:e8:42:9e:af:a0:7f:90:07:10:71:95: 23:bd:6a:fd:ab:a4:4e:f1:ca:7e:13:23:7a:e2:9c: 72:32:0a:38:ad:e1:e4:0d:85:e5:66:d9:2a:57:9e: 71:d9:dc:aa:91:07:a2:00:0f:90:36:6e:7d:b4:56: 5a:8c:03:7d:30:0a:63:37:81:70:9c:e5:99:34:8b: 36:e6:9a:4a:93:75:22:da:0a:e0:8d:d8:87:7b:e2: c4:a3:c0:16:aa:6a:28:0d:6a:05:12:f2:8d:57:0b: a6:31:14:1b:c3:14:d8:fb:a3:79:99:db:09:77:2d: 54:8f:43:41:13:00:1a:b7:63:1f:68:f9:11:94:8e: 1f:65:3f:10:6d:31:53:70:ff:d5:30:28:8e:85:83: 10:76:57:42:16:57:56:41:a3:2a:03:e8:58:68:71: 46:97:c7:fe:3c:b5:de:22:b8:2c:80:5b:a0:be:77: 5b:bf:d2:28:b2:1b:34:47:64:ac:4a:da:ef:36:91: 11:0b:a8:a6:36:c6:5d:97:c3:c7:9c:28:b5:89:3d: 88:a4:ff:76:67:27:08:4e:24:3e:b7:84:c1:2b:dc: c0:b9:81:42:e5:7f:63:3a:50:e1:bf:4e:59:23:78: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2D:34:2D:8B:29:76:5D:45:11:FA:BC:6D:72:1D:65:44:ED:56:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl X509v3 Authority Key Identifier: keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:43:bf:18:fc:79:9f:24:2c:bf:5f:3f:10:07:1f:7f:8d:90: 86:a0:d4:58:84:6a:e8:28:9c:60:ca:91:cd:45:b7:2e:87:64: 53:04:53:a1:1e:b3:46:d0:97:e2:19:af:75:ae:87:16:2e:23: d1:ad:fb:54:07:b6:c6:97:49:e0:5f:76:ad:d6:58:7c:a4:59: b3:c1:f9:bc:5d:46:37:d1:77:80:04:40:51:24:63:3a:07:95: 13:15:fd:a4:90:9b:92:3b:89:c6:a7:57:e8:10:b6:36:83:4b: 13:63:e3:b6:79:df:15:60:65:ce:86:24:02:a8:be:1f:42:70: e7:a0:1c:7e:d2:69:e5:b7:25:78:47:60:5d:cc:ca:4f:63:3e: 99:8c:5e:e6:68:4c:33:cb:e1:10:f4:92:e9:d4:6a:21:f1:99: 4a:ef:54:8a:dc:6c:b6:7e:88:b7:ee:73:d6:c5:1b:df:35:65: 5a:44:65:13:f4:90:09:f9:ca:ba:11:ca:7e:8b:ca:d4:fb:0d: c8:ef:21:e2:88:41:15:65:2c:e4:71:c8:94:c5:11:4e:98:fa: 19:42:6a:5f:84:64:ee:12:c3:1d:c2:52:fe:60:86:41:4f:e6: 6c:c4:35:a0:6e:05:dc:0e:37:3c:3a:53:cd:8c:93:9c:8f:fb: 8c:71:d4:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqqDoHBUzb50Md+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNmNjhiYjctMWU0Mi00NTJiLWE5YTEtOTljNzU4NmJl YmEwMB4XDTI1MDQyNzE2MDAwN1oXDTI1MDQyOTE2MDAwMFowLzEtMCsGA1UEAxMk NDE4YWQyZmMtMjJhOS00NTI2LWE5N2ItMDg1N2FjYzZkMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK/aWMYbMGANS9z5gH0bRi+Y6EKer6B/kAcQ cZUjvWr9q6RO8cp+EyN64pxyMgo4reHkDYXlZtkqV55x2dyqkQeiAA+QNm59tFZa jAN9MApjN4FwnOWZNIs25ppKk3Ui2grgjdiHe+LEo8AWqmooDWoFEvKNVwumMRQb wxTY+6N5mdsJdy1Uj0NBEwAat2MfaPkRlI4fZT8QbTFTcP/VMCiOhYMQdldCFldW QaMqA+hYaHFGl8f+PLXeIrgsgFugvndbv9Ioshs0R2SsStrvNpERC6imNsZdl8PH nCi1iT2IpP92ZycITiQ+t4TBK9zAuYFC5X9jOlDhv05ZI3iX+QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLUtNC2LKXZdRRH6vG1yHWVE7VbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2 OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3NTg2YmViYTAvMDNmNjhiYjctMWU0Mi00 NTJiLWE5YTEtOTljNzU4NmJlYmEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNmNjhiYjctMWU0Mi00NTJiLWE5 YTEtOTljNzU4NmJlYmEwLzAzZjY4YmI3LTFlNDItNDUyYi1hOWExLTk5Yzc1ODZi ZWJhMC5jcmwwHwYDVR0jBBgwFoAUSv4UcYhi1ik6o3u+cxOtoeiMSVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2Y2OGJiNy0xZTQyLTQ1MmItYTlhMS05OWM3 NTg2YmViYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYQ78Y/HmfJCy/Xz8QBx9/ jZCGoNRYhGroKJxgypHNRbcuh2RTBFOhHrNG0JfiGa91rocWLiPRrftUB7bGl0ng X3at1lh8pFmzwfm8XUY30XeABEBRJGM6B5UTFf2kkJuSO4nGp1foELY2g0sTY+O2 ed8VYGXOhiQCqL4fQnDnoBx+0mnltyV4R2BdzMpPYz6ZjF7maEwzy+EQ9JLp1Goh 8ZlK71SK3Gy2foi37nPWxRvfNWVaRGUT9JAJ+cq6Ecp+i8rU+w3I7yHiiEEVZSzk cciUxRFOmPoZQmpfhGTuEsMdwlL+YIZBT+ZsxDWgbgXcDjc8OlPNjJOcj/uMcdRz -----END CERTIFICATE-----Generated at Mon Apr 28 09:44:49 2025 by rpki-client