$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft File: c42e23f5-032b-4670-8e05-b4b0477e4388.mft (raw, json) Hash identifier: glL+QUiQVhbtTwLvAuNdySyJRTgWPf8AgX3go1DLZps= Subject key identifier: E5:DA:49:E4:6C:74:47:7C:24:65:1F:2E:3E:28:EF:86:05:5C:58:45 Authority key identifier: 2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F Certificate issuer: /CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Certificate serial: 010D0C9F43285849AAA83511F17DD6451CECE200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft Manifest number: 010D0C9F4328584389B3BAF0D09E548527ADC242 Signing time: Sun 27 Apr 2025 16:00:07 +0000 Manifest this update: Sun 27 Apr 2025 16:00:07 +0000 Manifest next update: Wed 30 Apr 2025 16:00:00 +0000 Files and hashes: 1: 8a9cbae8-b649-3428-a65a-dee741bbf2ff.roa (hash: /r6zbPzzl7XiN8fcOFR69UIjOnYdNoJXaQgyXDFxnsY=) 2: c42e23f5-032b-4670-8e05-b4b0477e4388.crl (hash: 7nbnZEWZIzKA923bHk/cz0Bdm0zTDg/Hs2rv3xeMTQo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:a8:35:11:f1:7d:d6:45:1c:ec:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e23f5-032b-4670-8e05-b4b0477e4388 Validity Not Before: Apr 27 16:00:07 2025 GMT Not After : Apr 30 16:00:00 2025 GMT Subject: CN=fb941a23-9feb-4d74-8c08-937b5780b050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:46:96:ea:19:86:a2:8c:5e:dc:82:e6:4f: b7:84:01:60:0a:7a:4a:fa:6d:ec:c6:35:6f:75:34: 69:f0:4a:fa:31:a7:a2:32:70:3f:3c:91:3d:8c:b3: aa:ec:94:44:4d:b8:a4:89:22:61:2e:58:63:57:e8: fb:bf:be:59:bf:91:2e:44:53:73:c0:f2:8d:1d:ed: 4b:ba:0b:9b:27:e6:31:87:b8:af:35:24:04:41:82: 65:3c:fa:45:d1:56:0e:21:a7:de:c3:01:0a:19:2e: 8a:27:30:5f:40:76:26:04:79:48:49:cc:0f:2b:62: 67:30:6b:1b:65:18:86:cd:bc:a9:5e:b6:2c:7b:2c: 56:3a:a5:dd:00:6c:34:75:87:de:42:69:a0:11:5c: 1c:4c:c9:79:c2:3a:06:c5:92:87:df:dd:59:19:94: f4:69:9f:03:96:65:36:4f:a9:4c:d2:31:5d:3f:93: 60:13:af:8d:cf:1b:aa:cc:15:88:a0:f3:70:0c:ec: a2:f3:52:e9:f4:d2:2b:65:f1:97:4e:73:37:5c:a9: 84:65:8e:e4:0e:0a:96:65:e5:59:f4:56:d5:7c:ee: 16:7e:b8:d4:5e:be:0a:a2:3d:cb:b1:32:b0:d5:14: 57:75:2d:98:9f:aa:8a:94:e7:09:c4:77:68:3b:99: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:49:E4:6C:74:47:7C:24:65:1F:2E:3E:28:EF:86:05:5C:58:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388/c42e23f5-032b-4670-8e05-b4b0477e4388.crl X509v3 Authority Key Identifier: keyid:2E:6C:39:E3:71:14:18:83:29:2C:46:0D:E9:EC:38:AA:87:EA:7D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c42e23f5-032b-4670-8e05-b4b0477e4388.