$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft File: a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft (raw, json) Hash identifier: KsJUFxHc5KXvnv+qwUAVe7/h3H+rIA+76HoTfzQ2nCc= Subject key identifier: 2C:BF:8D:07:DA:87:3A:02:6B:B0:FE:3C:7D:C1:3D:1C:8C:F3:02:CF Authority key identifier: 41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 Certificate issuer: /CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6 Certificate serial: 010D0C9F43285849AB0181F304DB0192898586F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft Manifest number: 010D0C9F432858435D6518EACBD4AEE1645ED882 Signing time: Sun 27 Apr 2025 19:00:03 +0000 Manifest this update: Sun 27 Apr 2025 19:00:03 +0000 Manifest next update: Wed 30 Apr 2025 19:00:00 +0000 Files and hashes: 1: a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.crl (hash: km3Hj1UDzdOZ5Je0NeKWZE7OV9PPEgkF01vAFmgUm74=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:01:81:f3:04:db:01:92:89:85:86:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a543a7f7-4aa0-4c84-8a59-004c26b0e5b6 Validity Not Before: Apr 27 19:00:03 2025 GMT Not After : Apr 30 19:00:00 2025 GMT Subject: CN=2922722e-0d6c-4fc8-9cee-ba99cf66be62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:31:0f:51:74:e2:db:9f:3c:57:65:c3:4f:0d: 4e:1b:2c:a3:0f:c9:50:e4:37:99:b9:a1:68:d3:e0: 01:0d:f2:ba:bb:fe:bd:93:9a:b3:07:71:d4:cf:d0: 6f:66:91:5a:63:56:21:2a:25:88:f6:7e:22:d9:d6: 9c:0a:ca:52:56:98:c1:b0:d5:69:46:0c:dc:f3:1b: 1d:62:74:0d:60:ae:83:17:6e:8c:e7:57:9a:19:12: 62:9c:cc:a7:22:13:ea:66:62:f0:a2:cd:d8:64:73: 20:8e:63:e1:fb:1d:4c:d5:b6:ba:ea:92:98:2e:aa: d7:1b:0a:d2:ac:c7:11:33:21:f7:f6:01:4d:6f:8f: f4:ad:2a:6d:d6:0c:9a:df:3a:12:be:ac:c7:a7:92: d2:1d:27:f6:83:9f:a0:b8:78:72:29:98:37:83:f4: 5a:f4:b7:e6:95:05:8b:ac:5f:a3:71:d2:1e:0f:27: 7b:17:b4:5a:0b:a8:f7:ec:87:87:bc:b2:8e:be:51: e4:77:f2:98:cd:db:71:ad:f3:c7:d1:c2:7e:fe:3e: 02:77:06:de:f5:00:b3:44:85:b1:0e:77:21:a6:f0: 53:b2:47:c1:94:9f:96:35:36:8f:67:22:ef:7c:fe: f5:5d:0d:77:a4:c9:9d:88:e5:f6:24:d7:56:e4:66: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BF:8D:07:DA:87:3A:02:6B:B0:FE:3C:7D:C1:3D:1C:8C:F3:02:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.crl X509v3 Authority Key Identifier: keyid:41:20:48:6D:40:4B:BB:FF:D6:63:E2:24:9A:28:73:B0:C5:00:5B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a543a7f7-4aa0-4c84-8a59-004c26b0e5b6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d5:7f:65:d2:72:42:70:4a:1b:64:c4:fe:a3:b5:7c:9d:8d: 