$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft File: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json) Hash identifier: bUduawkslbVnnUuqodlZ2sorToGsx5qWI0Uey2bCmQs= Subject key identifier: 87:20:42:75:3B:FF:BF:AB:4F:6A:25:81:19:1B:13:2E:43:75:68:35 Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 Certificate issuer: /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Certificate serial: 010D0C9F43285849B0791980058A330C0B5125A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft Manifest number: 010D0C9F432858438A0A161212CB83FF1869C531 Signing time: Tue 29 Apr 2025 18:00:03 +0000 Manifest this update: Tue 29 Apr 2025 18:00:03 +0000 Manifest next update: Fri 02 May 2025 18:00:00 +0000 Files and hashes: 1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: p/Kk7NbW21lyD5x4O5+0J4nGrtVJLc7H41Bxz8H904Y=) 2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: d965sKTwTXwSFdzx/MAgIdD75hY2UJcbhw1y+AnPphE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:79:19:80:05:8a:33:0c:0b:51:25:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a Validity Not Before: Apr 29 18:00:03 2025 GMT Not After : May 2 18:00:00 2025 GMT Subject: CN=87be2fc1-c7a9-4844-a6ef-62c3d2e370d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:c6:7c:3d:9d:6a:57:7e:20:96:cd:79:ed: 40:47:b3:95:4f:f7:e1:d1:72:c4:ba:31:f7:0e:89: f3:12:5f:b4:ee:82:e9:16:1a:39:c3:27:24:c9:11: a5:a6:0e:04:19:ff:ac:fa:25:4e:04:be:1f:3c:8c: 63:0f:1a:09:f9:b2:c2:c8:e0:6c:97:26:56:4c:d1: 6c:02:57:9f:27:33:65:96:97:dd:1b:e4:47:70:bb: 14:31:ee:20:c8:8e:d7:49:40:c6:ec:be:dc:42:70: 51:9e:32:d2:f0:3c:78:17:35:ce:f6:49:ef:c0:d2: 2f:cd:6d:69:05:20:67:1a:51:77:c2:20:01:4d:da: 84:db:23:12:79:1b:1f:e9:18:2e:db:a3:ed:2e:2d: 3d:af:78:65:ed:f9:80:c5:6e:d3:fc:d8:1d:6c:26: fb:93:c1:a8:f3:37:0b:a4:f0:90:4c:1d:0b:d5:ac: e9:52:d6:0f:24:03:9d:dc:0e:23:0d:63:4b:ff:f8: d5:d3:36:8d:e4:d4:69:c3:5c:5f:55:bf:bd:5b:9d: 84:2e:4e:2f:bd:ed:f8:a4:2f:e0:5b:8f:a0:76:b5: 1d:4f:d5:ac:34:de:da:65:2d:c7:53:9d:8a:9c:07: f1:55:10:0a:43:00:d1:a6:67:ce:55:a0:0b:9d:5e: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:20:42:75:3B:FF:BF:AB:4F:6A:25:81:19:1B:13:2E:43:75:68:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl X509v3 Authority Key Identifier: keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6c:d2:c7:cb:23:e2:91:08:f4:18:b3:5c:50:1d:c9:df:27: 10:ca:8b:4a:69:8e:2d:c4:10:cd:a7:ef:ab:70:f9:8b:0c:5a: 71:3a:f3:fe:24:11:ee:da:0d:75:da:c5:21:e5:da:87:6f:6d: 36:71:50:8b:ac:54:1d:ef:a4:6a:d7:a0:da:56:8f:55:43:c2: 07:85:c4:e9:93:44:ac:49:82:37:e1:5a:1b:83:be:db:40:3f: 3f:df:f5:0f:c9:7d:b4:e3:fc:3f:4f:00:8a:f7:f6:b2:f4:52: 8b:67:65:3e:09:9d:8d:78:61:c3:8e:84:4c:bd:84:d8:c8:be: 09:d2:22:74:db:51:a0:9b:7b:0d:e0:6d:6d:18:1a:ad:cb:cd: f1:8c:fe:17:91:fd:3b:c6:da:f6:2d:78:70:97:7c:1c:c7:48: a6:5d:4d:42:15:96:c4:43:6c:a4:b1:86:d7:1c:f2:ce:e4:60: bc:50:2f:2d:33:b4:f0:de:e1:f0:97:ed:5c:61:51:13:6e:39: 2e:e7:ae:96:e4:d8:21:f2:2d:09:b2:4a:02:f6:49:9a:5e:60: c3:d4:14:1b:2c:36:61:35:65:b9:3f:cc:dc:03:6c:a7:d0:83: f9:56:f0:19:d9:77:e3:17:ab:c3:a7:03:0f:42:ed:e1:4e:c2: 8c:01:e8:5e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmweRmABYozDAtRJaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm OTFhMB4XDTI1MDQyOTE4MDAwM1oXDTI1MDUwMjE4MDAwMFowLzEtMCsGA1UEAxMk ODdiZTJmYzEtYzdhOS00ODQ0LWE2ZWYtNjJjM2QyZTM3MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2nGfD2dald+IJbNee1AR7OVT/fh0XLEujH3 DonzEl+07oLpFho5wyckyRGlpg4EGf+s+iVOBL4fPIxjDxoJ+bLCyOBslyZWTNFs AlefJzNllpfdG+RHcLsUMe4gyI7XSUDG7L7cQnBRnjLS8Dx4FzXO9knvwNIvzW1p BSBnGlF3wiABTdqE2yMSeRsf6Rgu26PtLi09r3hl7fmAxW7T/NgdbCb7k8Go8zcL pPCQTB0L1azpUtYPJAOd3A4jDWNL//jV0zaN5NRpw1xfVb+9W52ELk4vve34pC/g W4+gdrUdT9WsNN7aZS3HU52KnAfxVRAKQwDRpmfOVaALnV55kQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIcgQnU7/7+rT2olgRkbEy5DdWg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00 YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5 YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9bNLHyyPikQj0GLNcUB3J 3ycQyotKaY4txBDNp++rcPmLDFpxOvP+JBHu2g112sUh5dqHb202cVCLrFQd76Rq 16DaVo9VQ8IHhcTpk0SsSYI34Vobg77bQD8/3/UPyX204/w/TwCK9/ay9FKLZ2U+ CZ2NeGHDjoRMvYTYyL4J0iJ021Ggm3sN4G1tGBqty83xjP4Xkf07xtr2LXhwl3wc x0imXU1CFZbEQ2yksYbXHPLO5GC8UC8tM7Tw3uHwl+1cYVETbjku566W5Ngh8i0J skoC9kmaXmDD1BQbLDZhNWW5P8zcA2yn0IP5VvAZ2XfjF6vDpwMPQu3hTsKMAehe -----END CERTIFICATE-----Generated at Wed Apr 30 02:45:35 2025 by rpki-client