$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft File: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft (raw, json) Hash identifier: /tDFcUcY3i3pMmK8hWjsXhk0t4yynog+kmfS282b0wg= Subject key identifier: 9C:6A:6D:5E:79:D1:9B:95:02:C0:47:79:5E:B0:C9:41:A7:8C:EE:92 Authority key identifier: 48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 Certificate issuer: /CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Certificate serial: 010D0C9F43285849AB5AE2F07626B559D1A5EBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft Manifest number: 010D0C9F4328584426C89F1535D6ABD56DB6E972 Signing time: Sun 27 Apr 2025 22:00:07 +0000 Manifest this update: Sun 27 Apr 2025 22:00:07 +0000 Manifest next update: Wed 30 Apr 2025 22:00:00 +0000 Files and hashes: 1: 039bc77e-6087-3093-9191-6772277f3e24.roa (hash: QwzygNImU7vEodNXT7hiJpVZQNsUVasGWR4nQEhTYgo=) 2: 109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl (hash: 7iqWMqsUx7xWjYjWR2VZaaN20llyQ7ZyhPZ3bKDi3z8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:5a:e2:f0:76:26:b5:59:d1:a5:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109be73b-e568-44b7-bd63-ebc4e8fe6f17 Validity Not Before: Apr 27 22:00:07 2025 GMT Not After : Apr 30 22:00:00 2025 GMT Subject: CN=aace0d2f-c99f-4674-b19c-82e44e771174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:26:27:f8:59:98:1a:00:f8:f9:92:24:fc: 89:11:d2:01:4e:12:ae:d1:3c:8c:0f:ef:ee:d3:1e: 1e:c2:c7:65:c9:34:34:5a:23:e8:fe:30:82:49:96: c6:b8:36:ec:61:37:e7:77:5c:53:74:9a:2a:9f:5f: c6:2b:34:27:02:20:79:d4:b8:cd:c4:bd:ea:b9:73: 2e:30:5e:bc:a3:27:3e:1d:a5:12:ac:12:d9:61:d1: a4:a5:f1:ce:b1:01:d0:6f:29:3f:56:f3:0c:ad:a1: c8:f6:d4:e2:cc:23:7c:fd:3e:74:4e:64:a6:43:59: 15:7e:76:93:08:49:9a:10:08:66:2b:dd:19:fc:f0: 36:75:f6:d2:cd:33:f7:64:76:02:50:24:f5:32:62: a7:ac:f5:e7:fb:05:f9:ca:c5:1e:df:9a:2b:96:98: f7:a6:3a:c0:ae:5c:7d:c1:74:7b:31:6f:19:e4:d9: 2a:a1:3a:63:0d:af:8a:ca:02:35:e2:16:e3:22:cf: 4c:3d:f6:27:4a:9f:fe:fa:25:e7:39:24:3b:50:e2: ca:f4:2a:97:e9:07:65:7b:3e:a4:64:96:c6:40:2e: d4:83:2f:d4:5c:95:4b:ee:57:f9:f9:4d:9a:00:63: d5:da:b3:ba:dc:45:be:fc:1f:52:c8:62:52:16:c1: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6A:6D:5E:79:D1:9B:95:02:C0:47:79:5E:B0:C9:41:A7:8C:EE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17/109be73b-e568-44b7-bd63-ebc4e8fe6f17.crl X509v3 Authority Key Identifier: keyid:48:28:60:76:5C:79:25:EF:3C:6A:66:6D:D9:1F:41:89:79:CE:20:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109be73b-e568-44b7-bd63-ebc4e8fe6f17.