$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: 67qA8IS/tKvMC2Hr5DtGc9y1mf7J0wJGLVIQAIpYMVs= Subject key identifier: 10:43:CC:B7:BC:A7:7A:7A:6B:93:60:34:05:7B:E9:B6:78:71:56:0E Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F43285849AAC5F52D6D432F500585DF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C35A0 Signing time: Sun 27 Apr 2025 17:00:03 +0000 Manifest this update: Sun 27 Apr 2025 17:00:03 +0000 Manifest next update: Tue 29 Apr 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: /dPPFFxpFvDZZLtrdmb3UWay8LBNplwvNOPZuuhe/9k=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: zOIJ64x3/04VGLRNDH/bCq8BauXxUC/OtaQN6KiTzpM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:c5:f5:2d:6d:43:2f:50:05:85:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Apr 27 17:00:03 2025 GMT Not After : Apr 29 17:00:00 2025 GMT Subject: CN=e5e86b73-8ea9-4498-970f-3c589f8aa141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:1c:6b:c9:18:5b:36:56:43:2e:f6:80:d1: 07:ec:0e:de:f1:f1:97:72:3d:f1:ad:5e:78:f2:77: ba:0e:58:88:29:7e:af:48:d9:4e:dc:26:fa:7e:2b: 5f:b9:b6:a7:b5:e4:58:60:92:b7:d2:23:13:3e:78: 9c:45:08:8f:60:e0:08:b2:ff:a1:4d:d9:38:ec:6b: 12:8a:51:51:41:4f:20:d0:5b:02:dd:cc:72:0d:b8: 82:87:c5:93:42:9a:39:bc:8b:52:a2:ca:03:4d:12: 13:04:6a:c7:46:bc:fa:42:fd:48:03:c3:b0:ee:dd: 7d:db:43:da:e5:ac:18:98:a7:c0:4b:c9:9f:8c:f1: 87:9b:a7:7a:2c:c8:16:b2:e2:58:39:97:a2:a8:69: 62:a9:db:41:f9:31:1b:2f:87:77:d1:d4:d5:e0:61: 54:af:d7:6f:a4:f5:cc:84:8c:0c:e8:71:99:4b:97: 96:8f:da:15:ec:b5:0f:6c:52:b0:3c:46:04:a2:41: f6:9f:ad:e7:25:ab:f1:f3:05:dc:e0:e3:69:74:31: be:e6:31:b9:d6:8a:10:c6:44:db:66:0c:88:a2:e7: 98:5c:1c:dc:db:5b:06:ff:b6:a4:03:af:df:b5:4c: 34:7c:fe:64:34:0a:65:24:80:ff:90:16:db:f5:e9: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:CC:B7:BC:A7:7A:7A:6B:93:60:34:05:7B:E9:B6:78:71:56:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:14:33:84:d2:28:42:2a:8c:65:2a:df:49:42:ea:a6:fb:d8: 31:bd:6c:2c:83:bd:47:70:0e:9d:3b:22:a8:0e:84:d7:16:65: 78:ab:91:d4:54:53:74:f3:6c:c2:49:19:7f:51:a6:18:82:ab: f3:a5:f6:04:82:82:93:0c:09:56:f9:d4:e0:36:6d:5b:58:ee: e1:f9:03:b0:de:a7:e0:18:43:d3:75:49:2a:cf:3e:4e:bc:62: 43:ff:6b:13:8b:ef:2a:68:c2:84:f0:55:d7:09:b1:14:27:a8: dc:47:85:c9:f1:e4:94:75:b9:00:02:b4:e8:06:a2:aa:fc:85: cc:60:a9:6d:3c:9f:09:f8:7c:8a:d5:d4:c9:11:9f:b0:1d:ef: d2:8d:20:cf:5a:f3:61:6e:63:6a:01:68:5a:2e:8f:9f:a3:1b: 1d:5b:94:3a:1a:e4:bb:3d:fc:87:2b:da:0d:62:92:7f:9f:34: 22:db:8c:6f:62:d3:ed:56:64:1e:26:19:0c:54:ff:f4:eb:02: 47:a1:03:3f:df:19:fd:ac:ff:96:bd:89:c2:fe:60:ca:81:36: ea:d5:f0:bb:1a:a7:35:82:9f:c5:6e:99:69:a3:45:c1:fc:c3: c8:f8:2b:b6:0d:7c:4c:fa:7c:39:1d:44:bd:aa:b2:2b:c0:86: 7b:10:22:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmqxfUtbUMvUAWF30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MDQyNzE3MDAwM1oXDTI1MDQyOTE3MDAwMFowLzEtMCsGA1UEAxMk ZTVlODZiNzMtOGVhOS00NDk4LTk3MGYtM2M1ODlmOGFhMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltoca8kYWzZWQy72gNEH7A7e8fGXcj3xrV54 8ne6DliIKX6vSNlO3Cb6fitfubanteRYYJK30iMTPnicRQiPYOAIsv+hTdk47GsS ilFRQU8g0FsC3cxyDbiCh8WTQpo5vItSosoDTRITBGrHRrz6Qv1IA8Ow7t1920Pa 5awYmKfAS8mfjPGHm6d6LMgWsuJYOZeiqGliqdtB+TEbL4d30dTV4GFUr9dvpPXM hIwM6HGZS5eWj9oV7LUPbFKwPEYEokH2n63nJavx8wXc4ONpdDG+5jG51ooQxkTb ZgyIoueYXBzc21sG/7akA6/ftUw0fP5kNAplJID/kBbb9ekKuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBBDzLe8p3p6a5NgNAV76bZ4cVYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXFDOE0ihCKoxlKt9JQuqm +9gxvWwsg71HcA6dOyKoDoTXFmV4q5HUVFN082zCSRl/UaYYgqvzpfYEgoKTDAlW +dTgNm1bWO7h+QOw3qfgGEPTdUkqzz5OvGJD/2sTi+8qaMKE8FXXCbEUJ6jcR4XJ 8eSUdbkAArToBqKq/IXMYKltPJ8J+HyK1dTJEZ+wHe/SjSDPWvNhbmNqAWhaLo+f oxsdW5Q6GuS7PfyHK9oNYpJ/nzQi24xvYtPtVmQeJhkMVP/06wJHoQM/3xn9rP+W vYnC/mDKgTbq1fC7Gqc1gp/Fbplpo0XB/MPI+Cu2DXxM+nw5HUS9qrIrwIZ7ECJM -----END CERTIFICATE-----Generated at Mon Apr 28 09:22:09 2025 by rpki-client