$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft File: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft (raw, json) Hash identifier: Y/cIHv36OfavOO/U3+FsMhfj9tX5YCRLcuJyiyzY22U= Subject key identifier: 35:DA:94:A3:C2:9E:6A:B5:01:7B:AB:A0:53:43:85:EC:F2:E9:B3:BD Authority key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Certificate issuer: /CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Certificate serial: 010D0C9F43285849AB3D1B497FDCE32037B18F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft Manifest number: 010D0C9F4328584426A4E2EADBA377D65CF196A7 Signing time: Sun 27 Apr 2025 21:00:07 +0000 Manifest this update: Sun 27 Apr 2025 21:00:07 +0000 Manifest next update: Wed 30 Apr 2025 21:00:00 +0000 Files and hashes: 1: 088c14c0-87f9-31b9-9bc1-18e2325bcf39.roa (hash: NP2sdJfrdi5pitJWq7OR7P6DL+wCs7q4UwWY7T4Yymo=) 2: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl (hash: PRoSRE9Zc+Cxwy8CCVtNZN37Ld/N9tzcSJtRm4HvqbY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:3d:1b:49:7f:dc:e3:20:37:b1:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Validity Not Before: Apr 27 21:00:07 2025 GMT Not After : Apr 30 21:00:00 2025 GMT Subject: CN=3543f56f-aa59-49c0-ad23-014b7e13ad40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e3:cc:75:05:cd:2c:74:44:c8:96:2c:26:fe: 8d:c1:c0:f2:14:07:a1:b0:90:d0:44:c8:4b:a3:76: 0c:13:45:47:02:38:46:2c:fb:71:2e:0b:c5:92:45: cc:87:a7:be:47:5d:ad:8c:c7:e1:80:e2:60:28:f9: e1:67:ed:eb:f3:7f:6f:ab:6c:05:98:3d:a9:13:28: a8:0b:9d:3c:c6:ea:a2:93:cb:28:7a:24:0e:c6:de: 03:48:64:24:22:0f:72:86:ef:7e:4f:df:b0:3d:9e: ec:a5:74:c0:0d:86:4c:9a:8d:2e:e5:73:cf:45:13: b6:b5:87:f6:18:80:c2:ef:f9:a8:cf:34:24:41:2c: 2a:77:3c:ef:7c:97:0e:3e:ad:95:32:09:85:3c:6f: 20:e6:19:2a:f2:ea:ca:79:d5:d4:8e:1f:14:b9:e6: e7:cb:4a:31:41:b6:a1:99:d3:06:f1:16:c3:48:79: b3:fa:b7:fd:fb:09:35:ee:8a:e2:b4:36:2b:23:9e: a5:d8:50:ab:8b:d3:89:9b:9f:ca:de:f9:89:7e:a8: d5:66:d7:a2:47:9f:a0:8c:55:0e:8c:5b:e2:40:f7: 6c:f1:59:b3:a6:ce:ec:1d:eb:5d:c4:9b:37:cb:db: 87:47:33:1b:e1:f9:1d:b0:73:72:c9:e9:1e:64:19: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DA:94:A3:C2:9E:6A:B5:01:7B:AB:A0:53:43:85:EC:F2:E9:B3:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.crl X509v3 Authority Key Identifier: keyid:78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:83:fa:3e:40:7a:17:52:e9:69:83:8e:30:4e:37:b8:cf:3f: 13:ad:4c:d3:c0:71:23:32:5d:5c:19:ce:bf:54:79:e0:36:0c: 40:24:83:a4:43:6b:8c:c5:f1:f6:53:1e:c1:b4:b0:44:da:c3: 78:7b:64:83:a0:84:5d:1d:46:27:14:8f:41:60:fa:1f:21:e9: c2:84:e7:f7:79:e8:ce:d4:1c:05:9e:e2:5d:08:cf:4e:35:1b: be:a9:b5:34:cf:9c:12:94:cf:e3:d2:d0:ac:f0:47:fc:74:06: 4a:04:d4:61:5d:a5:29:55:45:a2:76:e9:f3:27:00:85:3f:cf: 09:f4:6a:fc:c0:9b:7b:d9:3a:bb:86:c7:95:e2:69:82:3a:b9: 09:7d:54:2d:a4:9c:00:ff:0c:45:42:2c:bb:b3:d0:54:ce:36: 12:9b:59:ae:08:26:53:e2:67:58:32:95:9b:df:ae:ff:9d:92: 8e:49:63:7a:c0:19:43:51:f4:de:6d:33:af:3f:8e:2b:d8:3e: 80:00:5d:dd:0d:d8:89:90:e0:6c:68:3b:f4:9f:67:ca:15:f5: f3:2a:d8:a6:84:2a:e6:5c:c1:85:1e:cf:43:21:0f:21:9e:8f: ea:63:e4:79:d5:30:e9:c4:be:bc:3b:16:4f:3f:08:30:da:79: 3a:ce:55:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrPRtJf9zjIDexjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFm MDE3MB4XDTI1MDQyNzIxMDAwN1oXDTI1MDQzMDIxMDAwMFowLzEtMCsGA1UEAxMk MzU0M2Y1NmYtYWE1OS00OWMwLWFkMjMtMDE0YjdlMTNhZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ePMdQXNLHREyJYsJv6NwcDyFAehsJDQRMhL o3YME0VHAjhGLPtxLgvFkkXMh6e+R12tjMfhgOJgKPnhZ+3r839vq2wFmD2pEyio C508xuqik8soeiQOxt4DSGQkIg9yhu9+T9+wPZ7spXTADYZMmo0u5XPPRRO2tYf2 GIDC7/mozzQkQSwqdzzvfJcOPq2VMgmFPG8g5hkq8urKedXUjh8Uuebny0oxQbah mdMG8RbDSHmz+rf9+wk17oritDYrI56l2FCri9OJm5/K3vmJfqjVZteiR5+gjFUO jFviQPds8Vmzps7sHetdxJs3y9uHRzMb4fkdsHNyyekeZBmKEwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDXalKPCnmq1AXuroFNDhezy6bO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIw ZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMjhiMGUyZTQtNWYyYS00 ZWNkLWFkNmItOTc0MTY5NTFmMDE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjhiMGUyZTQtNWYyYS00ZWNkLWFk NmItOTc0MTY5NTFmMDE3LzI4YjBlMmU0LTVmMmEtNGVjZC1hZDZiLTk3NDE2OTUx ZjAxNy5jcmwwHwYDVR0jBBgwFoAUeOCFNnhwP8lrznn8nzJY9P8yAlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQx Njk1MWYwMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7g/o+QHoXUulpg44wTje4 zz8TrUzTwHEjMl1cGc6/VHngNgxAJIOkQ2uMxfH2Ux7BtLBE2sN4e2SDoIRdHUYn FI9BYPofIenChOf3eejO1BwFnuJdCM9ONRu+qbU0z5wSlM/j0tCs8Ef8dAZKBNRh XaUpVUWidunzJwCFP88J9Gr8wJt72Tq7hseV4mmCOrkJfVQtpJwA/wxFQiy7s9BU zjYSm1muCCZT4mdYMpWb367/nZKOSWN6wBlDUfTebTOvP44r2D6AAF3dDdiJkOBs aDv0n2fKFfXzKtimhCrmXMGFHs9DIQ8hno/qY+R51TDpxL68OxZPPwgw2nk6zlW5 -----END CERTIFICATE-----Generated at Mon Apr 28 10:38:09 2025 by rpki-client