$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft File: 4cd7357f-5806-4e1e-a57e-078529f02d78.mft (raw, json) Hash identifier: sMLUyVDuSXpjoblDxidzLSSktRphKjF1J72E9ItJItg= Subject key identifier: 9A:61:C5:6F:58:9E:E2:46:36:56:91:16:65:5A:0F:E5:56:C9:E5:CA Authority key identifier: A4:42:AD:8B:45:0F:79:F1:D9:BE:1D:09:A8:2A:68:F6:AE:56:4C:E7 Certificate issuer: /CN=4cd7357f-5806-4e1e-a57e-078529f02d78 Certificate serial: 010D0C9F43285849AB1F4C040930BE610F43AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft Manifest number: 010D0C9F432858441E3AE8CA65AC133310FBAE2D Signing time: Sun 27 Apr 2025 20:00:03 +0000 Manifest this update: Sun 27 Apr 2025 20:00:03 +0000 Manifest next update: Tue 29 Apr 2025 20:00:00 +0000 Files and hashes: 1: 4cd7357f-5806-4e1e-a57e-078529f02d78.crl (hash: ADFQxdFc/LsCLlLxafqRskhriXeNte5/R6nS3ANW+q4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:1f:4c:04:09:30:be:61:0f:43:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cd7357f-5806-4e1e-a57e-078529f02d78 Validity Not Before: Apr 27 20:00:03 2025 GMT Not After : Apr 29 20:00:00 2025 GMT Subject: CN=b4991e1b-1d69-4d10-8fe4-795ea999248b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:e7:18:14:18:d7:69:ee:f6:e3:a9:dc:89: 04:ed:7d:5e:9e:64:a0:36:3e:9b:40:96:58:3b:ba: c1:ca:10:f8:d2:29:33:8e:8f:3e:b4:40:6e:ae:67: 10:f8:2f:74:61:64:59:a9:13:f0:94:51:72:85:62: 69:0e:6a:cf:4a:05:5c:ef:59:a5:cc:24:ad:34:9a: 05:71:41:6d:2f:a2:d5:34:a2:81:54:17:bd:f2:07: 1c:f5:49:0e:55:4b:6f:34:dd:f9:36:7e:a5:4f:27: a0:2a:e0:eb:ff:d5:4e:aa:e4:b8:50:71:d3:a5:dc: 56:49:c3:1e:41:d5:a6:35:26:64:52:5c:b9:b8:22: d1:29:b2:b8:45:fe:11:d5:1d:e9:55:e4:4c:5c:a6: e2:72:47:7a:6a:58:74:a5:15:93:09:a7:35:cc:80: d6:82:09:2a:82:8a:f2:e5:7a:12:47:a4:bd:27:f5: 69:31:90:08:c0:a3:84:6a:c1:9f:9f:0a:30:b2:48: c5:9d:97:e2:96:75:1b:3c:45:40:10:8d:e2:33:38: 82:2f:12:f1:6c:ee:76:9a:99:70:03:b0:0b:a0:fa: 9b:d2:76:84:15:ad:28:16:ca:9c:f9:9e:81:06:4c: 91:f9:08:07:d6:fd:9b:2c:ac:6a:e3:c6:ce:7e:ab: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:61:C5:6F:58:9E:E2:46:36:56:91:16:65:5A:0F:E5:56:C9:E5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78/4cd7357f-5806-4e1e-a57e-078529f02d78.crl X509v3 Authority Key Identifier: keyid:A4:42:AD:8B:45:0F:79:F1:D9:BE:1D:09:A8:2A:68:F6:AE:56:4C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4cd7357f-5806-4e1e-a57e-078529f02d78.