$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft File: 9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft (raw, json) Hash identifier: kgIzvMYIotn6T56FN9HZI3BI53nVEuNOR/sVUMRR/HQ= Subject key identifier: 9D:06:6E:1E:61:CB:AC:6F:DD:16:86:73:DF:60:00:38:D8:6E:28:DC Authority key identifier: 4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 Certificate issuer: /CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Certificate serial: 010D0C9F43285849AB3D1E56A9DEEE876B92CD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft Manifest number: 010D0C9F432858440D6FE31FA8505870AEFAF070 Signing time: Sun 27 Apr 2025 21:00:07 +0000 Manifest this update: Sun 27 Apr 2025 21:00:07 +0000 Manifest next update: Tue 29 Apr 2025 21:00:00 +0000 Files and hashes: 1: 43334eee-7f5c-335d-88a1-bf2b87253514.roa (hash: Fn1H0ZnExFhLsQYXXLHr4HYHbNEDQcwA2D9wlWlcJsM=) 2: 9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl (hash: osTrwB5pL7JED/9BVhGOJr0ts1Q+AkoImvj/lQW9DxY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:3d:1e:56:a9:de:ee:87:6b:92:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc Validity Not Before: Apr 27 21:00:07 2025 GMT Not After : Apr 29 21:00:00 2025 GMT Subject: CN=61037f3a-b953-41f4-855e-9eb4e7f48b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:1a:94:10:a6:57:de:27:98:9e:28:80:41: 28:89:99:99:0d:b2:0c:a9:6b:c9:49:7b:2b:28:12: 6d:3a:9f:af:96:8d:5e:5b:fa:e4:75:a4:f3:b0:c5: 28:06:03:75:bc:7d:7a:cc:7a:b2:3a:1a:61:b3:11: 66:b0:e5:89:61:90:9d:2f:7a:07:27:66:b5:9d:de: a4:70:2b:d9:14:06:5d:78:e7:6d:c2:5f:f6:89:9c: 5a:32:98:69:ad:46:d8:6c:66:2d:1d:c4:8c:25:1b: 86:33:50:f2:3d:be:e8:54:46:0b:41:fb:09:7c:58: b0:9d:b9:9a:67:d8:89:c4:5f:ce:f8:55:d1:38:04: 46:01:b8:5a:d3:35:5f:8e:00:27:4f:75:6b:f8:d1: 46:17:8b:17:f8:fe:06:9e:d7:ec:00:20:fc:de:2f: b9:8d:2b:ac:e0:aa:b9:68:2e:7d:f5:58:32:02:04: d1:01:69:fa:3b:5b:17:53:81:c1:f6:dc:8d:16:ad: 9c:a9:57:59:4f:6e:73:da:86:11:91:24:65:cc:4f: 18:60:81:e0:fd:37:33:0d:7d:cd:11:2d:fb:d3:54: 25:7c:e6:da:8c:20:fc:da:ed:fb:d5:b6:b4:67:c5: d0:40:0b:82:94:77:68:bb:a8:36:ec:69:35:bc:5a: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:06:6E:1E:61:CB:AC:6F:DD:16:86:73:DF:60:00:38:D8:6E:28:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.crl X509v3 Authority Key Identifier: keyid:4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:50:a3:f5:11:9c:38:2e:e2:6f:50:04:f6:f7:70:8d:9e:2a: 31:29:82:2e:d8:06:b6:6c:19:18:8a:3f:fa:14:9d:11:a2:79: 79:25:42:65:08:ad:43:6a:ce:4b:ea:ba:5f:76:8f:81:f5:53: d4:c0:93:25:1e:a1:0c:4e:3f:5b:d6:27:43:9c:3f:a7:5a:46: 0f:65:29:0c:8b:30:87:fe:6f:81:69:08:a2:60:6d:48:2c:36: 48:24:e0:2c:d1:46:86:94:1d:70:36:7d:c0:f1:3d:08:e4:39: af:5c:80:8f:cb:50:12:2c:cf:91:35:03:5c:9d:f2:d0:f3:8d: 37:8e:8e:1c:f1:39:28:f6:73:43:4f:91:9f:36:2a:d0:30:78: 6e:a1:e5:f2:68:80:66:c5:90:ae:e6:ef:e4:f1:cb:4f:43:b0: 0d:fa:67:da:5d:38:6e:60:76:ba:33:96:3c:c0:8b:a6:30:45: 15:7f:a5:f6:5a:47:19:29:ed:d8:fa:1a:f8:fe:7f:ae:0c:22: d0:07:08:92:e0:42:f7:53:ef:19:d1:d7:92:f8:c0:06:43:73: dc:22:cd:87:4d:0c:71:45:27:fe:a7:10:6f:28:22:9f:cf:b1: af:a8:42:0b:bc:6d:a8:72:52:6a:36:37:14:ac:82:41:1f:38: d0:41:c2:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrPR5Wqd7uh2uSzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJmN2U4ZjEtODliZS00ZjU3LWEyY2ItOTEyYjQ1YjMw OGZjMB4XDTI1MDQyNzIxMDAwN1oXDTI1MDQyOTIxMDAwMFowLzEtMCsGA1UEAxMk NjEwMzdmM2EtYjk1My00MWY0LTg1NWUtOWViNGU3ZjQ4YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAEalBCmV94nmJ4ogEEoiZmZDbIMqWvJSXsr KBJtOp+vlo1eW/rkdaTzsMUoBgN1vH16zHqyOhphsxFmsOWJYZCdL3oHJ2a1nd6k cCvZFAZdeOdtwl/2iZxaMphprUbYbGYtHcSMJRuGM1DyPb7oVEYLQfsJfFiwnbma Z9iJxF/O+FXROARGAbha0zVfjgAnT3Vr+NFGF4sX+P4GntfsACD83i+5jSus4Kq5 aC599VgyAgTRAWn6O1sXU4HB9tyNFq2cqVdZT25z2oYRkSRlzE8YYIHg/TczDX3N ES3701QlfObajCD82u371ba0Z8XQQAuClHdou6g27Gk1vFqCdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ0Gbh5hy6xv3RaGc99gADjYbijcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YmY3 ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDViMzA4ZmMvOWJmN2U4ZjEtODliZS00 ZjU3LWEyY2ItOTEyYjQ1YjMwOGZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWJmN2U4ZjEtODliZS00ZjU3LWEy Y2ItOTEyYjQ1YjMwOGZjLzliZjdlOGYxLTg5YmUtNGY1Ny1hMmNiLTkxMmI0NWIz MDhmYy5jcmwwHwYDVR0jBBgwFoAUTALaSCK+jvSz6BfyR2Rziu2G2HYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJi NDViMzA4ZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSUKP1EZw4LuJvUAT293CN nioxKYIu2Aa2bBkYij/6FJ0Ronl5JUJlCK1Das5L6rpfdo+B9VPUwJMlHqEMTj9b 1idDnD+nWkYPZSkMizCH/m+BaQiiYG1ILDZIJOAs0UaGlB1wNn3A8T0I5DmvXICP y1ASLM+RNQNcnfLQ8403jo4c8Tko9nNDT5GfNirQMHhuoeXyaIBmxZCu5u/k8ctP Q7AN+mfaXThuYHa6M5Y8wIumMEUVf6X2WkcZKe3Y+hr4/n+uDCLQBwiS4EL3U+8Z 0deS+MAGQ3PcIs2HTQxxRSf+pxBvKCKfz7GvqEILvG2oclJqNjcUrIJBHzjQQcK0 -----END CERTIFICATE-----Generated at Mon Apr 28 15:26:13 2025 by rpki-client