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6d:73:43:58:07:1b:7e:58:69:b9:13:0b:82:08:7e:7f:73: 4f:4c:04:27:55:8a:10:73:88:3b:1e:44:c8:ab:61:3d:f4:15: 51:8c:22:25:35:25:57:a5:41:4f:5e:71:88:67:74:eb:29:4e: 17:e6:d0:ad:83:39:75:b8:bf:f2:13:63:99:fe:82:81:e7:0f: 5f:ef:a1:f8:81:18:f2:1b:b6:cc:bf:62:2a:5f:16:cd:cd:8d: 8b:7d:35:90:b5:ff:d1:1d:24:1d:58:91:01:bd:fd:a1:89:c1: 0c:22:b2:27:33:e2:dc:aa:ff:94:e7:05:92:0c:e2:bb:34:f8: ad:4b:86:5c:28:de:48:07:d6:c8:b8:5f:86:e9:8f:0a:9c:b1: 4c:1d:b5:1f:d5:ff:56:29:26:6f:92:37:cd:96:fd:cf:b0:64: e4:7f:fb:00:c1:25:ca:db:71:e4:e1:c0:a1:e5:70:89:a9:cd: cf:51:9b:18:52:e8:8c:78:92:60:4a:6c:c6:73:c7:b8:10:45: 51:20:c5:92:c6:fd:11:14:b6:fe:ba:36:ae:e5:82:31:91:b2: e6:5c:e3:de:94:c1:ee:8a:0d:46:6d:98:55:bd:3f:45:81:c3: b9:f2:d3:f1:cb:a8:59:42:e0:27:ef:e6:77:22:d5:a7:b0:e9: 52:53:db:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqqDUR8X3WRRzs4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyZTIzZjUtMDMyYi00NjcwLThlMDUtYjRiMDQ3N2U0 Mzg4MB4XDTI1MDQyNzE2MDAwN1oXDTI1MDQzMDE2MDAwMFowLzEtMCsGA1UEAxMk ZmI5NDFhMjMtOWZlYi00ZDc0LThjMDgtOTM3YjU3ODBiMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6RGluoZhqKMXtyC5k+3hAFgCnpK+m3sxjVv dTRp8Er6MaeiMnA/PJE9jLOq7JRETbikiSJhLlhjV+j7v75Zv5EuRFNzwPKNHe1L ugubJ+Yxh7ivNSQEQYJlPPpF0VYOIafewwEKGS6KJzBfQHYmBHlIScwPK2JnMGsb ZRiGzbypXrYseyxWOqXdAGw0dYfeQmmgEVwcTMl5wjoGxZKH391ZGZT0aZ8DlmU2 T6lM0jFdP5NgE6+NzxuqzBWIoPNwDOyi81Lp9NIrZfGXTnM3XKmEZY7kDgqWZeVZ 9FbVfO4WfrjUXr4Koj3LsTKw1RRXdS2Yn6qKlOcJxHdoO5k/9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOXaSeRsdEd8JGUfLj4o74YFXFhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJl MjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIwNDc3ZTQzODgvYzQyZTIzZjUtMDMyYi00 NjcwLThlMDUtYjRiMDQ3N2U0Mzg4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzQyZTIzZjUtMDMyYi00NjcwLThl MDUtYjRiMDQ3N2U0Mzg4L2M0MmUyM2Y1LTAzMmItNDY3MC04ZTA1LWI0YjA0Nzdl NDM4OC5jcmwwHwYDVR0jBBgwFoAULmw543EUGIMpLEYN6ew4qofqfW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jNDJlMjNmNS0wMzJiLTQ2NzAtOGUwNS1iNGIw NDc3ZTQzODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2bXNDWAcbflhpuRMLggh+ f3NPTAQnVYoQc4g7HkTIq2E99BVRjCIlNSVXpUFPXnGIZ3TrKU4X5tCtgzl1uL/y E2OZ/oKB5w9f76H4gRjyG7bMv2IqXxbNzY2LfTWQtf/RHSQdWJEBvf2hicEMIrIn M+Lcqv+U5wWSDOK7NPitS4ZcKN5IB9bIuF+G6Y8KnLFMHbUf1f9WKSZvkjfNlv3P sGTkf/sAwSXK23Hk4cCh5XCJqc3PUZsYUuiMeJJgSmzGc8e4EEVRIMWSxv0RFLb+ ujau5YIxkbLmXOPelMHuig1GbZhVvT9FgcO58tPxy6hZQuAn7+Z3ItWnsOlSU9sB -----END CERTIFICATE-----Generated at Mon Apr 28 09:18:26 2025 by rpki-client