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c3:25:c7:f6:c4:c6:51:6d:d1:fb:73:f6:40:d2:fe:33:f3: 13:c8:d7:1f:d4:44:de:bc:ef:fb:15:00:c3:2e:dd:5f:02:99: 62:71:3e:10:ef:61:7b:5e:51:69:32:10:0d:f3:26:8f:dc:1e: 27:cc:d8:49:36:8d:ee:8a:5a:c0:1e:ae:be:6b:9a:43:0b:61: 55:47:2d:b7:4f:00:30:3f:0a:36:11:a8:2b:fc:ad:4b:3e:51: 39:6a:89:b4:e5:3c:c4:95:c0:3a:61:54:88:e6:7d:54:ad:cf: 65:a8:d1:b1:78:ae:aa:41:55:c4:04:39:40:2b:ab:79:2f:c5: c4:02:e1:1f:11:b9:53:8d:25:fa:2e:a9:73:a7:00:64:31:c7: 28:6c:df:5c:bc:2e:44:97:31:5c:c6:1a:77:a8:07:7d:2e:27: 75:5b:01:74:b6:31:1d:cc:a4:92:39:eb:ed:2d:ef:42:34:65: 51:13:f5:14:d4:3e:6b:22:6f:ea:45:85:84:f3:9f:ac:73:cf: e8:f4:b2:0c:e4:e6:28:db:25:7e:78:94:00:71:a5:a0:75:96: b9:64:d5:2c:4e:8a:6b:2b:36:b6:cd:bb:7a:61:37:25:78:c9: 72:f8:48:8e:75:78:c6:43:73:96:3f:67:61:c0:d2:1e:68:75: 62:a1:dd:88 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrH0wECTC+YQ9Dr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNkNzM1N2YtNTgwNi00ZTFlLWE1N2UtMDc4NTI5ZjAy ZDc4MB4XDTI1MDQyNzIwMDAwM1oXDTI1MDQyOTIwMDAwMFowLzEtMCsGA1UEAxMk YjQ5OTFlMWItMWQ2OS00ZDEwLThmZTQtNzk1ZWE5OTkyNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirjnGBQY12nu9uOp3IkE7X1enmSgNj6bQJZY O7rByhD40ikzjo8+tEBurmcQ+C90YWRZqRPwlFFyhWJpDmrPSgVc71mlzCStNJoF cUFtL6LVNKKBVBe98gcc9UkOVUtvNN35Nn6lTyegKuDr/9VOquS4UHHTpdxWScMe QdWmNSZkUly5uCLRKbK4Rf4R1R3pVeRMXKbickd6alh0pRWTCac1zIDWggkqgory 5XoSR6S9J/VpMZAIwKOEasGfnwowskjFnZfilnUbPEVAEI3iMziCLxLxbO52mplw A7ALoPqb0naEFa0oFsqc+Z6BBkyR+QgH1v2bLKxq48bOfqtIPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJphxW9YnuJGNlaRFmVaD+VWyeXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Y2Q3 MzU3Zi01ODA2LTRlMWUtYTU3ZS0wNzg1MjlmMDJkNzgvNGNkNzM1N2YtNTgwNi00 ZTFlLWE1N2UtMDc4NTI5ZjAyZDc4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGNkNzM1N2YtNTgwNi00ZTFlLWE1 N2UtMDc4NTI5ZjAyZDc4LzRjZDczNTdmLTU4MDYtNGUxZS1hNTdlLTA3ODUyOWYw MmQ3OC5jcmwwHwYDVR0jBBgwFoAUpEKti0UPefHZvh0JqCpo9q5WTOcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80Y2Q3MzU3Zi01ODA2LTRlMWUtYTU3ZS0wNzg1 MjlmMDJkNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3wyXH9sTGUW3R+3P2QNL+ M/MTyNcf1ETevO/7FQDDLt1fAplicT4Q72F7XlFpMhAN8yaP3B4nzNhJNo3uilrA Hq6+a5pDC2FVRy23TwAwPwo2Eagr/K1LPlE5aom05TzElcA6YVSI5n1Urc9lqNGx eK6qQVXEBDlAK6t5L8XEAuEfEblTjSX6LqlzpwBkMccobN9cvC5ElzFcxhp3qAd9 Lid1WwF0tjEdzKSSOevtLe9CNGVRE/UU1D5rIm/qRYWE85+sc8/o9LIM5OYo2yV+ eJQAcaWgdZa5ZNUsToprKza2zbt6YTcleMly+EiOdXjGQ3OWP2dhwNIeaHViod2I -----END CERTIFICATE-----Generated at Mon Apr 28 09:21:50 2025 by rpki-client