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ce:7b:a4:ba:b2:23:25:77:29:67:44:d8:a4:87:33:ed:b5: 6b:b0:99:a7:4c:66:e7:74:89:59:fa:c9:23:ed:f0:59:97:c8: b7:f0:7e:eb:a7:94:9a:b5:1d:d6:7b:5d:4b:50:b3:dd:74:81: 94:e5:d0:5b:cc:79:4f:51:8f:88:e6:4e:15:6c:9b:51:44:ea: b9:e9:c1:fa:07:62:63:28:93:13:98:53:66:89:5f:da:46:28: c2:76:bd:c6:f1:2a:82:b7:6a:5c:ae:3e:be:72:34:c9:2d:cb: 97:b6:2d:f2:7f:98:4b:50:61:5c:fb:8f:8e:a3:39:31:c0:71: ec:2b:9b:46:50:59:38:e2:ea:ce:3e:e3:55:76:67:de:d8:17: 05:64:f2:53:6f:74:5f:75:fb:37:72:7e:6c:cc:b4:49:d3:3b: f7:05:e7:af:07:85:10:96:d7:8e:ca:04:03:26:ae:75:e6:61: 6b:c5:81:3e:b2:c1:65:7b:eb:4d:26:03:1e:6a:7f:62:79:c1: f0:9e:23:42:17:4b:14:d7:0c:bb:3a:53:7e:d0:64:fb:6f:cd: 26:c8:24:4e:7a:c4:b3:b1:9b:d7:2f:65:6f:ab:c4:66:31:c3: 96:de:bb:01:77:3d:5c:d7:51:86:9e:77:86:98:46:e2:51:ea: 2d:e6:2d:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrWuLwdia1WdGl68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5YmU3M2ItZTU2OC00NGI3LWJkNjMtZWJjNGU4ZmU2 ZjE3MB4XDTI1MDQyNzIyMDAwN1oXDTI1MDQzMDIyMDAwMFowLzEtMCsGA1UEAxMk YWFjZTBkMmYtYzk5Zi00Njc0LWIxOWMtODJlNDRlNzcxMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT0mJ/hZmBoA+PmSJPyJEdIBThKu0TyMD+/u 0x4ewsdlyTQ0WiPo/jCCSZbGuDbsYTfnd1xTdJoqn1/GKzQnAiB51LjNxL3quXMu MF68oyc+HaUSrBLZYdGkpfHOsQHQbyk/VvMMraHI9tTizCN8/T50TmSmQ1kVfnaT CEmaEAhmK90Z/PA2dfbSzTP3ZHYCUCT1MmKnrPXn+wX5ysUe35orlpj3pjrArlx9 wXR7MW8Z5NkqoTpjDa+KygI14hbjIs9MPfYnSp/++iXnOSQ7UOLK9CqX6Qdlez6k ZJbGQC7Ugy/UXJVL7lf5+U2aAGPV2rO63EW+/B9SyGJSFsF8MwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJxqbV550ZuVAsBHeV6wyUGnjO6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDli ZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0ZThmZTZmMTcvMTA5YmU3M2ItZTU2OC00 NGI3LWJkNjMtZWJjNGU4ZmU2ZjE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTA5YmU3M2ItZTU2OC00NGI3LWJk NjMtZWJjNGU4ZmU2ZjE3LzEwOWJlNzNiLWU1NjgtNDRiNy1iZDYzLWViYzRlOGZl NmYxNy5jcmwwHwYDVR0jBBgwFoAUSChgdlx5Je88amZt2R9BiXnOIGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMDliZTczYi1lNTY4LTQ0YjctYmQ2My1lYmM0 ZThmZTZmMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGznukurIjJXcpZ0TYpIcz 7bVrsJmnTGbndIlZ+skj7fBZl8i38H7rp5SatR3We11LULPddIGU5dBbzHlPUY+I 5k4VbJtRROq56cH6B2JjKJMTmFNmiV/aRijCdr3G8SqCt2pcrj6+cjTJLcuXti3y f5hLUGFc+4+OozkxwHHsK5tGUFk44urOPuNVdmfe2BcFZPJTb3Rfdfs3cn5szLRJ 0zv3BeevB4UQlteOygQDJq515mFrxYE+ssFle+tNJgMean9iecHwniNCF0sU1wy7 OlN+0GT7b80myCROesSzsZvXL2Vvq8RmMcOW3rsBdz1c11GGnneGmEbiUeot5i2K -----END CERTIFICATE-----Generated at Mon Apr 28 15:24:12 2025 by rpki-client