$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.mft File: 465254d1-eb33-4b2f-b753-c2021a9446e4.mft (raw, json) Hash identifier: 6Lcoo4oBjGN0KOOD3WekpVTZsvWV1J4p0aw+d98Ahco= Subject key identifier: 11:DD:8E:37:81:06:95:7C:2E:24:AE:D5:25:36:07:6F:CF:24:62:2C Authority key identifier: 1D:79:2A:64:F1:30:F6:4B:99:82:95:43:16:86:0B:9C:3B:07:B3:7F Certificate issuer: /CN=465254d1-eb33-4b2f-b753-c2021a9446e4 Certificate serial: 010D0C9F43285849AD72DE3F34ABC90FE94AB540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.mft Manifest number: 010D0C9F43285840AB4D25AEEC002D042C41640F Signing time: Mon 28 Apr 2025 16:00:03 +0000 Manifest this update: Mon 28 Apr 2025 16:00:03 +0000 Manifest next update: Thu 01 May 2025 16:00:00 +0000 Files and hashes: 1: 465254d1-eb33-4b2f-b753-c2021a9446e4.crl (hash: ickuHXAZTbyaeOt4gaWMhcfTwOx8KttixPgvKc2OvZE=) 2: c5ff4d28-68c9-3187-8939-4157d657b3f3.roa (hash: Ftm1cf5MraUIGMiZ8cTnyEsh0r9YMyzB1/m/pntEHFQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:72:de:3f:34:ab:c9:0f:e9:4a:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465254d1-eb33-4b2f-b753-c2021a9446e4 Validity Not Before: Apr 28 16:00:03 2025 GMT Not After : May 1 16:00:00 2025 GMT Subject: CN=a47e2373-c348-4a41-9a8d-462e3e1cd240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:4a:69:02:95:d2:7e:9d:83:65:04:06:55: b7:2d:d2:6e:d9:0e:d6:f6:6f:bf:85:d9:ad:94:e9: 24:2e:7a:2b:7e:b2:57:81:2a:e6:fc:df:f3:cd:dd: 41:cc:0e:55:81:4a:f5:f3:2e:98:9a:de:9b:4a:52: 77:4d:fd:dd:3c:69:5b:13:ef:a2:f3:2b:78:7f:23: 0c:64:8e:ef:a8:ba:f0:37:7e:0a:18:ea:3a:e2:5b: 84:e5:4e:83:8e:ff:f6:f6:ab:4d:ee:16:6e:a8:4e: 1f:48:42:f5:6c:9f:04:d1:22:d7:12:06:5b:02:80: 30:22:4c:c6:aa:b0:70:90:31:ed:75:5d:9f:83:26: e7:93:91:bc:50:8e:0c:72:59:79:f1:61:3c:e7:b8: 26:7b:38:45:87:12:59:5e:e8:e6:8f:9f:6b:90:81: a2:92:36:28:b8:ae:e6:2a:9e:58:38:4a:78:61:bb: 00:b4:1e:21:28:46:d4:55:f4:d3:bb:dc:b0:0b:70: cb:03:90:c9:a9:26:17:56:02:d8:fa:0d:b3:92:f1: 3a:16:df:b5:df:ae:d7:39:da:be:26:80:8f:8a:60: 6f:cc:6b:85:f9:af:31:9d:d7:5f:75:0b:10:20:28: 39:2e:49:d8:01:54:cd:bb:5c:8e:89:5d:77:6f:31: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DD:8E:37:81:06:95:7C:2E:24:AE:D5:25:36:07:6F:CF:24:62:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4/465254d1-eb33-4b2f-b753-c2021a9446e4.crl X509v3 Authority Key Identifier: keyid:1D:79:2A:64:F1:30:F6:4B:99:82:95:43:16:86:0B:9C:3B:07:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/465254d1-eb33-4b2f-b753-c2021a9446e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:07:22:8e:aa:ee:4b:ff:01:f5:82:89:4e:85:8d:db:c5:67: 