25:5c:55:3a:d2:a1:48:48:70:65:5d:a4:c1:4f:4e:cd:0b:12: 77:57:50:a2:f3:de:55:ce:3e:a7:3a:e8:1e:86:d6:18:24:fa: 5d:6b:13:e2:f6:b9:67:78:d2:7b:74:26:0a:5a:c4:85:5d:0a: e5:0b:9c:be:77:bc:46:4f:14:0f:fb:dd:da:cb:19:a7:ab:43: 2b:a1:b7:cf:df:d9:a9:a7:6b:a6:05:66:95:4f:0a:9f:5f:cf: 1e:6b:07:73:0d:08:eb:a7:7c:67:f5:32:b8:84:22:0d:b1:4b: c4:48:a1:eb:d2:63:63:ca:c7:7f:66:7b:5d:05:90:54:fc:92: fe:8d:ef:f0:7c:d4:54:d4:84:9e:06:71:19:7c:e4:a8:80:d2: cb:46:cf:e4:f9:e6:f0:36:9b:d7:02:40:40:82:1a:88:fa:d1: 09:64:d5:37:e2:79:04:50:7b:0e:77:a6:9e:47:cc:0f:1c:12: ce:66:cf:06:c2:c2:bd:57:0e:6c:22:98:bc:69:3c:69:b9:e7: 61:3d:c5:41:2f:b1:d5:64:5c:c0:58:1b:a6:b8:62:6a:0a:02: d4:a8:0e:6f:cb:89:60:5c:68:7c:f8:c5:6e:7f:e7:70:07:e2: c2:96:0d:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmrAYHzBNsBkomFhvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0M2E3ZjctNGFhMC00Yzg0LThhNTktMDA0YzI2YjBl NWI2MB4XDTI1MDQyNzE5MDAwM1oXDTI1MDQzMDE5MDAwMFowLzEtMCsGA1UEAxMk MjkyMjcyMmUtMGQ2Yy00ZmM4LTljZWUtYmE5OWNmNjZiZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDEPUXTi2588V2XDTw1OGyyjD8lQ5DeZuaFo 0+ABDfK6u/69k5qzB3HUz9BvZpFaY1YhKiWI9n4i2dacCspSVpjBsNVpRgzc8xsd YnQNYK6DF26M51eaGRJinMynIhPqZmLwos3YZHMgjmPh+x1M1ba66pKYLqrXGwrS rMcRMyH39gFNb4/0rSpt1gya3zoSvqzHp5LSHSf2g5+guHhyKZg3g/Ra9LfmlQWL rF+jcdIeDyd7F7RaC6j37IeHvLKOvlHkd/KYzdtxrfPH0cJ+/j4Cdwbe9QCzRIWx DnchpvBTskfBlJ+WNTaPZyLvfP71XQ13pMmdiOX2JNdW5GZncwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCy/jQfahzoCa7D+PH3BPRyM8wLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTQz YTdmNy00YWEwLTRjODQtOGE1OS0wMDRjMjZiMGU1YjYvYTU0M2E3ZjctNGFhMC00 Yzg0LThhNTktMDA0YzI2YjBlNWI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTU0M2E3ZjctNGFhMC00Yzg0LThh NTktMDA0YzI2YjBlNWI2L2E1NDNhN2Y3LTRhYTAtNGM4NC04YTU5LTAwNGMyNmIw ZTViNi5jcmwwHwYDVR0jBBgwFoAUQSBIbUBLu//WY+IkmihzsMUAW8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTQzYTdmNy00YWEwLTRjODQtOGE1OS0wMDRj MjZiMGU1YjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCX1X9l0nJCcEobZMT+o7V8 nY0lXFU60qFISHBlXaTBT07NCxJ3V1Ci895Vzj6nOugehtYYJPpdaxPi9rlneNJ7 dCYKWsSFXQrlC5y+d7xGTxQP+93ayxmnq0MrobfP39mpp2umBWaVTwqfX88eawdz DQjrp3xn9TK4hCINsUvESKHr0mNjysd/ZntdBZBU/JL+je/wfNRU1ISeBnEZfOSo gNLLRs/k+ebwNpvXAkBAghqI+tEJZNU34nkEUHsOd6aeR8wPHBLOZs8GwsK9Vw5s Ipi8aTxpuedhPcVBL7HVZFzAWBumuGJqCgLUqA5vy4lgXGh8+MVuf+dwB+LClg3a -----END CERTIFICATE-----Generated at Mon Apr 28 06:31:26 2025 by rpki-client