14:6b:ba:46:38:78:18:6e:fe:49:6f:2b:44:23:2f:6f:20:fd: 85:22:c1:f4:84:7a:63:27:6d:32:f0:6c:34:b9:98:72:e8:94: 70:72:51:d7:b2:fd:b0:a7:75:d2:fb:14:d9:46:5e:52:6a:3a: 00:6c:f8:9c:38:f5:d9:8f:66:6d:7c:31:4a:23:e4:18:4d:c9: 35:b9:03:10:a4:c2:f1:5f:cc:e8:11:e1:9a:89:da:e5:9a:e4: e7:d6:82:7f:a0:d5:55:46:94:55:4f:4a:41:94:9b:9c:62:2a: 97:03:00:a5:51:4f:e8:77:a3:88:22:63:f7:b3:7e:b5:65:67: 56:6d:4a:d7:d1:f1:7c:e3:b3:87:76:63:47:f0:d5:71:fb:d8: 09:54:68:b6:1c:1b:4c:a9:85:41:2d:62:ae:4d:68:67:d7:70: 8c:f0:e5:2f:3b:83:03:14:ee:d7:6d:83:4d:00:18:d0:96:58: 2d:fb:43:51:38:55:3b:4b:5b:18:3f:ec:de:42:d3:fe:e6:61: 77:d3:30:a1:44:c3:2c:f3:d3:f8:10:65:56:9b:08:06:cb:f9: b2:92:de:ea:a6:99:3d:fe:24:17:b5:9a:e7:06:16:f0:f5:a7: e3:11:f0:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmtct4/NKvJD+lKtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY1MjU0ZDEtZWIzMy00YjJmLWI3NTMtYzIwMjFhOTQ0 NmU0MB4XDTI1MDQyODE2MDAwM1oXDTI1MDUwMTE2MDAwMFowLzEtMCsGA1UEAxMk YTQ3ZTIzNzMtYzM0OC00YTQxLTlhOGQtNDYyZTNlMWNkMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO9KaQKV0n6dg2UEBlW3LdJu2Q7W9m+/hdmt lOkkLnorfrJXgSrm/N/zzd1BzA5VgUr18y6Ymt6bSlJ3Tf3dPGlbE++i8yt4fyMM ZI7vqLrwN34KGOo64luE5U6Djv/29qtN7hZuqE4fSEL1bJ8E0SLXEgZbAoAwIkzG qrBwkDHtdV2fgybnk5G8UI4Mcll58WE857gmezhFhxJZXujmj59rkIGikjYouK7m Kp5YOEp4YbsAtB4hKEbUVfTTu9ywC3DLA5DJqSYXVgLY+g2zkvE6Ft+1367XOdq+ JoCPimBvzGuF+a8xnddfdQsQICg5LknYAVTNu1yOiV13bzFwKQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBHdjjeBBpV8LiSu1SU2B2/PJGIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80NjUy NTRkMS1lYjMzLTRiMmYtYjc1My1jMjAyMWE5NDQ2ZTQvNDY1MjU0ZDEtZWIzMy00 YjJmLWI3NTMtYzIwMjFhOTQ0NmU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDY1MjU0ZDEtZWIzMy00YjJmLWI3 NTMtYzIwMjFhOTQ0NmU0LzQ2NTI1NGQxLWViMzMtNGIyZi1iNzUzLWMyMDIxYTk0 NDZlNC5jcmwwHwYDVR0jBBgwFoAUHXkqZPEw9kuZgpVDFoYLnDsHs38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80NjUyNTRkMS1lYjMzLTRiMmYtYjc1My1jMjAy MWE5NDQ2ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJByKOqu5L/wH1golOhY3b xWcUa7pGOHgYbv5JbytEIy9vIP2FIsH0hHpjJ20y8Gw0uZhy6JRwclHXsv2wp3XS +xTZRl5SajoAbPicOPXZj2ZtfDFKI+QYTck1uQMQpMLxX8zoEeGaidrlmuTn1oJ/ oNVVRpRVT0pBlJucYiqXAwClUU/od6OIImP3s361ZWdWbUrX0fF847OHdmNH8NVx +9gJVGi2HBtMqYVBLWKuTWhn13CM8OUvO4MDFO7XbYNNABjQllgt+0NROFU7S1sY P+zeQtP+5mF30zChRMMs89P4EGVWmwgGy/mykt7qppk9/iQXtZrnBhbw9afjEfBr -----END CERTIFICATE-----Generated at Tue Apr 29 06:33:06 2025 by rpki-client